$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/323430363a623734303a3a2f33322d3332203d3e20313431313235.roa File: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (raw, json) Hash identifier: w+5ApYB+ZFE/moVpWBy1FYzv1VFtUnIoAwsXfI3kLUk= Subject key identifier: 28:1E:9B:36:E7:2D:4A:F4:0C:32:37:A8:AC:00:B2:45:E5:A4:39:C4 Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 0B1100C82E8872D782ADEC4FE7FB746A054C67E7 Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/323430363a623734303a3a2f33322d3332203d3e20313431313235.roa Signing time: Fri 06 Sep 2024 16:03:29 +0000 ROA not before: Fri 06 Sep 2024 15:58:29 +0000 ROA not after: Fri 05 Sep 2025 16:03:29 +0000 asID: 141125 IP address blocks: 2406:b740::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:11:00:c8:2e:88:72:d7:82:ad:ec:4f:e7:fb:74:6a:05:4c:67:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: Sep 6 15:58:29 2024 GMT Not After : Sep 5 16:03:29 2025 GMT Subject: CN=281E9B36E72D4AF40C3237A8AC00B245E5A439C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:f0:71:d2:f8:2e:f2:ab:6c:6f:50:0d:93: 62:05:6e:1f:71:a0:4e:06:19:8c:78:8d:a3:7d:94: d7:34:6b:c7:cc:35:ba:10:19:22:0e:27:42:c7:43: c0:3e:b3:ed:f5:e3:be:d1:0c:33:5b:d1:8f:e8:d5: 7e:98:20:e6:83:89:b8:dc:99:05:7e:39:86:36:ab: bf:f1:43:95:79:e3:7c:0a:a3:ac:9d:1d:79:f7:d9: 12:21:b5:59:8d:48:08:22:5f:86:2d:9a:d8:92:58: 22:0e:1e:35:4c:1e:76:9d:57:a4:49:a1:6e:59:9a: 2e:f6:ed:14:88:a1:5d:2a:5d:bc:a8:02:e5:a4:9a: 06:1c:36:8d:d6:9c:f0:19:52:74:8e:2a:fa:a0:bc: fc:7d:09:2e:f1:11:de:de:4c:f0:79:e9:b6:68:90: f9:fb:52:cd:49:09:da:a5:58:14:52:4f:55:3f:8b: 27:e0:a6:de:42:87:f8:e2:45:45:f1:25:5c:5c:f2: 3b:c7:f0:1c:93:30:96:78:ca:74:d0:bd:56:f0:1f: 00:26:a2:e5:49:47:77:a3:7f:5e:57:03:f7:11:24: 62:73:fa:1c:67:99:fe:52:4a:70:c0:52:0d:09:f6: 27:ea:cf:f7:91:4f:37:20:56:13:c4:b2:f3:9e:d2: 31:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1E:9B:36:E7:2D:4A:F4:0C:32:37:A8:AC:00:B2:45:E5:A4:39:C4 X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/323430363a623734303a3a2f33322d3332203d3e20313431313235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:b740::/32 Signature Algorithm: sha256WithRSAEncryption 5e:1d:e1:38:00:28:09:4d:3e:1b:de:87:62:08:88:0b:95:b1: 67:0d:5b:de:40:a4:29:99:77:cf:2c:ef:29:83:27:a6:f7:5d: 2f:20:0f:6a:c9:e4:36:d9:42:c5:ff:89:e5:5a:cf:c6:65:7f: ff:c8:5e:c1:dc:34:73:f9:a1:ec:65:49:2e:d1:62:13:70:9c: 1e:a7:5e:84:fd:60:b4:f4:b5:01:a3:41:c7:0c:8a:0a:08:16: 42:60:05:ff:48:5d:08:6b:62:0d:22:b0:d5:82:5c:68:45:ee: 67:91:e5:d6:11:9b:28:c5:67:a9:05:e9:4a:fc:57:89:bf:3b: 83:8b:73:8b:b9:bd:03:53:2a:88:b0:3c:ae:57:91:90:55:df: de:43:93:3c:a2:0a:38:b3:3e:ed:04:14:f5:75:f4:17:fd:ab: 3a:3e:49:8b:eb:16:83:79:54:6b:98:bd:74:1e:18:f1:e1:61: 85:ca:64:df:91:88:0d:e8:eb:75:86:34:96:e5:10:c7:ac:b4: 96:64:b7:69:55:86:87:bc:3d:dd:31:98:bf:df:16:7c:a7:4c: 47:4b:8a:a2:a3:a0:9b:be:3d:63:70:6c:8d:95:c4:f8:5f:5d: 44:cf:82:c2:00:51:ac:87:de:16:13:e5:ad:6b:d4:2d:1e:f6: 5c:89:97:e5 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUCxEAyC6IcteCrexP5/t0agVMZ+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNDA5MDYxNTU4MjlaFw0yNTA5MDUxNjAzMjlaMDMxMTAvBgNV BAMTKDI4MUU5QjM2RTcyRDRBRjQwQzMyMzdBOEFDMDBCMjQ1RTVBNDM5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKfBx0vgu8qtsb1ANk2IFbh9x oE4GGYx4jaN9lNc0a8fMNboQGSIOJ0LHQ8A+s+31477RDDNb0Y/o1X6YIOaDibjc mQV+OYY2q7/xQ5V543wKo6ydHXn32RIhtVmNSAgiX4YtmtiSWCIOHjVMHnadV6RJ oW5Zmi727RSIoV0qXbyoAuWkmgYcNo3WnPAZUnSOKvqgvPx9CS7xEd7eTPB56bZo kPn7Us1JCdqlWBRST1U/iyfgpt5Ch/jiRUXxJVxc8jvH8ByTMJZ4ynTQvVbwHwAm ouVJR3ejf15XA/cRJGJz+hxnmf5SSnDAUg0J9ifqz/eRTzcgVhPEsvOe0jHZAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUKB6bNuctSvQMMjeorACyReWkOcQwHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkNjg1MDBjLTQ5ZjgtNGYwMS04 Nzc0LWY3YzMxNjRhMGE1OC8wLzMyMzQzMDM2M2E2MjM3MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMxMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGt0AwDQYJKoZI hvcNAQELBQADggEBAF4d4TgAKAlNPhveh2IIiAuVsWcNW95ApCmZd88s7ymDJ6b3 XS8gD2rJ5DbZQsX/ieVaz8Zlf//IXsHcNHP5oexlSS7RYhNwnB6nXoT9YLT0tQGj QccMigoIFkJgBf9IXQhrYg0isNWCXGhF7meR5dYRmyjFZ6kF6Ur8V4m/O4OLc4u5 vQNTKoiwPK5XkZBV395DkzyiCjizPu0EFPV19Bf9qzo+SYvrFoN5VGuYvXQeGPHh YYXKZN+RiA3o63WGNJblEMestJZkt2lVhoe8Pd0xmL/fFnynTEdLiqKjoJu+PWNw bI2VxPhfXUTPgsIAUayH3hYT5a1r1C0e9lyJl+U= -----END CERTIFICATE-----Generated at Sun Nov 24 04:28:52 2024 by rpki-client on console-fra.rpki-client.org