$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a623a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a623a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: JvYV0DAk4CgQkFBbe6hTyS8jIUvbiyG4liuTZ3xwrSk= Subject key identifier: 39:5C:E3:16:D7:31:2B:3E:C7:C6:70:F1:CE:D8:16:68:D7:F3:2D:CA Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 0329163F17956CDEA720C2E9FB69A70F05B7DCAC Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a623a3a2f34382d3438203d3e203338353234.roa Signing time: Wed 10 Jul 2024 01:00:01 +0000 ROA not before: Wed 10 Jul 2024 00:55:01 +0000 ROA not after: Wed 09 Jul 2025 01:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:b::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:29:16:3f:17:95:6c:de:a7:20:c2:e9:fb:69:a7:0f:05:b7:dc:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jul 10 00:55:01 2024 GMT Not After : Jul 9 01:00:01 2025 GMT Subject: CN=395CE316D7312B3EC7C670F1CED81668D7F32DCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:30:f1:41:53:b9:16:e1:d8:74:2d:72:3c: 53:70:a0:0e:cb:93:f6:09:64:15:68:ff:e7:84:97: 64:e2:93:8d:df:94:9a:ba:3c:cc:a3:55:71:8d:51: b8:25:28:02:0b:82:e3:f1:cc:77:4d:96:0c:ea:2f: 83:ac:0e:44:8b:16:7a:5f:cf:e3:30:07:ce:36:31: 19:fa:b6:75:56:f2:b2:a4:55:57:6d:43:c1:c6:74: 03:4d:e8:92:b1:5d:dc:6a:d0:00:91:59:24:74:45: 8f:00:3d:73:9e:04:49:bf:50:18:52:86:8a:31:99: e5:d7:23:84:19:c3:50:d9:4a:28:05:9c:bf:c5:d7: 74:a2:76:bd:0f:6c:4b:ae:dc:80:c6:00:05:38:26: a9:be:d4:62:af:be:e1:5f:0c:41:e9:28:8b:7b:5d: 17:b9:0b:af:60:40:e1:f1:33:18:29:72:c2:f1:a0: 90:65:75:d7:b9:0c:c3:8f:47:33:1f:9a:81:e5:80: dd:38:d0:cb:e1:c1:33:32:66:6d:17:75:54:54:a5: 65:4c:4f:51:cc:66:34:b2:a3:1e:4d:d7:12:01:56: c6:64:2b:04:50:4d:fa:18:a3:3e:49:82:c5:df:88: 65:8c:a6:96:38:92:23:49:8c:6f:25:98:88:29:e0: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5C:E3:16:D7:31:2B:3E:C7:C6:70:F1:CE:D8:16:68:D7:F3:2D:CA X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a623a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:b::/48 Signature Algorithm: sha256WithRSAEncryption a5:f5:24:f5:47:6a:07:95:be:1d:22:71:1a:a7:93:38:e9:97: 5a:02:0a:7e:00:c7:1a:3a:71:12:d8:fb:34:be:b0:2f:4f:e9: c9:74:2c:27:df:48:d6:53:85:bd:68:c9:32:68:44:fc:cc:d4: 64:94:bf:6a:50:33:cb:07:a4:6f:92:e0:b8:28:4f:e2:36:fa: 58:d1:1d:fc:05:b5:c4:3e:9a:93:71:8e:93:c8:eb:0b:c2:ca: aa:cf:10:2a:bf:5c:66:b2:a7:93:bd:87:b7:37:9f:55:16:86: 3a:07:f2:c9:43:eb:4c:cb:ac:57:bc:23:8e:a1:f6:b3:c0:95: f9:73:43:f6:f0:1a:75:88:4a:d7:5c:65:28:c3:d3:96:13:47: a9:8a:42:30:c5:fb:cb:98:52:f9:23:07:a5:c3:ef:ed:39:cf: 9e:85:c3:8a:fa:d4:ca:5d:35:a9:84:38:e8:75:2c:6c:8a:22: c1:a7:11:c1:4a:b8:4b:60:64:76:f5:f2:5f:53:b9:bc:6a:f0: ab:9e:46:41:39:7b:ed:e0:ec:fb:89:23:9d:c3:4b:40:ae:f9: 18:61:46:4e:f1:b6:02:73:59:08:8b:96:30:57:57:31:03:7b: a5:49:70:fa:02:e6:f3:c1:93:80:9a:e4:dd:03:8a:72:02:5b: f3:27:cf:c4 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUAykWPxeVbN6nIMLp+2mnDwW33KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yNDA3MTAwMDU1MDFaFw0yNTA3MDkwMTAwMDFaMDMxMTAvBgNV BAMTKDM5NUNFMzE2RDczMTJCM0VDN0M2NzBGMUNFRDgxNjY4RDdGMzJEQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWjDxQVO5FuHYdC1yPFNwoA7L k/YJZBVo/+eEl2Tik43flJq6PMyjVXGNUbglKAILguPxzHdNlgzqL4OsDkSLFnpf z+MwB842MRn6tnVW8rKkVVdtQ8HGdANN6JKxXdxq0ACRWSR0RY8APXOeBEm/UBhS hooxmeXXI4QZw1DZSigFnL/F13Sidr0PbEuu3IDGAAU4Jqm+1GKvvuFfDEHpKIt7 XRe5C69gQOHxMxgpcsLxoJBldde5DMOPRzMfmoHlgN040MvhwTMyZm0XdVRUpWVM T1HMZjSyox5N1xIBVsZkKwRQTfoYoz5JgsXfiGWMppY4kiNJjG8lmIgp4K6FAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUOVzjFtcxKz7HxnDxztgWaNfzLcowHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhNjIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAALMA0G CSqGSIb3DQEBCwUAA4IBAQCl9ST1R2oHlb4dInEap5M46ZdaAgp+AMcaOnES2Ps0 vrAvT+nJdCwn30jWU4W9aMkyaET8zNRklL9qUDPLB6RvkuC4KE/iNvpY0R38BbXE PpqTcY6TyOsLwsqqzxAqv1xmsqeTvYe3N59VFoY6B/LJQ+tMy6xXvCOOofazwJX5 c0P28Bp1iErXXGUow9OWE0epikIwxfvLmFL5Iwelw+/tOc+ehcOK+tTKXTWphDjo dSxsiiLBpxHBSrhLYGR29fJfU7m8avCrnkZBOXvt4Oz7iSOdw0tArvkYYUZO8bYC c1kIi5YwV1cxA3ulSXD6AubzwZOAmuTdA4pyAlvzJ8/E -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org