$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: g4Z5mSXxZcAi6nEDWqx+tEiutVvYZd7jK334oE8F11A= Subject key identifier: 8D:C5:04:C8:1B:17:94:6F:80:16:CC:80:B4:52:C3:F5:05:DD:FE:2D Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 781EAA6A2B14DFB816CA260E3C1807A6FC96E3D0 Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa Signing time: Wed 10 Jul 2024 01:00:01 +0000 ROA not before: Wed 10 Jul 2024 00:55:01 +0000 ROA not after: Wed 09 Jul 2025 01:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:c::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1e:aa:6a:2b:14:df:b8:16:ca:26:0e:3c:18:07:a6:fc:96:e3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jul 10 00:55:01 2024 GMT Not After : Jul 9 01:00:01 2025 GMT Subject: CN=8DC504C81B17946F8016CC80B452C3F505DDFE2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:44:c1:c2:d1:ec:99:4a:bc:dc:ba:df:4d: b1:14:96:1f:c5:2d:ad:5b:a6:c9:45:b0:27:ab:96: e8:8a:4b:b1:6b:e4:f1:e0:32:46:8f:af:6d:9c:a0: 43:dc:9d:d0:74:6e:fe:de:b4:24:1d:bb:1a:1f:2e: 81:e4:a1:c0:ae:96:a5:b9:b7:32:04:26:9e:b7:ef: 85:3a:1d:ea:63:59:33:b8:fa:9f:2b:f7:1d:14:53: cf:4f:ae:29:e3:ae:aa:7b:a8:fe:de:4d:37:f4:df: b5:09:52:91:71:9c:0f:4f:b4:dc:ac:1c:d0:7d:74: 27:c1:99:a8:13:b2:a1:27:6a:21:83:3e:0f:93:8e: 78:54:f3:59:d4:d3:70:ca:ce:b1:76:02:7c:a7:55: d6:f6:75:cc:20:2f:a6:10:ff:d1:b9:7c:6b:0e:bb: 6c:0f:6c:47:26:88:6d:43:b5:91:e5:ef:b5:ae:3f: f6:96:6e:ce:33:92:6a:48:44:d9:73:63:e6:79:0f: de:42:c3:c5:02:83:6c:06:a3:62:b7:71:cf:9f:ef: 51:2f:49:33:aa:d0:2a:11:0a:b2:3a:33:d2:db:fc: 2a:1a:82:66:32:ab:fe:11:b4:d2:71:fd:44:65:fc: ca:99:97:d0:cc:48:b6:c6:ea:47:62:e2:7f:91:14: 90:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C5:04:C8:1B:17:94:6F:80:16:CC:80:B4:52:C3:F5:05:DD:FE:2D X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:c::/48 Signature Algorithm: sha256WithRSAEncryption ac:7c:92:37:0a:c0:de:36:39:02:60:38:f5:6b:ff:2c:86:f9: 2a:b8:78:de:30:63:0a:05:23:a2:a3:81:30:b0:bb:95:84:c4: 7f:4c:b6:9b:e2:38:03:be:f1:03:e2:bc:1d:1b:84:77:41:ff: b0:62:53:ee:a3:d3:db:68:07:26:e8:0b:d0:2a:16:b9:8b:21: d7:bc:bb:ab:15:5c:6f:91:90:22:1d:ab:c3:ee:cc:74:d1:37: 11:81:ca:0e:cd:cf:d2:be:f3:c0:4d:97:c9:5d:bd:3a:0e:35: 25:5e:8e:4a:5a:d9:41:3b:27:cf:6f:0c:05:c9:55:44:f0:6b: a3:86:b3:3a:c1:a5:36:bd:d6:84:67:c9:75:ec:8c:17:95:3e: 7a:e3:7a:66:dc:5d:35:ad:0a:71:bf:9a:7f:08:ed:07:bc:e1: 06:b8:eb:2b:88:e3:8e:a2:4e:29:86:a0:d8:12:f1:10:87:91: 2c:49:08:3d:54:b1:d1:44:af:f1:0c:61:99:fc:46:24:59:fb: d0:9e:d7:72:ad:6b:0c:e4:e1:da:30:f5:2f:ec:86:98:d5:76: 90:7d:32:5b:76:71:d2:2b:47:27:0c:0b:3b:3d:10:ad:f2:b2: 04:98:8a:1b:53:8c:38:91:0c:8d:90:00:c1:18:76:7f:4b:a9: eb:44:0e:fa -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUeB6qaisU37gWyiYOPBgHpvyW49AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yNDA3MTAwMDU1MDFaFw0yNTA3MDkwMTAwMDFaMDMxMTAvBgNV BAMTKDhEQzUwNEM4MUIxNzk0NkY4MDE2Q0M4MEI0NTJDM0Y1MDVEREZFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigUTBwtHsmUq83LrfTbEUlh/F La1bpslFsCerluiKS7Fr5PHgMkaPr22coEPcndB0bv7etCQduxofLoHkocCulqW5 tzIEJp6374U6HepjWTO4+p8r9x0UU89Prinjrqp7qP7eTTf037UJUpFxnA9PtNys HNB9dCfBmagTsqEnaiGDPg+TjnhU81nU03DKzrF2AnynVdb2dcwgL6YQ/9G5fGsO u2wPbEcmiG1DtZHl77WuP/aWbs4zkmpIRNlzY+Z5D95Cw8UCg2wGo2K3cc+f71Ev STOq0CoRCrI6M9Lb/CoagmYyq/4RtNJx/URl/MqZl9DMSLbG6kdi4n+RFJCBAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUjcUEyBsXlG+AFsyAtFLD9QXd/i0wHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhNjMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAMMA0G CSqGSIb3DQEBCwUAA4IBAQCsfJI3CsDeNjkCYDj1a/8shvkquHjeMGMKBSOio4Ew sLuVhMR/TLab4jgDvvED4rwdG4R3Qf+wYlPuo9PbaAcm6AvQKha5iyHXvLurFVxv kZAiHavD7sx00TcRgcoOzc/SvvPATZfJXb06DjUlXo5KWtlBOyfPbwwFyVVE8Guj hrM6waU2vdaEZ8l17IwXlT5643pm3F01rQpxv5p/CO0HvOEGuOsriOOOok4phqDY EvEQh5EsSQg9VLHRRK/xDGGZ/EYkWfvQntdyrWsM5OHaMPUv7IaY1XaQfTJbdnHS K0cnDAs7PRCt8rIEmIobU4w4kQyNkADBGHZ/S6nrRA76 -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org