$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa File: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (raw, json) Hash identifier: XDEGp8lWijrl4t6mUpWpRG/6LTKurJQjMuROjmEiZ6Q= Subject key identifier: 42:CB:A6:28:10:45:E9:13:E0:E3:A9:26:DB:F4:08:40:04:08:6C:4D Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 6A56158520F656E75D13B974ACEBDDBD84359508 Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa Signing time: Mon 12 Aug 2024 10:02:20 +0000 ROA not before: Mon 12 Aug 2024 09:57:20 +0000 ROA not after: Mon 11 Aug 2025 10:02:20 +0000 asID: 138598 IP address blocks: 2404:5d40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:56:15:85:20:f6:56:e7:5d:13:b9:74:ac:eb:dd:bd:84:35:95:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Aug 12 09:57:20 2024 GMT Not After : Aug 11 10:02:20 2025 GMT Subject: CN=42CBA6281045E913E0E3A926DBF4084004086C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:26:aa:e1:bd:b5:3d:be:20:78:a7:f2:d1: dd:67:a9:f3:1b:68:4d:14:75:c5:7c:e9:8b:6b:79: 03:76:49:b2:46:d6:1d:86:3b:4f:24:cc:04:40:ae: 86:62:5c:7a:1c:71:d4:35:a4:02:22:d9:89:0c:ac: 62:f9:fe:de:99:db:38:76:fa:ea:ea:63:a8:ec:87: 5a:87:30:38:6c:15:70:68:54:b3:be:66:b9:d0:8c: 44:17:65:e4:6c:f0:fe:28:6f:09:d5:9d:88:16:02: 8e:8a:a1:06:ce:a5:76:b0:77:25:ac:20:39:0a:0c: 3f:fb:fe:42:88:4c:40:bc:4b:e9:7a:a7:1b:bb:28: 52:63:51:4d:cb:2b:57:ea:f0:4a:38:7d:ea:88:2f: de:96:97:63:ff:dc:90:9b:5e:82:22:5b:71:c3:d4: 33:a7:e3:5c:aa:1d:00:d3:37:10:df:2c:d8:41:e4: 6f:14:96:c6:de:82:88:9a:1d:99:16:b0:b1:3d:f7: 0b:59:90:c1:0e:d2:d5:44:c4:f6:0e:b0:17:28:4e: 76:d0:99:71:fe:ba:5e:84:a6:c6:bf:5c:1e:cd:ca: fc:f2:75:24:c8:75:98:cb:ef:a2:a0:36:b7:97:a1: de:fd:cb:a7:ee:cb:ce:1c:65:e0:86:a4:92:14:de: ac:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CB:A6:28:10:45:E9:13:E0:E3:A9:26:DB:F4:08:40:04:08:6C:4D X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:5d40:1::/48 Signature Algorithm: sha256WithRSAEncryption 1e:70:b6:07:bd:5b:a6:f0:1e:6d:27:31:d7:3c:2d:0f:f2:db: 67:0e:69:a9:bc:59:94:4a:fd:42:74:28:3c:45:6d:db:cc:26: 49:3c:84:70:47:28:27:f5:cd:f9:12:92:79:5c:49:41:15:d4: c5:eb:ae:e8:fc:ab:81:77:b4:a4:49:9f:c3:0c:2a:34:2e:51: 2f:d8:db:9d:42:c3:24:e4:b0:c4:dc:2a:91:54:1b:ed:a2:81: 27:4d:7b:e7:de:68:66:a4:44:ee:51:17:d0:b3:6e:8c:6c:11: 74:7e:fa:f5:a1:db:b6:9b:05:ef:4a:5b:fb:08:69:f0:c6:8d: 00:5a:14:13:f8:f7:0e:f2:e1:1f:9d:c3:a8:56:1b:44:95:cc: 72:f9:9a:1b:e5:d1:c2:dc:3b:a1:bc:f7:33:ab:96:f6:bf:36: a9:a0:fa:e6:9b:30:3a:4d:ab:51:89:4e:2d:df:80:4b:5d:f4: bb:f3:fc:de:31:36:6f:e4:9d:60:ab:e4:e7:e2:2b:e4:86:34: f9:a6:ed:91:b0:6b:e8:38:3b:36:4e:9d:24:e3:44:41:cf:46: 36:72:6d:8d:57:6f:21:2c:45:b0:c7:ca:82:1a:e2:be:8e:a2: bf:ab:96:9c:b1:44:82:a9:7c:ec:42:3d:2b:39:2e:91:bb:26: 4a:86:a6:3f -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUalYVhSD2VuddE7l0rOvdvYQ1lQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNDA4MTIwOTU3MjBaFw0yNTA4MTExMDAyMjBaMDMxMTAvBgNV BAMTKDQyQ0JBNjI4MTA0NUU5MTNFMEUzQTkyNkRCRjQwODQwMDQwODZDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDISCaq4b21Pb4geKfy0d1nqfMb aE0UdcV86YtreQN2SbJG1h2GO08kzARAroZiXHoccdQ1pAIi2YkMrGL5/t6Z2zh2 +urqY6jsh1qHMDhsFXBoVLO+ZrnQjEQXZeRs8P4obwnVnYgWAo6KoQbOpXawdyWs IDkKDD/7/kKITEC8S+l6pxu7KFJjUU3LK1fq8Eo4feqIL96Wl2P/3JCbXoIiW3HD 1DOn41yqHQDTNxDfLNhB5G8UlsbegoiaHZkWsLE99wtZkMEO0tVExPYOsBcoTnbQ mXH+ul6Epsa/XB7NyvzydSTIdZjL76KgNreXod79y6fuy84cZeCGpJIU3qzdAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUQsumKBBF6RPg46km2/QIQAQIbE0wHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljODVjNmI5LTM0ZjktNGE4NS05 Y2VhLWMxNmU5OGE4YjVlMC8wLzMyMzQzMDM0M2EzNTY0MzQzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBF1AAAEw DQYJKoZIhvcNAQELBQADggEBAB5wtge9W6bwHm0nMdc8LQ/y22cOaam8WZRK/UJ0 KDxFbdvMJkk8hHBHKCf1zfkSknlcSUEV1MXrruj8q4F3tKRJn8MMKjQuUS/Y251C wyTksMTcKpFUG+2igSdNe+feaGakRO5RF9CzboxsEXR++vWh27abBe9KW/sIafDG jQBaFBP49w7y4R+dw6hWG0SVzHL5mhvl0cLcO6G89zOrlva/Nqmg+uabMDpNq1GJ Ti3fgEtd9Lvz/N4xNm/knWCr5OfiK+SGNPmm7ZGwa+g4OzZOnSTjREHPRjZybY1X byEsRbDHyoIa4r6Oor+rlpyxRIKpfOxCPSs5LpG7JkqGpj8= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org