$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa File: 323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa (raw, json) Hash identifier: mhxOtleUhwzJQhVm0X1OZ2EBHI9+zCiCaY9ucqS4Jbw= Subject key identifier: 97:4A:9D:AB:57:08:86:48:FB:7A:6D:38:71:35:4E:EE:15:8B:D6:CC Certificate issuer: /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Certificate serial: 0750C5201EF560AD82B08961743DEEA8282D2FEB Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa Signing time: Mon 28 Oct 2024 05:02:55 +0000 ROA not before: Mon 28 Oct 2024 04:57:55 +0000 ROA not after: Mon 27 Oct 2025 05:02:55 +0000 asID: 141968 IP address blocks: 2407:6ac0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:50:c5:20:1e:f5:60:ad:82:b0:89:61:74:3d:ee:a8:28:2d:2f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Validity Not Before: Oct 28 04:57:55 2024 GMT Not After : Oct 27 05:02:55 2025 GMT Subject: CN=974A9DAB57088648FB7A6D3871354EEE158BD6CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:c0:f1:c4:5b:af:fd:79:22:52:cc:ee:0f: 8f:2b:6a:fe:94:6d:f2:0d:7c:87:1d:a2:2a:0d:e6: 83:a8:3b:63:29:bc:0a:4d:4a:9f:8d:49:11:c9:5a: 68:6b:f4:47:a1:4a:38:13:33:60:b0:ea:91:44:28: 0f:3e:10:d3:da:73:2e:f5:ae:9a:e9:2c:4e:40:52: 63:55:be:19:48:1f:a2:2b:e3:d2:d8:d3:92:a8:8b: 68:f8:a0:80:d3:63:20:5a:9c:95:56:6e:cf:8f:b2: 29:2a:a9:d0:61:d4:c4:67:74:aa:32:84:79:7a:22: 19:78:5c:9f:d0:ff:fa:39:fc:4b:26:12:12:0b:1e: 6d:00:db:d2:e6:c9:b5:02:4e:09:e8:7a:c8:f5:a1: 84:a6:5c:10:62:8b:00:dd:d4:95:6b:85:8a:ec:80: 54:f9:a2:80:eb:44:1b:1d:3c:f2:cc:30:ac:09:f6: 7a:f9:5f:8c:b6:37:d6:6d:9c:d5:ec:57:85:7b:89: f7:16:af:86:67:2a:24:15:12:db:94:50:72:a7:81: 02:16:1b:9d:fa:55:e3:8e:29:90:5b:78:81:4f:92: d1:86:72:16:31:a9:95:65:fc:0b:77:28:e8:c3:d7: 42:10:38:78:d4:09:a0:81:ee:74:67:60:41:4f:2d: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4A:9D:AB:57:08:86:48:FB:7A:6D:38:71:35:4E:EE:15:8B:D6:CC X509v3 Authority Key Identifier: keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6ac0:2::/48 Signature Algorithm: sha256WithRSAEncryption 21:f5:e4:79:b0:98:51:1b:ab:9f:d5:37:85:82:fc:cf:45:52: 38:5a:86:41:6b:05:38:2f:76:4e:c9:66:3d:37:70:81:e4:0d: 14:90:e3:24:9c:79:ea:9e:a0:ee:76:88:df:cf:fd:2f:7d:6b: bf:70:27:d7:c7:02:04:1a:66:0a:99:1a:8d:d4:e8:1b:cd:7a: 75:10:a2:81:f1:dd:b7:a2:b4:aa:91:2e:53:ef:0e:5a:fa:79: 02:2a:31:76:80:1f:b8:e9:70:75:ab:9d:04:b6:d2:4e:a3:51: 09:5a:14:63:76:97:e0:2e:e2:80:27:cc:da:80:50:a7:cc:d6: c5:a9:ac:d7:a5:1b:50:37:13:a7:27:37:bb:eb:8d:50:b4:8b: 7c:ed:6a:ad:7b:c2:4b:a3:2d:3c:07:09:08:0b:79:6e:83:9e: c6:00:c1:dd:95:a4:d4:d2:4b:85:63:5a:6a:05:35:50:df:10: 7c:4d:da:e0:10:34:e5:fa:31:20:19:e7:9f:25:7b:4f:24:20: 2c:04:70:28:86:bf:c5:b1:5a:3a:a2:81:ec:60:31:ea:06:ad: 0b:d7:fe:b1:0e:96:a4:5a:03:83:eb:66:09:e1:ef:55:46:df: a5:9d:ff:40:f4:9a:1e:d4:7a:8e:c2:62:d2:88:39:37:8e:16: 09:a9:b7:f8 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUB1DFIB71YK2CsIlhdD3uqCgtL+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVB NEY2OTM4NzAeFw0yNDEwMjgwNDU3NTVaFw0yNTEwMjcwNTAyNTVaMDMxMTAvBgNV BAMTKDk3NEE5REFCNTcwODg2NDhGQjdBNkQzODcxMzU0RUVFMTU4QkQ2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9f8DxxFuv/XkiUszuD48rav6U bfINfIcdoioN5oOoO2MpvApNSp+NSRHJWmhr9EehSjgTM2Cw6pFEKA8+ENPacy71 rprpLE5AUmNVvhlIH6Ir49LY05Koi2j4oIDTYyBanJVWbs+PsikqqdBh1MRndKoy hHl6Ihl4XJ/Q//o5/EsmEhILHm0A29LmybUCTgnoesj1oYSmXBBiiwDd1JVrhYrs gFT5ooDrRBsdPPLMMKwJ9nr5X4y2N9ZtnNXsV4V7ifcWr4ZnKiQVEtuUUHKngQIW G536VeOOKZBbeIFPktGGchYxqZVl/At3KOjD10IQOHjUCaCB7nRnYEFPLc/LAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUl0qdq1cIhkj7em04cTVO7hWL1swwHwYDVR0j BBgwFoAU8GFUV0C2tmqdPB0f5PP9taT2k4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzZhMjE3MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC9GMDYxNTQ1NzQw QjZCNjZBOUQzQzFEMUZFNEYzRkRCNUE0RjY5Mzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVBNEY2 OTM4Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB2rAAAIw DQYJKoZIhvcNAQELBQADggEBACH15HmwmFEbq5/VN4WC/M9FUjhahkFrBTgvdk7J Zj03cIHkDRSQ4ySceeqeoO52iN/P/S99a79wJ9fHAgQaZgqZGo3U6BvNenUQooHx 3beitKqRLlPvDlr6eQIqMXaAH7jpcHWrnQS20k6jUQlaFGN2l+Au4oAnzNqAUKfM 1sWprNelG1A3E6cnN7vrjVC0i3ztaq17wkujLTwHCQgLeW6DnsYAwd2VpNTSS4Vj WmoFNVDfEHxN2uAQNOX6MSAZ558le08kICwEcCiGv8WxWjqigexgMeoGrQvX/rEO lqRaA4PrZgnh71VG36Wd/0D0mh7Ueo7CYtKIOTeOFgmpt/g= -----END CERTIFICATE-----Generated at Mon Nov 25 04:42:07 2024 by rpki-client on console-ams.rpki-client.org