$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa File: 323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa (raw, json) Hash identifier: x6nhBM+bEW//IXuIstFhkUO5YpdmCPUme3PJ6xB6Z54= Subject key identifier: B5:C4:CE:86:3E:D7:89:BE:0D:12:CA:0E:F9:7A:B1:E6:0A:97:DB:5A Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 1DB92F2A6833117BEAC2271024833B3821B054D4 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa Signing time: Sun 29 Sep 2024 16:00:00 +0000 ROA not before: Sun 29 Sep 2024 15:55:00 +0000 ROA not after: Sun 28 Sep 2025 16:00:00 +0000 asID: 17727 IP address blocks: 2404:c000:c003::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b9:2f:2a:68:33:11:7b:ea:c2:27:10:24:83:3b:38:21:b0:54:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Sep 29 15:55:00 2024 GMT Not After : Sep 28 16:00:00 2025 GMT Subject: CN=B5C4CE863ED789BE0D12CA0EF97AB1E60A97DB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a8:2a:ba:df:f1:fa:b4:a3:02:0d:c9:ff:8d: 8e:e6:ed:82:a7:d4:ca:55:84:9a:06:a4:0c:d1:03: b5:f6:84:56:f5:e3:b1:34:9c:d1:c0:91:cd:31:dd: 6e:09:f6:76:a5:2a:d8:74:43:67:00:16:7c:0f:db: 7f:42:13:9e:bf:51:12:6c:3b:e5:5d:5b:f0:f2:82: df:f0:98:bb:48:53:d1:f6:c5:3d:21:9d:b8:21:77: fd:45:bc:1a:64:bc:1f:2c:ec:1c:9c:e4:12:61:5f: 7f:19:48:e1:a5:80:06:6a:51:a7:3e:36:26:e0:9a: 88:c6:7f:90:d4:64:36:03:b4:15:ae:54:2f:22:b4: d7:b3:91:42:e2:89:49:2d:ae:7a:d8:da:84:b8:f7: 73:79:3c:b8:50:53:e2:97:1e:da:99:fc:af:74:23: 50:ba:c4:f4:cc:76:22:f3:35:b2:74:e5:d4:49:bc: cc:72:8f:51:1a:aa:3e:df:0f:c0:32:38:83:af:cb: 2c:74:52:28:23:e2:05:72:a9:35:36:b0:5c:0e:b6: ea:7a:5b:0b:38:c5:83:ce:e4:91:98:75:90:d0:a4: fb:73:43:85:5d:65:6e:19:d7:b6:67:29:7d:c0:a5: 7c:e4:c0:63:b9:01:47:da:b7:ac:f6:fc:13:d5:00: 2c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C4:CE:86:3E:D7:89:BE:0D:12:CA:0E:F9:7A:B1:E6:0A:97:DB:5A X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000:c003::/48 Signature Algorithm: sha256WithRSAEncryption 6e:22:d2:bb:f4:02:f4:71:86:31:1d:5b:ca:9c:f5:60:69:c7: d4:a3:d4:e9:b5:4c:49:89:f0:a7:07:65:94:9a:ab:71:15:2d: 24:c9:97:41:3d:97:96:7f:42:a7:c1:99:01:6b:d2:69:da:eb: 37:2e:c6:ba:00:42:ab:7e:ec:a6:e1:84:32:97:17:a2:c5:09: 17:11:8b:c4:eb:8c:e1:2b:bb:c4:dd:f8:f3:d4:a1:87:f6:03: 0d:d7:13:d1:e0:63:9e:55:54:33:82:88:98:3f:e8:19:1e:83: 2f:ee:3f:70:06:60:15:b2:22:20:c7:47:70:bd:9c:f7:d9:d4: 04:ad:f8:29:e9:e5:27:18:db:05:ba:c8:3a:ea:14:22:d3:8f: 06:a1:d4:ad:1f:bd:63:03:65:8d:1c:b3:96:9b:38:4e:36:1a: 4e:4c:84:36:f3:97:6b:98:cf:be:80:80:fd:fe:85:17:27:df: 97:0d:41:16:f3:58:27:66:28:10:d9:05:0b:a3:97:8b:c7:a9: 7b:b5:b4:31:44:00:f3:49:0c:9e:a8:5a:6b:c0:ca:82:f1:4b: fc:e3:f3:33:99:5d:fd:e7:db:36:b5:ef:2f:9b:72:ee:5f:28: 51:e3:00:26:0f:e4:9b:bb:6e:a8:5a:2a:d0:f3:40:fa:31:d9: 9b:93:69:ff -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHbkvKmgzEXvqwicQJIM7OCGwVNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNDA5MjkxNTU1MDBaFw0yNTA5MjgxNjAwMDBaMDMxMTAvBgNV BAMTKEI1QzRDRTg2M0VENzg5QkUwRDEyQ0EwRUY5N0FCMUU2MEE5N0RCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUqCq63/H6tKMCDcn/jY7m7YKn 1MpVhJoGpAzRA7X2hFb147E0nNHAkc0x3W4J9nalKth0Q2cAFnwP239CE56/URJs O+VdW/Dygt/wmLtIU9H2xT0hnbghd/1FvBpkvB8s7Byc5BJhX38ZSOGlgAZqUac+ NibgmojGf5DUZDYDtBWuVC8itNezkULiiUktrnrY2oS493N5PLhQU+KXHtqZ/K90 I1C6xPTMdiLzNbJ05dRJvMxyj1Eaqj7fD8AyOIOvyyx0Uigj4gVyqTU2sFwOtup6 Wws4xYPO5JGYdZDQpPtzQ4VdZW4Z17ZnKX3ApXzkwGO5AUfat6z2/BPVACz5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUtcTOhj7Xib4NEsoO+Xqx5gqX21owHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhNjMzMDMwMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATA AMADMA0GCSqGSIb3DQEBCwUAA4IBAQBuItK79AL0cYYxHVvKnPVgacfUo9TptUxJ ifCnB2WUmqtxFS0kyZdBPZeWf0KnwZkBa9Jp2us3Lsa6AEKrfuym4YQylxeixQkX EYvE64zhK7vE3fjz1KGH9gMN1xPR4GOeVVQzgoiYP+gZHoMv7j9wBmAVsiIgx0dw vZz32dQErfgp6eUnGNsFusg66hQi048GodStH71jA2WNHLOWmzhONhpOTIQ285dr mM++gID9/oUXJ9+XDUEW81gnZigQ2QULo5eLx6l7tbQxRADzSQyeqFprwMqC8Uv8 4/MzmV3959s2te8vm3LuXyhR4wAmD+Sbu26oWirQ80D6Mdmbk2n/ -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org