$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: WJ9TZ0emUeBtAxElH+LguKD+2A9zer3ozc3W36Kx1Rw= Subject key identifier: 88:BD:9E:83:76:73:64:4F:CF:45:39:F9:09:6C:96:CA:C6:48:A3:67 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 5861356EB67AB1D3C7C68DB9AB8C35408964DEBE Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa Signing time: Fri 25 Oct 2024 13:01:05 +0000 ROA not before: Fri 25 Oct 2024 12:56:05 +0000 ROA not after: Fri 24 Oct 2025 13:01:05 +0000 asID: 55685 IP address blocks: 2404:e100:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:61:35:6e:b6:7a:b1:d3:c7:c6:8d:b9:ab:8c:35:40:89:64:de:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Oct 25 12:56:05 2024 GMT Not After : Oct 24 13:01:05 2025 GMT Subject: CN=88BD9E837673644FCF4539F9096C96CAC648A367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:00:d7:a0:e5:57:c7:8f:83:12:8a:ce:1b:fb: e4:67:ef:a4:91:62:27:9e:44:3e:c0:cf:e0:e9:ae: 6a:93:e2:96:6a:06:74:67:81:79:e1:40:64:82:79: 83:07:0a:1e:a9:3a:62:a5:ac:1d:cb:52:8c:dc:2c: c2:ab:44:13:0f:76:55:25:ce:09:a2:06:6e:be:28: 6f:7e:e4:09:fa:0b:54:5f:44:cb:58:07:06:c0:14: 97:94:75:9d:71:24:49:32:63:62:29:93:1c:1e:88: d6:b2:14:0f:90:45:5c:86:05:d8:ac:c0:50:01:de: 0f:44:0a:5f:b3:c2:e0:95:60:88:ec:09:bf:17:50: 66:ce:99:3f:f7:56:5f:8a:b2:77:26:d4:33:ea:81: 4d:82:6e:a9:2c:54:eb:21:1a:43:97:d2:38:48:41: 73:38:52:13:a0:88:1d:ad:c2:39:63:65:8d:f6:e5: 25:97:e8:0c:a3:03:a1:a9:42:ee:b3:cf:cb:c8:29: 4d:3f:38:86:1e:29:70:09:8b:d9:34:43:07:9e:34: c4:28:28:22:d9:51:78:fa:27:f8:92:96:db:24:4b: 91:b8:b8:b0:73:cd:f0:0b:24:78:7c:bd:0f:a3:45: 02:a1:09:9a:86:11:3f:cf:0a:e2:9d:08:3d:48:1c: d1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BD:9E:83:76:73:64:4F:CF:45:39:F9:09:6C:96:CA:C6:48:A3:67 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:6::/48 Signature Algorithm: sha256WithRSAEncryption 32:e4:f0:4b:ec:9e:fe:da:a8:f7:a3:e1:72:e5:f0:4a:a6:1c: 2b:e4:4b:05:b1:df:84:f3:32:2c:62:59:1a:5f:aa:ab:dc:61: 35:9b:1f:7e:8a:01:15:bd:3e:81:62:1d:e7:3a:9e:dc:75:a1: b2:0e:6a:2c:dd:51:b4:6e:53:01:a0:8a:7f:cb:2e:5d:3f:2f: a2:55:e8:95:ab:74:47:32:8e:8a:ea:7f:d6:69:3c:68:ca:ca: 0d:be:33:bb:73:a1:95:f2:b2:3e:3f:9d:b2:f9:ba:a3:dc:52: 09:7a:7c:c6:46:90:c4:65:9e:3e:b0:34:0d:66:bc:a6:1f:b1: 89:31:62:4d:bd:d2:49:4f:b1:c0:51:7b:02:40:c5:76:f0:84: 1c:50:24:53:3c:2d:cd:43:ad:56:90:70:56:02:ab:34:e2:36: 66:43:3d:2b:cd:e0:14:28:29:29:3d:19:df:ab:0a:9f:d3:b2: 62:0e:23:cd:7f:ac:0b:fe:28:20:d8:82:cf:c1:17:05:57:ea: b0:9a:2e:13:4b:c3:68:00:1a:e0:f9:6b:73:5e:b7:99:57:38: 7c:e1:a0:49:c8:be:19:72:56:a3:52:8d:04:98:91:d7:d1:57: e7:aa:dc:95:85:1c:8a:22:63:a7:db:73:74:80:07:19:61:16: cc:47:70:aa -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUWGE1brZ6sdPHxo25q4w1QIlk3r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNDEwMjUxMjU2MDVaFw0yNTEwMjQxMzAxMDVaMDMxMTAvBgNV BAMTKDg4QkQ5RTgzNzY3MzY0NEZDRjQ1MzlGOTA5NkM5NkNBQzY0OEEzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmANeg5VfHj4MSis4b++Rn76SR YieeRD7Az+DprmqT4pZqBnRngXnhQGSCeYMHCh6pOmKlrB3LUozcLMKrRBMPdlUl zgmiBm6+KG9+5An6C1RfRMtYBwbAFJeUdZ1xJEkyY2IpkxweiNayFA+QRVyGBdis wFAB3g9ECl+zwuCVYIjsCb8XUGbOmT/3Vl+Ksncm1DPqgU2CbqksVOshGkOX0jhI QXM4UhOgiB2twjljZY325SWX6AyjA6GpQu6zz8vIKU0/OIYeKXAJi9k0QweeNMQo KCLZUXj6J/iSltskS5G4uLBzzfALJHh8vQ+jRQKhCZqGET/PCuKdCD1IHNEVAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUiL2eg3ZzZE/PRTn5CWyWysZIo2cwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAThAAAGMA0G CSqGSIb3DQEBCwUAA4IBAQAy5PBL7J7+2qj3o+Fy5fBKphwr5EsFsd+E8zIsYlka X6qr3GE1mx9+igEVvT6BYh3nOp7cdaGyDmos3VG0blMBoIp/yy5dPy+iVeiVq3RH Mo6K6n/WaTxoysoNvjO7c6GV8rI+P52y+bqj3FIJenzGRpDEZZ4+sDQNZrymH7GJ MWJNvdJJT7HAUXsCQMV28IQcUCRTPC3NQ61WkHBWAqs04jZmQz0rzeAUKCkpPRnf qwqf07JiDiPNf6wL/igg2ILPwRcFV+qwmi4TS8NoABrg+WtzXreZVzh84aBJyL4Z clajUo0EmJHX0VfnqtyVhRyKImOn23N0gAcZYRbMR3Cq -----END CERTIFICATE-----Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org