$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/323430343a613163303a3a2f33322d3332203d3e203535363939.roa File: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (raw, json) Hash identifier: qLMqaWG01btU4DjLVKlNjSmJQeLYWY8XvQDF/McekDU= Subject key identifier: 84:17:E9:EC:80:64:97:74:EC:4E:BD:FB:51:22:87:D6:C3:4D:75:1E Certificate issuer: /CN=1976DD7D4FBDFBEB355F0B96690613959E106872 Certificate serial: 083A530A69C24CBE4649D566B92AA06D1069B9A1 Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/323430343a613163303a3a2f33322d3332203d3e203535363939.roa Signing time: Thu 15 Aug 2024 12:00:01 +0000 ROA not before: Thu 15 Aug 2024 11:55:01 +0000 ROA not after: Thu 14 Aug 2025 12:00:01 +0000 asID: 55699 IP address blocks: 2404:a1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 13:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3a:53:0a:69:c2:4c:be:46:49:d5:66:b9:2a:a0:6d:10:69:b9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872 Validity Not Before: Aug 15 11:55:01 2024 GMT Not After : Aug 14 12:00:01 2025 GMT Subject: CN=8417E9EC80649774EC4EBDFB512287D6C34D751E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:93:82:8d:83:2e:f8:ee:fd:bb:da:b7:36: 30:af:dc:5f:a3:13:93:a3:1f:f0:36:04:3c:37:0d: 0f:47:bf:e4:10:2e:0b:2b:4d:bf:e2:ad:35:f2:8f: 48:4d:bd:a8:23:1b:b4:b4:b8:fc:dc:af:1c:81:18: c3:47:71:1c:2e:f5:e0:48:82:26:a6:3a:8f:5d:0d: 24:0d:08:a4:8b:7e:6a:07:1f:e2:e7:3c:77:3b:18: 12:d0:6f:b9:ee:a4:f2:7a:55:24:00:54:50:2d:fb: 3a:00:fe:d8:eb:6e:04:0c:7d:b7:54:23:0f:e0:c7: 2f:f7:48:fa:ba:ea:30:0c:af:59:68:77:26:f5:18: cc:73:43:94:3a:25:80:fd:2c:fb:c7:02:26:17:e1: 18:61:94:6a:63:91:b6:af:af:63:94:a3:83:c8:00: 3b:02:8f:be:24:43:ea:dd:21:60:ce:f8:70:e9:c5: b5:86:a3:49:4e:03:02:1f:79:f6:71:54:6c:72:fb: d4:5f:68:ba:59:97:f5:af:94:b1:32:47:78:84:7a: 3b:51:32:d7:b1:4c:08:f9:e1:bf:24:4d:ca:00:5b: a6:8a:68:86:a2:36:1a:fe:6f:e6:cf:12:b6:5b:8f: da:4e:65:7d:09:87:87:b9:e1:f0:79:78:d8:5b:32: ce:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:17:E9:EC:80:64:97:74:EC:4E:BD:FB:51:22:87:D6:C3:4D:75:1E X509v3 Authority Key Identifier: keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/323430343a613163303a3a2f33322d3332203d3e203535363939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:a1c0::/32 Signature Algorithm: sha256WithRSAEncryption df:af:57:ed:4c:11:91:3f:fa:25:ed:51:62:7b:cd:c2:f9:bf: 47:53:2c:ee:99:67:a5:7a:c7:fd:f2:65:8a:c1:12:e4:c1:15: