$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/323430343a343234303a3a2f33322d3438203d3e20313338313239.roa File: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (raw, json) Hash identifier: Yj1/wL0BAxS3q3iM9OombriUYpF1pHcIqfDe3LYgcGA= Subject key identifier: AE:A3:50:3B:57:8E:35:03:1E:4C:33:6F:65:43:9E:DB:10:E4:26:2D Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 7A7BCB90062B2D2772A7D7439EF82976AC91DAD9 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/323430343a343234303a3a2f33322d3438203d3e20313338313239.roa Signing time: Wed 27 Sep 2023 06:00:01 +0000 ROA not before: Wed 27 Sep 2023 05:55:01 +0000 ROA not after: Wed 25 Sep 2024 06:00:01 +0000 asID: 138129 IP address blocks: 2404:4240::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:7b:cb:90:06:2b:2d:27:72:a7:d7:43:9e:f8:29:76:ac:91:da:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Sep 27 05:55:01 2023 GMT Not After : Sep 25 06:00:01 2024 GMT Subject: CN=AEA3503B578E35031E4C336F65439EDB10E4262D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0f:54:a8:84:ef:61:81:d8:ea:4d:b5:96:51: 0c:55:6e:1e:81:fb:26:6d:2b:d7:9c:49:fa:be:55: 47:65:f5:b0:2e:22:17:1d:b1:5d:b4:30:61:15:13: 0c:78:07:d5:73:78:dd:e4:eb:03:03:69:5c:db:21: 28:3b:f0:03:46:3e:33:bb:a7:cc:7c:77:4f:6f:12: c2:7b:05:2c:68:ac:df:10:21:d6:77:b7:cc:5a:24: 40:aa:91:ca:a9:1e:fd:a4:ff:9a:30:7d:13:96:b5: 2b:23:45:3a:81:cd:df:ed:00:59:b1:b0:fc:1b:c1: ae:52:38:db:44:c0:5b:cd:6f:88:83:2a:9f:ec:8f: 8c:cf:b4:98:68:80:aa:95:e0:8e:ee:0f:07:3a:44: 50:f4:1e:2f:50:8c:37:38:ca:9b:86:2c:6f:e1:f6: b3:90:b0:23:e7:55:8e:06:a0:0c:08:d6:0a:1a:7f: 46:3a:c0:a9:20:66:2f:20:78:10:5f:35:86:5a:7e: 35:c4:ca:9a:fe:b2:b2:b0:af:59:b6:40:36:4e:58: c4:00:0c:93:af:7d:79:51:fd:26:a0:a6:83:03:5e: a7:cf:9a:da:b6:a1:95:25:ed:69:1a:c1:da:9d:7a: 3a:f5:49:26:55:7a:3f:d7:58:e9:51:7a:e7:a2:5d: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A3:50:3B:57:8E:35:03:1E:4C:33:6F:65:43:9E:DB:10:E4:26:2D X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/323430343a343234303a3a2f33322d3438203d3e20313338313239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:4240::/32 Signature Algorithm: sha256WithRSAEncryption 27:93:5d:78:c8:97:f0:14:c8:33:76:9b:19:29:d4:75:10:d2: c4:5a:3c:7b:8b:7b:ac:5b:00:e7:75:7a:02:40:30:ad:f5:98: 84:d1:e2:40:3d:0d:e7:c8:27:0c:9a:9e:60:b7:a1:6d:59:e9: d5:c8:f4:55:25:9c:fe:9b:6b:9a:2d:7f:a8:ab:0e:0c:c4:4e: 6f:04:5c:0d:99:67:f0:51:dd:62:78:0f:b9:14:6f:02:3b:85: 3f:1f:cd:c9:38:b0:20:a1:61:67:b6:6e:b4:e3:91:59:e0:23: 75:fd:a1:7a:77:f7:d3:62:45:79:81:f9:f4:67:d1:6d:17:8a: 59:e5:39:aa:18:1f:06:e7:25:a0:9e:00:12:f2:df:e8:16:28: a6:b2:7a:4f:50:d4:f0:af:71:6f:0e:f5:fb:25:45:08:cf:36: d3:53:e0:1d:89:2a:44:b6:b3:93:e4:ab:22:a4:e5:97:9f:f7: c1:88:80:91:c3:46:42:30:ae:74:2d:c5:ca:24:c9:18:4a:e1: db:a0:47:45:80:c6:12:21:98:bb:f9:ef:c5:a8:9c:ea:b4:3c: bc:c3:1d:4e:51:b0:2c:99:19:4b:d5:81:55:c7:e7:81:db:73: 94:a8:ca:69:f1:b0:8e:15:90:4f:94:0b:37:1b:b4:be:09:98: d6:5e:06:98 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUenvLkAYrLSdyp9dDnvgpdqyR2tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yMzA5MjcwNTU1MDFaFw0yNDA5MjUwNjAwMDFaMDMxMTAvBgNV BAMTKEFFQTM1MDNCNTc4RTM1MDMxRTRDMzM2RjY1NDM5RURCMTBFNDI2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcD1SohO9hgdjqTbWWUQxVbh6B +yZtK9ecSfq+VUdl9bAuIhcdsV20MGEVEwx4B9VzeN3k6wMDaVzbISg78ANGPjO7 p8x8d09vEsJ7BSxorN8QIdZ3t8xaJECqkcqpHv2k/5owfROWtSsjRTqBzd/tAFmx sPwbwa5SONtEwFvNb4iDKp/sj4zPtJhogKqV4I7uDwc6RFD0Hi9QjDc4ypuGLG/h 9rOQsCPnVY4GoAwI1goaf0Y6wKkgZi8geBBfNYZafjXEypr+srKwr1m2QDZOWMQA DJOvfXlR/SagpoMDXqfPmtq2oZUl7Wkawdqdejr1SSZVej/XWOlReueiXfhrAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUrqNQO1eONQMeTDNvZUOe2xDkJi0wHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0OWM4NjgwLWJkMGYtNGE0Zi05 OTZkLTIxMDJhMDUzNTM3NC8wLzMyMzQzMDM0M2EzNDMyMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzODMxMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEQkAwDQYJKoZI hvcNAQELBQADggEBACeTXXjIl/AUyDN2mxkp1HUQ0sRaPHuLe6xbAOd1egJAMK31 mITR4kA9DefIJwyanmC3oW1Z6dXI9FUlnP6ba5otf6irDgzETm8EXA2ZZ/BR3WJ4 D7kUbwI7hT8fzck4sCChYWe2brTjkVngI3X9oXp399NiRXmB+fRn0W0XilnlOaoY HwbnJaCeABLy3+gWKKayek9Q1PCvcW8O9fslRQjPNtNT4B2JKkS2s5PkqyKk5Zef 98GIgJHDRkIwrnQtxcokyRhK4dugR0WAxhIhmLv578WonOq0PLzDHU5RsCyZGUvV gVXH54Hbc5SoymnxsI4VkE+UCzcbtL4JmNZeBpg= -----END CERTIFICATE-----Generated at Sat Jun 22 10:10:56 2024 by rpki-client on console-fra.rpki-client.org