$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a393030303a3a2f33362d3336203d3e20313337333136.roa File: 323430323a376163303a393030303a3a2f33362d3336203d3e20313337333136.roa (raw, json) Hash identifier: SXf51XvFrHgPLsufLhNp6EyMs+Q+RKQBLQA+5Vv4X6Q= Subject key identifier: EC:9F:3E:6E:BB:FF:AB:8C:F9:AA:A6:14:5B:EC:02:BE:F6:90:E2:54 Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Certificate serial: 2A7473256D253EEAA8C4E87FB0E7777D05695378 Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a393030303a3a2f33362d3336203d3e20313337333136.roa Signing time: Fri 06 Dec 2024 13:26:12 +0000 ROA not before: Fri 06 Dec 2024 13:21:12 +0000 ROA not after: Fri 05 Dec 2025 13:26:12 +0000 asID: 137316 IP address blocks: 2402:7ac0:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 09:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:74:73:25:6d:25:3e:ea:a8:c4:e8:7f:b0:e7:77:7d:05:69:53:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Validity Not Before: Dec 6 13:21:12 2024 GMT Not After : Dec 5 13:26:12 2025 GMT Subject: CN=EC9F3E6EBBFFAB8CF9AAA6145BEC02BEF690E254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:05:67:2f:12:54:eb:81:f4:d3:ef:9d:24: e1:cb:53:7d:0b:7d:6b:34:77:93:be:38:d7:c4:07: 05:01:39:ea:36:0e:76:af:29:bb:f4:27:45:16:2e: ef:50:aa:98:ec:02:1f:0c:9f:fa:e7:1a:c7:ff:69: 88:aa:66:43:e7:0e:46:d4:cb:71:68:95:a1:7c:6f: 65:ad:55:af:42:25:f9:d5:c9:86:6b:5d:2a:d7:98: 92:cd:82:2f:16:e8:e0:41:29:27:6f:d1:fb:52:39: 4a:45:3e:e9:d1:7c:4e:26:f3:a3:b3:67:e1:61:ba: c0:35:c4:3c:6f:88:88:f7:d0:ae:fc:72:ef:6c:2b: 33:a7:2d:d4:fb:5c:87:73:15:9a:f5:b2:f8:88:7d: 8c:61:16:3c:e5:7d:f8:21:9f:55:ee:2e:a1:22:45: aa:0c:f9:4b:d1:ae:6e:7f:8b:31:9f:4b:31:57:90: 7b:66:13:34:82:52:96:1c:e4:bb:ca:37:c9:fd:d8: a6:43:5e:a3:10:d3:58:92:52:cb:11:ab:38:8a:71: 94:60:4f:8b:6a:8d:5a:63:1c:60:36:04:56:9a:b8: 5a:80:03:3c:e3:c1:18:f1:3d:e6:50:25:0a:d8:98: 13:6f:1c:a1:45:01:1d:66:bc:1b:5e:e3:a6:57:b0: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9F:3E:6E:BB:FF:AB:8C:F9:AA:A6:14:5B:EC:02:BE:F6:90:E2:54 X509v3 Authority Key Identifier: keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a393030303a3a2f33362d3336203d3e20313337333136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7ac0:9000::/36 Signature Algorithm: sha256WithRSAEncryption 05:49:b3:66:52:d0:34:90:0e:00:76:52:3f:51:c1:3e:bc:d3: 8e:6e:45:5c:ad:e0:47:14:9f:78:be:3a:ad:12:71:7f:68:ed: 5a:78:ef:be:25:72:1d:00:ac:7d:55:11:22:ed:cb:44:e3:90: cf:11:ce:e9:8c:52:c0:35:03:98:85:1c:a9:65:c7:88:7e:be: e6:57:6a:fd:34:c8:4d:47:af:94:05:c0:ea:62:e0:e1:6e:6b: 62:24:be:99:61:99:e1:5a:f8:80:54:94:c4:e1:54:84:ed:ba: af:c1:c4:bd:10:42:c9:8f:7c:12:16:5b:21:ab:f8:36:11:3d: 5d:47:68:b3:f0:bb:9c:45:a7:3d:5e:72:2c:df:7b:4e:e9:f6: 5f:10:03:62:66:09:5c:2c:f2:7e:ca:41:62:3d:19:5d:bd:45: fb:31:9e:5a:75:1d:e5:c6:e9:56:9d:0c:92:c0:b8:35:b3:2e: 81:e1:16:aa:25:3b:dc:57:fb:c0:52:5f:67:4b:0b:d1:ed:a8: f5:4c:31:f0:e1:ea:0a:d4:6f:ce:b1:0d:73:45:7a:a8:7f:1f: 2f:ec:e8:21:6c:09:71:cc:14:3c:c1:b7:a2:2a:20:28:15:34: 29:ab:3b:35:80:94:d0:c6:f0:f0:d9:31:ed:8c:26:6f:d7:1a: 30:33:0f:36 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUKnRzJW0lPuqoxOh/sOd3fQVpU3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB NUEwNjY2RDAeFw0yNDEyMDYxMzIxMTJaFw0yNTEyMDUxMzI2MTJaMDMxMTAvBgNV BAMTKEVDOUYzRTZFQkJGRkFCOENGOUFBQTYxNDVCRUMwMkJFRjY5MEUyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8AVnLxJU64H00++dJOHLU30L fWs0d5O+ONfEBwUBOeo2DnavKbv0J0UWLu9QqpjsAh8Mn/rnGsf/aYiqZkPnDkbU y3FolaF8b2WtVa9CJfnVyYZrXSrXmJLNgi8W6OBBKSdv0ftSOUpFPunRfE4m86Oz Z+FhusA1xDxviIj30K78cu9sKzOnLdT7XIdzFZr1sviIfYxhFjzlffghn1XuLqEi RaoM+UvRrm5/izGfSzFXkHtmEzSCUpYc5LvKN8n92KZDXqMQ01iSUssRqziKcZRg T4tqjVpjHGA2BFaauFqAAzzjwRjxPeZQJQrYmBNvHKFFAR1mvBte46ZXsEnVAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU7J8+brv/q4z5qqYUW+wCvvaQ4lQwHwYDVR0j BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3 MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw NjY2RC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04 ODNiLTVlODllZTVmMmRmMy8wLzMyMzQzMDMyM2EzNzYxNjMzMDNhMzkzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTMzMzczMzMxMzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk AnrAkDANBgkqhkiG9w0BAQsFAAOCAQEABUmzZlLQNJAOAHZSP1HBPrzTjm5FXK3g RxSfeL46rRJxf2jtWnjvviVyHQCsfVURIu3LROOQzxHO6YxSwDUDmIUcqWXHiH6+ 5ldq/TTITUevlAXA6mLg4W5rYiS+mWGZ4Vr4gFSUxOFUhO26r8HEvRBCyY98EhZb Iav4NhE9XUdos/C7nEWnPV5yLN97Tun2XxADYmYJXCzyfspBYj0ZXb1F+zGeWnUd 5cbpVp0MksC4NbMugeEWqiU73Ff7wFJfZ0sL0e2o9Uwx8OHqCtRvzrENc0V6qH8f L+zoIWwJccwUPMG3oiogKBU0Kas7NYCU0Mbw8Nkx7Ywmb9caMDMPNg== -----END CERTIFICATE-----Generated at Sun Apr 6 11:08:27 2025 by rpki-client