$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa File: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (raw, json) Hash identifier: HrJfcQkGnzow9D0Bl2n2tIAUkeZlu+k/wsAvsBxHD24= Subject key identifier: 82:4C:8D:1D:AA:95:08:CF:02:AA:FD:F4:54:6A:B8:F8:49:DB:58:63 Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Certificate serial: 3AFF0807BEB55EE9EE52295F83FCACD82EE93D70 Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa Signing time: Tue 13 Aug 2024 01:27:35 +0000 ROA not before: Tue 13 Aug 2024 01:22:35 +0000 ROA not after: Tue 12 Aug 2025 01:27:35 +0000 asID: 136079 IP address blocks: 2405:2cc0:b::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ff:08:07:be:b5:5e:e9:ee:52:29:5f:83:fc:ac:d8:2e:e9:3d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Validity Not Before: Aug 13 01:22:35 2024 GMT Not After : Aug 12 01:27:35 2025 GMT Subject: CN=824C8D1DAA9508CF02AAFDF4546AB8F849DB5863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:a1:47:8d:5a:e6:5d:50:cc:9f:4d:25:76: 59:30:0e:d9:4c:2d:92:14:f8:df:03:32:c2:b2:f9: 1e:49:97:6b:4a:22:b8:74:5f:64:19:c0:91:d2:77: 0e:90:6f:bd:61:42:d9:be:31:d9:a7:a9:c8:ad:9d: 31:0b:c6:ca:36:d6:ef:4e:e4:52:9d:c6:5d:f2:8d: 16:b1:8c:d1:ee:e0:90:21:1c:8f:11:63:26:b1:b2: 91:dd:42:d9:37:25:46:24:0b:cc:dd:27:d1:31:5b: c5:54:69:5d:14:e6:b2:24:22:c7:a7:42:05:5d:4d: 56:6b:bb:32:47:35:8c:37:8e:bb:c4:17:e7:b1:d6: 05:17:7f:c1:3e:8c:90:67:c7:41:28:52:47:3b:a9: bb:5b:1b:4f:65:7d:4c:e1:65:8f:4b:26:b5:d7:ba: ff:8b:a4:9a:be:60:c5:ab:e6:08:d5:f8:e0:4c:d5: 7d:5c:53:a2:f0:16:55:8e:ba:18:1e:7f:70:1c:55: f3:f7:e7:f6:f0:23:e5:ae:73:a2:68:39:7b:04:9f: a8:b7:bf:29:aa:65:6a:d6:81:b9:12:d4:7f:37:92: 64:be:5c:a0:9f:31:c4:07:ff:53:76:ff:09:18:ad: 8f:87:bd:03:9c:3b:ed:71:0c:fb:1b:53:fa:9e:e0: 96:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4C:8D:1D:AA:95:08:CF:02:AA:FD:F4:54:6A:B8:F8:49:DB:58:63 X509v3 Authority Key Identifier: keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2cc0:b::/48 Signature Algorithm: sha256WithRSAEncryption 22:08:3b:00:c8:0b:a3:88:b9:65:f2:86:d5:d8:60:24:c4:1b: 55:57:0f:e0:69:48:45:f4:42:fa:5e:55:5f:0a:78:7e:77:d5: f8:2f:b5:6a:2d:1e:9b:5e:b9:32:4b:76:2e:b8:38:94:0e:27: e8:42:d5:7c:a4:a7:2a:40:14:79:c5:20:95:35:0e:a7:c5:f9: bf:69:57:12:11:2e:7d:26:62:db:4c:9d:f2:ae:a4:00:b1:15: 92:4a:49:a7:3d:0a:38:74:a4:6d:7e:e4:4a:3f:9b:c5:e7:aa: 24:3f:84:b8:ab:c3:c5:f7:45:aa:5c:1a:74:5e:da:0c:9b:0e: ce:f2:da:2c:9a:4d:79:a5:b4:c8:40:8c:b1:91:30:93:ba:1e: 7e:3d:e6:0f:d7:31:5f:36:08:fe:0e:60:3b:a0:34:28:81:5e: b0:3e:e8:3e:9e:47:5c:e7:86:10:a6:3a:7f:3d:00:2e:ea:0a: 23:56:b8:77:af:3d:f7:84:b0:73:54:25:16:48:bf:94:f6:59: 71:6f:f7:62:f6:84:6c:7b:9e:9c:bb:37:5a:34:f0:91:d2:15: 07:ab:4a:0d:5b:d6:e6:eb:fd:65:f9:82:35:de:1b:44:e2:15: d2:6b:4d:87:16:c2:5a:25:19:31:59:4a:f9:c1:31:aa:36:08: af:83:96:0c -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUOv8IB761XunuUilfg/ys2C7pPXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB NzJCNTgzNzAeFw0yNDA4MTMwMTIyMzVaFw0yNTA4MTIwMTI3MzVaMDMxMTAvBgNV BAMTKDgyNEM4RDFEQUE5NTA4Q0YwMkFBRkRGNDU0NkFCOEY4NDlEQjU4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCruKFHjVrmXVDMn00ldlkwDtlM LZIU+N8DMsKy+R5Jl2tKIrh0X2QZwJHSdw6Qb71hQtm+MdmnqcitnTELxso21u9O 5FKdxl3yjRaxjNHu4JAhHI8RYyaxspHdQtk3JUYkC8zdJ9ExW8VUaV0U5rIkIsen QgVdTVZruzJHNYw3jrvEF+ex1gUXf8E+jJBnx0EoUkc7qbtbG09lfUzhZY9LJrXX uv+LpJq+YMWr5gjV+OBM1X1cU6LwFlWOuhgef3AcVfP35/bwI+Wuc6JoOXsEn6i3 vymqZWrWgbkS1H83kmS+XKCfMcQH/1N2/wkYrY+HvQOcO+1xDPsbU/qe4JZJAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUgkyNHaqVCM8Cqv30VGq4+EnbWGMwHwYDVR0j BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC NTgzNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMyMzQzMDM1M2EzMjYzNjMzMDNhNjIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBSzAAAsw DQYJKoZIhvcNAQELBQADggEBACIIOwDIC6OIuWXyhtXYYCTEG1VXD+BpSEX0Qvpe VV8KeH531fgvtWotHpteuTJLdi64OJQOJ+hC1XykpypAFHnFIJU1DqfF+b9pVxIR Ln0mYttMnfKupACxFZJKSac9Cjh0pG1+5Eo/m8XnqiQ/hLirw8X3RapcGnRe2gyb Ds7y2iyaTXmltMhAjLGRMJO6Hn495g/XMV82CP4OYDugNCiBXrA+6D6eR1znhhCm On89AC7qCiNWuHevPfeEsHNUJRZIv5T2WXFv92L2hGx7npy7N1o08JHSFQerSg1b 1ubr/WX5gjXeG0TiFdJrTYcWwlolGTFZSvnBMao2CK+Dlgw= -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:04 2024 by rpki-client on console-fra.rpki-client.org