$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa File: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (raw, json) Hash identifier: yyHJJCpTsTIZII4M/sSb+0iBfHXfVtgzcOj8qDMzZk8= Subject key identifier: F2:0C:7D:5F:71:D7:03:D5:41:A7:14:72:C9:4B:27:3E:D2:DB:4C:DE Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 3708D6BD114B55CA869B94D872A40D76DD4B7F66 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa Signing time: Wed 08 May 2024 07:00:01 +0000 ROA not before: Wed 08 May 2024 06:55:01 +0000 ROA not after: Wed 07 May 2025 07:00:01 +0000 asID: 138129 IP address blocks: 2404:4240:138::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:08:d6:bd:11:4b:55:ca:86:9b:94:d8:72:a4:0d:76:dd:4b:7f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: May 8 06:55:01 2024 GMT Not After : May 7 07:00:01 2025 GMT Subject: CN=F20C7D5F71D703D541A71472C94B273ED2DB4CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:36:16:2d:ba:be:29:2d:3d:dc:31:00:c6: 23:e3:46:7d:ab:34:a4:e9:4c:f6:66:8d:44:d0:2e: 7e:ea:85:d0:8b:d6:36:f7:4c:98:3e:e8:c8:b5:46: 41:f7:39:00:33:cb:db:d2:2a:89:73:8d:4e:b3:5a: f8:41:cb:b2:83:8f:92:b8:06:3b:20:d8:16:b2:c7: 48:c8:5a:9a:de:24:34:c2:95:4b:1d:26:93:63:f9: de:8b:ed:e7:07:34:b4:67:9e:99:51:85:9e:71:ac: 44:8a:eb:25:e2:ae:b3:1a:f3:24:77:73:36:99:dc: 51:73:1f:94:04:62:85:9d:49:8c:d7:b4:49:9c:e0: 72:e1:1a:4a:93:e3:50:18:e6:52:be:94:b4:95:5f: a1:43:08:eb:9b:02:0c:89:01:fe:b3:cc:58:fa:e5: d3:0a:00:e3:34:62:51:db:f6:28:dc:1f:73:9e:b7: 53:a2:10:6c:84:45:7b:61:aa:ff:d7:3b:f9:5f:81: 64:19:a9:8f:ad:86:39:e1:23:a8:02:fd:37:10:7f: 81:ba:5d:20:14:05:ef:0a:89:6d:6c:6a:04:67:6d: e2:d8:fa:9d:db:5e:e9:7d:59:9e:db:fd:2a:db:3d: 65:c4:e2:6d:b3:5f:64:71:a9:d8:38:d0:4f:04:96: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0C:7D:5F:71:D7:03:D5:41:A7:14:72:C9:4B:27:3E:D2:DB:4C:DE X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:4240:138::/48 Signature Algorithm: sha256WithRSAEncryption ae:c3:f8:a8:fc:90:a0:8a:c7:48:42:0a:8d:72:10:99:1c:a1: 29:f6:9b:30:96:10:db:f5:28:ca:07:44:1c:e4:15:00:41:20: 5e:ac:98:87:80:56:60:55:4f:8e:e6:5b:e7:c5:0e:19:16:e4: d1:80:9f:7c:60:ac:d3:a2:9e:e0:54:bb:29:5c:4a:bc:85:eb: 5e:7d:ac:17:96:90:f0:02:52:d0:13:66:58:45:89:11:3a:45: 28:98:b9:c7:2d:f6:44:00:60:eb:b1:3d:87:69:c3:e0:67:08: 6b:b5:69:39:86:f2:6f:9e:bb:97:9f:b9:0c:89:bf:e0:14:07: 51:19:02:b4:93:fa:d9:6d:e7:2e:48:54:08:2f:86:ea:7c:95: 9a:61:dd:28:78:4b:45:c9:05:5d:d2:8d:bb:dc:fc:dc:5b:0b: 7d:51:13:5b:4a:76:b4:5d:74:5a:1c:06:db:12:36:e7:72:5b: 8a:ed:fc:42:87:c5:f7:54:0f:d1:45:21:0f:dd:ac:a6:45:52: 8f:f4:0f:a0:1c:44:b7:df:43:3f:d4:0c:43:54:17:22:0a:41: 50:35:71:ce:1b:16:c3:dc:17:d7:22:2a:a0:37:49:77:29:fe: af:e3:7c:61:66:4b:1b:64:e9:79:4d:1e:47:a1:b7:1d:b7:09: 0c:2b:89:8a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNwjWvRFLVcqGm5TYcqQNdt1Lf2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNDA1MDgwNjU1MDFaFw0yNTA1MDcwNzAwMDFaMDMxMTAvBgNV BAMTKEYyMEM3RDVGNzFENzAzRDU0MUE3MTQ3MkM5NEIyNzNFRDJEQjRDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHijYWLbq+KS093DEAxiPjRn2r NKTpTPZmjUTQLn7qhdCL1jb3TJg+6Mi1RkH3OQAzy9vSKolzjU6zWvhBy7KDj5K4 Bjsg2Bayx0jIWpreJDTClUsdJpNj+d6L7ecHNLRnnplRhZ5xrESK6yXirrMa8yR3 czaZ3FFzH5QEYoWdSYzXtEmc4HLhGkqT41AY5lK+lLSVX6FDCOubAgyJAf6zzFj6 5dMKAOM0YlHb9ijcH3Oet1OiEGyERXthqv/XO/lfgWQZqY+thjnhI6gC/TcQf4G6 XSAUBe8KiW1sagRnbeLY+p3bXul9WZ7b/SrbPWXE4m2zX2Rxqdg40E8ElhQhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU8gx9X3HXA9VBpxRyyUsnPtLbTN4wHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0OWM4NjgwLWJkMGYtNGE0Zi05 OTZkLTIxMDJhMDUzNTM3NC8wLzMyMzQzMDM0M2EzNDMyMzQzMDNhMzEzMzM4M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM4MzEzMjM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJARC QAE4MA0GCSqGSIb3DQEBCwUAA4IBAQCuw/io/JCgisdIQgqNchCZHKEp9pswlhDb 9SjKB0Qc5BUAQSBerJiHgFZgVU+O5lvnxQ4ZFuTRgJ98YKzTop7gVLspXEq8hete fawXlpDwAlLQE2ZYRYkROkUomLnHLfZEAGDrsT2HacPgZwhrtWk5hvJvnruXn7kM ib/gFAdRGQK0k/rZbecuSFQIL4bqfJWaYd0oeEtFyQVd0o273PzcWwt9URNbSna0 XXRaHAbbEjbncluK7fxCh8X3VA/RRSEP3aymRVKP9A+gHES330M/1AxDVBciCkFQ NXHOGxbD3BfXIiqgN0l3Kf6v43xhZksbZOl5TR5HobcdtwkMK4mK -----END CERTIFICATE-----Generated at Sat Jun 22 10:10:56 2024 by rpki-client on console-fra.rpki-client.org