$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/323430363a3663303a3a2f33322d3438203d3e20313430333936.roa File: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (raw, json) Hash identifier: QpaaW4/ZTzOjg9T2cVqZjeF6GPV2b6e7U8MFz6lRZnQ= Subject key identifier: D5:79:C1:CC:EA:DC:95:F4:44:0E:04:CD:60:CB:C7:77:AD:58:70:7B Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 5D5FC566F3D38DB99D7206BA173A4B8E270F54BE Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/323430363a3663303a3a2f33322d3438203d3e20313430333936.roa Signing time: Tue 05 Nov 2024 04:00:02 +0000 ROA not before: Tue 05 Nov 2024 03:55:02 +0000 ROA not after: Tue 04 Nov 2025 04:00:02 +0000 asID: 140396 IP address blocks: 2406:6c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5f:c5:66:f3:d3:8d:b9:9d:72:06:ba:17:3a:4b:8e:27:0f:54:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Nov 5 03:55:02 2024 GMT Not After : Nov 4 04:00:02 2025 GMT Subject: CN=D579C1CCEADC95F4440E04CD60CBC777AD58707B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:66:aa:84:cc:fd:0a:d5:31:f0:6e:ee:bf: 0c:d2:ca:3a:5a:63:41:26:44:7a:86:a2:98:de:9f: 97:cf:37:a0:06:d8:28:46:63:39:46:83:6b:48:8d: 2d:79:c5:fb:33:cd:93:c3:21:87:53:0b:69:fb:75: 78:ec:77:bf:59:13:c4:90:22:89:5f:38:18:c4:73: 71:b3:23:8c:be:c6:50:24:1e:0c:99:eb:58:79:84: 4c:6c:ee:24:eb:d2:a6:a4:b1:40:97:c8:79:0d:a0: a6:1a:13:69:b2:99:b4:6b:41:f6:07:8c:10:01:6e: 65:39:8b:61:e1:36:c5:fb:7d:f6:bc:bf:76:8f:1c: 20:85:95:9b:17:37:1f:94:87:eb:ed:b4:53:64:6b: 12:ec:f2:91:b9:0b:61:c1:04:d0:a0:e3:c4:9a:ff: 13:98:ee:1d:3c:c6:26:e5:b9:87:87:fb:a6:1a:ed: 97:74:cb:f1:68:84:25:34:03:1c:54:f3:98:84:bd: 57:cc:88:d5:9f:bd:5a:21:a6:16:cb:e5:ec:fa:6a: d1:08:5b:c2:66:3d:78:82:b5:ea:6e:06:3b:56:4d: ce:b1:a4:41:df:9d:df:ef:56:93:4a:b7:23:cf:2c: b4:64:0d:f2:78:7f:8a:41:ef:49:4d:9b:52:d1:d9: 95:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:79:C1:CC:EA:DC:95:F4:44:0E:04:CD:60:CB:C7:77:AD:58:70:7B X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/323430363a3663303a3a2f33322d3438203d3e20313430333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:6c0::/32 Signature Algorithm: sha256WithRSAEncryption 2f:91:54:d0:4d:97:d6:6c:05:5d:5e:5a:0b:e1:1f:55:42:58: 7d:18:92:1e:ff:ee:9f:b3:94:f0:19:11:bd:48:5d:a5:33:39: 39:f9:33:69:8c:6b:25:c4:0e:e1:96:54:ab:97:47:09:47:75: 3c:4b:52:73:ac:3d:c6:e3:28:97:f4:e0:b0:86:b0:5e:b0:4e: ed:0c:81:0b:e4:41:98:8a:ff:95:62:69:2e:17:a6:3d:be:3f: bc:64:b6:73:60:d9:7c:6e:de:7d:ef:d5:44:fe:94:56:be:4e: 80:76:ea:b1:ce:57:9b:3c:d8:d2:b5:d7:b7:84:39:97:2c:a5: 73:9f:ee:eb:16:ea:d4:32:24:e8:7b:ef:a1:49:81:b6:d7:f2: 4b:52:28:c9:2c:19:78:f4:64:af:75:46:0c:f5:35:56:e0:9e: 47:1d:cb:34:e8:1e:45:57:7b:c6:a8:64:a4:73:4d:5c:72:fc: c5:cf:1d:0e:1e:e2:e0:ea:b8:3d:8e:85:9b:ec:ab:01:9f:be: 27:8b:28:70:6d:f9:40:df:6c:5a:eb:f7:da:19:f2:07:7e:36: 45:d9:e5:2f:77:f8:72:dc:ab:d1:3c:95:35:17:9e:3d:7f:78: 16:ff:78:95:1f:e9:4b:69:c4:37:c1:bd:7c:e0:39:2c:d2:69: cc:2d:ea:c2 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUXV/FZvPTjbmdcga6FzpLjicPVL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNDExMDUwMzU1MDJaFw0yNTExMDQwNDAwMDJaMDMxMTAvBgNV BAMTKEQ1NzlDMUNDRUFEQzk1RjQ0NDBFMDRDRDYwQ0JDNzc3QUQ1ODcwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJWaqhMz9CtUx8G7uvwzSyjpa Y0EmRHqGopjen5fPN6AG2ChGYzlGg2tIjS15xfszzZPDIYdTC2n7dXjsd79ZE8SQ IolfOBjEc3GzI4y+xlAkHgyZ61h5hExs7iTr0qaksUCXyHkNoKYaE2mymbRrQfYH jBABbmU5i2HhNsX7ffa8v3aPHCCFlZsXNx+Uh+vttFNkaxLs8pG5C2HBBNCg48Sa /xOY7h08xibluYeH+6Ya7Zd0y/FohCU0AxxU85iEvVfMiNWfvVohphbL5ez6atEI W8JmPXiCtepuBjtWTc6xpEHfnd/vVpNKtyPPLLRkDfJ4f4pB70lNm1LR2ZWFAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU1XnBzOrclfREDgTNYMvHd61YcHswHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiNWVjZDc0LTQ0MjQtNGQ0MC05 NmExLTdmZDc2MzAxMTk0NC8wLzMyMzQzMDM2M2EzNjYzMzAzYTNhMmYzMzMyMmQz NDM4MjAzZDNlMjAzMTM0MzAzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBgbAMA0GCSqGSIb3 DQEBCwUAA4IBAQAvkVTQTZfWbAVdXloL4R9VQlh9GJIe/+6fs5TwGRG9SF2lMzk5 +TNpjGslxA7hllSrl0cJR3U8S1JzrD3G4yiX9OCwhrBesE7tDIEL5EGYiv+VYmku F6Y9vj+8ZLZzYNl8bt5979VE/pRWvk6AduqxzlebPNjStde3hDmXLKVzn+7rFurU MiToe++hSYG21/JLUijJLBl49GSvdUYM9TVW4J5HHcs06B5FV3vGqGSkc01ccvzF zx0OHuLg6rg9joWb7KsBn74niyhwbflA32xa6/faGfIHfjZF2eUvd/hy3KvRPJU1 F549f3gW/3iVH+lLacQ3wb184Dks0mnMLerC -----END CERTIFICATE-----Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org