$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa File: 323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa (raw, json) Hash identifier: eX385K3QZ3ZqWSwzuFmMWYOpE3RE0UrYyTgUK2GFRBE= Subject key identifier: 08:18:98:11:12:8B:DD:05:1A:64:86:5B:4E:2D:84:39:0A:60:A5:BA Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9 Certificate serial: 60EB14F0FD71CBA862FEA68F0C0BBFFFA370315C Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa Signing time: Sun 28 Jan 2024 08:00:00 +0000 ROA not before: Sun 28 Jan 2024 07:55:00 +0000 ROA not after: Sun 26 Jan 2025 08:00:00 +0000 asID: 139972 IP address blocks: 2405:c440:7::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:eb:14:f0:fd:71:cb:a8:62:fe:a6:8f:0c:0b:bf:ff:a3:70:31:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9 Validity Not Before: Jan 28 07:55:00 2024 GMT Not After : Jan 26 08:00:00 2025 GMT Subject: CN=08189811128BDD051A64865B4E2D84390A60A5BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:0e:03:1b:71:70:b9:11:45:ee:8c:41:a7: b9:49:26:c5:b2:63:a5:b0:c7:60:7d:57:08:8f:60: 26:b8:10:4c:00:c5:bc:17:a2:54:c9:e2:5f:62:81: 3b:ed:5a:86:96:6d:b4:71:c4:1e:68:2e:45:30:41: 6f:0d:b2:a8:68:d5:66:96:f4:da:1a:20:b0:96:5c: d5:24:79:96:a7:a9:73:9a:b2:db:bb:56:0c:05:75: e7:00:49:6d:8f:b2:7a:0e:cd:1b:86:f4:ad:d8:f3: 6e:c5:8e:42:78:94:08:1b:da:40:71:3e:a6:16:ff: a6:06:12:de:5f:3d:2e:39:89:d2:b2:db:a8:4e:3e: 48:33:8f:98:f0:f3:24:60:d1:1a:7e:01:fa:01:0a: df:49:59:b3:92:61:d7:7e:0a:5d:8c:07:73:85:71: 33:a1:8c:ea:f5:d2:68:79:d5:0a:2f:7e:92:40:47: e2:b2:93:75:f2:03:b9:4e:06:92:06:f8:96:27:54: d7:eb:91:1a:84:08:9e:e5:53:70:cb:26:e7:bd:db: ec:86:f6:77:9c:9a:41:6d:06:af:b0:10:ac:2d:cb: b8:d7:c9:87:bd:f5:59:d1:47:b8:6e:17:47:10:48: 92:fa:05:38:97:75:ae:d4:5a:7c:2d:7b:70:33:f1: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:18:98:11:12:8B:DD:05:1A:64:86:5B:4E:2D:84:39:0A:60:A5:BA X509v3 Authority Key Identifier: keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c440:7::/48 Signature Algorithm: sha256WithRSAEncryption 77:73:e2:63:e7:d8:df:60:e2:35:99:18:f9:96:15:93:9f:ea: be:59:1b:b0:6e:5a:96:84:44:da:07:73:5c:06:c4:b0:1e:7a: 88:7c:e3:b5:8b:fc:9b:8d:4d:c3:33:8e:f3:40:51:da:da:11: 49:7e:9c:75:ec:69:c6:62:85:39:3f:c7:cd:2c:b2:7b:3e:84: df:56:b0:33:a5:ec:c9:b6:9b:23:fe:35:37:e9:98:b7:f4:36: 0c:76:a4:c5:16:27:23:65:5f:84:f9:49:e0:8b:39:89:7b:2f: a4:7a:5a:80:da:83:42:69:b1:41:86:f4:a3:a5:6d:56:9e:2d: 2f:d7:f5:3c:23:16:e4:be:f6:5b:51:3b:76:7a:d0:86:41:26: 81:32:30:cf:0d:35:f5:a3:0c:30:9e:1c:d5:ea:18:1c:36:37: eb:07:09:b7:9c:ab:82:2d:7f:37:1f:6b:77:e5:73:b7:24:e9: e7:72:91:cb:ac:e2:64:73:38:ee:4c:77:84:fa:bf:89:15:89: 25:04:fd:1b:32:df:f0:71:2b:68:39:61:61:03:f8:0a:c0:a9: f7:d6:af:8d:c3:24:9a:75:df:92:7a:a4:69:3e:da:e9:cf:4d: f7:b8:30:fe:b2:5c:6b:93:ff:38:57:f6:6e:46:89:74:c7:80: 20:07:98:b6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYOsU8P1xy6hi/qaPDAu//6NwMVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD NzhGOTBGOTAeFw0yNDAxMjgwNzU1MDBaFw0yNTAxMjYwODAwMDBaMDMxMTAvBgNV BAMTKDA4MTg5ODExMTI4QkREMDUxQTY0ODY1QjRFMkQ4NDM5MEE2MEE1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4g4DG3FwuRFF7oxBp7lJJsWy Y6Wwx2B9VwiPYCa4EEwAxbwXolTJ4l9igTvtWoaWbbRxxB5oLkUwQW8Nsqho1WaW 9NoaILCWXNUkeZanqXOastu7VgwFdecASW2PsnoOzRuG9K3Y827FjkJ4lAgb2kBx PqYW/6YGEt5fPS45idKy26hOPkgzj5jw8yRg0Rp+AfoBCt9JWbOSYdd+Cl2MB3OF cTOhjOr10mh51QovfpJAR+Kyk3XyA7lOBpIG+JYnVNfrkRqECJ7lU3DLJue92+yG 9necmkFtBq+wEKwty7jXyYe99VnRR7huF0cQSJL6BTiXda7UWnwte3Az8Tk7AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUCBiYERKL3QUaZIZbTi2EOQpgpbowHwYDVR0j BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2 NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG OTBGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04 MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzczYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAAcw DQYJKoZIhvcNAQELBQADggEBAHdz4mPn2N9g4jWZGPmWFZOf6r5ZG7BuWpaERNoH c1wGxLAeeoh847WL/JuNTcMzjvNAUdraEUl+nHXsacZihTk/x80ssns+hN9WsDOl 7Mm2myP+NTfpmLf0Ngx2pMUWJyNlX4T5SeCLOYl7L6R6WoDag0JpsUGG9KOlbVae LS/X9TwjFuS+9ltRO3Z60IZBJoEyMM8NNfWjDDCeHNXqGBw2N+sHCbecq4Itfzcf a3flc7ck6edykcus4mRzOO5Md4T6v4kViSUE/Rsy3/BxK2g5YWED+ArAqffWr43D JJp135J6pGk+2unPTfe4MP6yXGuT/zhX9m5GiXTHgCAHmLY= -----END CERTIFICATE-----Generated at Fri Nov 22 19:41:55 2024 by rpki-client on console-fra.rpki-client.org