$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa File: 323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa (raw, json) Hash identifier: pVT467D3RnfPY23ZIjQJ3r02v4v4HpUwXoY9p6KOI4E= Subject key identifier: 44:85:25:E3:E6:0D:03:73:66:8F:E1:6F:30:DE:32:06:11:C3:D8:C6 Certificate issuer: /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Certificate serial: 74376990D35074BBDF32875B4CC8B359BB99C0B8 Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa Signing time: Thu 12 Sep 2024 06:06:42 +0000 ROA not before: Thu 12 Sep 2024 06:01:42 +0000 ROA not after: Thu 11 Sep 2025 06:06:42 +0000 asID: 63862 IP address blocks: 2401:f980:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:37:69:90:d3:50:74:bb:df:32:87:5b:4c:c8:b3:59:bb:99:c0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Validity Not Before: Sep 12 06:01:42 2024 GMT Not After : Sep 11 06:06:42 2025 GMT Subject: CN=448525E3E60D0373668FE16F30DE320611C3D8C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5a:d8:be:48:d6:5b:52:6a:a7:84:c0:70:ff: 4b:94:e0:1c:ce:2b:2b:0f:4c:40:46:d6:e0:be:f6: d5:e6:bc:1c:4d:98:13:4a:82:ba:91:a7:98:4f:08: 9b:86:41:b1:91:2e:23:6c:f5:69:0e:60:5a:f9:ca: f9:e2:12:0e:44:72:d6:e9:c3:1a:92:20:83:d0:f1: eb:cb:49:13:4c:e8:06:17:d1:92:ad:ce:af:b7:55: 2b:f4:48:74:88:b9:24:30:73:3e:67:c5:9d:7e:2a: 78:4b:7e:0e:54:d4:da:99:c1:1e:08:e7:e7:f7:06: 95:a1:d6:c2:af:6c:3d:71:e9:dd:2d:af:b6:f9:6f: 01:8a:0b:55:9f:bf:3a:47:16:66:bd:45:37:82:ed: 1e:73:35:17:57:85:c9:9d:aa:bc:34:da:e0:92:a4: 6b:6f:20:10:65:9e:47:fc:39:1c:a2:70:23:45:72: cd:dc:79:c6:c5:a3:31:7a:b9:15:2b:25:62:8c:23: c4:a5:a4:a2:c1:8b:1b:5d:c0:c8:19:91:c4:7a:7d: 7c:b9:f4:7c:d2:2f:18:a8:ea:6a:9f:b7:70:80:bb: 4a:ac:a7:a5:b4:b5:7a:2a:5b:be:b1:91:e9:51:41: 99:b4:ca:06:54:03:34:dd:9f:d2:52:66:d6:99:98: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:85:25:E3:E6:0D:03:73:66:8F:E1:6F:30:DE:32:06:11:C3:D8:C6 X509v3 Authority Key Identifier: keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:f980:d000::/36 Signature Algorithm: sha256WithRSAEncryption 31:67:9b:3d:38:39:2b:c1:aa:11:c9:d9:5d:ce:90:cc:d5:41: 4b:7e:60:c1:40:74:27:9a:06:06:b2:db:3d:ff:c1:16:0f:da: ca:28:91:24:34:f2:64:25:c9:70:85:1c:17:15:f0:27:c8:ec: 1c:f1:78:f6:bf:d1:ab:4d:76:12:bc:ba:96:1e:56:60:2d:8a: 27:29:ba:dc:ac:0e:74:25:54:2c:c6:4a:d2:80:7e:f8:53:81: 80:6a:10:f3:d5:cb:e0:d4:4d:52:74:14:18:01:b7:d4:a8:a1: 28:95:94:c6:ab:9f:8f:82:24:bc:cd:62:27:e4:46:40:68:58: 24:8b:02:4a:0d:e9:60:0a:2d:1f:6e:4c:ce:c3:0b:35:ab:31: a2:b2:a5:41:5c:05:f3:a4:8e:c6:ac:45:3d:c8:93:1d:21:83: 76:a5:fa:f4:48:8e:84:0b:ef:94:57:5c:60:d5:a9:95:89:97: 6f:58:c2:24:a7:e6:09:a3:76:11:d3:fe:c6:4f:7d:32:4e:2d: f0:e9:f3:4f:77:fc:43:34:47:7d:05:d6:fc:e9:bc:c2:40:6b: 0b:12:6c:c3:17:58:42:4c:75:1d:af:f0:c7:c5:df:1e:2f:51: 7f:c1:d8:58:8e:d8:f8:68:fb:63:37:5e:5c:5e:1d:71:56:12: 46:cf:47:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDdpkNNQdLvfModbTMizWbuZwLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFF MDFENjBDOTAeFw0yNDA5MTIwNjAxNDJaFw0yNTA5MTEwNjA2NDJaMDMxMTAvBgNV BAMTKDQ0ODUyNUUzRTYwRDAzNzM2NjhGRTE2RjMwREUzMjA2MTFDM0Q4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYWti+SNZbUmqnhMBw/0uU4BzO KysPTEBG1uC+9tXmvBxNmBNKgrqRp5hPCJuGQbGRLiNs9WkOYFr5yvniEg5Ectbp wxqSIIPQ8evLSRNM6AYX0ZKtzq+3VSv0SHSIuSQwcz5nxZ1+KnhLfg5U1NqZwR4I 5+f3BpWh1sKvbD1x6d0tr7b5bwGKC1WfvzpHFma9RTeC7R5zNRdXhcmdqrw02uCS pGtvIBBlnkf8ORyicCNFcs3cecbFozF6uRUrJWKMI8SlpKLBixtdwMgZkcR6fXy5 9HzSLxio6mqft3CAu0qsp6W0tXoqW76xkelRQZm0ygZUAzTdn9JSZtaZmPpNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURIUl4+YNA3Nmj+FvMN4yBhHD2MYwHwYDVR0j BBgwFoAUdksj62xj/8qjBfN9vpuQSuAdYMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMC83NjRCMjNFQjZD NjNGRkNBQTMwNUYzN0RCRTlCOTA0QUUwMUQ2MEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFFMDFE NjBDOS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04 ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhNjQzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMzMzgzNjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAH5 gNAwDQYJKoZIhvcNAQELBQADggEBADFnmz04OSvBqhHJ2V3OkMzVQUt+YMFAdCea Bgay2z3/wRYP2sookSQ08mQlyXCFHBcV8CfI7BzxePa/0atNdhK8upYeVmAtiicp utysDnQlVCzGStKAfvhTgYBqEPPVy+DUTVJ0FBgBt9SooSiVlMarn4+CJLzNYifk RkBoWCSLAkoN6WAKLR9uTM7DCzWrMaKypUFcBfOkjsasRT3Ikx0hg3al+vRIjoQL 75RXXGDVqZWJl29YwiSn5gmjdhHT/sZPfTJOLfDp8093/EM0R30F1vzpvMJAawsS bMMXWEJMdR2v8MfF3x4vUX/B2FiO2Pho+2M3XlxeHXFWEkbPR3s= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org