$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa File: 323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa (raw, json) Hash identifier: U9S7Wfb5zmkUSyfuvsvwyxT7R2cqY8tNxH5lmf7HAjY= Subject key identifier: 2E:33:86:D8:D0:F6:06:CA:42:C3:EC:F6:4B:D5:98:CD:4D:5D:47:E1 Certificate issuer: /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Certificate serial: ABABEFACC7AE70572A016EA8D5984F9EF5A05E Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa Signing time: Mon 01 Jul 2024 01:04:47 +0000 ROA not before: Mon 01 Jul 2024 00:59:47 +0000 ROA not after: Mon 30 Jun 2025 01:04:47 +0000 asID: 38500 IP address blocks: 2403:2700:4003::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 11:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ab:ab:ef:ac:c7:ae:70:57:2a:01:6e:a8:d5:98:4f:9e:f5:a0:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Validity Not Before: Jul 1 00:59:47 2024 GMT Not After : Jun 30 01:04:47 2025 GMT Subject: CN=2E3386D8D0F606CA42C3ECF64BD598CD4D5D47E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:18:20:ab:f8:7e:18:f1:f9:0e:d1:f8:d5: c9:6d:7a:b7:f3:d5:0f:58:e5:a1:93:82:90:0a:02: f9:ad:f1:f6:ae:c0:d3:f7:bc:a6:a0:dc:33:16:a7: a7:28:fc:54:78:f0:6b:1c:3f:46:a1:c4:8f:c0:bf: 81:c2:d6:dc:9b:50:3c:52:2f:9c:cb:3a:ad:f3:59: f3:2e:6d:be:58:cf:a5:6a:6e:8d:47:03:7f:43:ba: e4:4a:d8:4d:23:94:c4:3d:a7:44:17:67:eb:23:05: fc:0c:8f:d9:d5:36:5e:18:48:4b:f0:b5:29:79:b8: 1a:57:89:48:a5:93:ed:24:55:48:b3:c2:79:57:76: 4c:2e:cb:2d:e7:59:95:03:71:23:7e:b9:1e:1d:81: 01:6b:03:c0:dc:af:66:b4:51:eb:cf:3f:80:e7:66: 25:78:53:89:04:00:20:15:30:f6:be:ca:dc:d6:31: b5:15:fa:84:54:3c:a8:d0:5b:a4:00:08:90:0d:35: 82:2c:ca:2a:64:78:f9:aa:13:69:98:e4:30:c6:2d: ea:da:f4:8c:cc:76:73:a3:12:bb:e2:79:a7:16:98: 35:da:95:43:5d:a9:fb:5b:c0:38:6e:4b:22:11:f0: 73:98:5f:f3:a4:72:15:0d:f4:df:ef:9b:e8:2c:cf: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:33:86:D8:D0:F6:06:CA:42:C3:EC:F6:4B:D5:98:CD:4D:5D:47:E1 X509v3 Authority Key Identifier: keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2700:4003::/48 Signature Algorithm: sha256WithRSAEncryption 30:9f:31:2d:f4:4f:31:53:38:c9:65:35:f7:69:a5:e3:92:42: de:d2:49:c3:3b:68:bd:68:b2:d2:a4:16:4a:dd:95:2f:92:c3: 5e:3b:c0:42:f1:bc:df:1a:93:e0:01:1f:45:55:c0:38:e6:5e: d5:62:c2:36:d4:c7:ef:a0:7a:25:b7:1e:d5:71:7c:68:bd:3e: 41:da:a7:23:02:60:59:f7:d2:2a:6f:98:ff:93:0a:e7:8d:ef: f8:b0:f7:7a:24:95:14:34:65:08:09:9d:3b:49:88:25:a5:f9: b8:bb:37:dd:c8:e0:2d:75:cd:15:95:a8:cc:51:d3:30:96:ed: 96:52:c0:34:79:02:69:2d:65:be:c5:73:e9:fe:19:e0:eb:a7: c5:52:68:14:03:13:58:4c:4a:5f:52:9c:94:c5:12:eb:8b:35: 30:30:02:6d:33:97:96:11:f8:6d:c6:fe:01:d9:72:57:9a:de: 56:bb:db:38:2f:64:a0:6b:a4:fb:bf:97:30:10:52:cd:41:ed: 6f:27:78:bb:24:c7:f6:4d:97:cd:1c:ab:60:13:45:3c:cf:b5: 4a:13:0c:66:80:95:f8:8f:64:df:a1:85:1a:5f:08:cf:b3:49: 95:1a:43:a9:72:07:a9:79:a0:30:64:47:43:cb:16:33:9e:2c: 2c:30:bc:8e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAKur76zHrnBXKgFuqNWYT571oF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVD RTFEQjFEMDAeFw0yNDA3MDEwMDU5NDdaFw0yNTA2MzAwMTA0NDdaMDMxMTAvBgNV BAMTKDJFMzM4NkQ4RDBGNjA2Q0E0MkMzRUNGNjRCRDU5OENENEQ1RDQ3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4xggq/h+GPH5DtH41clterfz 1Q9Y5aGTgpAKAvmt8fauwNP3vKag3DMWp6co/FR48GscP0ahxI/Av4HC1tybUDxS L5zLOq3zWfMubb5Yz6Vqbo1HA39DuuRK2E0jlMQ9p0QXZ+sjBfwMj9nVNl4YSEvw tSl5uBpXiUilk+0kVUizwnlXdkwuyy3nWZUDcSN+uR4dgQFrA8Dcr2a0UevPP4Dn ZiV4U4kEACAVMPa+ytzWMbUV+oRUPKjQW6QACJANNYIsyipkePmqE2mY5DDGLera 9IzMdnOjErvieacWmDXalUNdqftbwDhuSyIR8HOYX/OkchUN9N/vm+gsz5YnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQULjOG2ND2BspCw+z2S9WYzU1dR+EwHwYDVR0j BBgwFoAUuwUpPT6dzQ9K2SYQDBkYhc4dsdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDQwNjhmMy1hNzViLTQ3NjQtOWU4MC0xZmE1NzI5MjA3ZmMvMC9CQjA1MjkzRDNF OURDRDBGNEFEOTI2MTAwQzE5MTg4NUNFMURCMUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVDRTFE QjFEMC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05 ZTgwLTFmYTU3MjkyMDdmYy8wLzMyMzQzMDMzM2EzMjM3MzAzMDNhMzQzMDMwMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAMn AEADMA0GCSqGSIb3DQEBCwUAA4IBAQAwnzEt9E8xUzjJZTX3aaXjkkLe0knDO2i9 aLLSpBZK3ZUvksNeO8BC8bzfGpPgAR9FVcA45l7VYsI21MfvoHoltx7VcXxovT5B 2qcjAmBZ99Iqb5j/kwrnje/4sPd6JJUUNGUICZ07SYglpfm4uzfdyOAtdc0VlajM UdMwlu2WUsA0eQJpLWW+xXPp/hng66fFUmgUAxNYTEpfUpyUxRLrizUwMAJtM5eW Efhtxv4B2XJXmt5Wu9s4L2Sga6T7v5cwEFLNQe1vJ3i7JMf2TZfNHKtgE0U8z7VK EwxmgJX4j2TfoYUaXwjPs0mVGkOpcgepeaAwZEdDyxYzniwsMLyO -----END CERTIFICATE-----Generated at Tue Nov 26 12:57:15 2024 by rpki-client on console-fra.rpki-client.org