aa:ba:84:07:d4:1d:47:9f:a7:7f:51:6e:72:d5:32:33:7a:9a: b0:55:ed:f4:67:fe:a0:5a:40:a9:e4:b6:82:da:e6:6b:3e:9e: 50:0c:5f:a1:8f:5f:00:9f:94:bd:81:1f:cb:6a:72:8b:fc:c3: c9:f5:76:98:c2:e3:70:3d:f7:e5:4f:6f:3c:4b:75:d4:1a:0a: a2:67:99:ac:ce:52:f3:a4:75:0e:96:48:cf:85:e9:4f:19:e2: 32:be:51:b6:e7:79:c2:5a:e0:c2:1c:c1:80:d8:2f:be:d4:19: 00:25:75:fd:98:7c:f7:11:1b:35:b3:5e:49:ef:b7:72:ed:a8: d5:c8:ca:2a:9d:4a:4e:6a:53:c7:52:54:91:e1:5b:13:42:49: 54:3b:da:26:3f:45:1c:19:3b:06:b0:d6:1c:94:7f:3d:1e:f4: 7e:1f:0a:d3:f7:f1:41:1b:5f:0e:7a:b7:da:94:37:ba:d3:b4: 98:0a:a9:d6:0a:a6:f5:95:c3:d2:c7:5c:5c:bf:6b:0d:b3:95: 24:e5:22:9d:27:1c:2f:7c:19:e4:e0:0c:c5:37:2b:3e:4c:5e: fa:b4:4f:08 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUCDpTCmnCTL5GSdVmuSqgbRBpuaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5 RTEwNjg3MjAeFw0yNDA4MTUxMTU1MDFaFw0yNTA4MTQxMjAwMDFaMDMxMTAvBgNV BAMTKDg0MTdFOUVDODA2NDk3NzRFQzRFQkRGQjUxMjI4N0Q2QzM0RDc1MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOZOCjYMu+O79u9q3NjCv3F+j E5OjH/A2BDw3DQ9Hv+QQLgsrTb/irTXyj0hNvagjG7S0uPzcrxyBGMNHcRwu9eBI giamOo9dDSQNCKSLfmoHH+LnPHc7GBLQb7nupPJ6VSQAVFAt+zoA/tjrbgQMfbdU Iw/gxy/3SPq66jAMr1lodyb1GMxzQ5Q6JYD9LPvHAiYX4RhhlGpjkbavr2OUo4PI ADsCj74kQ+rdIWDO+HDpxbWGo0lOAwIfefZxVGxy+9RfaLpZl/WvlLEyR3iEejtR MtexTAj54b8kTcoAW6aKaIaiNhr+b+bPErZbj9pOZX0Jh4e54fB5eNhbMs7/AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUhBfp7IBkl3TsTr37USKH1sNNdR4wHwYDVR0j BBgwFoAUGXbdfU+9++s1XwuWaQYTlZ4QaHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTk5ZWQ5Ni1kNDA4LTQ0MTgtYjgyYS01ZDVhOGU2NjU3ZjMvMC8xOTc2REQ3RDRG QkRGQkVCMzU1RjBCOTY2OTA2MTM5NTlFMTA2ODcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5RTEw Njg3Mi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1OTllZDk2LWQ0MDgtNDQxOC1i ODJhLTVkNWE4ZTY2NTdmMy8wLzMyMzQzMDM0M2E2MTMxNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM1MzUzNjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBKHAMA0GCSqGSIb3 DQEBCwUAA4IBAQDfr1ftTBGRP/ol7VFie83C+b9HUyzumWelesf98mWKwRLkwRWq uoQH1B1Hn6d/UW5y1TIzepqwVe30Z/6gWkCp5LaC2uZrPp5QDF+hj18An5S9gR/L anKL/MPJ9XaYwuNwPfflT288S3XUGgqiZ5mszlLzpHUOlkjPhelPGeIyvlG253nC WuDCHMGA2C++1BkAJXX9mHz3ERs1s15J77dy7ajVyMoqnUpOalPHUlSR4VsTQklU O9omP0UcGTsGsNYclH89HvR+HwrT9/FBG18OerfalDe607SYCqnWCqb1lcPSx1xc v2sNs5Uk5SKdJxwvfBnk4AzFNys+TF76tE8I -----END CERTIFICATE-----Generated at Mon Nov 25 13:02:02 2024 by rpki-client on console-fra.rpki-client.org