$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030323a3a2f34382d3438203d3e203338353030.roa File: 323430333a323730303a343030323a3a2f34382d3438203d3e203338353030.roa (raw, json) Hash identifier: 6448WemLHIVZfrOzbR3dn3hegLev10xukOgMBJb2KIU= Subject key identifier: 61:E9:98:5F:CF:69:25:73:93:E4:E7:70:B1:34:03:A6:EC:D4:55:AF Certificate issuer: /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Certificate serial: 66F32200A220DE7A164D26A6F532F62B69EE0D4C Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030323a3a2f34382d3438203d3e203338353030.roa Signing time: Mon 01 Jul 2024 01:04:42 +0000 ROA not before: Mon 01 Jul 2024 00:59:42 +0000 ROA not after: Mon 30 Jun 2025 01:04:42 +0000 asID: 38500 IP address blocks: 2403:2700:4002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f3:22:00:a2:20:de:7a:16:4d:26:a6:f5:32:f6:2b:69:ee:0d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Validity Not Before: Jul 1 00:59:42 2024 GMT Not After : Jun 30 01:04:42 2025 GMT Subject: CN=61E9985FCF69257393E4E770B13403A6ECD455AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:74:68:b0:1c:40:58:ae:ae:c8:49:d8:b2: a5:d2:22:95:6d:48:d6:6e:cb:c5:57:30:e4:c4:27: a3:b2:f5:41:bd:36:1e:4e:89:59:e7:6d:60:a9:2c: ec:c7:db:c1:6f:8a:a2:35:84:61:41:83:4e:14:0d: 52:40:0f:d4:57:c9:fc:e4:53:a5:83:70:35:76:18: 3a:6b:e2:8d:62:0a:8a:ef:47:09:6f:f9:1a:6a:fc: 0a:06:cb:b2:06:1c:42:d2:aa:5d:0a:49:c0:74:4c: 0a:61:25:d5:9c:9d:89:2d:1b:1b:0e:36:42:6c:cb: c0:ba:5b:23:43:5f:de:1f:ff:4c:99:dc:ea:23:4a: 31:cc:91:ff:c9:fd:bc:f0:09:ce:9e:c9:2a:48:c3: e9:13:ff:32:55:b0:ce:bd:0b:c0:cb:ae:cb:66:24: cc:20:eb:2e:c3:66:18:96:56:8c:8a:25:a6:5b:26: 73:cd:39:85:38:f5:9d:d1:68:62:2c:3e:3b:c2:67: fb:68:93:11:35:b4:20:d6:c2:4c:e1:dd:1f:80:42: 3e:01:f0:62:c4:d6:60:31:b0:17:d7:ef:b4:77:c3: e5:85:9c:de:ca:ed:18:dc:79:e3:48:4d:03:b2:8d: 73:78:26:99:da:06:fd:83:7a:09:69:01:55:11:11: ac:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E9:98:5F:CF:69:25:73:93:E4:E7:70:B1:34:03:A6:EC:D4:55:AF X509v3 Authority Key Identifier: keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030323a3a2f34382d3438203d3e203338353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2700:4002::/48 Signature Algorithm: sha256WithRSAEncryption 59:1d:71:de:f1:14:2a:9e:f6:b7:79:cd:67:4b:f8:e8:29:f1: 96:bc:02:11:60:1b:f7:18:57:b1:ae:4c:b0:58:c8:2d:d6:1e: 26:9a:39:69:33:a6:dd:0b:87:d5:61:e8:88:9a:12:84:bc:5b: 80:a9:76:aa:34:68:67:cf:e1:a4:05:ad:9f:69:e8:6a:81:cb: 56:ee:9b:d9:26:9c:34:40:fe:42:36:60:ff:c0:8a:04:60:b4: ea:e9:28:06:6b:32:fc:41:05:48:25:a2:22:3e:b9:b0:34:9b: 69:97:38:d6:3d:f2:77:c2:da:03:88:cb:26:9e:c8:1c:d7:14: 48:4c:93:2d:df:cb:a4:06:65:b7:f3:d4:bb:c2:d7:54:7f:ca: f6:5e:66:9c:13:ee:28:1d:89:23:9a:a8:db:93:94:f4:5f:4b: f3:eb:80:5d:86:e0:09:a6:22:85:bb:e9:c6:ff:19:bc:c6:b1: 96:39:1c:83:fb:d4:f6:ef:f2:d4:db:c2:59:57:eb:c8:a0:41: c1:10:bc:d2:1d:5f:b7:08:9f:3e:3e:ae:57:8f:9c:5c:46:99: ff:71:1f:3e:33:98:b6:2c:e3:2a:06:6d:a3:8a:71:1d:c1:cf: 23:1a:23:74:52:9e:09:01:e4:04:99:44:90:92:68:ef:e9:f5: 61:26:cb:60 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZvMiAKIg3noWTSam9TL2K2nuDUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVD RTFEQjFEMDAeFw0yNDA3MDEwMDU5NDJaFw0yNTA2MzAwMTA0NDJaMDMxMTAvBgNV BAMTKDYxRTk5ODVGQ0Y2OTI1NzM5M0U0RTc3MEIxMzQwM0E2RUNENDU1QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHHRosBxAWK6uyEnYsqXSIpVt SNZuy8VXMOTEJ6Oy9UG9Nh5OiVnnbWCpLOzH28FviqI1hGFBg04UDVJAD9RXyfzk U6WDcDV2GDpr4o1iCorvRwlv+Rpq/AoGy7IGHELSql0KScB0TAphJdWcnYktGxsO NkJsy8C6WyNDX94f/0yZ3OojSjHMkf/J/bzwCc6eySpIw+kT/zJVsM69C8DLrstm JMwg6y7DZhiWVoyKJaZbJnPNOYU49Z3RaGIsPjvCZ/tokxE1tCDWwkzh3R+AQj4B 8GLE1mAxsBfX77R3w+WFnN7K7RjceeNITQOyjXN4JpnaBv2DeglpAVUREayRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUYemYX89pJXOT5OdwsTQDpuzUVa8wHwYDVR0j BBgwFoAUuwUpPT6dzQ9K2SYQDBkYhc4dsdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDQwNjhmMy1hNzViLTQ3NjQtOWU4MC0xZmE1NzI5MjA3ZmMvMC9CQjA1MjkzRDNF OURDRDBGNEFEOTI2MTAwQzE5MTg4NUNFMURCMUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVDRTFE QjFEMC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05 ZTgwLTFmYTU3MjkyMDdmYy8wLzMyMzQzMDMzM2EzMjM3MzAzMDNhMzQzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAMn AEACMA0GCSqGSIb3DQEBCwUAA4IBAQBZHXHe8RQqnva3ec1nS/joKfGWvAIRYBv3 GFexrkywWMgt1h4mmjlpM6bdC4fVYeiImhKEvFuAqXaqNGhnz+GkBa2faehqgctW 7pvZJpw0QP5CNmD/wIoEYLTq6SgGazL8QQVIJaIiPrmwNJtplzjWPfJ3wtoDiMsm nsgc1xRITJMt38ukBmW389S7wtdUf8r2XmacE+4oHYkjmqjbk5T0X0vz64BdhuAJ piKFu+nG/xm8xrGWORyD+9T27/LU28JZV+vIoEHBELzSHV+3CJ8+Pq5Xj5xcRpn/ cR8+M5i2LOMqBm2jinEdwc8jGiN0Up4JAeQEmUSQkmjv6fVhJstg -----END CERTIFICATE-----Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org