$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa File: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (raw, json) Hash identifier: +5b87/sHiUCTHgVCk7RaEplhbAWsAXFtn4Y+TEcap/U= Subject key identifier: 06:73:56:91:BC:25:3B:C9:C1:88:42:25:3B:A6:67:0B:66:EB:F8:18 Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Certificate serial: 466EF177329EE8DDA03A0523B7835D9A73A08ED3 Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa Signing time: Thu 20 Jul 2023 06:35:35 +0000 ROA not before: Thu 20 Jul 2023 06:30:35 +0000 ROA not after: Thu 18 Jul 2024 06:35:35 +0000 asID: 134654 IP address blocks: 2405:c5c0:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:6e:f1:77:32:9e:e8:dd:a0:3a:05:23:b7:83:5d:9a:73:a0:8e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Validity Not Before: Jul 20 06:30:35 2023 GMT Not After : Jul 18 06:35:35 2024 GMT Subject: CN=06735691BC253BC9C18842253BA6670B66EBF818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:2c:82:0e:80:55:16:19:e1:63:5e:3f:e2: 17:27:66:6f:90:8f:78:b4:15:fa:42:06:68:3e:d9: 30:fe:3c:8a:a1:84:9f:0b:1f:62:80:84:f4:12:4e: 5c:57:40:2a:37:dd:05:cc:c9:cf:c1:96:54:90:8b: d7:c6:7a:21:70:aa:58:22:4a:c5:ee:83:66:21:52: ca:e7:67:f0:43:47:47:88:21:37:10:cf:e3:3e:f0: 83:52:c9:1b:36:0f:17:a4:5d:5a:8b:78:3f:70:be: 6d:c0:82:fb:b4:fd:08:c5:3e:cd:3e:27:70:c0:85: e1:db:ed:25:ee:12:de:04:76:a0:dc:81:c7:c7:35: 3b:9d:2a:b2:cd:a8:9e:1a:8e:56:0c:a5:88:72:f1: 95:a2:a2:cc:16:0c:7e:8e:4c:c4:2f:df:e8:c8:aa: f6:48:36:0b:35:2d:ff:28:e0:32:65:f6:dd:92:28: 62:fc:df:28:85:6f:12:28:18:53:62:13:59:68:26: d2:bb:fd:3f:27:f0:09:9e:3d:0a:57:43:1f:22:97: de:cf:12:f9:e6:e9:1b:ed:22:6c:eb:90:2e:16:e5: bf:05:e9:80:fb:d4:a1:aa:85:54:4e:01:b4:f3:3b: e3:26:11:b2:4c:d3:b4:af:36:a2:14:c4:2a:f2:2a: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:73:56:91:BC:25:3B:C9:C1:88:42:25:3B:A6:67:0B:66:EB:F8:18 X509v3 Authority Key Identifier: keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c5c0:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 52:1c:ff:56:79:ab:5f:35:75:69:90:1d:6d:10:aa:5e:d6:3f: 84:4e:c8:a6:b6:40:89:e9:bc:15:b6:8f:2a:52:2c:8e:9c:78: ed:74:d2:f2:94:90:01:6d:8c:30:aa:41:b0:8b:a2:50:66:79: 4e:4b:8a:89:1f:a3:b3:29:a1:66:77:93:c2:4f:a4:8d:e5:62: 8c:d3:e6:d9:17:31:ca:69:a8:ce:cb:e4:a4:2d:f0:c2:15:b0: 61:dc:52:ba:9a:7c:8d:57:65:ce:1e:34:78:26:26:fe:86:fb: a7:e6:26:bd:cf:6f:03:5d:da:2e:90:e5:6c:8f:8e:4a:9d:ab: 5d:a1:b6:c9:a1:dd:5b:60:ed:32:e3:88:fe:f6:e5:05:89:7b: 05:98:7a:28:d0:bd:f3:72:58:f6:da:e3:21:73:1c:09:e1:7e: 53:20:25:02:5f:b0:21:ca:16:c5:65:ba:8f:d5:34:a7:3e:b0: 78:22:59:44:72:9f:2c:ea:c8:ad:3e:a3:ca:fd:c5:8f:e1:cb: 21:1a:bc:81:79:53:b3:57:a0:14:40:41:c1:56:6c:26:7d:55: d7:9a:1c:ab:cc:17:86:f3:2f:ec:e8:27:1c:e3:6c:3e:10:8f: 48:60:4c:94:aa:9b:02:c8:04:c3:b5:20:dc:60:0c:9a:4d:dc: c6:ab:cb:8f -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIURm7xdzKe6N2gOgUjt4NdmnOgjtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3 QzRDOEUwRDAeFw0yMzA3MjAwNjMwMzVaFw0yNDA3MTgwNjM1MzVaMDMxMTAvBgNV BAMTKDA2NzM1NjkxQkMyNTNCQzlDMTg4NDIyNTNCQTY2NzBCNjZFQkY4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXbiyCDoBVFhnhY14/4hcnZm+Q j3i0FfpCBmg+2TD+PIqhhJ8LH2KAhPQSTlxXQCo33QXMyc/BllSQi9fGeiFwqlgi SsXug2YhUsrnZ/BDR0eIITcQz+M+8INSyRs2DxekXVqLeD9wvm3Agvu0/QjFPs0+ J3DAheHb7SXuEt4EdqDcgcfHNTudKrLNqJ4ajlYMpYhy8ZWioswWDH6OTMQv3+jI qvZINgs1Lf8o4DJl9t2SKGL83yiFbxIoGFNiE1loJtK7/T8n8AmePQpXQx8il97P Evnm6RvtImzrkC4W5b8F6YD71KGqhVROAbTzO+MmEbJM07SvNqIUxCryKoRdAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUBnNWkbwlO8nBiEIlO6ZnC2br+BgwHwYDVR0j BBgwFoAUpsexyguQiFXuWPGZHMyVtXxMjg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9BNkM3QjFDQTBC OTA4ODU1RUU1OEYxOTkxQ0NDOTVCNTdDNEM4RTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3QzRD OEUwRC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwZTQ3NTBlLTQzOTMtNDNlYy05 YWI1LWQyNDdiYmMwN2Q4Ni8wLzMyMzQzMDM1M2E2MzM1NjMzMDNhNjY2NjMwMzAz YTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMTMzMzQzNjM1MzQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAk BcXA/zANBgkqhkiG9w0BAQsFAAOCAQEAUhz/VnmrXzV1aZAdbRCqXtY/hE7IprZA iem8FbaPKlIsjpx47XTS8pSQAW2MMKpBsIuiUGZ5TkuKiR+jsymhZneTwk+kjeVi jNPm2RcxymmozsvkpC3wwhWwYdxSupp8jVdlzh40eCYm/ob7p+Ymvc9vA13aLpDl bI+OSp2rXaG2yaHdW2DtMuOI/vblBYl7BZh6KNC983JY9trjIXMcCeF+UyAlAl+w IcoWxWW6j9U0pz6weCJZRHKfLOrIrT6jyv3Fj+HLIRq8gXlTs1egFEBBwVZsJn1V 15ocq8wXhvMv7OgnHONsPhCPSGBMlKqbAsgEw7Ug3GAMmk3cxqvLjw== -----END CERTIFICATE-----Generated at Sat Jun 1 14:35:01 2024 by rpki-client on console-fra.rpki-client.org