$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa File: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (raw, json) Hash identifier: /mZXNu9+SQReAU7jMOiZ9/UmtltzHLxdMGIPnZIiib4= Subject key identifier: 95:78:0D:E4:40:C6:28:DB:52:70:A7:A5:36:F3:1B:9A:CB:03:D1:2F Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 4709B2433CCA7D82BE94093DEA5A8202A9F9ADE5 Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa Signing time: Sat 14 Sep 2024 18:00:02 +0000 ROA not before: Sat 14 Sep 2024 17:55:02 +0000 ROA not after: Sat 13 Sep 2025 18:00:02 +0000 asID: 138884 IP address blocks: 2404:ce40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 10:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:09:b2:43:3c:ca:7d:82:be:94:09:3d:ea:5a:82:02:a9:f9:ad:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Sep 14 17:55:02 2024 GMT Not After : Sep 13 18:00:02 2025 GMT Subject: CN=95780DE440C628DB5270A7A536F31B9ACB03D12F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:70:a9:e6:49:6d:a7:e8:c6:2f:2c:13:f4: 20:87:2f:3d:55:ca:28:2e:ab:f4:89:35:4b:45:96: bb:89:a6:5c:69:55:53:36:a8:08:3e:d6:52:26:6d: 30:70:82:45:1c:17:2a:b3:78:12:4a:a1:f8:34:4d: 5a:f8:f3:38:12:85:7c:17:fb:b6:1e:86:9d:a7:c0: ea:e7:a8:9b:63:ab:ee:8a:82:1b:f2:8e:b5:31:2b: 28:f1:32:ed:eb:07:dc:ed:06:7c:40:ff:fa:7a:53: 88:e7:5b:ee:47:11:48:86:bb:85:90:1d:e3:0e:7e: 46:6b:f9:b2:88:e1:40:56:18:91:f6:f8:bd:ad:ac: a9:cc:2f:f6:78:41:8e:a1:0e:65:d2:1b:d1:ae:07: a6:67:c5:16:cf:8a:8d:a7:8a:7e:08:38:03:ea:49: 77:40:96:4b:9b:82:0a:f2:14:f0:20:6f:26:4c:73: 21:2f:65:8b:03:12:8c:bc:60:70:01:5d:f9:62:7a: 0b:30:dc:7d:43:32:83:5e:a5:b4:bb:e5:15:c9:86: a7:c6:88:23:8c:f3:04:4b:bf:6a:ef:f1:cb:eb:78: 17:d9:9e:34:6a:4a:76:90:c6:66:3f:3f:da:0d:91: 0b:7c:a2:fe:05:56:25:03:a2:23:48:19:d2:25:ea: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:78:0D:E4:40:C6:28:DB:52:70:A7:A5:36:F3:1B:9A:CB:03:D1:2F X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:ce40:1::/48 Signature Algorithm: sha256WithRSAEncryption 41:59:8c:8b:ce:1e:b1:bd:31:c6:b0:23:f3:56:9f:e4:c4:eb: eb:6a:f1:d5:85:50:51:cd:6f:59:bf:5a:e3:87:a5:0e:73:7f: 3c:48:d2:a6:7c:0a:c6:22:bd:98:c4:f1:60:dd:ae:f4:37:96: d9:06:10:d4:7e:77:18:f6:1a:73:3f:2a:32:9d:61:36:19:73: a4:35:3a:45:63:8d:cd:b1:39:0b:23:10:aa:47:8e:25:69:0f: 58:47:c4:8c:1a:e0:10:be:75:e4:3d:af:67:b6:5a:d0:64:c3: ae:94:21:b1:ca:09:76:28:66:39:35:f6:76:cd:d2:e3:9f:e6: 42:a9:70:d2:55:34:1f:bb:3e:f5:dc:e7:a9:d0:a0:08:0d:af: 5a:ae:87:dc:a9:57:ad:90:5b:55:11:2b:77:08:9a:0e:a0:f3: 0e:29:4c:93:e9:1a:e6:54:14:a9:f0:87:39:fb:04:86:db:20: 68:9c:7e:39:c2:ae:b6:04:35:f4:5c:e5:ed:3d:de:45:80:82: ac:46:fa:29:bf:88:32:70:d3:34:2c:ae:a4:54:c9:f3:32:f1: f5:bd:97:11:ec:39:ac:a0:ff:6c:27:ba:02:1a:01:7d:7d:a4: 7a:6c:87:c1:8e:0b:b8:38:11:76:ad:99:78:7b:37:48:87:91: fa:65:c9:2a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIURwmyQzzKfYK+lAk96lqCAqn5reUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNDA5MTQxNzU1MDJaFw0yNTA5MTMxODAwMDJaMDMxMTAvBgNV BAMTKDk1NzgwREU0NDBDNjI4REI1MjcwQTdBNTM2RjMxQjlBQ0IwM0QxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe33Cp5kltp+jGLywT9CCHLz1V yiguq/SJNUtFlruJplxpVVM2qAg+1lImbTBwgkUcFyqzeBJKofg0TVr48zgShXwX +7Yehp2nwOrnqJtjq+6KghvyjrUxKyjxMu3rB9ztBnxA//p6U4jnW+5HEUiGu4WQ HeMOfkZr+bKI4UBWGJH2+L2trKnML/Z4QY6hDmXSG9GuB6ZnxRbPio2nin4IOAPq SXdAlkubggryFPAgbyZMcyEvZYsDEoy8YHABXfliegsw3H1DMoNepbS75RXJhqfG iCOM8wRLv2rv8cvreBfZnjRqSnaQxmY/P9oNkQt8ov4FViUDoiNIGdIl6hThAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUlXgN5EDGKNtScKelNvMbmssD0S8wHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyMGM2ZDY5LTYyOTAtNDAyZi1h ODRlLWQyODljNmU5M2E3My8wLzMyMzQzMDM0M2E2MzY1MzQzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODM4MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBM5AAAEw DQYJKoZIhvcNAQELBQADggEBAEFZjIvOHrG9McawI/NWn+TE6+tq8dWFUFHNb1m/ WuOHpQ5zfzxI0qZ8CsYivZjE8WDdrvQ3ltkGENR+dxj2GnM/KjKdYTYZc6Q1OkVj jc2xOQsjEKpHjiVpD1hHxIwa4BC+deQ9r2e2WtBkw66UIbHKCXYoZjk19nbN0uOf 5kKpcNJVNB+7PvXc56nQoAgNr1quh9ypV62QW1URK3cImg6g8w4pTJPpGuZUFKnw hzn7BIbbIGicfjnCrrYENfRc5e093kWAgqxG+im/iDJw0zQsrqRUyfMy8fW9lxHs Oayg/2wnugIaAX19pHpsh8GOC7g4EXatmXh7N0iHkfplySo= -----END CERTIFICATE-----Generated at Fri Nov 22 03:51:02 2024 by rpki-client on console-fra.rpki-client.org