$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa File: 323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa (raw, json) Hash identifier: i9GvNkyfVktZnuc1oAELuofP3JYCpb4PpDLCTWU1Jg8= Subject key identifier: 58:0C:AF:49:06:B0:81:AA:33:06:8A:7F:FE:BE:DB:B1:20:D2:34:90 Certificate issuer: /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Certificate serial: 0BD0FC6821A054874DFE2EB92949A1CAC90B8EA6 Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa Signing time: Mon 28 Oct 2024 05:02:55 +0000 ROA not before: Mon 28 Oct 2024 04:57:55 +0000 ROA not after: Mon 27 Oct 2025 05:02:55 +0000 asID: 141968 IP address blocks: 2407:6ac0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 14:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d0:fc:68:21:a0:54:87:4d:fe:2e:b9:29:49:a1:ca:c9:0b:8e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Validity Not Before: Oct 28 04:57:55 2024 GMT Not After : Oct 27 05:02:55 2025 GMT Subject: CN=580CAF4906B081AA33068A7FFEBEDBB120D23490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:ad:1f:99:ff:75:5b:2b:b8:23:e8:ba:89: e2:68:dc:36:c0:eb:04:02:c1:b1:a8:95:b7:80:81: 5c:1e:dd:fc:a7:e3:6a:4a:c4:82:92:30:5d:e8:82: 61:ea:ea:55:83:9b:74:b9:72:fc:44:7a:15:bb:61: 3f:ec:f2:73:d3:40:88:11:58:4c:a6:43:e3:2a:47: 5b:9c:02:61:ca:c8:69:80:63:be:b4:5d:0e:d3:65: 64:16:14:6d:1c:f0:e4:32:5c:df:d3:75:ab:8a:bc: 33:9e:42:a0:d8:df:63:66:bd:e1:4c:12:90:ce:c9: 7b:07:20:8d:e2:19:10:9b:54:0d:a9:1e:8b:25:c6: 1d:fc:c5:6e:48:9c:b9:ad:29:ab:44:c3:d9:b4:aa: ba:73:35:a4:5d:c4:27:d4:1b:39:3a:e1:67:55:1a: 89:9c:6d:09:95:de:2a:60:19:d4:48:38:9b:95:0d: 79:99:fe:8f:d4:a0:cf:12:4a:14:d8:18:86:47:83: f1:1f:80:d8:e4:7d:6f:22:8e:49:13:0d:36:24:a7: 2b:27:75:fc:14:74:12:7d:61:42:47:5c:6f:6c:51: 90:89:45:07:0a:f3:98:31:29:79:15:07:9e:de:98: cd:b2:35:88:e0:a8:c1:69:82:01:72:8e:e6:3c:f1: c4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0C:AF:49:06:B0:81:AA:33:06:8A:7F:FE:BE:DB:B1:20:D2:34:90 X509v3 Authority Key Identifier: keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6ac0:8::/48 Signature Algorithm: sha256WithRSAEncryption b0:2b:f0:21:0d:67:76:83:5f:2f:ca:67:6d:78:f3:07:06:ee: 3c:ba:f3:de:31:18:1f:bd:b8:5f:d7:39:06:7f:2f:4f:49:65: f1:fe:91:a2:2c:a3:5e:a7:2a:17:44:d9:fa:b3:22:97:5e:40: ad:f2:f2:1d:3e:fa:45:d8:34:a6:1d:09:d6:6a:38:ec:af:64: 7b:cc:24:39:f5:71:12:12:e9:86:30:b6:d8:23:98:b8:a1:89: b9:9c:0d:39:5a:3c:88:0f:5f:0a:0b:a7:9f:ca:6a:ca:44:ba: 69:8c:9d:23:c5:74:4d:05:25:b9:64:a8:9c:34:2b:d2:f6:0b: e8:63:91:16:36:4d:21:bf:d9:6e:8f:49:c6:e1:0e:95:6b:77: bc:83:3b:72:ed:5f:64:1e:6c:26:05:83:fb:3f:77:b0:a5:c9: 3f:87:da:36:66:8c:f1:3d:df:a2:a5:f6:0a:5e:cb:40:df:18: b0:84:22:55:cd:20:12:6e:37:1a:6a:ff:71:55:3d:f4:bb:b9: 72:c4:a0:09:3b:be:e0:f3:3d:ef:6e:5f:69:3d:b5:fd:a3:17: 76:e6:80:c7:11:bd:cb:e2:e3:49:70:52:2f:6e:2e:16:9b:5c: 98:af:32:b5:7d:b8:31:f5:96:7b:7a:27:40:5d:fa:ec:a6:2a: 60:70:9d:a0 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUC9D8aCGgVIdN/i65KUmhyskLjqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVB NEY2OTM4NzAeFw0yNDEwMjgwNDU3NTVaFw0yNTEwMjcwNTAyNTVaMDMxMTAvBgNV BAMTKDU4MENBRjQ5MDZCMDgxQUEzMzA2OEE3RkZFQkVEQkIxMjBEMjM0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wK0fmf91Wyu4I+i6ieJo3DbA 6wQCwbGolbeAgVwe3fyn42pKxIKSMF3ogmHq6lWDm3S5cvxEehW7YT/s8nPTQIgR WEymQ+MqR1ucAmHKyGmAY760XQ7TZWQWFG0c8OQyXN/TdauKvDOeQqDY32NmveFM EpDOyXsHII3iGRCbVA2pHoslxh38xW5InLmtKatEw9m0qrpzNaRdxCfUGzk64WdV GomcbQmV3ipgGdRIOJuVDXmZ/o/UoM8SShTYGIZHg/EfgNjkfW8ijkkTDTYkpysn dfwUdBJ9YUJHXG9sUZCJRQcK85gxKXkVB57emM2yNYjgqMFpggFyjuY88cTJAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUWAyvSQawgaozBop//r7bsSDSNJAwHwYDVR0j BBgwFoAU8GFUV0C2tmqdPB0f5PP9taT2k4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzZhMjE3MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC9GMDYxNTQ1NzQw QjZCNjZBOUQzQzFEMUZFNEYzRkRCNUE0RjY5Mzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVBNEY2 OTM4Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB2rAAAgw DQYJKoZIhvcNAQELBQADggEBALAr8CENZ3aDXy/KZ2148wcG7jy6894xGB+9uF/X OQZ/L09JZfH+kaIso16nKhdE2fqzIpdeQK3y8h0++kXYNKYdCdZqOOyvZHvMJDn1 cRIS6YYwttgjmLihibmcDTlaPIgPXwoLp5/KaspEummMnSPFdE0FJblkqJw0K9L2 C+hjkRY2TSG/2W6PScbhDpVrd7yDO3LtX2QebCYFg/s/d7ClyT+H2jZmjPE936Kl 9gpey0DfGLCEIlXNIBJuNxpq/3FVPfS7uXLEoAk7vuDzPe9uX2k9tf2jF3bmgMcR vcvi40lwUi9uLhabXJivMrV9uDH1lnt6J0Bd+uymKmBwnaA= -----END CERTIFICATE-----Generated at Sun Feb 16 21:56:05 2025 by rpki-client