$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a323a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a323a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: 4ZSen7Nz2VI/R4kdQqLCS+ORNRMLLobcx+qE3q0zxr8= Subject key identifier: E9:B7:B0:08:9A:CB:4E:B7:48:CE:CF:4F:6E:66:65:24:BC:D7:F1:F2 Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 1F552203CE4ACB1A48E66A051D77DB9759AB4AB3 Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a323a3a2f34382d3438203d3e203338353234.roa Signing time: Wed 10 Jul 2024 01:00:01 +0000 ROA not before: Wed 10 Jul 2024 00:55:01 +0000 ROA not after: Wed 09 Jul 2025 01:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:2::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:55:22:03:ce:4a:cb:1a:48:e6:6a:05:1d:77:db:97:59:ab:4a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jul 10 00:55:01 2024 GMT Not After : Jul 9 01:00:01 2025 GMT Subject: CN=E9B7B0089ACB4EB748CECF4F6E666524BCD7F1F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:ba:e5:15:06:aa:48:b0:71:21:48:d7:07: db:82:6b:ec:dc:9e:8b:7d:d9:37:47:bb:3f:fe:58: d8:d7:9a:f0:5f:56:86:94:24:d8:d6:ed:c4:cc:02: bd:08:af:65:8d:7a:3b:fc:ea:b9:36:d7:d1:02:6a: 67:cf:35:62:be:24:3d:ec:e6:6b:1a:a9:28:d8:d6: 6c:99:67:b0:c4:3c:48:a4:eb:de:a5:8b:71:08:1a: aa:41:ec:66:2d:bc:24:6c:40:84:b3:0e:c2:b1:d5: 05:d4:28:b7:33:e9:a1:04:7f:f2:ce:72:52:8c:d0: 57:aa:3c:10:e1:b6:a0:e8:ef:f2:27:8a:9b:60:4f: 89:e4:40:52:d5:ff:68:9e:03:58:1a:57:d9:f3:43: 29:c1:73:1b:9d:a7:eb:ab:70:9b:98:12:17:d7:47: d1:9b:e2:4c:05:c2:23:53:fb:a9:0b:73:91:10:d9: ca:de:27:55:bf:ab:a4:fe:13:0c:24:1a:75:48:9f: 0c:69:a6:e8:3b:42:21:56:b7:cf:82:41:80:a0:cc: 16:f6:f2:26:c6:c7:11:27:03:17:a3:a5:ec:dc:d4: 03:3b:eb:18:aa:1b:b9:0a:77:e1:6c:fe:fc:91:c2: 1c:a2:6f:ac:de:9f:a0:f3:4c:81:07:f8:d1:8f:0e: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B7:B0:08:9A:CB:4E:B7:48:CE:CF:4F:6E:66:65:24:BC:D7:F1:F2 X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a323a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:2::/48 Signature Algorithm: sha256WithRSAEncryption 90:fd:70:b1:64:f0:18:c7:c8:f3:f6:3b:9f:a9:61:30:ac:c0: cf:a0:02:98:da:f3:af:8a:f9:13:02:8b:1f:16:11:54:77:eb: 4a:69:de:e6:ce:06:2a:6b:ff:21:20:9d:82:47:29:de:83:08: 4e:51:8c:b8:8e:d3:c8:69:e9:3b:90:33:61:99:ed:68:65:bc: da:11:a6:bf:10:e4:65:26:e1:a3:6c:47:0e:dc:ce:77:59:f8: ce:bf:06:6d:33:4b:8b:59:1a:e2:5b:06:e7:bf:ae:b4:be:35: 25:78:45:88:66:10:bb:e4:5a:c3:1b:d7:5e:57:42:da:a2:09: cb:30:7d:e3:54:45:5a:a8:3f:41:47:80:0e:74:bc:bc:1c:8c: fe:2b:54:31:ab:01:5f:81:84:dc:fa:0f:b6:56:71:51:da:d4: a6:8c:54:7c:39:a7:31:30:29:8d:17:a2:00:34:0c:e4:f6:6b: b1:62:ef:c1:01:ad:3b:33:65:3f:66:67:c5:e6:87:86:07:87: a4:ba:5f:b7:9e:bc:47:42:b3:62:c7:11:5a:81:49:b5:4b:17: 98:72:8a:93:5a:43:56:90:92:ac:39:d1:90:66:d7:3c:09:93: ed:8d:e0:3a:5c:0a:45:7f:c7:87:28:71:2a:0f:7c:ff:79:c8: aa:66:72:4f -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUH1UiA85KyxpI5moFHXfbl1mrSrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yNDA3MTAwMDU1MDFaFw0yNTA3MDkwMTAwMDFaMDMxMTAvBgNV BAMTKEU5QjdCMDA4OUFDQjRFQjc0OENFQ0Y0RjZFNjY2NTI0QkNEN0YxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLLrlFQaqSLBxIUjXB9uCa+zc not92TdHuz/+WNjXmvBfVoaUJNjW7cTMAr0Ir2WNejv86rk219ECamfPNWK+JD3s 5msaqSjY1myZZ7DEPEik696li3EIGqpB7GYtvCRsQISzDsKx1QXUKLcz6aEEf/LO clKM0FeqPBDhtqDo7/IniptgT4nkQFLV/2ieA1gaV9nzQynBcxudp+urcJuYEhfX R9Gb4kwFwiNT+6kLc5EQ2creJ1W/q6T+EwwkGnVInwxppug7QiFWt8+CQYCgzBb2 8ibGxxEnAxejpezc1AM76xiqG7kKd+Fs/vyRwhyib6zen6DzTIEH+NGPDvwxAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU6bewCJrLTrdIzs9PbmZlJLzX8fIwHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAACMA0G CSqGSIb3DQEBCwUAA4IBAQCQ/XCxZPAYx8jz9jufqWEwrMDPoAKY2vOvivkTAosf FhFUd+tKad7mzgYqa/8hIJ2CRynegwhOUYy4jtPIaek7kDNhme1oZbzaEaa/EORl JuGjbEcO3M53WfjOvwZtM0uLWRriWwbnv660vjUleEWIZhC75FrDG9deV0LaognL MH3jVEVaqD9BR4AOdLy8HIz+K1QxqwFfgYTc+g+2VnFR2tSmjFR8OacxMCmNF6IA NAzk9muxYu/BAa07M2U/ZmfF5oeGB4ekul+3nrxHQrNixxFagUm1SxeYcoqTWkNW kJKsOdGQZtc8CZPtjeA6XApFf8eHKHEqD3z/eciqZnJP -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org