$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a3a2f33322d3332203d3e20313338383834.roa File: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (raw, json) Hash identifier: IXux5BvkTuomSLlcfO/atgRq6FYsd2lPJysl7WoyMqY= Subject key identifier: 8D:00:04:A2:87:00:14:18:0E:14:04:02:D8:0B:55:13:B2:13:40:74 Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 6AE9C25939D894AE2A2ABC4C57F5A9A1B4FFB060 Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a3a2f33322d3332203d3e20313338383834.roa Signing time: Sat 10 Aug 2024 10:02:28 +0000 ROA not before: Sat 10 Aug 2024 09:57:28 +0000 ROA not after: Sat 09 Aug 2025 10:02:28 +0000 asID: 138884 IP address blocks: 2404:ce40::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 10:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e9:c2:59:39:d8:94:ae:2a:2a:bc:4c:57:f5:a9:a1:b4:ff:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Aug 10 09:57:28 2024 GMT Not After : Aug 9 10:02:28 2025 GMT Subject: CN=8D0004A2870014180E140402D80B5513B2134074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2a:c8:15:0b:f4:0e:5b:bb:53:68:40:8a:c7: 29:4b:fa:14:2d:57:02:09:5c:a1:b6:01:d0:63:20: 52:06:c8:35:61:1b:21:3b:7a:c6:43:83:65:63:6a: de:4b:01:59:50:36:11:80:62:44:a1:dd:bf:67:5b: d0:e5:28:61:b4:d0:e0:b1:68:d6:98:79:bb:c0:93: f4:47:68:2b:c1:1e:88:36:69:5e:51:a7:10:60:ae: 9c:d8:a7:57:63:79:d8:a1:09:4f:05:8a:17:28:91: 1a:3d:4a:86:4e:8c:f5:5c:c5:6e:f4:0e:00:b6:77: f2:30:7c:96:24:ac:2f:79:72:ac:ff:56:25:08:24: e8:8a:6a:46:40:70:39:fc:b1:97:fa:40:49:b8:6e: 5d:d4:1f:03:3d:75:cd:9f:e4:c3:43:f6:bb:b0:eb: ff:4c:d6:92:58:9e:b5:98:5e:85:e6:4f:7c:e9:dc: 7f:c9:dd:ea:8b:15:19:eb:db:c2:63:61:c1:c1:9a: 6b:95:5a:38:84:32:b9:96:41:1d:e9:41:b0:ff:a9: 9a:e7:45:42:0e:38:73:f7:65:16:56:32:b0:fb:ad: 2b:d6:4a:6c:fd:1c:16:e8:cf:b5:1f:4d:17:1b:e3: 76:fe:6d:58:a5:8a:d7:0b:fa:44:2c:e3:be:cf:11: 61:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:00:04:A2:87:00:14:18:0E:14:04:02:D8:0B:55:13:B2:13:40:74 X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a3a2f33322d3332203d3e20313338383834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:ce40::/32 Signature Algorithm: sha256WithRSAEncryption 61:2c:5e:ee:c0:d7:2c:63:be:f6:a7:a1:4a:f2:cb:ea:84:cd: be:2c:65:ea:c6:e8:a1:89:fe:02:65:47:33:1e:74:c4:fb:d0: 42:9b:cf:18:b0:b4:90:37:1a:f4:9b:0c:64:c9:4a:9c:21:37: 78:2a:ce:7e:56:87:1a:74:fd:d1:5a:26:d2:ee:75:d3:7e:46: 77:14:28:48:35:86:69:3e:83:42:f3:03:c0:2e:c4:9c:71:44: 83:85:9c:fb:1d:fa:fd:e9:d6:73:e2:b4:e4:c8:83:2b:c1:38: 20:3c:8e:80:5b:50:aa:79:ad:f9:de:ca:f1:b6:99:43:0f:e5: f1:c5:39:fb:d6:43:f1:24:ac:98:54:91:b6:75:53:68:9c:84: 7e:5b:03:b8:bf:59:73:ef:47:73:f4:d9:56:ca:b2:90:cf:ea: 88:42:df:23:ee:cc:fb:1e:2d:a7:84:2d:18:1f:40:57:37:bd: 9b:0b:2c:5f:6a:fa:14:2a:6d:87:c5:e9:4c:90:49:37:56:f0: 74:42:cc:0e:bd:71:f6:67:e0:9a:b2:6f:7c:ef:ea:21:26:e7: d6:f3:fc:0e:b8:a6:04:65:77:b0:a4:90:c0:ca:07:1d:57:c8: 11:ae:8a:1c:6d:88:5a:8c:eb:97:af:b1:61:4e:a3:60:6a:42: 8f:c9:7a:59 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUaunCWTnYlK4qKrxMV/WpobT/sGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNDA4MTAwOTU3MjhaFw0yNTA4MDkxMDAyMjhaMDMxMTAvBgNV BAMTKDhEMDAwNEEyODcwMDE0MTgwRTE0MDQwMkQ4MEI1NTEzQjIxMzQwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmKsgVC/QOW7tTaECKxylL+hQt VwIJXKG2AdBjIFIGyDVhGyE7esZDg2Vjat5LAVlQNhGAYkSh3b9nW9DlKGG00OCx aNaYebvAk/RHaCvBHog2aV5RpxBgrpzYp1djedihCU8FihcokRo9SoZOjPVcxW70 DgC2d/IwfJYkrC95cqz/ViUIJOiKakZAcDn8sZf6QEm4bl3UHwM9dc2f5MND9ruw 6/9M1pJYnrWYXoXmT3zp3H/J3eqLFRnr28JjYcHBmmuVWjiEMrmWQR3pQbD/qZrn RUIOOHP3ZRZWMrD7rSvWSmz9HBboz7UfTRcb43b+bVilitcL+kQs477PEWGpAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUjQAEoocAFBgOFAQC2AtVE7ITQHQwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyMGM2ZDY5LTYyOTAtNDAyZi1h ODRlLWQyODljNmU5M2E3My8wLzMyMzQzMDM0M2E2MzY1MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzODM4MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEzkAwDQYJKoZI hvcNAQELBQADggEBAGEsXu7A1yxjvvanoUryy+qEzb4sZerG6KGJ/gJlRzMedMT7 0EKbzxiwtJA3GvSbDGTJSpwhN3gqzn5Whxp0/dFaJtLuddN+RncUKEg1hmk+g0Lz A8AuxJxxRIOFnPsd+v3p1nPitOTIgyvBOCA8joBbUKp5rfneyvG2mUMP5fHFOfvW Q/EkrJhUkbZ1U2ichH5bA7i/WXPvR3P02VbKspDP6ohC3yPuzPseLaeELRgfQFc3 vZsLLF9q+hQqbYfF6UyQSTdW8HRCzA69cfZn4Jqyb3zv6iEm59bz/A64pgRld7Ck kMDKBx1XyBGuihxtiFqM65evsWFOo2BqQo/Jelk= -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org