$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa File: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (raw, json) Hash identifier: DFRzEWprrOiMSjx8SdHUt/uuD1K0oSG6/Rb0USOR/B8= Subject key identifier: 2D:B7:35:FA:E0:31:8F:4A:F9:0C:6F:C9:07:50:4C:22:A5:14:50:2C Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 5781279E2557C4860ED827749CF1BE8D96F95894 Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa Signing time: Mon 12 Aug 2024 10:02:20 +0000 ROA not before: Mon 12 Aug 2024 09:57:20 +0000 ROA not after: Mon 11 Aug 2025 10:02:20 +0000 asID: 138598 IP address blocks: 2404:5d40:7::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:81:27:9e:25:57:c4:86:0e:d8:27:74:9c:f1:be:8d:96:f9:58:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Aug 12 09:57:20 2024 GMT Not After : Aug 11 10:02:20 2025 GMT Subject: CN=2DB735FAE0318F4AF90C6FC907504C22A514502C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:c3:58:f0:de:c7:ab:8a:03:79:9a:ab:db: 53:54:44:88:94:41:86:80:95:2f:1f:2a:46:d5:f2: a7:fb:dd:96:7c:0c:17:f9:2b:e9:ac:05:f4:11:47: 6c:ca:00:9c:83:43:e2:a3:d8:09:ce:f7:6a:c8:55: 08:b0:c8:18:9e:08:40:ca:00:4b:91:30:ce:ac:49: ec:28:dc:af:8e:c3:f4:8e:95:f5:4f:75:15:a5:6f: 26:10:ca:01:ab:10:d3:ba:c3:c1:21:99:ab:8f:26: af:cb:84:aa:f8:91:6e:48:20:46:c5:e0:2d:ad:2f: 42:e4:0e:c4:67:1c:73:78:85:1a:1a:ae:ed:6e:3d: 70:5f:5b:11:28:79:a7:43:c6:bf:55:ff:3d:d4:15: 38:5f:99:ec:6f:40:5d:27:74:83:fc:df:b5:28:f2: 48:9b:30:15:fa:12:a8:6e:c8:bf:e8:a7:52:1e:e4: 55:7c:f6:a8:92:b8:41:79:70:96:c5:37:ba:77:e0: 48:d5:d8:71:e1:f4:8c:f5:7d:79:a9:23:f6:e7:e7: 18:4a:ac:6b:d0:e2:80:42:05:ee:64:ee:eb:80:fe: 98:e3:26:1e:26:3f:7b:dc:e7:a8:4b:cb:c6:ba:51: 3f:b7:aa:8d:9e:c5:5f:c2:d8:05:89:62:81:b5:bc: 85:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B7:35:FA:E0:31:8F:4A:F9:0C:6F:C9:07:50:4C:22:A5:14:50:2C X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:5d40:7::/48 Signature Algorithm: sha256WithRSAEncryption 46:3a:2e:92:38:f2:f8:bb:39:3b:4e:63:6f:6b:b6:07:ed:2f: 5a:f9:54:ba:97:8b:01:ca:c9:f2:9b:7d:be:96:83:10:30:72: a6:8d:77:62:46:f0:f9:e9:24:6d:19:a5:12:b5:6e:8b:8e:06: 31:11:0f:43:49:ae:83:5c:a0:e3:e7:5a:2a:3d:bf:86:69:4f: 3f:b2:37:4b:1f:57:d7:2e:77:12:87:c1:f4:17:8c:87:06:f6: 0a:81:7d:81:08:20:b7:cc:59:20:f0:40:bd:f3:63:da:11:54: dc:1c:17:e3:e3:f3:e4:f7:2d:00:ba:5a:3f:ba:da:32:5f:57: 50:b9:8e:a3:2f:6f:c9:b6:64:91:d9:29:04:73:4b:80:7b:0a: 8c:97:74:fc:6d:8c:9d:3d:9d:0c:79:3a:70:d3:90:1a:9b:be: 0d:e7:2c:98:cc:ff:60:53:dd:fb:1d:ed:31:7d:f6:cf:79:36: 43:d4:94:e8:c5:bf:a5:9f:24:54:54:97:5a:5a:87:97:46:a5: f2:c4:31:bb:7e:4b:de:df:15:55:5d:d8:9e:ab:81:6b:84:03: 24:6c:a7:83:f6:d2:18:20:7f:26:17:23:9c:f7:ee:47:05:97: c3:b2:9f:1c:53:16:50:77:f3:aa:27:78:30:cc:88:06:27:59: b9:a9:8d:2a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUV4EnniVXxIYO2Cd0nPG+jZb5WJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNDA4MTIwOTU3MjBaFw0yNTA4MTExMDAyMjBaMDMxMTAvBgNV BAMTKDJEQjczNUZBRTAzMThGNEFGOTBDNkZDOTA3NTA0QzIyQTUxNDUwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0MNY8N7Hq4oDeZqr21NURIiU QYaAlS8fKkbV8qf73ZZ8DBf5K+msBfQRR2zKAJyDQ+Kj2AnO92rIVQiwyBieCEDK AEuRMM6sSewo3K+Ow/SOlfVPdRWlbyYQygGrENO6w8EhmauPJq/LhKr4kW5IIEbF 4C2tL0LkDsRnHHN4hRoaru1uPXBfWxEoeadDxr9V/z3UFThfmexvQF0ndIP837Uo 8kibMBX6EqhuyL/op1Ie5FV89qiSuEF5cJbFN7p34EjV2HHh9Iz1fXmpI/bn5xhK rGvQ4oBCBe5k7uuA/pjjJh4mP3vc56hLy8a6UT+3qo2exV/C2AWJYoG1vIWhAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQULbc1+uAxj0r5DG/JB1BMIqUUUCwwHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljODVjNmI5LTM0ZjktNGE4NS05 Y2VhLWMxNmU5OGE4YjVlMC8wLzMyMzQzMDM0M2EzNTY0MzQzMDNhMzczYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBF1AAAcw DQYJKoZIhvcNAQELBQADggEBAEY6LpI48vi7OTtOY29rtgftL1r5VLqXiwHKyfKb fb6WgxAwcqaNd2JG8PnpJG0ZpRK1bouOBjERD0NJroNcoOPnWio9v4ZpTz+yN0sf V9cudxKHwfQXjIcG9gqBfYEIILfMWSDwQL3zY9oRVNwcF+Pj8+T3LQC6Wj+62jJf V1C5jqMvb8m2ZJHZKQRzS4B7CoyXdPxtjJ09nQx5OnDTkBqbvg3nLJjM/2BT3fsd 7TF99s95NkPUlOjFv6WfJFRUl1pah5dGpfLEMbt+S97fFVVd2J6rgWuEAyRsp4P2 0hggfyYXI5z37kcFl8OynxxTFlB386oneDDMiAYnWbmpjSo= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org