$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a3a2f33362d3336203d3e20313337333136.roa File: 323430323a376163303a3a2f33362d3336203d3e20313337333136.roa (raw, json) Hash identifier: 6GNwfP+UitJlHCltT9arM5W/fGiMe6lQObsksdsgboU= Subject key identifier: 53:A0:74:07:5E:AB:97:16:EA:D2:AF:AF:9B:B3:5B:A8:8F:61:EE:CD Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Certificate serial: 77BB00CCA848E42ED72E37C14E19F45D983124A7 Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a3a2f33362d3336203d3e20313337333136.roa Signing time: Fri 06 Dec 2024 13:28:00 +0000 ROA not before: Fri 06 Dec 2024 13:23:00 +0000 ROA not after: Fri 05 Dec 2025 13:28:00 +0000 asID: 137316 IP address blocks: 2402:7ac0::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 09:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:bb:00:cc:a8:48:e4:2e:d7:2e:37:c1:4e:19:f4:5d:98:31:24:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Validity Not Before: Dec 6 13:23:00 2024 GMT Not After : Dec 5 13:28:00 2025 GMT Subject: CN=53A074075EAB9716EAD2AFAF9BB35BA88F61EECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:52:99:ea:a5:99:6c:ef:76:28:c1:76:77: 41:a0:eb:af:e2:45:2d:8c:d9:e9:c6:b3:d7:f9:d8: a2:94:38:76:fc:f4:ec:57:ab:e5:3e:38:d4:6e:66: 23:b0:fa:28:9e:9c:cd:61:02:1e:43:1b:14:c6:de: b6:25:35:13:48:c1:9b:47:f3:09:3c:d2:9e:a4:99: 38:47:f3:ae:4d:13:b9:cb:e6:b1:f6:52:c4:f6:a8: b1:c3:53:e0:c5:c3:e1:99:4a:15:62:64:c2:9a:88: e9:ab:5c:ca:b9:d2:07:e8:81:47:15:82:ff:52:1b: 16:d5:eb:ef:38:48:68:35:75:f9:60:cd:ff:13:7d: 95:cc:e4:00:4b:49:a1:f6:4a:40:5f:c8:ed:8e:27: 6f:bf:c1:1f:0b:a1:32:e7:9b:c9:85:43:87:8b:89: 2b:16:ff:06:72:e0:64:db:ac:59:18:71:1a:9e:e1: 60:36:cc:54:21:bc:c7:ad:6c:36:d0:71:19:4a:71: cd:9d:29:a6:55:84:7d:ba:cd:56:f4:7b:f1:2f:ea: 86:d5:af:3c:75:5a:ea:5e:d3:2b:4d:7e:06:c5:6b: 3f:e9:f6:ce:14:d5:c8:28:7f:5d:99:dd:5f:9e:d0: 80:6c:82:e3:4a:ed:95:63:63:26:ed:72:6c:65:59: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A0:74:07:5E:AB:97:16:EA:D2:AF:AF:9B:B3:5B:A8:8F:61:EE:CD X509v3 Authority Key Identifier: keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a3a2f33362d3336203d3e20313337333136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7ac0::/36 Signature Algorithm: sha256WithRSAEncryption 80:7d:38:94:bc:b9:95:a5:41:55:18:e5:66:93:52:b8:48:e8: cd:e9:f6:6f:f8:70:f1:1d:35:d8:e8:be:2b:6c:f0:39:ad:f6: 35:fc:1a:79:a0:e1:06:67:7c:66:a7:c7:b5:41:21:82:98:3a: ff:d7:45:5b:08:04:b0:8a:44:b8:ee:8d:b7:1e:37:b2:1d:6f: d6:94:17:2a:ff:c0:f6:08:46:eb:9c:a8:9b:06:cb:f6:13:95: 84:c7:af:dc:16:61:69:e3:27:df:c7:6c:f9:f6:b8:4e:a3:50: 2d:d7:91:f4:ad:23:d1:0e:8c:de:2e:2e:1e:58:d6:f5:44:c8: 36:3c:07:61:db:18:8d:83:18:44:be:cb:cd:c6:b8:26:87:96: f0:f8:32:01:32:e9:68:1d:47:3e:5d:6b:26:17:6f:9d:66:c7: b6:34:15:7d:eb:3b:4a:93:53:e1:c5:64:73:48:b2:0e:ff:c3: c3:81:c6:f0:88:62:f4:0b:7b:3d:20:29:3e:a2:08:9f:1f:a0: 98:b7:a8:3d:e4:62:bd:8e:7d:26:e6:7b:d8:2d:4c:4a:cb:78: 20:a0:7e:32:34:41:f1:9b:a4:e7:86:37:93:92:5a:cc:9f:98: b3:bd:10:ca:ba:6b:73:3c:6b:fa:d8:ee:fc:a3:27:54:2e:0d: 8e:00:30:d6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUd7sAzKhI5C7XLjfBThn0XZgxJKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB NUEwNjY2RDAeFw0yNDEyMDYxMzIzMDBaFw0yNTEyMDUxMzI4MDBaMDMxMTAvBgNV BAMTKDUzQTA3NDA3NUVBQjk3MTZFQUQyQUZBRjlCQjM1QkE4OEY2MUVFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvW1KZ6qWZbO92KMF2d0Gg66/i RS2M2enGs9f52KKUOHb89OxXq+U+ONRuZiOw+iienM1hAh5DGxTG3rYlNRNIwZtH 8wk80p6kmThH865NE7nL5rH2UsT2qLHDU+DFw+GZShViZMKaiOmrXMq50gfogUcV gv9SGxbV6+84SGg1dflgzf8TfZXM5ABLSaH2SkBfyO2OJ2+/wR8LoTLnm8mFQ4eL iSsW/wZy4GTbrFkYcRqe4WA2zFQhvMetbDbQcRlKcc2dKaZVhH26zVb0e/Ev6obV rzx1Wupe0ytNfgbFaz/p9s4U1cgof12Z3V+e0IBsguNK7ZVjYybtcmxlWXfDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUU6B0B16rlxbq0q+vm7NbqI9h7s0wHwYDVR0j BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3 MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw NjY2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04 ODNiLTVlODllZTVmMmRmMy8wLzMyMzQzMDMyM2EzNzYxNjMzMDNhM2EyZjMzMzYy ZDMzMzYyMDNkM2UyMDMxMzMzNzMzMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQCesAAMA0GCSqG SIb3DQEBCwUAA4IBAQCAfTiUvLmVpUFVGOVmk1K4SOjN6fZv+HDxHTXY6L4rbPA5 rfY1/Bp5oOEGZ3xmp8e1QSGCmDr/10VbCASwikS47o23HjeyHW/WlBcq/8D2CEbr nKibBsv2E5WEx6/cFmFp4yffx2z59rhOo1At15H0rSPRDozeLi4eWNb1RMg2PAdh 2xiNgxhEvsvNxrgmh5bw+DIBMuloHUc+XWsmF2+dZse2NBV96ztKk1PhxWRzSLIO /8PDgcbwiGL0C3s9ICk+ogifH6CYt6g95GK9jn0m5nvYLUxKy3ggoH4yNEHxm6Tn hjeTklrMn5izvRDKumtzPGv62O78oydULg2OADDW -----END CERTIFICATE-----Generated at Sun Apr 6 11:00:13 2025 by rpki-client