$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa File: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (raw, json) Hash identifier: BLOc4k1k/6kYVTD4owYMmHx5OOK/8Y7LoDi9RBV5ZS8= Subject key identifier: 5E:B5:D7:F5:4C:36:3B:4D:BC:B4:04:80:AA:3F:94:E2:C9:81:04:55 Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 4782C431BE5AA1D5B37F19BF0879914BA3DBD86E Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa Signing time: Mon 12 Aug 2024 10:02:19 +0000 ROA not before: Mon 12 Aug 2024 09:57:19 +0000 ROA not after: Mon 11 Aug 2025 10:02:19 +0000 asID: 138598 IP address blocks: 2404:5d40:8::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:82:c4:31:be:5a:a1:d5:b3:7f:19:bf:08:79:91:4b:a3:db:d8:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Aug 12 09:57:19 2024 GMT Not After : Aug 11 10:02:19 2025 GMT Subject: CN=5EB5D7F54C363B4DBCB40480AA3F94E2C9810455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:13:61:79:57:00:0e:2a:51:f1:f5:c4:7e: 53:c8:11:c8:99:a7:d7:0c:57:57:c1:9f:3d:1e:b6: b9:16:8b:e4:82:2f:6c:fb:2e:b2:a0:ba:05:0a:98: 7e:13:cb:5e:f6:d1:f5:22:f5:6d:71:fc:1a:34:f7: 5c:71:87:d1:c2:53:90:81:81:01:14:15:2f:c2:39: 52:db:cb:a6:37:8e:a1:d4:94:d6:eb:13:bc:7f:4d: f2:05:88:11:c6:e5:e3:d6:b3:bf:e3:bd:8f:5c:02: 94:24:cc:a1:e7:17:39:fb:1d:3c:35:eb:87:04:b2: 58:5c:7a:75:db:7e:ec:bd:15:b1:05:2e:9a:5f:dc: 69:2f:1e:44:83:f7:3b:1c:d3:79:b7:e1:5f:71:67: 0f:69:d0:b1:8b:18:7c:cc:79:8f:59:7e:4e:c6:ad: 44:b1:6a:3d:91:31:d2:73:b9:4f:8e:66:42:94:a1: 64:e4:f3:c3:f2:34:47:ef:ba:c2:bf:b8:8b:8f:f6: de:45:fb:d7:27:57:dd:b1:69:cb:de:74:24:f9:a6: f7:9b:02:53:e7:bc:55:d7:0c:b3:a3:fc:5b:f1:2a: 40:5f:ef:38:c9:bb:e8:5e:f4:f2:04:65:2e:f2:d9: f7:f6:e0:10:01:a3:56:ff:ef:47:d2:b4:a9:da:42: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B5:D7:F5:4C:36:3B:4D:BC:B4:04:80:AA:3F:94:E2:C9:81:04:55 X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:5d40:8::/48 Signature Algorithm: sha256WithRSAEncryption 83:e4:e2:78:0a:16:7c:37:8a:08:a9:59:74:c1:4d:bb:0a:21: 3d:5b:10:78:15:a7:ad:34:c2:b2:08:94:36:0a:36:cb:1e:a3: d5:9e:20:0d:dc:38:07:93:1f:3c:b1:18:00:93:69:8c:df:32: fc:e6:12:32:36:a9:21:b6:e8:49:61:8e:56:ee:70:d5:4a:2c: fe:7f:24:69:f7:69:3d:cf:6e:80:5a:46:db:e0:22:09:7b:8b: d0:13:bc:cf:b7:28:d3:f9:55:29:7a:11:ce:cf:89:c9:c8:60: 61:9b:9e:c9:c8:a5:d8:33:67:93:c3:7c:77:60:83:41:6a:e3: e7:2a:0a:2c:42:94:e1:89:15:88:e9:57:b8:fd:13:6d:8a:8d: 1e:44:3c:7d:cd:2f:17:e0:a9:dc:3b:73:29:5a:a8:39:12:bd: dc:db:c2:9a:a8:ec:73:13:65:10:0b:4f:2e:6e:89:ea:f9:84: da:2f:d2:71:f9:6c:59:c4:61:4b:8e:b8:90:ca:03:76:46:a4: f0:b7:4a:b7:7f:9a:4c:cf:2d:2c:82:6e:11:50:6a:3e:42:98: 50:e7:2f:46:a8:d4:13:3b:3e:83:61:27:28:f0:f0:d0:04:d5: db:9f:70:6c:62:4b:6d:35:8a:85:38:57:04:76:2e:f0:3d:90: 9b:ab:f6:d0 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUR4LEMb5aodWzfxm/CHmRS6Pb2G4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNDA4MTIwOTU3MTlaFw0yNTA4MTExMDAyMTlaMDMxMTAvBgNV BAMTKDVFQjVEN0Y1NEMzNjNCNERCQ0I0MDQ4MEFBM0Y5NEUyQzk4MTA0NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40RNheVcADipR8fXEflPIEciZ p9cMV1fBnz0etrkWi+SCL2z7LrKgugUKmH4Ty1720fUi9W1x/Bo091xxh9HCU5CB gQEUFS/COVLby6Y3jqHUlNbrE7x/TfIFiBHG5ePWs7/jvY9cApQkzKHnFzn7HTw1 64cEslhcenXbfuy9FbEFLppf3GkvHkSD9zsc03m34V9xZw9p0LGLGHzMeY9Zfk7G rUSxaj2RMdJzuU+OZkKUoWTk88PyNEfvusK/uIuP9t5F+9cnV92xacvedCT5pveb AlPnvFXXDLOj/FvxKkBf7zjJu+he9PIEZS7y2ff24BABo1b/70fStKnaQhgTAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUXrXX9Uw2O028tASAqj+U4smBBFUwHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljODVjNmI5LTM0ZjktNGE4NS05 Y2VhLWMxNmU5OGE4YjVlMC8wLzMyMzQzMDM0M2EzNTY0MzQzMDNhMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBF1AAAgw DQYJKoZIhvcNAQELBQADggEBAIPk4ngKFnw3igipWXTBTbsKIT1bEHgVp600wrII lDYKNsseo9WeIA3cOAeTHzyxGACTaYzfMvzmEjI2qSG26ElhjlbucNVKLP5/JGn3 aT3PboBaRtvgIgl7i9ATvM+3KNP5VSl6Ec7PicnIYGGbnsnIpdgzZ5PDfHdgg0Fq 4+cqCixClOGJFYjpV7j9E22KjR5EPH3NLxfgqdw7cylaqDkSvdzbwpqo7HMTZRAL Ty5uier5hNov0nH5bFnEYUuOuJDKA3ZGpPC3Srd/mkzPLSyCbhFQaj5CmFDnL0ao 1BM7PoNhJyjw8NAE1dufcGxiS201ioU4VwR2LvA9kJur9tA= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org