$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a313a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a313a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: I7Y5AtcTaP+21gGtIwUpqpEnuLorEnLWX+wV7rzObms= Subject key identifier: 14:7C:C3:AE:A8:76:BE:C0:D2:C0:55:E3:85:2D:BF:DF:30:1B:A3:20 Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 014D7C380A3F99E34FCA8485E59160E2D6F72C30 Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a313a3a2f34382d3438203d3e203338353234.roa Signing time: Wed 10 Jul 2024 01:00:01 +0000 ROA not before: Wed 10 Jul 2024 00:55:01 +0000 ROA not after: Wed 09 Jul 2025 01:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4d:7c:38:0a:3f:99:e3:4f:ca:84:85:e5:91:60:e2:d6:f7:2c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jul 10 00:55:01 2024 GMT Not After : Jul 9 01:00:01 2025 GMT Subject: CN=147CC3AEA876BEC0D2C055E3852DBFDF301BA320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:bf:9a:7e:4e:21:3a:ce:54:87:1a:97:9b: f7:ee:0e:49:2a:85:06:08:16:3a:ef:d6:77:f0:ac: ec:ac:3c:a0:26:47:32:a5:da:37:04:c5:a4:a4:cf: fd:fd:18:72:11:4c:6a:3e:94:95:b7:02:a9:2f:d7: 73:bb:32:ba:15:19:0b:29:64:ee:d8:d2:e7:b7:fb: 0e:92:da:29:cf:7f:ed:05:0c:d7:1d:bf:f5:bd:2e: df:62:12:2a:43:64:c2:90:3f:1a:60:a8:ab:e3:5d: 99:c2:ff:10:b8:f4:ed:5a:5f:06:03:48:d1:d6:8d: 0d:d4:b1:d2:e2:4e:07:9f:e7:43:5b:9c:e5:9d:48: 64:a9:50:bb:f2:bb:ae:f6:9c:42:6d:1a:91:cd:10: 57:48:79:52:77:35:1e:46:32:59:e0:15:e2:2b:11: 89:7f:18:c6:17:8e:97:86:7c:34:75:c7:f8:50:41: cd:81:43:e4:26:83:6c:55:92:30:03:5b:ab:c2:63: 70:a6:b9:5c:98:cd:c4:f2:49:af:65:bc:21:35:48: 94:36:f9:ef:25:e6:d4:99:7f:d3:ff:51:93:b7:f1: 06:4a:2d:41:7a:29:61:44:44:d2:78:ca:9b:3e:76: 61:09:e9:4a:d8:b6:11:20:6b:3d:29:f2:a9:d9:0d: 6d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7C:C3:AE:A8:76:BE:C0:D2:C0:55:E3:85:2D:BF:DF:30:1B:A3:20 X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a313a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:1::/48 Signature Algorithm: sha256WithRSAEncryption 62:59:90:e1:f8:6f:8b:0d:b5:32:1a:b2:17:f0:95:80:b8:c7: c7:49:2d:0e:0d:8d:b7:3d:18:4d:31:ac:52:00:5b:a0:21:16: 12:cd:5a:c2:40:63:2b:bd:95:ec:32:84:6a:ca:6c:9d:36:af: 24:c7:c1:a7:50:39:42:85:ff:bc:4f:3a:4f:34:03:bc:03:7d: 34:fa:19:92:fb:b7:16:29:cc:4b:53:9a:a3:0b:2a:2a:6e:aa: 86:25:43:ac:7d:e8:2a:90:00:b5:3b:3c:c3:7b:30:14:92:79: 34:7b:b8:db:b7:f2:e5:de:ee:81:cd:0d:23:f1:25:f2:ad:66: 01:87:55:45:3d:f3:bb:a4:12:50:f0:12:0a:3b:71:7a:8c:aa: a8:c9:75:c6:60:90:cb:3d:f9:db:0e:65:1c:27:f5:9f:23:b0: 69:58:54:a3:71:ae:ce:61:86:ad:d6:7f:0d:15:9a:a6:2d:f7: a0:2a:92:16:f7:ca:8a:4e:22:ea:bc:34:99:59:00:b2:83:c6: 09:6f:80:3a:b4:57:c7:34:3f:5a:2e:04:9e:20:d0:cb:e1:50: 5d:d1:f5:a2:57:87:75:d5:c0:80:8d:1d:73:94:c2:4f:a0:68: 7a:cf:5b:06:46:94:fc:be:f5:b7:d4:5d:e6:59:d6:b1:09:e1: 86:68:76:10 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUAU18OAo/meNPyoSF5ZFg4tb3LDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yNDA3MTAwMDU1MDFaFw0yNTA3MDkwMTAwMDFaMDMxMTAvBgNV BAMTKDE0N0NDM0FFQTg3NkJFQzBEMkMwNTVFMzg1MkRCRkRGMzAxQkEzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGC7+afk4hOs5UhxqXm/fuDkkq hQYIFjrv1nfwrOysPKAmRzKl2jcExaSkz/39GHIRTGo+lJW3Aqkv13O7MroVGQsp ZO7Y0ue3+w6S2inPf+0FDNcdv/W9Lt9iEipDZMKQPxpgqKvjXZnC/xC49O1aXwYD SNHWjQ3UsdLiTgef50NbnOWdSGSpULvyu672nEJtGpHNEFdIeVJ3NR5GMlngFeIr EYl/GMYXjpeGfDR1x/hQQc2BQ+Qmg2xVkjADW6vCY3CmuVyYzcTySa9lvCE1SJQ2 +e8l5tSZf9P/UZO38QZKLUF6KWFERNJ4yps+dmEJ6UrYthEgaz0p8qnZDW1HAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUFHzDrqh2vsDSwFXjhS2/3zAboyAwHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAABMA0G CSqGSIb3DQEBCwUAA4IBAQBiWZDh+G+LDbUyGrIX8JWAuMfHSS0ODY23PRhNMaxS AFugIRYSzVrCQGMrvZXsMoRqymydNq8kx8GnUDlChf+8TzpPNAO8A300+hmS+7cW KcxLU5qjCyoqbqqGJUOsfegqkAC1OzzDezAUknk0e7jbt/Ll3u6BzQ0j8SXyrWYB h1VFPfO7pBJQ8BIKO3F6jKqoyXXGYJDLPfnbDmUcJ/WfI7BpWFSjca7OYYat1n8N FZqmLfegKpIW98qKTiLqvDSZWQCyg8YJb4A6tFfHND9aLgSeINDL4VBd0fWiV4d1 1cCAjR1zlMJPoGh6z1sGRpT8vvW31F3mWdaxCeGGaHYQ -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org