$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a3a2f33322d3438203d3e203539323738.roa File: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (raw, json) Hash identifier: IyTH+iDrZwcYpQjVq5OAN4r5uvDjzNsSK7r7mWOE79s= Subject key identifier: 4C:20:F8:10:F1:D7:AC:F4:88:3F:5A:1A:32:41:0C:4F:96:E4:D0:62 Certificate issuer: /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Certificate serial: 4F12A2166A9E3A65B706D666B177285288693F81 Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a3a2f33322d3438203d3e203539323738.roa Signing time: Sat 28 Sep 2024 14:00:02 +0000 ROA not before: Sat 28 Sep 2024 13:55:02 +0000 ROA not after: Sat 27 Sep 2025 14:00:02 +0000 asID: 59278 IP address blocks: 2402:6980::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 13:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:12:a2:16:6a:9e:3a:65:b7:06:d6:66:b1:77:28:52:88:69:3f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Validity Not Before: Sep 28 13:55:02 2024 GMT Not After : Sep 27 14:00:02 2025 GMT Subject: CN=4C20F810F1D7ACF4883F5A1A32410C4F96E4D062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:89:b2:30:ec:fa:d1:0d:ba:f6:d6:a8:60:df: 46:05:bd:08:7b:cc:45:fe:d3:f1:77:b2:9b:c9:62: 3f:ef:c8:4e:26:33:c3:6e:80:a9:02:3a:a6:de:b1: 3e:75:e6:f3:15:58:c0:4e:a4:ba:3d:74:24:3a:10: 24:fd:4e:a7:21:c9:30:93:bb:26:5d:3b:b4:3e:43: 4e:7f:ef:6a:a2:35:9a:91:6e:ca:d1:04:f1:a6:2b: 22:a1:0c:ef:dc:50:90:bd:df:50:29:e7:8c:97:31: 6e:63:62:55:7b:a1:7d:4c:1c:0d:90:c8:19:31:b1: ab:d0:19:9a:a8:95:18:e7:93:4b:74:44:5a:32:5d: 85:5a:23:12:28:dc:b3:95:44:78:21:53:e2:43:53: df:76:35:1d:c4:86:9d:cb:55:58:24:c9:43:0f:73: c7:fa:1e:d7:42:67:39:07:ad:bd:9e:aa:ef:40:e5: ad:90:09:13:55:c0:bf:6e:70:e4:24:d8:7f:cf:f1: d2:89:7e:b9:68:aa:70:46:dd:16:d6:e2:43:4f:1b: e1:50:4e:54:45:79:82:41:70:1a:66:63:2c:f9:1a: f5:e1:b8:da:78:7b:85:bd:04:30:fa:0b:03:d0:f2: 2f:37:2e:cb:f7:fa:ac:43:3c:72:55:1c:aa:e5:0f: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:20:F8:10:F1:D7:AC:F4:88:3F:5A:1A:32:41:0C:4F:96:E4:D0:62 X509v3 Authority Key Identifier: keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a3a2f33322d3438203d3e203539323738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:6980::/32 Signature Algorithm: sha256WithRSAEncryption 93:6a:67:cb:3d:ae:04:c3:da:79:8f:15:fb:a9:db:78:3a:a7: 72:21:4c:62:e9:cc:45:b6:77:9c:75:4e:77:58:d6:0a:25:d5: 95:a6:a5:17:d9:1d:d6:05:92:c2:3a:b8:f2:36:72:19:df:18: ee:5f:ad:52:24:89:e3:31:41:60:91:e1:85:12:f6:74:e9:e3: ba:ff:6f:9b:69:68:f8:04:49:c1:82:c2:64:6e:06:6d:b1:28: c3:5a:ce:d3:a7:50:aa:41:ea:b6:ff:32:86:6b:a6:3f:fc:69: b6:26:7b:cd:bc:03:7e:53:7f:31:89:01:8a:db:58:36:23:f1: 08:10:bf:50:b5:80:fd:b1:ed:f2:ec:84:ba:99:6e:50:bb:4f: 86:2a:8f:a1:84:cb:72:f4:b5:02:57:0f:0b:85:7d:a9:20:a7: 25:da:c8:f9:fe:c7:ed:8d:10:05:f9:3d:27:92:f8:68:5e:a7: a3:32:23:b7:c5:61:77:6e:cf:f8:cb:01:03:b7:b2:67:78:cd: 0b:1b:0b:2b:40:98:5d:39:d9:5c:d9:78:f1:22:34:2f:d3:dd: d7:ef:ea:ff:6a:9e:6a:32:88:c9:c9:b9:1e:24:ae:a3:6e:ca: fb:ca:d3:8a:33:93:e2:9e:de:82:26:a1:cb:61:fd:3f:66:90: a9:76:a7:b0 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUTxKiFmqeOmW3BtZmsXcoUohpP4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVE RDc4QzVCRDAeFw0yNDA5MjgxMzU1MDJaFw0yNTA5MjcxNDAwMDJaMDMxMTAvBgNV BAMTKDRDMjBGODEwRjFEN0FDRjQ4ODNGNUExQTMyNDEwQzRGOTZFNEQwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbibIw7PrRDbr21qhg30YFvQh7 zEX+0/F3spvJYj/vyE4mM8NugKkCOqbesT515vMVWMBOpLo9dCQ6ECT9TqchyTCT uyZdO7Q+Q05/72qiNZqRbsrRBPGmKyKhDO/cUJC931Ap54yXMW5jYlV7oX1MHA2Q yBkxsavQGZqolRjnk0t0RFoyXYVaIxIo3LOVRHghU+JDU992NR3Ehp3LVVgkyUMP c8f6HtdCZzkHrb2equ9A5a2QCRNVwL9ucOQk2H/P8dKJfrloqnBG3RbW4kNPG+FQ TlRFeYJBcBpmYyz5GvXhuNp4e4W9BDD6CwPQ8i83Lsv3+qxDPHJVHKrlD/CZAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUTCD4EPHXrPSIP1oaMkEMT5bk0GIwHwYDVR0j BBgwFoAULSMR9WPfCvjr79ohhxYmtd14xb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjFjNzlmMS0yNjRlLTQyM2YtOWUwOC0wYjI5MDBkYTY5NDkvMC8yRDIzMTFGNTYz REYwQUY4RUJFRkRBMjE4NzE2MjZCNURENzhDNUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVERDc4 QzVCRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmMWM3OWYxLTI2NGUtNDIzZi05 ZTA4LTBiMjkwMGRhNjk0OS8wLzMyMzQzMDMyM2EzNjM5MzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzkzMjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAmmAMA0GCSqGSIb3 DQEBCwUAA4IBAQCTamfLPa4Ew9p5jxX7qdt4OqdyIUxi6cxFtnecdU53WNYKJdWV pqUX2R3WBZLCOrjyNnIZ3xjuX61SJInjMUFgkeGFEvZ06eO6/2+baWj4BEnBgsJk bgZtsSjDWs7Tp1CqQeq2/zKGa6Y//Gm2JnvNvAN+U38xiQGK21g2I/EIEL9QtYD9 se3y7IS6mW5Qu0+GKo+hhMty9LUCVw8LhX2pIKcl2sj5/sftjRAF+T0nkvhoXqej MiO3xWF3bs/4ywEDt7JneM0LGwsrQJhdOdlc2XjxIjQv093X7+r/ap5qMojJybke JK6jbsr7ytOKM5Pint6CJqHLYf0/ZpCpdqew -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:57 2024 by rpki-client on console-ams.rpki-client.org