$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a373a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a373a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: oYZ8nz2WJas0xrln7v1b7AoTJQ7GRDEHvZFLX/caHbE= Subject key identifier: 0C:DD:5D:32:54:92:EB:69:0F:BF:25:80:74:6E:03:FB:02:E3:78:6D Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 1F700F7A12348110C6A089AD33363E44E8CD76F8 Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a373a3a2f34382d3438203d3e203338353234.roa Signing time: Wed 10 Jul 2024 00:00:01 +0000 ROA not before: Tue 09 Jul 2024 23:55:01 +0000 ROA not after: Wed 09 Jul 2025 00:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:7::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:70:0f:7a:12:34:81:10:c6:a0:89:ad:33:36:3e:44:e8:cd:76:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jul 9 23:55:01 2024 GMT Not After : Jul 9 00:00:01 2025 GMT Subject: CN=0CDD5D325492EB690FBF2580746E03FB02E3786D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:d9:96:60:fb:02:6e:df:42:78:6f:d3:8f: 89:12:c4:58:68:ff:e1:a2:b8:1a:07:33:9a:0d:63: 04:b9:7c:55:89:92:0d:78:32:2c:90:65:cf:ca:47: 56:7f:95:68:e9:9f:e8:b7:1d:99:9a:75:a3:a5:50: d3:4d:ac:71:6f:17:78:60:4f:73:fb:a0:2f:30:d1: ea:f7:53:10:74:46:e6:ef:e3:55:24:1d:63:b1:df: 4a:c0:11:5d:27:ee:a6:88:ea:4c:e4:73:c2:86:8f: 93:0e:78:11:48:62:29:31:49:e9:20:2a:7c:44:41: f3:95:98:f7:a7:72:35:22:48:26:9a:66:97:a8:b9: ac:90:9b:e3:7a:78:c4:85:1c:be:2f:04:70:5e:f9: 61:8b:bb:a6:0c:fd:95:99:b4:7e:1e:21:40:59:39: 8b:83:54:48:f5:af:e0:2a:b6:11:ee:1a:b2:13:1b: 36:0e:44:6a:54:b7:4d:55:d2:65:d2:8d:d4:a2:c2: a2:4a:8d:55:ed:33:b4:1e:b6:e2:9d:27:49:ec:3e: cb:aa:25:04:6e:5f:2a:1e:e4:d9:04:71:ad:64:5c: 3d:a3:d2:6e:01:8a:17:54:b1:77:da:f4:4c:e4:3f: e1:77:a1:5c:ab:40:d5:0a:76:a3:1f:bd:a0:2c:9e: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DD:5D:32:54:92:EB:69:0F:BF:25:80:74:6E:03:FB:02:E3:78:6D X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a373a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:7::/48 Signature Algorithm: sha256WithRSAEncryption 42:64:01:7e:f4:1c:95:05:b8:04:5d:e3:09:ca:85:e4:05:eb: 6b:0a:e8:e9:49:11:c2:f4:f6:bf:91:c4:2b:4c:02:70:63:6d: d0:ac:72:63:c2:09:c5:68:b8:f3:c4:06:9c:e1:97:4a:e0:8c: a9:fe:1e:c3:f9:2a:75:66:6d:37:cb:a1:a5:1b:52:60:50:e6: f6:13:2c:20:a9:32:4a:5a:62:50:a2:e5:ee:5a:80:13:71:85: 64:76:79:00:b0:04:c2:8f:fa:70:af:ee:bb:1c:d9:b0:a9:13: c4:d1:8a:56:89:2a:b0:13:99:70:9c:8e:74:24:12:e6:e3:5e: 9e:2a:b2:b7:30:43:f3:cc:7d:58:05:46:89:8a:b8:be:fd:fe: a5:46:45:10:a6:9c:d9:42:38:5d:90:26:aa:0e:4a:c0:49:ed: 9b:cc:9a:e6:ff:b4:c3:6d:23:b7:a7:46:b1:a1:2e:2a:60:29: 27:58:88:c8:fe:00:5b:4a:55:58:4b:8a:b3:32:cf:49:82:57: cd:2a:ea:f8:03:fe:a6:db:31:8c:38:f2:d4:6a:1a:ab:1a:d2: ec:9f:e3:c8:91:c5:30:0f:e5:1b:f7:4e:57:6f:29:13:16:59: 25:e2:61:40:fa:11:98:e9:b2:54:d2:e1:79:77:86:f4:52:b8: 69:e6:f6:9e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUH3APehI0gRDGoImtMzY+ROjNdvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yNDA3MDkyMzU1MDFaFw0yNTA3MDkwMDAwMDFaMDMxMTAvBgNV BAMTKDBDREQ1RDMyNTQ5MkVCNjkwRkJGMjU4MDc0NkUwM0ZCMDJFMzc4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMENmWYPsCbt9CeG/Tj4kSxFho /+GiuBoHM5oNYwS5fFWJkg14MiyQZc/KR1Z/lWjpn+i3HZmadaOlUNNNrHFvF3hg T3P7oC8w0er3UxB0Rubv41UkHWOx30rAEV0n7qaI6kzkc8KGj5MOeBFIYikxSekg KnxEQfOVmPencjUiSCaaZpeouayQm+N6eMSFHL4vBHBe+WGLu6YM/ZWZtH4eIUBZ OYuDVEj1r+AqthHuGrITGzYORGpUt01V0mXSjdSiwqJKjVXtM7QetuKdJ0nsPsuq JQRuXyoe5NkEca1kXD2j0m4BihdUsXfa9EzkP+F3oVyrQNUKdqMfvaAsngcfAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUDN1dMlSS62kPvyWAdG4D+wLjeG0wHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhMzczYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAHMA0G CSqGSIb3DQEBCwUAA4IBAQBCZAF+9ByVBbgEXeMJyoXkBetrCujpSRHC9Pa/kcQr TAJwY23QrHJjwgnFaLjzxAac4ZdK4Iyp/h7D+Sp1Zm03y6GlG1JgUOb2EywgqTJK WmJQouXuWoATcYVkdnkAsATCj/pwr+67HNmwqRPE0YpWiSqwE5lwnI50JBLm416e KrK3MEPzzH1YBUaJiri+/f6lRkUQppzZQjhdkCaqDkrASe2bzJrm/7TDbSO3p0ax oS4qYCknWIjI/gBbSlVYS4qzMs9JglfNKur4A/6m2zGMOPLUahqrGtLsn+PIkcUw D+Ub905XbykTFlkl4mFA+hGY6bJU0uF5d4b0Urhp5vae -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org