$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a616530303a3a2f34382d3438203d3e203338373533.roa File: 323430313a616530303a616530303a3a2f34382d3438203d3e203338373533.roa (raw, json) Hash identifier: P/BnAblcapKm2A6F035xzkhtIrvp4g8eQgJmvQ+H5+g= Subject key identifier: 2B:D5:C4:91:76:77:C3:D4:9B:87:EC:C1:BB:F6:BB:A6:B1:0B:1D:B9 Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 1A5ACF64D6AF69CABFFCDD4AAA4FEC4DD2EE003A Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a616530303a3a2f34382d3438203d3e203338373533.roa Signing time: Mon 15 Jul 2024 06:00:01 +0000 ROA not before: Mon 15 Jul 2024 05:55:01 +0000 ROA not after: Mon 14 Jul 2025 06:00:01 +0000 asID: 38753 IP address blocks: 2401:ae00:ae00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5a:cf:64:d6:af:69:ca:bf:fc:dd:4a:aa:4f:ec:4d:d2:ee:00:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Jul 15 05:55:01 2024 GMT Not After : Jul 14 06:00:01 2025 GMT Subject: CN=2BD5C4917677C3D49B87ECC1BBF6BBA6B10B1DB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:6c:30:54:93:2b:d3:02:21:38:07:90:27: 95:a7:0a:6d:4d:44:74:3d:96:61:69:db:29:79:4b: d3:2b:08:92:44:47:e8:43:be:80:c9:2b:35:0d:a0: 33:80:ad:db:75:82:ff:4c:03:be:24:1e:2a:c2:43: 9d:09:5e:92:60:c0:af:58:db:6c:c9:b9:82:6e:41: f5:7c:b6:5f:65:b4:6e:f3:64:6d:fc:0c:5b:11:31: 57:e7:8f:94:6a:ad:bb:66:cc:d2:5b:e1:6e:cf:d6: ab:07:63:37:db:18:df:8a:e5:f8:ba:fd:86:b6:8c: 11:40:29:62:94:36:be:ea:16:0c:be:74:c3:2d:1d: b4:52:84:29:35:ad:e6:c4:d4:68:0c:29:dd:e0:13: 62:d0:b2:8e:e5:76:44:61:60:46:ea:64:30:c0:30: 9c:a4:fd:b8:b0:47:3d:b0:6c:ef:50:02:3d:f4:65: 31:ef:28:05:70:7b:20:6a:f7:f1:8d:50:e1:21:37: 51:94:b6:6b:c2:d8:56:fb:b1:74:6a:90:aa:31:95: ed:1c:74:8f:94:b9:77:10:f2:bc:00:c2:a0:6a:b0: 4e:af:96:e9:33:5d:fa:9f:a8:87:39:15:f9:8e:72: a4:17:0a:04:48:e0:07:e2:a0:de:45:af:65:09:3f: 1e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D5:C4:91:76:77:C3:D4:9B:87:EC:C1:BB:F6:BB:A6:B1:0B:1D:B9 X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a616530303a3a2f34382d3438203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:ae00:ae00::/48 Signature Algorithm: sha256WithRSAEncryption be:5c:2c:ac:3f:7e:50:03:03:cb:1e:e9:d8:34:ba:b6:10:a0: 08:64:c3:fb:0c:59:41:82:fb:26:ca:40:d3:e2:e8:05:9d:64: ce:30:c3:0a:d8:72:be:00:4b:d6:6d:5c:17:5c:fb:2f:21:a7: 26:1b:49:30:a9:34:ae:7b:73:ec:d2:b2:f5:ac:26:e7:1d:e8: a0:56:88:19:83:25:ee:99:ba:d6:c7:d0:86:61:ed:6c:a3:6c: d4:08:07:25:b3:a7:4a:f6:14:65:38:c6:09:f7:79:aa:d6:63: 32:ab:78:0a:87:81:03:eb:35:4f:61:30:31:f2:17:18:b0:0e: e3:78:0c:c9:6f:d8:f1:03:8c:5e:b0:8c:4c:fe:36:7b:cd:80: 1b:5c:ac:d3:d4:6d:b6:07:da:fb:9f:77:61:cd:18:99:cd:32: 4d:e4:9f:13:99:6b:94:fc:d0:ea:84:27:cc:aa:b4:b6:e6:f2: aa:7f:85:80:48:26:fe:cd:e5:d6:73:3f:49:94:e1:4d:d7:de: 98:2c:d0:92:d7:82:27:64:0e:37:83:b4:65:29:de:98:3e:72: ad:f9:fe:25:5c:c3:ab:f1:16:a7:60:c6:02:04:3b:97:47:74: 65:58:ee:a8:f9:13:b8:9d:c3:4c:85:cd:29:2f:96:4b:b7:68: b1:40:8c:c7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGlrPZNavacq//N1Kqk/sTdLuADowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNDA3MTUwNTU1MDFaFw0yNTA3MTQwNjAwMDFaMDMxMTAvBgNV BAMTKDJCRDVDNDkxNzY3N0MzRDQ5Qjg3RUNDMUJCRjZCQkE2QjEwQjFEQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5f2wwVJMr0wIhOAeQJ5WnCm1N RHQ9lmFp2yl5S9MrCJJER+hDvoDJKzUNoDOArdt1gv9MA74kHirCQ50JXpJgwK9Y 22zJuYJuQfV8tl9ltG7zZG38DFsRMVfnj5RqrbtmzNJb4W7P1qsHYzfbGN+K5fi6 /Ya2jBFAKWKUNr7qFgy+dMMtHbRShCk1rebE1GgMKd3gE2LQso7ldkRhYEbqZDDA MJyk/biwRz2wbO9QAj30ZTHvKAVweyBq9/GNUOEhN1GUtmvC2Fb7sXRqkKoxle0c dI+UuXcQ8rwAwqBqsE6vlukzXfqfqIc5FfmOcqQXCgRI4AfioN5Fr2UJPx5xAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUK9XEkXZ3w9Sbh+zBu/a7prELHbkwHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i NmMyLTQyYWI4YjQ3NjI0OS8wLzMyMzQzMDMxM2E2MTY1MzAzMDNhNjE2NTMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzczNTMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAGu AK4AMA0GCSqGSIb3DQEBCwUAA4IBAQC+XCysP35QAwPLHunYNLq2EKAIZMP7DFlB gvsmykDT4ugFnWTOMMMK2HK+AEvWbVwXXPsvIacmG0kwqTSue3Ps0rL1rCbnHeig VogZgyXumbrWx9CGYe1so2zUCAcls6dK9hRlOMYJ93mq1mMyq3gKh4ED6zVPYTAx 8hcYsA7jeAzJb9jxA4xesIxM/jZ7zYAbXKzT1G22B9r7n3dhzRiZzTJN5J8TmWuU /NDqhCfMqrS25vKqf4WASCb+zeXWcz9JlOFN196YLNCS14InZA43g7RlKd6YPnKt +f4lXMOr8RanYMYCBDuXR3RlWO6o+RO4ncNMhc0pL5ZLt2ixQIzH -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org