$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/323430323a653330303a3a2f33322d3438203d3e20313331373036.roa File: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (raw, json) Hash identifier: DJfrVwcLfwrZt5y5DTZ1JwrluCne37VgiVb+YiXDdDw= Subject key identifier: 2B:4A:25:CA:60:88:0C:F5:03:6C:12:0F:33:32:89:59:64:45:91:FE Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Certificate serial: 03D0BBE2FD0EC92E4910815BC3A5206146A37B9C Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/323430323a653330303a3a2f33322d3438203d3e20313331373036.roa Signing time: Mon 01 Jul 2024 01:04:02 +0000 ROA not before: Mon 01 Jul 2024 00:59:02 +0000 ROA not after: Mon 30 Jun 2025 01:04:02 +0000 asID: 131706 IP address blocks: 2402:e300::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d0:bb:e2:fd:0e:c9:2e:49:10:81:5b:c3:a5:20:61:46:a3:7b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Validity Not Before: Jul 1 00:59:02 2024 GMT Not After : Jun 30 01:04:02 2025 GMT Subject: CN=2B4A25CA60880CF5036C120F33328959644591FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7f:9c:5b:aa:02:39:7d:a1:3f:71:fe:1f:fd: 9b:e5:0a:2a:2a:d0:3a:d5:67:ec:6a:d1:ac:37:e7: 6f:43:c3:d9:dc:a8:60:be:d3:b8:8b:47:e3:ed:38: 04:26:61:bf:0a:a5:44:04:d1:a7:db:fa:28:f1:ac: c8:36:34:e5:8f:04:e8:36:c2:21:f6:49:9c:fb:c6: ed:27:0a:9b:10:94:c9:f9:5a:b9:1e:81:cf:fe:f2: 09:88:b2:14:f4:7a:57:5b:39:a6:d9:4a:3e:85:01: c9:7b:c5:8a:1d:c3:c3:7b:a7:13:a9:40:45:1d:75: 23:8a:44:e5:a6:54:f9:41:9a:5b:3a:46:19:48:8f: f9:64:04:43:f2:47:e9:a4:43:8f:ec:04:41:b9:5f: d0:19:0d:d4:62:81:c7:5f:6e:a3:ff:dc:2d:08:6c: 06:48:db:e4:ec:79:ee:f8:43:73:1f:2e:8c:e5:a0: da:1f:22:37:d2:0d:23:e9:fc:7d:2b:2a:c5:93:50: 5d:f4:c1:cc:69:1b:73:f0:49:86:53:7e:e1:e5:b4: 88:55:b6:03:4d:dd:59:49:2c:f1:31:7e:c5:04:23: 7d:ed:da:08:bf:a0:23:d5:a9:96:cc:55:dd:80:94: f2:80:65:27:ff:60:1d:9f:f7:9e:40:08:a0:86:48: b1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4A:25:CA:60:88:0C:F5:03:6C:12:0F:33:32:89:59:64:45:91:FE X509v3 Authority Key Identifier: keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/323430323a653330303a3a2f33322d3438203d3e20313331373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:e300::/32 Signature Algorithm: sha256WithRSAEncryption 93:d0:96:0b:65:fe:8d:87:63:fd:df:ea:f5:76:47:25:3f:b7: 16:da:ba:a8:41:5f:6a:1d:08:c4:b4:e5:60:87:d9:71:a8:8e: d4:e0:08:4b:8c:4f:16:6d:c9:eb:d6:a4:89:c8:1d:c6:8b:31: 56:83:44:24:f8:ae:f7:c2:78:58:5f:8d:fd:ea:53:1a:ba:a5: 32:53:9b:8b:d5:16:7b:55:98:05:38:6f:03:e1:64:b7:d3:e1: a9:e0:bc:dd:b1:46:ed:e6:fe:19:9d:d2:cc:ac:d0:7d:31:0c: 47:8c:5c:7f:cc:0c:e4:8c:13:47:86:07:e6:f0:4d:c4:28:7e: a7:c8:cf:54:04:81:28:b8:90:93:01:9e:41:58:02:66:4e:2e: af:35:b4:3b:1e:d1:34:27:74:38:da:b5:b9:98:25:b2:4d:06: ac:0b:f7:34:8e:a3:a8:f7:7c:f0:82:4d:ee:e8:a3:a4:60:76: f6:8e:15:5c:39:fd:27:0b:18:3c:5f:32:a2:e1:5c:96:bf:9d: fb:53:2e:23:d7:52:20:e6:67:2d:ef:27:c1:4d:86:69:37:ca: 36:47:07:e1:fb:14:5b:4b:1f:a8:63:84:39:c7:a5:15:bb:5b: 9a:41:c6:60:68:8d:36:2a:03:59:5a:f3:23:fe:23:7a:ab:d3: 7b:c0:e1:9a -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUA9C74v0OyS5JEIFbw6UgYUaje5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1 NjNERkU3MjAeFw0yNDA3MDEwMDU5MDJaFw0yNTA2MzAwMTA0MDJaMDMxMTAvBgNV BAMTKDJCNEEyNUNBNjA4ODBDRjUwMzZDMTIwRjMzMzI4OTU5NjQ0NTkxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVf5xbqgI5faE/cf4f/ZvlCioq 0DrVZ+xq0aw3529Dw9ncqGC+07iLR+PtOAQmYb8KpUQE0afb+ijxrMg2NOWPBOg2 wiH2SZz7xu0nCpsQlMn5Wrkegc/+8gmIshT0eldbOabZSj6FAcl7xYodw8N7pxOp QEUddSOKROWmVPlBmls6RhlIj/lkBEPyR+mkQ4/sBEG5X9AZDdRigcdfbqP/3C0I bAZI2+Tsee74Q3MfLozloNofIjfSDSPp/H0rKsWTUF30wcxpG3PwSYZTfuHltIhV tgNN3VlJLPExfsUEI33t2gi/oCPVqZbMVd2AlPKAZSf/YB2f955ACKCGSLHHAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUK0olymCIDPUDbBIPMzKJWWRFkf4wHwYDVR0j BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE RkU3Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyN2E2ZjM0LTFiNmUtNGU5Mi1i MmQyLTBiOTMwMWE2NjZhNS8wLzMyMzQzMDMyM2E2NTMzMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzMTM3MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQC4wAwDQYJKoZI hvcNAQELBQADggEBAJPQlgtl/o2HY/3f6vV2RyU/txbauqhBX2odCMS05WCH2XGo jtTgCEuMTxZtyevWpInIHcaLMVaDRCT4rvfCeFhfjf3qUxq6pTJTm4vVFntVmAU4 bwPhZLfT4angvN2xRu3m/hmd0sys0H0xDEeMXH/MDOSME0eGB+bwTcQofqfIz1QE gSi4kJMBnkFYAmZOLq81tDse0TQndDjatbmYJbJNBqwL9zSOo6j3fPCCTe7oo6Rg dvaOFVw5/ScLGDxfMqLhXJa/nftTLiPXUiDmZy3vJ8FNhmk3yjZHB+H7FFtLH6hj hDnHpRW7W5pBxmBojTYqA1la8yP+I3qr03vA4Zo= -----END CERTIFICATE-----Generated at Thu Nov 21 05:34:32 2024 by rpki-client on console-ams.rpki-client.org