$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a333a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: O8lT4YiD7zK8UqJi+y6UJmSZjw6qOrdTXIWbMi8L4Wc= Subject key identifier: 0A:B0:D7:BB:E0:1E:D8:F1:DB:2D:97:1F:3B:CE:AC:9B:9D:1E:34:34 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 58B24488DCF7B465EFAAEDDA425C0F0A8F022BF2 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333a3a2f34382d3438203d3e203535363835.roa Signing time: Mon 01 Jul 2024 01:05:49 +0000 ROA not before: Mon 01 Jul 2024 01:00:49 +0000 ROA not after: Mon 30 Jun 2025 01:05:49 +0000 asID: 55685 IP address blocks: 2404:e100:3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b2:44:88:dc:f7:b4:65:ef:aa:ed:da:42:5c:0f:0a:8f:02:2b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Jul 1 01:00:49 2024 GMT Not After : Jun 30 01:05:49 2025 GMT Subject: CN=0AB0D7BBE01ED8F1DB2D971F3BCEAC9B9D1E3434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:d2:19:1e:db:c8:1b:3b:81:1b:f2:34:14: 2e:73:62:3b:3d:60:c6:e8:7b:c6:73:af:32:d7:81: f6:e1:55:e6:5f:53:2d:92:70:de:d6:53:d5:ce:cf: 51:1b:d2:56:b9:be:82:d0:ec:d6:df:bb:49:93:f9: 89:05:4f:fa:ac:72:d4:99:33:4c:a7:bc:3e:e4:6c: 2e:f5:17:7c:04:9c:b4:ca:da:47:e6:6b:35:d6:88: b9:cb:ce:df:b9:93:20:81:03:ad:2a:3e:29:fb:ff: b0:a8:7b:c6:d2:56:20:eb:48:19:cf:8c:a5:0c:49: f0:5a:b3:d3:0b:8f:95:61:bd:9c:23:52:44:25:f8: 13:8a:fc:ea:f5:fd:23:05:f7:50:33:18:90:de:dc: eb:22:60:3a:e3:69:06:70:44:12:56:d3:d4:ef:65: 5b:02:31:20:4c:9b:08:29:5b:7d:0f:11:67:5f:6e: 80:3e:52:db:05:3d:5c:6c:c7:ac:23:11:95:10:48: c9:5f:53:27:6e:4c:d2:4d:73:40:d5:28:ba:ee:f2: a6:05:34:d0:c2:fd:18:a3:a2:dc:a5:59:b8:7e:b5: 44:39:96:5e:43:bc:66:cd:70:d3:f3:00:62:79:88: c9:5d:ef:54:10:a6:1b:0a:4c:2d:de:be:77:1b:da: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B0:D7:BB:E0:1E:D8:F1:DB:2D:97:1F:3B:CE:AC:9B:9D:1E:34:34 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:3::/48 Signature Algorithm: sha256WithRSAEncryption 44:b1:7f:2b:1e:d0:b3:6f:62:5f:11:3f:fe:a6:a3:f3:4a:cc: 0d:32:6d:75:cb:e6:8a:7e:93:72:06:b0:9d:67:32:94:60:97: 2c:de:16:2c:a2:7b:09:e1:f7:07:60:2e:c3:b4:9c:99:9f:9f: 1a:6f:8a:b1:5c:53:68:01:7b:bf:72:89:f4:27:42:c1:3e:ed: 0b:aa:2f:8d:81:a3:19:92:5e:2e:02:98:f6:7c:f3:e7:5c:f6: 19:85:c2:f8:92:d6:45:bb:30:db:f3:d5:2e:e5:84:27:98:6f: d0:21:7c:c2:5c:61:d6:ee:9f:7e:fc:8b:0d:75:9d:a2:82:58: 5c:5b:0e:0e:f8:ff:3e:88:d7:72:93:19:05:ae:0b:c5:f8:fc: c1:db:23:34:03:2c:e3:6e:f4:f4:1f:65:d1:5c:d0:c9:f7:09: c0:b6:f3:a2:27:56:64:e1:83:8a:55:a4:63:b1:84:90:fb:44: 94:30:b9:ec:01:a2:cb:18:5e:c8:d0:4e:5e:09:40:0d:82:2f: bf:38:ba:30:46:58:7b:50:16:13:d1:81:ca:5b:1a:f2:d3:4a: d4:f4:fc:5b:ab:41:a3:c6:24:7a:9d:47:a0:f9:3e:5a:19:a3: 8e:16:b1:86:36:47:a3:a6:b8:a3:35:33:b2:35:f2:7e:ff:ca: 84:74:2c:67 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUWLJEiNz3tGXvqu3aQlwPCo8CK/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNDA3MDEwMTAwNDlaFw0yNTA2MzAwMTA1NDlaMDMxMTAvBgNV BAMTKDBBQjBEN0JCRTAxRUQ4RjFEQjJEOTcxRjNCQ0VBQzlCOUQxRTM0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cNIZHtvIGzuBG/I0FC5zYjs9 YMboe8ZzrzLXgfbhVeZfUy2ScN7WU9XOz1Eb0la5voLQ7Nbfu0mT+YkFT/qsctSZ M0ynvD7kbC71F3wEnLTK2kfmazXWiLnLzt+5kyCBA60qPin7/7Coe8bSViDrSBnP jKUMSfBas9MLj5VhvZwjUkQl+BOK/Or1/SMF91AzGJDe3OsiYDrjaQZwRBJW09Tv ZVsCMSBMmwgpW30PEWdfboA+UtsFPVxsx6wjEZUQSMlfUyduTNJNc0DVKLru8qYF NNDC/RijotylWbh+tUQ5ll5DvGbNcNPzAGJ5iMld71QQphsKTC3evncb2mWpAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUCrDXu+Ae2PHbLZcfO86sm50eNDQwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAThAAADMA0G CSqGSIb3DQEBCwUAA4IBAQBEsX8rHtCzb2JfET/+pqPzSswNMm11y+aKfpNyBrCd ZzKUYJcs3hYsonsJ4fcHYC7DtJyZn58ab4qxXFNoAXu/con0J0LBPu0Lqi+NgaMZ kl4uApj2fPPnXPYZhcL4ktZFuzDb89Uu5YQnmG/QIXzCXGHW7p9+/IsNdZ2iglhc Ww4O+P8+iNdykxkFrgvF+PzB2yM0AyzjbvT0H2XRXNDJ9wnAtvOiJ1Zk4YOKVaRj sYSQ+0SUMLnsAaLLGF7I0E5eCUANgi+/OLowRlh7UBYT0YHKWxry00rU9Pxbq0Gj xiR6nUeg+T5aGaOOFrGGNkejprijNTOyNfJ+/8qEdCxn -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org