$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3a2f34382d3438203d3e203338373533.roa File: 323430313a616530303a3a2f34382d3438203d3e203338373533.roa (raw, json) Hash identifier: vcWqHugRDCRA4TjuRYgJZjICKmDAlA+fa61LRtJjf3k= Subject key identifier: 03:FA:E9:18:87:5C:C5:47:60:BC:D0:C3:AB:DD:A6:A4:A1:63:00:E1 Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 78882690C653D7498078A1344CB3C1584C5A5FFA Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3a2f34382d3438203d3e203338373533.roa Signing time: Mon 15 Jul 2024 05:00:01 +0000 ROA not before: Mon 15 Jul 2024 04:55:01 +0000 ROA not after: Mon 14 Jul 2025 05:00:01 +0000 asID: 38753 IP address blocks: 2401:ae00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:88:26:90:c6:53:d7:49:80:78:a1:34:4c:b3:c1:58:4c:5a:5f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Jul 15 04:55:01 2024 GMT Not After : Jul 14 05:00:01 2025 GMT Subject: CN=03FAE918875CC54760BCD0C3ABDDA6A4A16300E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:fe:06:43:7a:4c:79:93:d0:d6:6e:61:e7: 3b:4a:ae:77:c6:aa:7a:a1:aa:8e:52:1f:6c:b5:ce: a1:54:ed:ff:86:7c:95:e9:12:ed:f2:df:25:00:cf: 66:56:82:7b:df:44:cc:b2:a5:1e:44:b6:ab:3f:64: 2c:00:e9:38:9d:94:60:09:c6:da:8e:f0:ec:40:83: fe:02:e5:3e:7b:e5:41:c2:f2:9f:8b:48:59:05:0b: 05:b4:d7:42:37:cb:15:17:ae:00:a4:2e:e8:9c:36: 05:dc:7c:a5:c4:70:aa:89:79:e5:07:28:80:45:e7: d3:ad:4f:29:ab:37:df:d1:04:ff:71:53:7c:2c:66: 97:4f:fe:fd:88:da:6c:de:62:3e:a6:39:18:58:7d: d4:32:6b:a1:9b:c0:7b:a0:4a:f1:f8:86:a5:06:94: 3d:83:7d:f0:ac:60:57:73:67:84:e0:b6:13:f0:31: 7c:c4:a8:81:ef:25:bc:d7:b4:8c:15:eb:62:b3:5f: d2:83:1d:38:8d:fb:bb:34:c5:4c:ee:e9:b1:fe:ce: c1:b3:88:fd:bf:36:e5:e5:67:1c:f8:35:d5:bc:4f: 56:3d:e2:36:2d:88:cd:44:63:3d:fd:bb:ba:07:e6: fe:a5:8f:46:0f:9d:bf:3f:2e:8a:81:30:f6:d6:44: 19:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FA:E9:18:87:5C:C5:47:60:BC:D0:C3:AB:DD:A6:A4:A1:63:00:E1 X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3a2f34382d3438203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:ae00::/48 Signature Algorithm: sha256WithRSAEncryption 88:50:85:4c:cd:24:f8:42:0d:48:76:95:01:27:bc:1a:18:48: d7:a2:9f:ff:20:bf:c6:21:8a:7b:f2:1b:0c:27:e3:99:88:ec: bd:7c:c7:bf:8f:3b:fe:aa:18:84:aa:37:5d:af:0a:44:87:09: 40:95:f9:85:3b:3c:01:58:15:ef:10:b0:be:12:54:c6:22:46: 3b:bc:16:6f:42:2c:a2:24:6e:a7:e8:2c:63:44:28:f7:43:ff: b3:55:e3:67:6e:24:7b:48:1b:55:6b:7e:33:c3:66:c8:32:9d: 3c:55:31:73:8c:b4:27:8c:c8:09:14:0b:63:4d:9d:b4:27:5a: 8f:7a:4b:f9:3f:6b:be:3b:81:95:13:2c:fb:bb:8d:ce:11:bc: a7:cd:13:6b:38:5e:02:4e:4b:a4:76:d5:e6:ac:c2:f0:60:c3: dd:6c:c4:b3:b1:62:35:e0:e8:66:a5:7b:17:41:f9:a4:1a:2a: fe:94:aa:56:9b:77:9a:31:ab:78:88:87:8a:2a:4f:60:0b:23: 1f:4d:9f:a0:c8:08:ec:a4:3e:c7:1a:f3:74:f1:28:ff:70:f9: b2:c2:b4:7c:0c:d6:f7:2b:db:ed:e1:2c:17:1a:63:8c:3a:30: 5b:17:04:24:03:dc:89:40:61:f2:e1:cf:42:0a:2c:ad:d6:95: 97:96:85:c4 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUeIgmkMZT10mAeKE0TLPBWExaX/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNDA3MTUwNDU1MDFaFw0yNTA3MTQwNTAwMDFaMDMxMTAvBgNV BAMTKDAzRkFFOTE4ODc1Q0M1NDc2MEJDRDBDM0FCRERBNkE0QTE2MzAwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpf4GQ3pMeZPQ1m5h5ztKrnfG qnqhqo5SH2y1zqFU7f+GfJXpEu3y3yUAz2ZWgnvfRMyypR5Etqs/ZCwA6TidlGAJ xtqO8OxAg/4C5T575UHC8p+LSFkFCwW010I3yxUXrgCkLuicNgXcfKXEcKqJeeUH KIBF59OtTymrN9/RBP9xU3wsZpdP/v2I2mzeYj6mORhYfdQya6GbwHugSvH4hqUG lD2DffCsYFdzZ4TgthPwMXzEqIHvJbzXtIwV62KzX9KDHTiN+7s0xUzu6bH+zsGz iP2/NuXlZxz4NdW8T1Y94jYtiM1EYz39u7oH5v6lj0YPnb8/LoqBMPbWRBmTAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUA/rpGIdcxUdgvNDDq92mpKFjAOEwHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i NmMyLTQyYWI4YjQ3NjI0OS8wLzMyMzQzMDMxM2E2MTY1MzAzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAa4AAAAwDQYJKoZI hvcNAQELBQADggEBAIhQhUzNJPhCDUh2lQEnvBoYSNein/8gv8YhinvyGwwn45mI 7L18x7+PO/6qGISqN12vCkSHCUCV+YU7PAFYFe8QsL4SVMYiRju8Fm9CLKIkbqfo LGNEKPdD/7NV42duJHtIG1VrfjPDZsgynTxVMXOMtCeMyAkUC2NNnbQnWo96S/k/ a747gZUTLPu7jc4RvKfNE2s4XgJOS6R21easwvBgw91sxLOxYjXg6GalexdB+aQa Kv6Uqlabd5oxq3iIh4oqT2ALIx9Nn6DICOykPsca83TxKP9w+bLCtHwM1vcr2+3h LBcaY4w6MFsXBCQD3IlAYfLhz0IKLK3WlZeWhcQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org