$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/323430343a623238303a3a2f33322d3438203d3e203137363730.roa File: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (raw, json) Hash identifier: aiifXcdy2AXRocJRKbN8Cd9UOvAE9erAu5vyFTkl88c= Subject key identifier: 42:2B:92:3D:67:3F:49:E5:E1:6A:A1:20:75:5F:F5:E9:6B:D0:5E:5B Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 1E5DF6E1613CC9770C786DA5E56076C09D738CE0 Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/323430343a623238303a3a2f33322d3438203d3e203137363730.roa Signing time: Sun 04 Aug 2024 19:00:00 +0000 ROA not before: Sun 04 Aug 2024 18:55:00 +0000 ROA not after: Sun 03 Aug 2025 19:00:00 +0000 asID: 17670 IP address blocks: 2404:b280::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:5d:f6:e1:61:3c:c9:77:0c:78:6d:a5:e5:60:76:c0:9d:73:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Aug 4 18:55:00 2024 GMT Not After : Aug 3 19:00:00 2025 GMT Subject: CN=422B923D673F49E5E16AA120755FF5E96BD05E5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:97:69:ea:23:53:59:85:4c:a2:74:c8:c5:f3: ed:79:11:bb:50:62:80:af:d1:37:8b:eb:2a:d0:63: ea:60:db:bc:cc:e8:24:7e:58:8e:7b:e4:89:a5:99: e0:bf:ae:2e:cf:b6:1b:28:9f:08:d3:ac:6f:c5:22: a9:f0:7c:b0:c4:a4:a3:91:10:76:19:f8:50:f2:56: d0:00:02:02:55:d6:25:ea:c9:2c:44:b6:b0:31:e2: af:f2:6f:7a:e6:fc:44:2b:c7:cd:65:8e:38:25:6e: 57:02:3a:bd:9c:13:7d:15:18:a6:85:14:4f:cf:68: 32:cd:b1:04:7d:51:f3:bc:5e:94:6e:3b:35:d2:3a: d5:39:38:c7:5f:a1:b4:82:e7:20:22:e7:cf:a8:ee: 56:b6:85:05:de:ce:68:31:28:b1:0c:a6:d8:9c:b0: 83:51:6f:1a:e6:68:b8:89:2c:39:f8:29:78:d1:29: 93:34:35:b5:6d:bd:6b:81:8b:6c:09:67:e1:7b:4f: 2d:66:b1:40:59:91:32:33:4a:46:ed:27:65:79:ec: c6:88:02:09:cf:3d:b7:9b:7e:b9:95:98:0f:ad:cf: dd:d0:f5:68:e6:c4:e7:7b:3b:55:fb:f5:74:5c:4c: 3c:05:2b:a6:d0:a4:f1:7c:8b:63:9e:6b:ac:dc:62: 2a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2B:92:3D:67:3F:49:E5:E1:6A:A1:20:75:5F:F5:E9:6B:D0:5E:5B X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/323430343a623238303a3a2f33322d3438203d3e203137363730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:b280::/32 Signature Algorithm: sha256WithRSAEncryption 19:b4:2c:75:1f:f8:1e:d4:bc:f1:a9:96:a2:5e:c7:ce:ac:de: 01:f3:10:a7:6c:2f:41:b9:c5:1c:a3:d8:51:7f:21:1e:5e:0c: 29:c7:a4:c5:b8:f3:dc:7f:18:79:ce:9f:6f:90:e1:bd:2a:fc: c5:40:df:ea:ea:c0:7f:69:3a:87:7a:52:f3:d1:12:20:6a:90: a5:41:53:45:a3:1b:3f:19:f3:1a:ee:be:a0:d1:44:2b:9e:eb: ae:dd:ce:96:9b:d0:ba:cf:d2:27:d8:b4:aa:ef:36:17:8e:d8: bf:6d:e5:1a:0b:d7:69:9d:be:a9:69:a9:7f:64:92:d9:2a:46: e3:af:3a:73:98:0b:bb:2d:4b:10:7f:ec:47:fb:d0:c6:0c:c4: 40:52:2e:f2:93:96:98:3b:3e:3e:5a:80:fc:1d:8e:81:27:74: ad:dc:4b:8d:14:e7:77:07:29:48:aa:fb:d1:80:ac:8b:d1:b7: a2:d9:ea:62:f6:2e:1f:e6:75:8e:8a:78:bd:db:e8:da:78:65: ae:73:f4:7f:07:df:53:ad:cb:41:aa:dc:3b:0f:b4:37:1f:4c: 6e:bf:5d:98:36:c0:4b:a3:42:3b:29:31:0a:b3:b8:f8:c4:b6: 4b:50:08:9e:1f:93:64:7d:43:6c:4f:34:78:cc:2a:57:ce:77: c6:d1:0f:84 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUHl324WE8yXcMeG2l5WB2wJ1zjOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNDA4MDQxODU1MDBaFw0yNTA4MDMxOTAwMDBaMDMxMTAvBgNV BAMTKDQyMkI5MjNENjczRjQ5RTVFMTZBQTEyMDc1NUZGNUU5NkJEMDVFNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMl2nqI1NZhUyidMjF8+15EbtQ YoCv0TeL6yrQY+pg27zM6CR+WI575ImlmeC/ri7PthsonwjTrG/FIqnwfLDEpKOR EHYZ+FDyVtAAAgJV1iXqySxEtrAx4q/yb3rm/EQrx81ljjglblcCOr2cE30VGKaF FE/PaDLNsQR9UfO8XpRuOzXSOtU5OMdfobSC5yAi58+o7la2hQXezmgxKLEMptic sINRbxrmaLiJLDn4KXjRKZM0NbVtvWuBi2wJZ+F7Ty1msUBZkTIzSkbtJ2V57MaI AgnPPbebfrmVmA+tz93Q9WjmxOd7O1X79XRcTDwFK6bQpPF8i2Oea6zcYirFAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUQiuSPWc/SeXhaqEgdV/16WvQXlswHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMyMzQzMDM0M2E2MjMyMzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzczNjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBLKAMA0GCSqGSIb3 DQEBCwUAA4IBAQAZtCx1H/ge1LzxqZaiXsfOrN4B8xCnbC9BucUco9hRfyEeXgwp x6TFuPPcfxh5zp9vkOG9KvzFQN/q6sB/aTqHelLz0RIgapClQVNFoxs/GfMa7r6g 0UQrnuuu3c6Wm9C6z9In2LSq7zYXjti/beUaC9dpnb6paal/ZJLZKkbjrzpzmAu7 LUsQf+xH+9DGDMRAUi7yk5aYOz4+WoD8HY6BJ3St3EuNFOd3BylIqvvRgKyL0bei 2epi9i4f5nWOini92+jaeGWuc/R/B99TrctBqtw7D7Q3H0xuv12YNsBLo0I7KTEK s7j4xLZLUAieH5NkfUNsTzR4zCpXznfG0Q+E -----END CERTIFICATE-----Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org