$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/323430363a363263303a3a2f33322d3332203d3e20313431303734.roa File: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (raw, json) Hash identifier: /Qubahg6iyutXhJp/TWUbUW351esUCIVNAyTMSK5KWU= Subject key identifier: 4C:E2:6F:54:C6:3B:23:95:0F:ED:11:F9:B4:57:74:3B:1A:74:F9:5C Certificate issuer: /CN=DE4325727D17555F6DABCC72788E361C741D47CF Certificate serial: 5C08815B6DF63515DA3974132E309881B1B5F545 Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/323430363a363263303a3a2f33322d3332203d3e20313431303734.roa Signing time: Thu 04 Apr 2024 06:00:01 +0000 ROA not before: Thu 04 Apr 2024 05:55:01 +0000 ROA not after: Thu 03 Apr 2025 06:00:01 +0000 asID: 141074 IP address blocks: 2406:62c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:08:81:5b:6d:f6:35:15:da:39:74:13:2e:30:98:81:b1:b5:f5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF Validity Not Before: Apr 4 05:55:01 2024 GMT Not After : Apr 3 06:00:01 2025 GMT Subject: CN=4CE26F54C63B23950FED11F9B457743B1A74F95C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:61:81:48:91:3a:b0:8b:21:04:67:4f:95: 34:de:7a:7c:1e:d1:ef:91:ce:a4:a4:d5:8b:c3:5a: 42:cc:bb:ee:69:9a:90:24:3b:d2:29:be:93:8b:86: fa:21:63:97:c6:eb:8f:4b:bd:c3:0e:80:55:18:4c: ca:0b:44:22:a2:f5:36:77:a6:cc:65:b4:1d:ee:18: 6a:db:c5:b8:05:94:1d:66:56:5c:aa:26:f8:a2:ad: 94:79:24:47:2f:0d:6c:f8:ee:35:45:72:ad:bc:00: 8a:e8:e9:f0:a0:18:e0:68:bc:24:b2:1a:f8:c9:99: 42:64:e3:ba:f5:31:1e:51:67:3f:ac:fb:77:6a:63: f0:b1:9a:06:1f:12:d3:13:ba:9b:3c:3d:af:cc:e7: 03:32:71:8b:3d:57:47:a8:fe:3f:ef:1f:84:c5:06: eb:b6:74:7e:68:88:1d:08:5a:87:11:0d:8f:91:74: 97:d5:63:6f:9c:78:29:d0:21:7c:a8:d6:b3:66:a1: 1c:77:6e:c3:fb:7b:44:ad:67:64:fd:58:92:34:ff: 02:cd:97:3a:4c:04:25:ab:7c:2d:a5:30:01:90:f3: c6:81:91:6e:90:fd:63:41:9d:22:24:c6:f6:f8:16: df:9a:90:6b:7e:38:96:2b:a6:d2:c7:3b:0a:d6:62: c4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E2:6F:54:C6:3B:23:95:0F:ED:11:F9:B4:57:74:3B:1A:74:F9:5C X509v3 Authority Key Identifier: keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/323430363a363263303a3a2f33322d3332203d3e20313431303734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:62c0::/32 Signature Algorithm: sha256WithRSAEncryption c8:3c:cb:cb:0b:ff:8b:5b:91:d6:c1:86:f9:4e:ec:7e:9a:a2: aa:75:b6:c5:bf:34:a5:66:94:52:83:67:16:62:8b:56:2c:bb: 5d:b3:62:f2:ef:ea:50:b8:f9:86:50:bf:a2:6b:d5:7c:a5:b2: 09:02:7d:d2:db:fb:32:27:7f:ee:1a:8d:af:84:6d:f6:c3:ea: b7:db:72:ee:8e:5c:fe:d7:c8:3b:2f:24:e7:13:94:5b:c8:55: 28:70:4e:0e:5e:d1:d9:7c:6e:75:eb:77:1b:f7:20:4e:ca:28: b5:fc:b6:53:45:b1:ba:64:8c:b0:6b:ff:24:2d:99:84:a0:09: ab:79:87:cd:c4:b9:3f:70:a5:ce:23:95:47:66:ab:5d:41:11: 60:f3:e1:44:44:32:97:5d:b3:3f:52:58:33:ef:23:0d:e8:05: 73:4c:19:ec:4a:18:e5:1f:43:4f:6c:bd:fe:70:25:49:f6:69: e5:92:9a:7f:10:08:dc:42:a9:8f:b9:88:70:4a:5e:0a:9f:b2: 77:cb:b8:90:0a:e6:97:92:e1:d2:9b:24:f7:0f:44:bb:0b:6b: a6:2f:e6:41:9f:ce:18:0e:a6:5b:a4:97:5c:5e:a7:6a:fd:71: 59:9f:3f:6e:1f:2a:e4:7c:bc:07:bf:02:c2:9c:21:1c:d9:5c: a8:7b:60:4d -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUXAiBW232NRXaOXQTLjCYgbG19UUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3 NDFENDdDRjAeFw0yNDA0MDQwNTU1MDFaFw0yNTA0MDMwNjAwMDFaMDMxMTAvBgNV BAMTKDRDRTI2RjU0QzYzQjIzOTUwRkVEMTFGOUI0NTc3NDNCMUE3NEY5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzoGGBSJE6sIshBGdPlTTeenwe 0e+RzqSk1YvDWkLMu+5pmpAkO9IpvpOLhvohY5fG649LvcMOgFUYTMoLRCKi9TZ3 psxltB3uGGrbxbgFlB1mVlyqJviirZR5JEcvDWz47jVFcq28AIro6fCgGOBovCSy GvjJmUJk47r1MR5RZz+s+3dqY/CxmgYfEtMTups8Pa/M5wMycYs9V0eo/j/vH4TF Buu2dH5oiB0IWocRDY+RdJfVY2+ceCnQIXyo1rNmoRx3bsP7e0StZ2T9WJI0/wLN lzpMBCWrfC2lMAGQ88aBkW6Q/WNBnSIkxvb4Ft+akGt+OJYrptLHOwrWYsRjAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUTOJvVMY7I5UP7RH5tFd0Oxp0+VwwHwYDVR0j BBgwFoAU3kMlcn0XVV9tq8xyeI42HHQdR88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDc2MDhjZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC9ERTQzMjU3MjdE MTc1NTVGNkRBQkNDNzI3ODhFMzYxQzc0MUQ0N0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3NDFE NDdDRi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwNzYwOGNlLWMzZjgtNDRlYi1h ZWU3LWI3ODRhZTIwYzljNy8wLzMyMzQzMDM2M2EzNjMyNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMwMzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGYsAwDQYJKoZI hvcNAQELBQADggEBAMg8y8sL/4tbkdbBhvlO7H6aoqp1tsW/NKVmlFKDZxZii1Ys u12zYvLv6lC4+YZQv6Jr1XylsgkCfdLb+zInf+4aja+EbfbD6rfbcu6OXP7XyDsv JOcTlFvIVShwTg5e0dl8bnXrdxv3IE7KKLX8tlNFsbpkjLBr/yQtmYSgCat5h83E uT9wpc4jlUdmq11BEWDz4UREMpddsz9SWDPvIw3oBXNMGexKGOUfQ09svf5wJUn2 aeWSmn8QCNxCqY+5iHBKXgqfsnfLuJAK5peS4dKbJPcPRLsLa6Yv5kGfzhgOpluk l1xep2r9cVmfP24fKuR8vAe/AsKcIRzZXKh7YE0= -----END CERTIFICATE-----Generated at Sun Nov 24 14:55:03 2024 by rpki-client on console-fra.rpki-client.org