$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3438203d3e203234323032.roa File: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (raw, json) Hash identifier: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE= Subject key identifier: 3C:43:69:67:4E:78:E8:D8:F6:DC:6A:15:AA:03:31:DF:A3:EB:D4:9E Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 1FC1BC52452FE96CA38B8DA487AB522B9DD8E8DC Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3438203d3e203234323032.roa Signing time: Sun 24 Nov 2024 05:02:33 +0000 ROA not before: Sun 24 Nov 2024 04:57:33 +0000 ROA not after: Sun 23 Nov 2025 05:02:33 +0000 asID: 24202 IP address blocks: 2406:2140::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 17:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c1:bc:52:45:2f:e9:6c:a3:8b:8d:a4:87:ab:52:2b:9d:d8:e8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Nov 24 04:57:33 2024 GMT Not After : Nov 23 05:02:33 2025 GMT Subject: CN=3C4369674E78E8D8F6DC6A15AA0331DFA3EBD49E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:5a:0b:d8:a6:eb:d6:11:50:93:9a:85:b6: e7:ac:e9:d9:59:76:72:dc:ba:0e:40:bf:2b:db:79: e7:7d:9c:82:e6:b3:92:a6:4c:a8:bf:c9:3f:f8:c7: b2:78:9c:a6:3e:cf:42:86:b9:c1:ce:ca:b5:2f:9e: 4b:c3:af:4a:29:10:d0:43:4e:73:32:f7:6a:04:40: f8:2e:69:fe:89:fc:21:23:14:36:28:dc:38:37:97: a3:76:23:4d:42:8f:0c:36:db:f9:0b:f6:f5:76:97: 8f:a6:ce:c5:e4:35:6e:5c:38:6f:30:c1:46:86:d1: 8c:99:87:13:f9:71:71:2a:95:ed:10:19:d4:89:6b: 24:4b:f8:17:92:da:c1:75:fe:72:e2:65:0b:eb:1d: a4:ba:09:5b:94:db:90:e4:42:34:e3:2e:75:1d:67: b4:2c:b6:d1:ee:15:97:60:dc:8c:ce:41:72:7a:a0: 77:2b:53:c4:43:c3:5d:a5:09:cd:65:59:07:26:6d: 22:04:fe:84:d2:86:36:c6:e3:bb:b9:ed:87:00:b3: a7:95:7c:b4:f0:85:e8:f9:69:20:b7:8a:81:49:fc: 14:21:c3:d4:a2:81:bd:27:f1:b6:3e:37:72:61:a2: db:aa:fd:99:64:73:b2:cf:7f:6e:8b:e5:79:57:3f: 64:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:43:69:67:4E:78:E8:D8:F6:DC:6A:15:AA:03:31:DF:A3:EB:D4:9E X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3438203d3e203234323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:2140::/32 Signature Algorithm: sha256WithRSAEncryption 10:d9:2a:31:e8:1d:69:17:59:3a:ab:e0:5d:d6:3a:b3:15:e5: cb:48:da:68:47:d3:58:49:04:92:13:e5:c0:d7:9d:c0:9c:12: f9:91:5e:91:29:63:23:33:ae:a0:ef:3a:de:1d:b1:f1:c8:71: c4:9b:04:20:6d:2a:2d:c3:f7:6d:d7:77:f0:b7:a9:a2:cb:66: 1e:ca:26:48:21:4c:8c:6f:4d:0d:0b:68:33:c3:e4:ab:22:e4: d7:83:58:71:ee:db:23:8e:5b:56:03:3a:c4:2f:11:85:de:cd: 06:21:72:42:60:a9:0d:57:43:5c:06:63:9b:fa:13:da:45:6c: 35:09:cf:d3:37:53:22:75:f2:3b:a5:6d:5a:1d:42:67:4b:f0: 05:28:62:67:68:46:6a:17:5c:40:d5:5c:78:a4:cc:e2:52:2b: 71:31:c8:ba:f7:b1:ce:39:aa:53:e0:8c:4f:1a:17:68:b7:22: 97:9b:c6:2a:c7:1f:12:c4:e5:39:f6:39:72:db:a7:59:a5:d4: 61:d6:c4:fc:86:fa:0a:27:62:b0:25:75:85:71:50:a7:46:0d: c6:92:3e:33:56:19:fc:63:62:29:36:1e:85:33:e7:ab:fe:a4: 2d:9b:72:83:f1:6d:4e:21:45:25:77:e6:13:fc:97:de:cb:5b: 76:b8:ad:63 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUH8G8UkUv6Wyji42kh6tSK53Y6NwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNDExMjQwNDU3MzNaFw0yNTExMjMwNTAyMzNaMDMxMTAvBgNV BAMTKDNDNDM2OTY3NEU3OEU4RDhGNkRDNkExNUFBMDMzMURGQTNFQkQ0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChVFoL2Kbr1hFQk5qFtues6dlZ dnLcug5Avyvbeed9nILms5KmTKi/yT/4x7J4nKY+z0KGucHOyrUvnkvDr0opENBD TnMy92oEQPguaf6J/CEjFDYo3Dg3l6N2I01Cjww22/kL9vV2l4+mzsXkNW5cOG8w wUaG0YyZhxP5cXEqle0QGdSJayRL+BeS2sF1/nLiZQvrHaS6CVuU25DkQjTjLnUd Z7QsttHuFZdg3IzOQXJ6oHcrU8RDw12lCc1lWQcmbSIE/oTShjbG47u57YcAs6eV fLTwhej5aSC3ioFJ/BQhw9Sigb0n8bY+N3Jhotuq/Zlkc7LPf26L5XlXP2SRAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUPENpZ0546Nj23GoVqgMx36Pr1J4wHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxZjAyYTg5LTdlZTgtNGE4My04 MDA0LTIzNGQ5MTRhMGZkNC8wLzMyMzQzMDM2M2EzMjMxMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMyMzQzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBiFAMA0GCSqGSIb3 DQEBCwUAA4IBAQAQ2Sox6B1pF1k6q+Bd1jqzFeXLSNpoR9NYSQSSE+XA153AnBL5 kV6RKWMjM66g7zreHbHxyHHEmwQgbSotw/dt13fwt6miy2YeyiZIIUyMb00NC2gz w+SrIuTXg1hx7tsjjltWAzrELxGF3s0GIXJCYKkNV0NcBmOb+hPaRWw1Cc/TN1Mi dfI7pW1aHUJnS/AFKGJnaEZqF1xA1Vx4pMziUitxMci697HOOapT4IxPGhdotyKX m8Yqxx8SxOU59jly26dZpdRh1sT8hvoKJ2KwJXWFcVCnRg3Gkj4zVhn8Y2IpNh6F M+er/qQtm3KD8W1OIUUld+YT/Jfey1t2uK1j -----END CERTIFICATE-----Generated at Sun Apr 6 21:30:43 2025 by rpki-client