$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a333030303a3a2f33362d3336203d3e203633383632.roa File: 323430313a663938303a333030303a3a2f33362d3336203d3e203633383632.roa (raw, json) Hash identifier: oU86M4jYupEUNCn3EJmbjr9L65/J7TqFLLV0spYyHFY= Subject key identifier: 9A:E8:17:9D:32:8D:99:11:4D:E9:83:BD:25:E1:00:7E:20:7F:71:51 Certificate issuer: /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Certificate serial: 7C3AAC374526BDD51D6C5016C479A07545EAB290 Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a333030303a3a2f33362d3336203d3e203633383632.roa Signing time: Thu 12 Sep 2024 05:17:24 +0000 ROA not before: Thu 12 Sep 2024 05:12:24 +0000 ROA not after: Thu 11 Sep 2025 05:17:24 +0000 asID: 63862 IP address blocks: 2401:f980:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3a:ac:37:45:26:bd:d5:1d:6c:50:16:c4:79:a0:75:45:ea:b2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Validity Not Before: Sep 12 05:12:24 2024 GMT Not After : Sep 11 05:17:24 2025 GMT Subject: CN=9AE8179D328D99114DE983BD25E1007E207F7151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:01:f5:3a:f4:49:f5:e2:0d:33:e4:f1:ee: a1:da:b5:24:c2:fb:ee:13:ee:11:bb:7a:1a:e7:34: 6d:40:a6:c0:0b:7d:32:38:fe:fd:96:7b:1e:52:3c: 66:70:e4:05:bc:04:61:98:1b:ad:f7:7c:02:ae:dc: c1:2e:04:ec:a5:65:f6:5f:ee:33:07:db:7a:be:20: 4f:58:71:e1:16:45:b7:10:c2:44:66:bd:54:87:34: e8:92:7d:72:4a:60:eb:f3:9c:fb:de:c5:69:8b:8b: fe:c9:1a:44:84:dd:82:08:fc:dd:ca:f8:5e:cc:78: 2f:83:96:26:ab:98:43:65:68:83:c9:8f:75:58:fe: 1d:73:c5:0c:ff:0f:66:7c:0d:4b:f6:76:e9:0f:b4: 96:5d:46:d5:dd:0f:88:ed:ad:23:38:56:b7:69:99: 1a:90:93:58:0b:77:0a:3e:24:4e:b7:1c:5f:9e:9f: a3:11:9b:d9:88:8e:83:60:f5:10:f4:08:8a:06:9d: e1:1b:3f:4e:55:44:3f:28:5f:b7:c8:05:cb:64:3b: af:79:f1:a0:ee:64:86:6e:a2:a3:4d:32:ee:e3:53: 7d:73:5d:08:18:df:f1:15:8f:f8:87:23:23:ab:b1: 29:71:6c:3c:d2:b8:a1:7f:34:c4:ca:b2:ec:f9:ae: 7a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E8:17:9D:32:8D:99:11:4D:E9:83:BD:25:E1:00:7E:20:7F:71:51 X509v3 Authority Key Identifier: keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a333030303a3a2f33362d3336203d3e203633383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:f980:3000::/36 Signature Algorithm: sha256WithRSAEncryption 77:8f:73:c1:bf:8e:1b:da:ce:5e:61:80:66:7c:8d:2d:95:b3: 35:3b:d2:c8:f3:ea:c6:fc:cd:3a:b1:23:fb:83:ca:50:ef:81: 5a:c2:4a:b3:d3:ff:84:81:8f:4d:56:79:ba:9b:50:54:40:f0: 34:85:39:fc:f1:e4:22:5f:bc:3c:54:f3:d0:38:76:fc:c9:db: 33:58:cf:90:5a:96:f1:3d:0d:04:e0:59:36:c7:12:5d:77:58: 3a:8c:13:e5:71:61:ba:87:34:ee:c1:6f:c8:e7:61:00:7c:59: c8:66:39:42:76:7f:ca:8d:1a:b2:ab:b8:ef:93:c1:6a:d1:00: 41:d6:4b:82:5e:b4:69:dd:0f:e2:00:b7:71:c9:40:41:39:8d: 6b:4d:b6:56:96:41:4d:50:2f:cf:bd:74:88:06:79:65:1b:56: 37:35:81:56:be:03:33:7a:cf:ab:a7:76:cd:fd:ed:2a:30:5d: aa:72:35:da:1f:d8:ea:cb:b2:ba:4e:9f:ec:a7:73:60:76:a6: ec:0b:6e:cf:c7:c2:fb:10:f2:1a:5f:1d:45:7b:7f:41:2f:a4: 13:73:ad:43:57:8b:09:b4:1a:0c:74:a5:11:a5:a1:cc:90:1b: 63:96:47:cd:c9:e0:e4:cb:58:da:d4:2a:26:5f:64:10:e1:cb: c5:77:e6:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDqsN0UmvdUdbFAWxHmgdUXqspAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFF MDFENjBDOTAeFw0yNDA5MTIwNTEyMjRaFw0yNTA5MTEwNTE3MjRaMDMxMTAvBgNV BAMTKDlBRTgxNzlEMzI4RDk5MTE0REU5ODNCRDI1RTEwMDdFMjA3RjcxNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+VgH1OvRJ9eINM+Tx7qHatSTC ++4T7hG7ehrnNG1ApsALfTI4/v2Wex5SPGZw5AW8BGGYG633fAKu3MEuBOylZfZf 7jMH23q+IE9YceEWRbcQwkRmvVSHNOiSfXJKYOvznPvexWmLi/7JGkSE3YII/N3K +F7MeC+DliarmENlaIPJj3VY/h1zxQz/D2Z8DUv2dukPtJZdRtXdD4jtrSM4Vrdp mRqQk1gLdwo+JE63HF+en6MRm9mIjoNg9RD0CIoGneEbP05VRD8oX7fIBctkO695 8aDuZIZuoqNNMu7jU31zXQgY3/EVj/iHIyOrsSlxbDzSuKF/NMTKsuz5rnphAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmugXnTKNmRFN6YO9JeEAfiB/cVEwHwYDVR0j BBgwFoAUdksj62xj/8qjBfN9vpuQSuAdYMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMC83NjRCMjNFQjZD NjNGRkNBQTMwNUYzN0RCRTlCOTA0QUUwMUQ2MEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFFMDFE NjBDOS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04 ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhMzMzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMzMzgzNjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAH5 gDAwDQYJKoZIhvcNAQELBQADggEBAHePc8G/jhvazl5hgGZ8jS2VszU70sjz6sb8 zTqxI/uDylDvgVrCSrPT/4SBj01WebqbUFRA8DSFOfzx5CJfvDxU89A4dvzJ2zNY z5BalvE9DQTgWTbHEl13WDqME+VxYbqHNO7Bb8jnYQB8WchmOUJ2f8qNGrKruO+T wWrRAEHWS4JetGndD+IAt3HJQEE5jWtNtlaWQU1QL8+9dIgGeWUbVjc1gVa+AzN6 z6unds397SowXapyNdof2OrLsrpOn+ync2B2puwLbs/HwvsQ8hpfHUV7f0EvpBNz rUNXiwm0Ggx0pRGlocyQG2OWR83J4OTLWNrUKiZfZBDhy8V35h0= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org