$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f33322d3332203d3e20313336303739.roa File: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (raw, json) Hash identifier: KlXGN9NpwbrgMJftnwFd4i8j5PruwL1rpv1YqPauX1s= Subject key identifier: 49:A3:23:52:F8:65:4C:F7:4B:F5:F0:70:41:2E:72:BA:EA:F3:2B:47 Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Certificate serial: 16176F040D65E0487C2426AEF88D62A1BEABA430 Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f33322d3332203d3e20313336303739.roa Signing time: Tue 13 Aug 2024 01:22:20 +0000 ROA not before: Tue 13 Aug 2024 01:17:20 +0000 ROA not after: Tue 12 Aug 2025 01:22:20 +0000 asID: 136079 IP address blocks: 2405:2cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:17:6f:04:0d:65:e0:48:7c:24:26:ae:f8:8d:62:a1:be:ab:a4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Validity Not Before: Aug 13 01:17:20 2024 GMT Not After : Aug 12 01:22:20 2025 GMT Subject: CN=49A32352F8654CF74BF5F070412E72BAEAF32B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:bd:d4:8c:89:15:78:36:28:89:a8:81:9f: c7:3e:f4:62:dd:7a:cb:40:02:51:97:3d:b8:30:2e: 42:31:fd:e0:cd:7e:5b:fc:4d:fe:13:e2:d5:06:0a: 3f:26:6a:2a:b0:b7:2f:3e:1f:55:f6:e2:9a:1d:9d: 9e:0c:77:a0:81:86:c9:d0:25:0c:1c:9e:cb:43:a0: a6:26:04:65:1f:1f:87:58:3c:5b:a5:26:19:ff:92: ee:8a:49:d0:cf:df:c8:af:c0:05:e4:65:45:82:60: 1b:1b:ad:bf:2a:d5:0f:d5:1c:c7:25:38:6b:2b:b3: af:a7:4f:03:db:5e:2a:73:e5:2a:11:db:c8:f1:7d: 27:dc:4b:85:5d:b3:ae:74:5d:3e:bf:9c:9e:e2:7a: 4f:88:74:0f:53:da:c8:8f:ce:ab:77:f8:3f:86:e8: 90:c1:44:51:f0:e4:49:f3:dd:3b:25:5a:8b:d8:4c: f8:50:f2:a3:c6:49:b8:ac:dd:9b:78:25:b1:4c:4a: 5f:28:e7:d1:f9:1e:d5:f4:38:48:bb:c7:82:0f:40: 19:b5:6a:57:08:af:e7:a5:72:10:70:e7:38:15:1a: f2:86:9e:29:71:f9:4c:ae:16:7f:53:6b:a4:5e:4e: ea:4f:86:79:f2:0d:e1:c0:3c:7b:b4:fc:4b:1d:07: 77:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A3:23:52:F8:65:4C:F7:4B:F5:F0:70:41:2E:72:BA:EA:F3:2B:47 X509v3 Authority Key Identifier: keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f33322d3332203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2cc0::/32 Signature Algorithm: sha256WithRSAEncryption a9:a7:96:e0:46:78:26:7b:6b:68:6a:f3:02:5b:19:a0:9a:d2: 2e:f3:89:74:ba:96:2a:d2:35:cd:8e:fe:10:82:30:46:b8:2e: 05:06:c0:9c:e4:6b:e0:3f:cb:54:3b:1a:75:14:9b:e0:1b:4e: a7:78:f9:37:79:25:a0:b6:1e:f4:8a:95:ec:3d:be:b7:b4:4d: cd:27:47:87:8b:ed:17:70:f7:98:48:05:e2:27:87:05:ab:ac: 3d:0b:99:9b:84:cd:90:87:a6:b7:c7:c6:83:3b:5d:44:89:5a: d4:62:bf:fa:6f:f0:56:4e:d2:32:a2:bc:ca:8b:75:e3:46:9a: ba:1f:da:c9:bf:ce:6e:34:aa:42:ad:c9:25:24:fd:71:40:8f: 60:9f:b5:41:f2:c6:45:30:56:8d:e5:43:bf:43:de:bd:bc:c7: 78:93:c6:de:68:9a:83:b3:29:76:31:1c:72:b2:3e:3b:d6:ff: 6e:d5:f3:e5:16:0c:a5:c5:5c:7e:2e:5b:64:b3:ba:f5:f1:fb: f1:af:3d:90:e6:52:d5:43:8f:2c:99:04:cc:8d:ff:aa:f6:05: eb:1e:7e:92:6b:70:5d:a3:1a:73:34:a1:84:c3:37:f6:2a:01: 04:ef:4e:44:09:30:03:fc:97:f5:e4:2a:b1:65:85:08:da:32: b2:83:45:45 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUFhdvBA1l4Eh8JCau+I1iob6rpDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB NzJCNTgzNzAeFw0yNDA4MTMwMTE3MjBaFw0yNTA4MTIwMTIyMjBaMDMxMTAvBgNV BAMTKDQ5QTMyMzUyRjg2NTRDRjc0QkY1RjA3MDQxMkU3MkJBRUFGMzJCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHb3UjIkVeDYoiaiBn8c+9GLd estAAlGXPbgwLkIx/eDNflv8Tf4T4tUGCj8maiqwty8+H1X24podnZ4Md6CBhsnQ JQwcnstDoKYmBGUfH4dYPFulJhn/ku6KSdDP38ivwAXkZUWCYBsbrb8q1Q/VHMcl OGsrs6+nTwPbXipz5SoR28jxfSfcS4Vds650XT6/nJ7iek+IdA9T2siPzqt3+D+G 6JDBRFHw5Enz3TslWovYTPhQ8qPGSbis3Zt4JbFMSl8o59H5HtX0OEi7x4IPQBm1 alcIr+elchBw5zgVGvKGnilx+UyuFn9Ta6ReTupPhnnyDeHAPHu0/EsdB3crAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUSaMjUvhlTPdL9fBwQS5yuurzK0cwHwYDVR0j BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC NTgzNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMyMzQzMDM1M2EzMjYzNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNjMwMzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFLMAwDQYJKoZI hvcNAQELBQADggEBAKmnluBGeCZ7a2hq8wJbGaCa0i7ziXS6lirSNc2O/hCCMEa4 LgUGwJzka+A/y1Q7GnUUm+AbTqd4+Td5JaC2HvSKlew9vre0Tc0nR4eL7Rdw95hI BeInhwWrrD0LmZuEzZCHprfHxoM7XUSJWtRiv/pv8FZO0jKivMqLdeNGmrof2sm/ zm40qkKtySUk/XFAj2CftUHyxkUwVo3lQ79D3r28x3iTxt5omoOzKXYxHHKyPjvW /27V8+UWDKXFXH4uW2SzuvXx+/GvPZDmUtVDjyyZBMyN/6r2BesefpJrcF2jGnM0 oYTDN/YqAQTvTkQJMAP8l/XkKrFlhQjaMrKDRUU= -----END CERTIFICATE-----Generated at Fri Nov 22 09:38:56 2024 by rpki-client on console-ams.rpki-client.org