$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: HuEf7PhFnCj0J5YpUV02Fps9f9NnEArGmK/uQTuDPxk= Subject key identifier: FE:E9:62:96:3F:C8:06:E3:43:C2:37:82:F0:94:01:F2:55:6D:36:A6 Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 0963E9C44F725D103C36F1A6D60F2EEAE8C41E8E Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa Signing time: Wed 10 Jul 2024 00:00:01 +0000 ROA not before: Tue 09 Jul 2024 23:55:01 +0000 ROA not after: Wed 09 Jul 2025 00:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:63:e9:c4:4f:72:5d:10:3c:36:f1:a6:d6:0f:2e:ea:e8:c4:1e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jul 9 23:55:01 2024 GMT Not After : Jul 9 00:00:01 2025 GMT Subject: CN=FEE962963FC806E343C23782F09401F2556D36A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:5c:cf:1c:15:e3:92:58:6b:e1:72:32:89: 67:25:ab:aa:7d:3c:5f:ca:e2:9e:1a:0b:8f:f4:a4: 70:f8:27:bb:0f:4d:47:06:42:65:b0:f5:a3:f4:ab: 94:30:5a:d1:52:4d:f7:e4:e8:48:6b:9f:1f:44:fd: a9:41:7b:9a:e8:ea:a3:74:00:bc:59:0b:ce:01:a2: 9e:ff:44:31:b9:12:f5:01:76:c4:5b:88:70:61:a7: 50:b1:3f:ba:70:a4:dd:0d:ca:48:68:fe:70:a4:ec: 45:74:13:5a:9e:04:7a:94:e3:53:5b:1c:96:f0:c7: 0f:3b:c4:7f:cc:d2:9c:b8:20:9d:46:af:af:29:82: 21:10:00:1b:ae:39:aa:f8:01:ba:4f:33:04:cc:1e: 05:6a:b1:9a:80:ed:b7:c0:87:b7:6d:bd:2f:64:60: 84:1b:fc:03:13:2c:f5:7a:d8:b0:63:12:64:ce:89: a8:06:30:44:c9:cc:87:7b:a2:6d:34:b2:f8:70:dc: ff:94:4a:f1:fc:d1:d6:9c:fc:6d:2e:f6:b0:77:03: 0d:78:a7:26:20:0f:05:aa:b8:cb:11:61:61:1a:88: ca:50:ba:a8:13:f1:b9:46:ed:90:0d:35:86:7e:46: 8e:61:5c:9f:d3:46:05:69:43:21:4f:e2:c2:5d:38: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E9:62:96:3F:C8:06:E3:43:C2:37:82:F0:94:01:F2:55:6D:36:A6 X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:6::/48 Signature Algorithm: sha256WithRSAEncryption 6e:7a:83:4a:2e:2e:a4:46:c5:99:bc:1d:7b:41:83:ac:1d:ad: 05:cc:ef:ba:ac:2e:0f:ed:65:98:fc:d7:57:57:15:96:9d:6c: 11:5f:74:d2:8d:ec:b1:b8:3d:e6:9a:b3:20:28:09:1b:eb:2c: 85:a3:49:1f:aa:9b:e9:a3:0c:bb:99:a9:3f:c4:ef:b6:67:74: 24:09:0a:62:e2:56:06:25:f5:53:85:55:a4:63:81:df:03:e4: 38:a5:63:28:ca:41:08:72:79:28:65:03:17:23:e5:0c:a5:03: ca:c3:76:68:f0:63:db:7a:45:87:b2:f9:c2:54:06:69:31:71: 88:0e:76:4e:05:4c:3b:bc:11:03:4a:dc:2b:6d:52:eb:74:bc: 88:f1:5f:d7:c7:94:a0:4e:37:79:6d:a6:1a:7d:12:97:49:b6: 76:d2:7d:17:f0:ad:33:2d:53:5b:49:e5:9a:d3:5c:bd:99:23: d1:23:05:19:1a:ca:03:a3:60:96:2d:be:4c:3f:75:65:c7:18: 38:b0:3f:c0:14:cd:1b:1f:dd:f2:93:ed:8c:35:af:f9:2e:12: e1:06:f9:42:44:57:34:9f:71:01:7b:e2:af:d9:8a:9d:2f:09: ee:cb:7c:8a:80:1b:fd:dc:09:c0:9f:44:16:d1:2d:cb:77:52: 9e:cc:1b:b7 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUCWPpxE9yXRA8NvGm1g8u6ujEHo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yNDA3MDkyMzU1MDFaFw0yNTA3MDkwMDAwMDFaMDMxMTAvBgNV BAMTKEZFRTk2Mjk2M0ZDODA2RTM0M0MyMzc4MkYwOTQwMUYyNTU2RDM2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspVzPHBXjklhr4XIyiWclq6p9 PF/K4p4aC4/0pHD4J7sPTUcGQmWw9aP0q5QwWtFSTffk6Ehrnx9E/alBe5ro6qN0 ALxZC84Bop7/RDG5EvUBdsRbiHBhp1CxP7pwpN0Nykho/nCk7EV0E1qeBHqU41Nb HJbwxw87xH/M0py4IJ1Gr68pgiEQABuuOar4AbpPMwTMHgVqsZqA7bfAh7dtvS9k YIQb/AMTLPV62LBjEmTOiagGMETJzId7om00svhw3P+USvH80dac/G0u9rB3Aw14 pyYgDwWquMsRYWEaiMpQuqgT8blG7ZANNYZ+Ro5hXJ/TRgVpQyFP4sJdOGoRAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU/ulilj/IBuNDwjeC8JQB8lVtNqYwHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAGMA0G CSqGSIb3DQEBCwUAA4IBAQBueoNKLi6kRsWZvB17QYOsHa0FzO+6rC4P7WWY/NdX VxWWnWwRX3TSjeyxuD3mmrMgKAkb6yyFo0kfqpvpowy7mak/xO+2Z3QkCQpi4lYG JfVThVWkY4HfA+Q4pWMoykEIcnkoZQMXI+UMpQPKw3Zo8GPbekWHsvnCVAZpMXGI DnZOBUw7vBEDStwrbVLrdLyI8V/Xx5SgTjd5baYafRKXSbZ20n0X8K0zLVNbSeWa 01y9mSPRIwUZGsoDo2CWLb5MP3Vlxxg4sD/AFM0bH93yk+2MNa/5LhLhBvlCRFc0 n3EBe+Kv2YqdLwnuy3yKgBv93AnAn0QW0S3Ld1KezBu3 -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org