$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/323430363a373563303a3a2f33322d3332203d3e20313431303639.roa File: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (raw, json) Hash identifier: s9eoNDTbVeTa+Y1l7MWtlS2D6OwX4TeNODUwWev5U/w= Subject key identifier: 50:34:69:04:DE:1B:CE:55:8F:FB:94:96:51:26:41:F0:95:49:D1:93 Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Certificate serial: 1F2DCC7AF32371DE1CCD1FECED56CC2F24DF7C40 Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/323430363a373563303a3a2f33322d3332203d3e20313431303639.roa Signing time: Thu 16 May 2024 08:00:00 +0000 ROA not before: Thu 16 May 2024 07:55:00 +0000 ROA not after: Thu 15 May 2025 08:00:00 +0000 asID: 141069 IP address blocks: 2406:75c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 15:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2d:cc:7a:f3:23:71:de:1c:cd:1f:ec:ed:56:cc:2f:24:df:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Validity Not Before: May 16 07:55:00 2024 GMT Not After : May 15 08:00:00 2025 GMT Subject: CN=50346904DE1BCE558FFB9496512641F09549D193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:58:6f:3a:e1:84:c7:36:ed:4f:34:69:9a: e7:c5:33:c7:1a:9d:e0:68:e8:36:8f:27:d6:33:22: ac:a7:68:1c:3f:3a:0f:81:ef:35:06:76:5b:f0:8c: a2:85:76:7d:78:b5:29:bd:f8:4a:b0:7d:7b:b9:42: 9b:d8:32:97:50:41:95:e3:8e:92:80:79:72:95:ee: 62:1f:bd:48:11:60:b1:68:e3:b0:c1:5f:1d:2e:16: 48:3c:08:3c:35:7b:80:da:64:57:fa:90:3d:c2:70: 01:90:a3:b3:c1:2c:29:4e:a6:16:88:b0:71:f7:59: f0:24:53:67:ee:28:7f:77:cc:ba:f3:16:02:6e:4b: cd:db:c9:e1:9d:f6:5e:30:e1:98:0c:ce:c4:51:f9: 71:a0:78:4d:d0:a4:c0:86:c9:a9:38:66:20:a0:56: e5:a7:ad:0e:9f:53:82:6c:a6:23:fa:34:90:f4:74: 03:31:98:b3:03:e1:0b:32:24:c7:0e:6d:29:ff:97: 33:be:a2:09:33:5d:f6:6c:85:67:17:7a:e9:fd:e2: 40:37:43:0a:f4:81:4b:9f:61:db:97:62:de:b5:5d: 7f:89:5b:4f:83:cd:b6:9b:87:4f:e2:1c:1f:88:8a: ff:fa:ed:dd:96:e2:4a:bb:97:1e:93:43:2e:5d:d7: 24:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:34:69:04:DE:1B:CE:55:8F:FB:94:96:51:26:41:F0:95:49:D1:93 X509v3 Authority Key Identifier: keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/323430363a373563303a3a2f33322d3332203d3e20313431303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:75c0::/32 Signature Algorithm: sha256WithRSAEncryption 53:d1:ba:0b:4d:a5:3b:cf:77:51:80:45:99:96:5c:dc:f6:40: 0a:92:91:90:34:f5:80:27:3a:07:a2:3c:66:60:db:98:3b:94: e8:60:f3:ed:52:5f:24:4e:f5:e9:e7:c1:57:86:20:f5:33:32: 0b:83:c6:04:df:83:92:7d:81:51:e1:3f:36:15:20:e9:1d:e8: 6a:3a:c2:6e:89:fa:60:2d:59:54:0b:c9:7e:4d:bf:3e:cf:5b: 01:1b:c6:45:1c:19:40:35:27:ac:ea:c6:1a:97:9d:b9:09:03: 8c:72:45:23:2f:2f:ae:d9:7f:b3:aa:db:de:34:f3:15:02:13: c0:d8:b3:64:ac:13:1e:08:fd:ee:8a:1c:ce:f7:e9:20:4c:63: 91:51:c2:bc:51:e8:85:ae:5a:ac:dc:f5:63:b4:84:f0:6a:41: 7b:d2:f7:17:a4:35:9c:88:c6:b2:4c:17:c8:fc:77:f4:4d:e1: 9d:b5:da:6c:01:71:21:2c:5f:75:71:44:18:e3:a6:3c:2e:89: ec:98:76:14:d1:3a:ac:fa:76:b3:78:5d:d6:fc:16:6c:f0:f5: 0d:77:d2:4a:0d:a4:69:45:c3:ed:10:f2:19:48:08:a0:75:1b: c7:25:21:05:2d:e1:ff:8b:cc:84:7f:66:ec:cc:69:dc:7a:db: 6d:65:9d:db -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUHy3MevMjcd4czR/s7VbMLyTffEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD QTEzRjBGQTAeFw0yNDA1MTYwNzU1MDBaFw0yNTA1MTUwODAwMDBaMDMxMTAvBgNV BAMTKDUwMzQ2OTA0REUxQkNFNTU4RkZCOTQ5NjUxMjY0MUYwOTU0OUQxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUn1hvOuGExzbtTzRpmufFM8ca neBo6DaPJ9YzIqynaBw/Og+B7zUGdlvwjKKFdn14tSm9+EqwfXu5QpvYMpdQQZXj jpKAeXKV7mIfvUgRYLFo47DBXx0uFkg8CDw1e4DaZFf6kD3CcAGQo7PBLClOphaI sHH3WfAkU2fuKH93zLrzFgJuS83byeGd9l4w4ZgMzsRR+XGgeE3QpMCGyak4ZiCg VuWnrQ6fU4JspiP6NJD0dAMxmLMD4QsyJMcObSn/lzO+ogkzXfZshWcXeun94kA3 Qwr0gUufYduXYt61XX+JW0+Dzbabh0/iHB+Iiv/67d2W4kq7lx6TQy5d1yTXAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUUDRpBN4bzlWP+5SWUSZB8JVJ0ZMwHwYDVR0j BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz RjBGQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0NTBkOTU2LTliMDAtNDZjMS1h NjMxLTM1NjRlMTg2YTA3OS8wLzMyMzQzMDM2M2EzNzM1NjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMwMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGdcAwDQYJKoZI hvcNAQELBQADggEBAFPRugtNpTvPd1GARZmWXNz2QAqSkZA09YAnOgeiPGZg25g7 lOhg8+1SXyRO9ennwVeGIPUzMguDxgTfg5J9gVHhPzYVIOkd6Go6wm6J+mAtWVQL yX5Nvz7PWwEbxkUcGUA1J6zqxhqXnbkJA4xyRSMvL67Zf7Oq29408xUCE8DYs2Ss Ex4I/e6KHM736SBMY5FRwrxR6IWuWqzc9WO0hPBqQXvS9xekNZyIxrJMF8j8d/RN 4Z212mwBcSEsX3VxRBjjpjwuieyYdhTROqz6drN4Xdb8Fmzw9Q130koNpGlFw+0Q 8hlICKB1G8clIQUt4f+LzIR/ZuzMadx6221lnds= -----END CERTIFICATE-----Generated at Fri Feb 21 11:05:48 2025 by rpki-client