$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa File: 323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa (raw, json) Hash identifier: 2ACMC8KyDRSrDbWzL0/H6At76VJCDRjfQgBtBjPOTO8= Subject key identifier: 5A:8D:2B:E5:F9:45:75:F8:68:78:68:67:F2:67:29:E4:E1:3F:0C:72 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 131F02698A44D8D73DED1B09FF4E712152688C48 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa Signing time: Sun 20 Oct 2024 13:00:00 +0000 ROA not before: Sun 20 Oct 2024 12:55:00 +0000 ROA not after: Sun 19 Oct 2025 13:00:00 +0000 asID: 17727 IP address blocks: 2404:c000:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1f:02:69:8a:44:d8:d7:3d:ed:1b:09:ff:4e:71:21:52:68:8c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 20 12:55:00 2024 GMT Not After : Oct 19 13:00:00 2025 GMT Subject: CN=5A8D2BE5F94575F868786867F26729E4E13F0C72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:62:5b:0d:4f:2a:ce:61:17:6a:4d:7d:62:cb: 68:c7:4a:2c:b2:66:23:b6:22:2d:4c:09:b0:37:dd: e7:93:94:b7:b6:8a:f5:8f:d5:81:db:32:41:a0:86: 09:f6:26:38:64:29:a6:d0:13:e0:27:fe:de:2b:c9: c4:b1:77:a0:64:78:dd:c9:63:27:10:d4:3f:14:b0: 05:8c:ef:0c:0a:72:82:85:d0:83:0e:40:b3:0b:71: d4:17:c8:43:2a:5e:45:b1:e7:75:19:93:5a:11:c3: e4:8f:e7:24:f7:c1:70:b4:c0:59:32:28:16:ff:20: 6a:de:4d:67:1a:6d:c8:60:83:a2:81:5f:ce:55:c1: 0b:92:02:85:ff:1e:77:d6:d3:59:e9:cc:8e:a0:96: f0:54:03:2c:31:63:f0:7d:17:ea:39:7f:b0:32:70: 13:a4:cb:2e:d4:a4:a2:c8:fc:aa:4d:4c:60:bd:d9: 09:46:d2:58:c7:9a:e2:16:0c:24:78:b6:99:67:25: 0c:c4:3d:68:64:e5:4b:2a:5b:db:9d:0a:87:c1:3f: 08:a3:d7:74:9d:ce:74:82:f4:15:a6:89:d5:4c:c0: ba:c2:48:36:a3:e6:91:9b:b6:8a:bb:02:53:d7:e6: 56:36:b4:46:2b:47:a1:e7:7e:19:2e:76:de:34:c5: 49:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8D:2B:E5:F9:45:75:F8:68:78:68:67:F2:67:29:E4:E1:3F:0C:72 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000:c000::/48 Signature Algorithm: sha256WithRSAEncryption a8:74:48:e7:0f:94:c9:ac:ec:00:60:5b:dc:c4:c3:71:03:8c: 4a:5d:55:e7:3b:dd:53:a7:f3:77:7d:f8:b3:d2:78:21:57:71: 54:69:f4:40:ac:2d:eb:b8:33:51:a9:d4:e5:65:0f:06:23:b3: 09:19:f4:74:a2:a7:1d:86:cb:c6:1b:77:35:ff:f2:88:09:48: 34:18:b5:9a:1c:9a:1f:ff:e5:bf:f9:a8:57:4c:cf:7e:78:e2: fa:59:2a:cf:fc:91:60:3a:b9:c8:c2:99:47:2c:1c:2c:e7:1c: 7a:06:e1:3d:df:fb:e7:0c:8f:71:ac:47:47:e0:90:72:33:03: 51:98:2e:c4:ac:e4:8c:18:62:0b:1d:58:aa:be:de:31:a0:55: 47:f7:5a:51:2d:47:d2:8c:65:63:ca:e4:8a:e5:7c:d0:11:5d: 04:6b:28:c2:4f:36:ab:b6:1a:5c:89:62:1e:f1:69:18:e4:89: 4a:b3:26:23:b5:96:6c:c0:b6:19:43:8e:c9:81:87:fd:dd:3e: 03:79:cb:da:cd:01:9a:23:39:c9:91:30:c6:a3:bd:28:04:e5: 41:a2:d2:fd:af:2e:33:1b:9f:44:dc:c5:f6:24:df:71:fc:a4: 30:e3:77:6e:8b:d2:6e:04:67:62:7c:d9:20:6c:9d:37:51:25: 8e:f2:86:f7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEx8CaYpE2Nc97RsJ/05xIVJojEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNDEwMjAxMjU1MDBaFw0yNTEwMTkxMzAwMDBaMDMxMTAvBgNV BAMTKDVBOEQyQkU1Rjk0NTc1Rjg2ODc4Njg2N0YyNjcyOUU0RTEzRjBDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYlsNTyrOYRdqTX1iy2jHSiyy ZiO2Ii1MCbA33eeTlLe2ivWP1YHbMkGghgn2JjhkKabQE+An/t4rycSxd6BkeN3J YycQ1D8UsAWM7wwKcoKF0IMOQLMLcdQXyEMqXkWx53UZk1oRw+SP5yT3wXC0wFky KBb/IGreTWcabchgg6KBX85VwQuSAoX/HnfW01npzI6glvBUAywxY/B9F+o5f7Ay cBOkyy7UpKLI/KpNTGC92QlG0ljHmuIWDCR4tplnJQzEPWhk5UsqW9udCofBPwij 13SdznSC9BWmidVMwLrCSDaj5pGbtoq7AlPX5lY2tEYrR6Hnfhkudt40xUnfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWo0r5flFdfhoeGhn8mcp5OE/DHIwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhNjMzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATA AMAAMA0GCSqGSIb3DQEBCwUAA4IBAQCodEjnD5TJrOwAYFvcxMNxA4xKXVXnO91T p/N3ffiz0nghV3FUafRArC3ruDNRqdTlZQ8GI7MJGfR0oqcdhsvGG3c1//KICUg0 GLWaHJof/+W/+ahXTM9+eOL6WSrP/JFgOrnIwplHLBws5xx6BuE93/vnDI9xrEdH 4JByMwNRmC7ErOSMGGILHViqvt4xoFVH91pRLUfSjGVjyuSK5XzQEV0EayjCTzar thpciWIe8WkY5IlKsyYjtZZswLYZQ47JgYf93T4DecvazQGaIznJkTDGo70oBOVB otL9ry4zG59E3MX2JN9x/KQw43dui9JuBGdifNkgbJ03USWO8ob3 -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org