$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a613a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a613a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: W/zlg9OucusPiCZ3U9EebUBNzJCaKGW+EeCQo9iRwHU= Subject key identifier: 9F:23:39:98:5A:94:1E:B6:03:7C:A8:C1:02:62:B2:66:F2:42:1C:AE Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 22103F6EF6D1F4C240F324C5EA3EB5EFFD95DBB8 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a613a3a2f34382d3438203d3e203535363835.roa Signing time: Tue 12 Nov 2024 03:02:54 +0000 ROA not before: Tue 12 Nov 2024 02:57:54 +0000 ROA not after: Tue 11 Nov 2025 03:02:54 +0000 asID: 55685 IP address blocks: 2404:e100:a::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:10:3f:6e:f6:d1:f4:c2:40:f3:24:c5:ea:3e:b5:ef:fd:95:db:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Nov 12 02:57:54 2024 GMT Not After : Nov 11 03:02:54 2025 GMT Subject: CN=9F2339985A941EB6037CA8C10262B266F2421CAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:42:2c:a8:c0:de:8c:5e:ba:fa:29:7f:47:6e: a4:aa:ee:34:dc:d5:7a:69:46:69:32:a8:86:9c:5a: 0c:15:bf:e3:62:37:f8:72:a3:81:2f:ad:30:59:7c: d2:06:7b:2c:90:89:04:5b:ae:ff:16:3e:07:63:ea: 4d:72:c3:6b:f4:bc:89:1f:8d:a6:96:24:0c:7e:e4: 67:8c:38:34:2c:ae:23:7e:ce:10:dc:f4:4a:2d:07: 41:ad:f6:44:3f:9b:63:dc:43:66:64:07:cf:06:72: 8a:4d:a1:dc:51:d4:d4:66:2a:3d:57:c2:73:13:e8: 87:97:af:18:5c:fd:8a:e3:d5:14:7a:0d:2c:76:c1: 34:f8:94:87:39:fd:e4:52:8d:22:08:69:9c:38:79: 3d:63:93:d3:e1:2d:ce:37:79:2f:f9:04:5c:86:1b: e7:6a:b3:40:9c:70:8b:82:ec:31:3d:a5:5e:f7:4c: 0c:28:98:d0:8f:72:56:e7:0a:97:cf:02:4e:ff:ac: 30:d9:1e:17:a1:dc:78:13:c9:12:0d:e2:4e:85:35: 28:1a:16:0d:b8:43:6e:c7:1d:c8:68:71:91:28:86: df:8d:47:58:71:26:87:ff:41:fc:b6:3d:f7:1b:56: 7d:e2:55:84:fd:7b:e8:fd:a9:f6:e5:79:f0:ee:49: e5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:23:39:98:5A:94:1E:B6:03:7C:A8:C1:02:62:B2:66:F2:42:1C:AE X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a613a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:a::/48 Signature Algorithm: sha256WithRSAEncryption 1c:89:68:af:f4:bc:3a:7b:2e:e8:0e:8f:a6:fe:23:0e:81:c3: 51:4a:65:a5:c8:4e:e4:7f:ba:dc:8e:be:c2:21:6b:68:7c:3e: 1a:7b:79:94:f8:48:94:c7:4b:d7:72:0f:ca:8e:2c:6a:b0:4a: 44:c9:a6:ed:35:aa:86:36:60:f5:40:d6:ac:bc:4b:06:66:83: 62:1b:0d:55:0d:be:57:81:2f:ec:f5:71:77:9b:68:07:2a:42: 25:a1:9c:e7:0c:bf:b7:08:7a:5f:79:d3:c0:9b:0b:02:c8:4f: 5a:2a:8e:1f:9e:da:37:16:50:5b:e9:ed:a2:54:43:05:91:3a: c4:07:93:3e:f3:f1:ae:60:6c:f2:3e:87:00:25:b1:de:cd:a7: 0d:c4:59:12:2c:b0:56:e5:8d:af:e6:81:0d:22:5b:9d:92:3d: c5:b5:7f:4c:fc:0b:3f:39:93:71:1a:48:c3:a1:0a:34:5e:34: f0:b1:b0:8a:3a:10:c1:c8:bf:4d:69:e1:79:53:9b:75:3f:4c: 33:dc:bd:ca:13:64:6f:f0:07:c7:f3:df:68:65:59:51:de:53: 95:b1:52:d2:70:f4:c7:17:c6:3f:6c:b9:60:2a:db:96:c9:ed: 1d:24:55:1e:bf:2c:e6:a8:a1:e7:02:bd:d5:f3:a8:c1:63:40: d0:39:5e:0e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUIhA/bvbR9MJA8yTF6j617/2V27gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNDExMTIwMjU3NTRaFw0yNTExMTEwMzAyNTRaMDMxMTAvBgNV BAMTKDlGMjMzOTk4NUE5NDFFQjYwMzdDQThDMTAyNjJCMjY2RjI0MjFDQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9QiyowN6MXrr6KX9HbqSq7jTc 1XppRmkyqIacWgwVv+NiN/hyo4EvrTBZfNIGeyyQiQRbrv8WPgdj6k1yw2v0vIkf jaaWJAx+5GeMODQsriN+zhDc9EotB0Gt9kQ/m2PcQ2ZkB88GcopNodxR1NRmKj1X wnMT6IeXrxhc/Yrj1RR6DSx2wTT4lIc5/eRSjSIIaZw4eT1jk9PhLc43eS/5BFyG G+dqs0CccIuC7DE9pV73TAwomNCPclbnCpfPAk7/rDDZHheh3HgTyRIN4k6FNSga Fg24Q27HHchocZEoht+NR1hxJof/Qfy2PfcbVn3iVYT9e+j9qfblefDuSeXLAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUnyM5mFqUHrYDfKjBAmKyZvJCHK4wHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhNjEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAThAAAKMA0G CSqGSIb3DQEBCwUAA4IBAQAciWiv9Lw6ey7oDo+m/iMOgcNRSmWlyE7kf7rcjr7C IWtofD4ae3mU+EiUx0vXcg/KjixqsEpEyabtNaqGNmD1QNasvEsGZoNiGw1VDb5X gS/s9XF3m2gHKkIloZznDL+3CHpfedPAmwsCyE9aKo4fnto3FlBb6e2iVEMFkTrE B5M+8/GuYGzyPocAJbHezacNxFkSLLBW5Y2v5oENIludkj3FtX9M/As/OZNxGkjD oQo0XjTwsbCKOhDByL9NaeF5U5t1P0wz3L3KE2Rv8AfH899oZVlR3lOVsVLScPTH F8Y/bLlgKtuWye0dJFUevyzmqKHnAr3V86jBY0DQOV4O -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org