$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa File: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (raw, json) Hash identifier: ELx/Mo51D3GSaEDSyBhL7pvfhZmjCeLx8uPSmWVwFVo= Subject key identifier: 6D:33:13:0C:1E:18:0E:33:E4:7A:9C:64:3C:F5:E7:74:F1:0C:29:02 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 67E3464BA8A020B5F8C4BD992110C7069AC6CE22 Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa Signing time: Thu 08 Aug 2024 04:59:12 +0000 ROA not before: Thu 08 Aug 2024 04:54:12 +0000 ROA not after: Thu 07 Aug 2025 04:59:12 +0000 asID: 141606 IP address blocks: 2001:df1:6bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e3:46:4b:a8:a0:20:b5:f8:c4:bd:99:21:10:c7:06:9a:c6:ce:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Aug 8 04:54:12 2024 GMT Not After : Aug 7 04:59:12 2025 GMT Subject: CN=6D33130C1E180E33E47A9C643CF5E774F10C2902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:28:0b:8c:15:2c:45:5a:9b:e9:af:31:3c: e4:c8:38:46:8f:fb:ac:58:1f:91:1b:6e:3f:45:4b: 75:3d:39:be:d5:68:66:d3:1f:42:a8:4c:27:fb:cd: 77:2b:0f:49:b0:22:42:e9:58:0a:17:00:7b:3a:4a: a4:1c:64:b7:d9:98:d7:31:d5:89:51:5c:e2:1a:af: 58:46:8e:b8:9d:d6:ef:7b:a8:a3:df:af:24:81:de: 60:04:08:70:ac:19:1c:44:63:58:59:de:88:6d:3b: 0f:d4:31:cf:80:52:e3:f8:a8:04:1d:74:af:c5:09: d4:11:df:da:a2:31:39:8f:4c:b5:65:f8:ea:b7:6e: 73:d8:84:54:7a:01:f5:9b:b6:63:28:ab:a5:fc:b7: ca:fe:0d:85:1f:0e:4c:ef:d6:55:87:a1:54:33:6d: 23:19:d1:97:ef:37:f1:78:dc:6e:8f:99:94:f7:69: 01:c7:86:87:7b:0e:d3:d8:a7:a1:55:97:7f:38:2d: 46:17:33:a1:4b:f7:81:5c:77:19:bb:58:5a:99:ac: bc:ad:56:01:9e:4e:06:30:50:61:48:f8:5a:8d:ca: 33:cf:da:f3:56:c7:f9:86:53:8e:e8:69:67:b3:06: 63:2d:31:23:9b:01:73:29:1d:7e:0b:63:1a:ec:74: 9b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:33:13:0C:1E:18:0E:33:E4:7A:9C:64:3C:F5:E7:74:F1:0C:29:02 X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:6bc0::/48 Signature Algorithm: sha256WithRSAEncryption 23:bf:a1:5c:ef:53:e9:0c:20:13:54:2f:63:36:5d:4c:63:f1: ce:b8:97:58:a3:78:e2:ba:7b:19:79:83:e2:5c:b7:72:3e:ee: 7b:d1:fa:6c:0f:51:40:55:40:a0:46:72:62:61:d5:cc:ad:a3: 54:ee:45:e2:93:94:35:50:e3:11:78:41:6b:8d:12:c3:37:db: 0f:eb:ec:3b:32:d1:73:8e:b6:f6:cd:40:6b:72:18:15:de:8d: 13:f4:9e:f6:29:14:3c:34:43:94:3c:0e:d8:46:c8:5f:49:23: 25:a7:ce:50:5f:e4:57:64:71:da:c9:2b:d9:35:c3:93:04:cb: 00:7a:a4:2e:28:69:1b:6a:a5:62:fa:60:82:d3:63:c9:59:00: 3c:25:8c:14:a8:60:9d:52:b3:61:27:f4:d3:21:63:54:30:ce: 62:9e:e3:1e:f8:31:95:15:f6:d3:ce:66:26:cd:69:28:60:9d: dd:35:f6:e2:7b:67:b7:60:57:37:cd:8f:10:60:39:ce:1a:c1: bb:93:5e:06:38:6c:32:58:7c:4b:9c:8b:27:d0:7f:37:ed:3e: 5f:80:88:a9:a9:73:51:8f:36:df:ad:43:5c:f6:43:00:32:e6: 3f:85:2c:b8:16:d5:f9:c2:53:a0:51:48:af:d1:6b:80:11:4d: 9e:c0:75:8f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZ+NGS6igILX4xL2ZIRDHBprGziIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNDA4MDgwNDU0MTJaFw0yNTA4MDcwNDU5MTJaMDMxMTAvBgNV BAMTKDZEMzMxMzBDMUUxODBFMzNFNDdBOUM2NDNDRjVFNzc0RjEwQzI5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jygLjBUsRVqb6a8xPOTIOEaP +6xYH5Ebbj9FS3U9Ob7VaGbTH0KoTCf7zXcrD0mwIkLpWAoXAHs6SqQcZLfZmNcx 1YlRXOIar1hGjrid1u97qKPfrySB3mAECHCsGRxEY1hZ3ohtOw/UMc+AUuP4qAQd dK/FCdQR39qiMTmPTLVl+Oq3bnPYhFR6AfWbtmMoq6X8t8r+DYUfDkzv1lWHoVQz bSMZ0ZfvN/F43G6PmZT3aQHHhod7DtPYp6FVl384LUYXM6FL94Fcdxm7WFqZrLyt VgGeTgYwUGFI+FqNyjPP2vNWx/mGU47oaWezBmMtMSObAXMpHX4LYxrsdJsxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUbTMTDB4YDjPkepxkPPXndPEMKQIwHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZkNjRiZjZhLTQzMDItNDYwZi05 NjY5LTA5YTUwYTczYWYxYS8wLzMyMzAzMDMxM2E2NDY2MzEzYTM2NjI2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzYzMDM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8WvAMA0GCSqGSIb3DQEBCwUAA4IBAQAjv6Fc71PpDCATVC9jNl1MY/HOuJdYo3ji unsZeYPiXLdyPu570fpsD1FAVUCgRnJiYdXMraNU7kXik5Q1UOMReEFrjRLDN9sP 6+w7MtFzjrb2zUBrchgV3o0T9J72KRQ8NEOUPA7YRshfSSMlp85QX+RXZHHaySvZ NcOTBMsAeqQuKGkbaqVi+mCC02PJWQA8JYwUqGCdUrNhJ/TTIWNUMM5inuMe+DGV FfbTzmYmzWkoYJ3dNfbie2e3YFc3zY8QYDnOGsG7k14GOGwyWHxLnIsn0H837T5f gIipqXNRjzbfrUNc9kMAMuY/hSy4FtX5wlOgUUiv0WuAEU2ewHWP -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org