$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a313a3a2f34382d3438203d3e203338373533.roa File: 323430313a616530303a313a3a2f34382d3438203d3e203338373533.roa (raw, json) Hash identifier: NVrrdSp0PSfMJVymzvty35nye6aEYcetz9Ez4O895bY= Subject key identifier: 38:20:E4:0A:6F:0D:AC:C8:E9:EF:17:DC:44:E5:7E:0B:E0:89:EC:31 Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 40FC0369F1F5792F2892B5553C642D6070D92AE8 Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a313a3a2f34382d3438203d3e203338373533.roa Signing time: Mon 15 Jul 2024 05:00:01 +0000 ROA not before: Mon 15 Jul 2024 04:55:01 +0000 ROA not after: Mon 14 Jul 2025 05:00:01 +0000 asID: 38753 IP address blocks: 2401:ae00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fc:03:69:f1:f5:79:2f:28:92:b5:55:3c:64:2d:60:70:d9:2a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Jul 15 04:55:01 2024 GMT Not After : Jul 14 05:00:01 2025 GMT Subject: CN=3820E40A6F0DACC8E9EF17DC44E57E0BE089EC31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:a3:a6:a1:fa:6d:15:12:08:83:79:08:c9: 57:4b:df:2c:d6:9b:18:ef:72:ca:d8:83:9b:12:02: c3:7a:64:3b:92:c0:ad:54:06:1e:f9:66:dd:1e:5e: 92:f2:10:82:ba:82:8f:40:43:bb:84:17:92:81:74: 1a:88:3d:79:20:c2:89:68:82:a2:3e:c2:5d:db:e5: f5:5b:47:5e:fd:04:41:df:cb:1c:05:0a:43:60:25: 74:df:c7:e0:4b:e9:47:f2:e6:d4:cc:a1:84:5e:65: cb:f4:a0:cd:65:15:c1:86:c6:e3:39:ab:e1:f8:ef: cb:70:65:2e:af:3f:cb:b4:ac:8b:d2:68:8a:09:27: 82:70:22:6e:3d:18:d5:6a:93:c9:44:54:90:67:7f: 23:0c:7d:75:8f:ad:b3:89:84:8a:16:19:d9:96:eb: 14:c6:9c:4d:cf:ea:ea:ce:8b:74:ed:11:1d:3f:24: 07:5c:0d:d0:37:b5:80:fd:aa:52:25:7f:af:47:0c: d6:8f:dd:09:68:2d:65:64:54:f0:cf:ef:70:f3:28: f6:9a:87:6a:f2:71:db:6f:7c:f6:1e:f1:88:42:46: 26:76:25:5b:c1:61:08:c6:92:ae:8c:31:85:21:c9: 93:fe:b7:42:8c:74:52:4e:cb:f8:7d:57:f9:b6:57: c1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:20:E4:0A:6F:0D:AC:C8:E9:EF:17:DC:44:E5:7E:0B:E0:89:EC:31 X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a313a3a2f34382d3438203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:ae00:1::/48 Signature Algorithm: sha256WithRSAEncryption 91:c2:ac:f6:3f:96:3f:da:be:b1:f6:65:cc:d4:1f:81:44:f6: 6e:d0:04:fc:8f:2e:b7:d2:9a:b3:9b:1c:d5:21:4d:c1:45:97: 9a:8f:20:56:84:a6:10:93:aa:87:dc:75:96:13:e9:fd:35:83: 51:9b:53:30:0c:d9:2d:d4:8d:99:74:8c:e2:de:93:ea:b2:97: 9b:6f:9b:75:0d:a7:a7:f8:ff:d0:7f:6e:33:7b:49:fb:ab:01: 97:60:7d:ce:11:4f:a5:7d:d3:0c:19:6e:f0:a1:4d:23:4b:2b: 6d:da:f5:ab:e7:52:58:54:f4:44:b5:5b:2f:60:50:a8:9a:01: 44:ba:3b:ce:0c:8e:af:0c:95:ed:8b:5b:bb:83:ad:11:29:33: 69:49:a2:32:56:b7:59:03:36:d2:cd:49:c8:96:a5:2b:6f:b6: c3:37:b0:37:66:b7:1e:be:19:d4:4d:5e:df:ca:83:7a:10:4b: 88:5e:3d:59:62:da:f0:64:6d:70:ee:90:d6:1d:93:78:67:2d: 6a:17:0e:cc:3d:ba:b2:11:e4:0c:db:4d:1f:e4:e1:72:a6:c9: 9b:5a:29:30:19:3e:4e:e1:bf:45:da:62:13:3d:21:f0:e2:91: f7:d3:19:eb:5e:5d:91:91:05:64:47:9b:8c:b4:50:6c:b0:d0: 83:58:a1:7e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUQPwDafH1eS8okrVVPGQtYHDZKugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNDA3MTUwNDU1MDFaFw0yNTA3MTQwNTAwMDFaMDMxMTAvBgNV BAMTKDM4MjBFNDBBNkYwREFDQzhFOUVGMTdEQzQ0RTU3RTBCRTA4OUVDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChNqOmofptFRIIg3kIyVdL3yzW mxjvcsrYg5sSAsN6ZDuSwK1UBh75Zt0eXpLyEIK6go9AQ7uEF5KBdBqIPXkgwolo gqI+wl3b5fVbR179BEHfyxwFCkNgJXTfx+BL6Ufy5tTMoYReZcv0oM1lFcGGxuM5 q+H478twZS6vP8u0rIvSaIoJJ4JwIm49GNVqk8lEVJBnfyMMfXWPrbOJhIoWGdmW 6xTGnE3P6urOi3TtER0/JAdcDdA3tYD9qlIlf69HDNaP3QloLWVkVPDP73DzKPaa h2rycdtvfPYe8YhCRiZ2JVvBYQjGkq6MMYUhyZP+t0KMdFJOy/h9V/m2V8HrAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUOCDkCm8NrMjp7xfcROV+C+CJ7DEwHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i NmMyLTQyYWI4YjQ3NjI0OS8wLzMyMzQzMDMxM2E2MTY1MzAzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzczNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAGuAAABMA0G CSqGSIb3DQEBCwUAA4IBAQCRwqz2P5Y/2r6x9mXM1B+BRPZu0AT8jy630pqzmxzV IU3BRZeajyBWhKYQk6qH3HWWE+n9NYNRm1MwDNkt1I2ZdIzi3pPqspebb5t1Daen +P/Qf24ze0n7qwGXYH3OEU+lfdMMGW7woU0jSytt2vWr51JYVPREtVsvYFComgFE ujvODI6vDJXti1u7g60RKTNpSaIyVrdZAzbSzUnIlqUrb7bDN7A3ZrcevhnUTV7f yoN6EEuIXj1ZYtrwZG1w7pDWHZN4Zy1qFw7MPbqyEeQM200f5OFypsmbWikwGT5O 4b9F2mITPSHw4pH30xnrXl2RkQVkR5uMtFBssNCDWKF+ -----END CERTIFICATE-----Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org