$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a363a3a2f34382d3438203d3e20313431393638.roa File: 323430373a366163303a363a3a2f34382d3438203d3e20313431393638.roa (raw, json) Hash identifier: 10e/sVVO6EupS3RVFNeyMg4lda2Dkn4iEE7+U5ce94Q= Subject key identifier: 55:C0:6C:B2:FA:74:29:57:65:54:14:A7:7D:26:CF:44:C7:84:3E:22 Certificate issuer: /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Certificate serial: 243C0A766CC9367602B4E6869B2EFDEB6951BF31 Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a363a3a2f34382d3438203d3e20313431393638.roa Signing time: Mon 28 Oct 2024 05:02:55 +0000 ROA not before: Mon 28 Oct 2024 04:57:55 +0000 ROA not after: Mon 27 Oct 2025 05:02:55 +0000 asID: 141968 IP address blocks: 2407:6ac0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3c:0a:76:6c:c9:36:76:02:b4:e6:86:9b:2e:fd:eb:69:51:bf:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Validity Not Before: Oct 28 04:57:55 2024 GMT Not After : Oct 27 05:02:55 2025 GMT Subject: CN=55C06CB2FA742957655414A77D26CF44C7843E22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:15:6b:39:3e:39:64:a4:8e:f7:a7:d0:d4: 3c:03:24:7c:5d:99:9b:5b:2a:9e:9b:5b:2d:77:ba: 47:4b:d3:ba:3a:24:d2:d5:f8:c2:e1:70:5f:e7:35: 7a:76:f9:73:10:db:d2:47:52:c3:a8:1b:3a:8b:e2: 33:32:01:fa:e4:21:e0:bc:e3:94:c6:64:0a:6d:74: 32:98:55:ae:24:6c:64:9b:01:30:71:95:64:32:c9: 96:42:6a:6f:ed:c6:de:cd:d5:2d:6a:3d:aa:44:35: d5:75:08:c4:49:33:59:67:21:f1:b7:3c:4c:35:99: 50:5a:34:f8:3f:69:fa:68:68:92:60:ea:73:de:18: 2c:3e:4b:3a:2d:52:50:e0:cd:9c:26:7a:35:b1:76: a2:13:ce:43:12:7a:2e:cc:f0:c8:a0:ae:ef:14:a2: 6f:0b:4d:b9:ca:43:3b:78:a2:36:c9:aa:6c:f7:96: 17:b1:49:cf:fe:a6:c6:cc:26:1a:fc:a3:4b:61:fa: 79:e6:00:13:d7:8c:3a:ab:4c:c4:17:c8:e4:ff:af: eb:3c:f9:a1:cd:cf:8d:ef:02:d4:99:16:48:a1:11: e9:47:0f:e9:cd:1b:5c:4e:86:bc:1a:a1:88:ae:ea: 66:dd:c7:0b:28:bc:db:26:36:c3:7f:63:43:8d:a9: 8b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C0:6C:B2:FA:74:29:57:65:54:14:A7:7D:26:CF:44:C7:84:3E:22 X509v3 Authority Key Identifier: keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a363a3a2f34382d3438203d3e20313431393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6ac0:6::/48 Signature Algorithm: sha256WithRSAEncryption b9:f3:c5:b3:38:17:ba:42:1c:65:5a:6c:0e:06:5f:46:c3:64: 16:9a:e0:8d:fe:93:39:c3:fb:da:c8:b1:b9:a1:f6:4f:7a:b3: 82:7c:01:01:9b:47:b7:3c:90:62:c9:47:9c:10:e2:43:0f:2e: 4b:4f:62:55:92:63:d6:fc:46:6f:d3:fd:7b:53:c0:4f:9e:b3: e2:60:dc:8a:ac:79:38:b4:f3:4a:a1:8b:99:73:95:d2:68:1a: c0:35:48:30:ac:1e:8e:ac:30:b1:e1:8d:42:44:11:a0:d8:83: 6b:48:8e:a9:9b:19:52:2b:29:cb:2d:5e:2e:0d:c5:15:5b:5f: 70:9e:4e:e3:99:f5:bb:d8:bf:b5:2a:48:86:cd:20:74:34:db: a4:3a:51:ca:ac:30:1b:c3:38:1e:7d:13:a1:8d:f1:83:cd:73: 58:57:87:88:be:05:5a:5e:c8:a7:69:3b:07:69:51:c2:6a:25: 68:7a:77:54:8e:dc:9f:3e:2f:79:0f:28:f8:7a:92:6c:06:83: 33:85:a0:7b:1d:dd:c8:ac:29:bd:e9:61:05:0e:85:11:d1:a7: ba:92:92:ca:37:c0:da:fb:6c:c4:a3:dd:6f:bd:73:6a:26:57: 09:74:1c:64:26:2d:ec:61:92:b2:68:d9:c8:e2:f8:a4:9d:18: ae:21:59:f2 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUJDwKdmzJNnYCtOaGmy7962lRvzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVB NEY2OTM4NzAeFw0yNDEwMjgwNDU3NTVaFw0yNTEwMjcwNTAyNTVaMDMxMTAvBgNV BAMTKDU1QzA2Q0IyRkE3NDI5NTc2NTU0MTRBNzdEMjZDRjQ0Qzc4NDNFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQBVrOT45ZKSO96fQ1DwDJHxd mZtbKp6bWy13ukdL07o6JNLV+MLhcF/nNXp2+XMQ29JHUsOoGzqL4jMyAfrkIeC8 45TGZAptdDKYVa4kbGSbATBxlWQyyZZCam/txt7N1S1qPapENdV1CMRJM1lnIfG3 PEw1mVBaNPg/afpoaJJg6nPeGCw+SzotUlDgzZwmejWxdqITzkMSei7M8Migru8U om8LTbnKQzt4ojbJqmz3lhexSc/+psbMJhr8o0th+nnmABPXjDqrTMQXyOT/r+s8 +aHNz43vAtSZFkihEelHD+nNG1xOhrwaoYiu6mbdxwsovNsmNsN/Y0ONqYslAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUVcBssvp0KVdlVBSnfSbPRMeEPiIwHwYDVR0j BBgwFoAU8GFUV0C2tmqdPB0f5PP9taT2k4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzZhMjE3MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC9GMDYxNTQ1NzQw QjZCNjZBOUQzQzFEMUZFNEYzRkRCNUE0RjY5Mzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVBNEY2 OTM4Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB2rAAAYw DQYJKoZIhvcNAQELBQADggEBALnzxbM4F7pCHGVabA4GX0bDZBaa4I3+kznD+9rI sbmh9k96s4J8AQGbR7c8kGLJR5wQ4kMPLktPYlWSY9b8Rm/T/XtTwE+es+Jg3Iqs eTi080qhi5lzldJoGsA1SDCsHo6sMLHhjUJEEaDYg2tIjqmbGVIrKcstXi4NxRVb X3CeTuOZ9bvYv7UqSIbNIHQ026Q6UcqsMBvDOB59E6GN8YPNc1hXh4i+BVpeyKdp OwdpUcJqJWh6d1SO3J8+L3kPKPh6kmwGgzOFoHsd3cisKb3pYQUOhRHRp7qSkso3 wNr7bMSj3W+9c2omVwl0HGQmLexhkrJo2cji+KSdGK4hWfI= -----END CERTIFICATE-----Generated at Mon Nov 25 04:42:07 2024 by rpki-client on console-ams.rpki-client.org