$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/323430323a366163303a3a2f33332d3333203d3e20313337333036.roa File: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (raw, json) Hash identifier: JzyhQGTzUeLnEUHXH7NE0CSKgoPX1wzlUT6xD8+rNxs= Subject key identifier: 0A:0A:02:3B:6F:FB:69:81:A1:49:C9:1F:7E:CF:1E:C7:78:95:50:12 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 05E55717A77B0C91A4234D40D2671384C8527933 Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/323430323a366163303a3a2f33332d3333203d3e20313337333036.roa Signing time: Mon 01 Jul 2024 01:02:36 +0000 ROA not before: Mon 01 Jul 2024 00:57:36 +0000 ROA not after: Mon 30 Jun 2025 01:02:36 +0000 asID: 137306 IP address blocks: 2402:6ac0::/33 maxlen: 33 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e5:57:17:a7:7b:0c:91:a4:23:4d:40:d2:67:13:84:c8:52:79:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Jul 1 00:57:36 2024 GMT Not After : Jun 30 01:02:36 2025 GMT Subject: CN=0A0A023B6FFB6981A149C91F7ECF1EC778955012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:35:bf:5a:32:0a:eb:b7:f9:6d:a7:9a:7e:49: a6:93:24:06:18:5d:ee:3f:4c:3d:7b:7e:b1:2f:fa: e0:4b:9e:25:68:be:c8:e4:e7:9e:e2:f2:51:05:db: 14:7d:41:a4:ed:ae:15:07:2a:ae:96:d2:2e:75:c0: d1:47:37:ed:bc:8d:1a:c0:ae:ad:12:2d:35:88:80: 23:89:3f:1b:39:4d:3f:8c:79:93:1d:a4:90:7a:a2: 83:5f:67:65:fc:91:3a:44:3d:86:e7:42:72:a5:be: 7d:90:be:1e:12:7e:0e:f4:ac:a7:0b:92:f8:63:ea: 4d:7c:9a:48:d6:fe:12:5d:d9:31:27:46:7c:fe:55: 74:41:80:c6:7d:b4:38:c9:9a:a0:a1:f2:34:04:e8: 83:83:70:03:98:2f:06:5d:9b:b8:5e:3d:cf:1f:9b: 4c:e9:19:34:92:1d:45:84:93:81:29:b9:0b:61:d8: af:96:62:96:70:c1:10:7c:ab:5c:b4:52:29:ef:3c: 3d:de:89:86:22:24:c7:7c:c3:aa:55:bd:13:b1:8d: 97:a2:4f:77:e6:cf:94:af:42:45:f0:37:dc:4f:0e: d3:31:74:0f:5d:16:17:89:d9:42:56:fa:78:f2:20: f9:13:da:15:4f:30:c1:05:ba:e3:8c:66:f3:ba:85: 3d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0A:02:3B:6F:FB:69:81:A1:49:C9:1F:7E:CF:1E:C7:78:95:50:12 X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/323430323a366163303a3a2f33332d3333203d3e20313337333036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:6ac0::/33 Signature Algorithm: sha256WithRSAEncryption 3c:f4:14:05:5e:2c:7e:c8:13:7d:2e:5c:32:75:0a:cc:35:a4: fa:51:0c:4f:d0:8b:6f:dd:33:21:70:62:f1:0b:6e:ee:df:e1: 26:74:bf:d8:67:ff:4f:e1:2c:a4:b9:64:2f:c9:ba:cd:c3:b4: df:06:cf:3b:11:9e:db:a6:a1:7e:9a:c8:f4:26:f5:8b:66:fa: b6:11:a8:b3:3c:e4:90:50:a3:76:29:16:3b:76:db:ec:bd:69: f4:31:08:b3:1f:54:2b:96:4a:4e:fc:da:4e:e3:d0:31:3b:6e: af:88:cc:25:58:35:b7:e6:59:8b:8b:e1:10:23:35:3c:58:c8: ba:2e:62:ea:71:09:91:e8:a3:c2:c0:b2:8f:38:f8:0f:27:76: 2d:a8:96:8d:f0:25:6a:43:96:dc:fe:5b:0e:df:57:db:f5:fe: e8:bb:3d:04:95:2d:b1:80:e2:a7:a5:ce:e2:dc:bb:13:c9:26: 30:8b:e0:71:f9:98:59:29:9b:9e:06:78:8e:87:46:4c:48:89: 77:66:41:8f:eb:6c:51:dc:ae:04:c3:25:ce:1f:4e:ac:8c:73: 27:74:3c:3f:5d:ad:77:0e:de:b8:af:c5:9c:9e:d3:09:be:60: ea:a7:da:8e:4e:27:ee:1f:43:92:27:8c:15:40:67:a4:1a:5f: ff:10:4b:78 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBeVXF6d7DJGkI01A0mcThMhSeTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNDA3MDEwMDU3MzZaFw0yNTA2MzAwMTAyMzZaMDMxMTAvBgNV BAMTKDBBMEEwMjNCNkZGQjY5ODFBMTQ5QzkxRjdFQ0YxRUM3Nzg5NTUwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdNb9aMgrrt/ltp5p+SaaTJAYY Xe4/TD17frEv+uBLniVovsjk557i8lEF2xR9QaTtrhUHKq6W0i51wNFHN+28jRrA rq0SLTWIgCOJPxs5TT+MeZMdpJB6ooNfZ2X8kTpEPYbnQnKlvn2Qvh4Sfg70rKcL kvhj6k18mkjW/hJd2TEnRnz+VXRBgMZ9tDjJmqCh8jQE6IODcAOYLwZdm7hePc8f m0zpGTSSHUWEk4EpuQth2K+WYpZwwRB8q1y0UinvPD3eiYYiJMd8w6pVvROxjZei T3fmz5SvQkXwN9xPDtMxdA9dFheJ2UJW+njyIPkT2hVPMMEFuuOMZvO6hT3zAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUCgoCO2/7aYGhSckffs8ex3iVUBIwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkMzViZjc5LWU4NGEtNDBlMC04 ZmQ0LWYxNjljMTg2YmU4Zi8wLzMyMzQzMDMyM2EzNjYxNjMzMDNhM2EyZjMzMzMy ZDMzMzMyMDNkM2UyMDMxMzMzNzMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGByQCasAAMA0GCSqG SIb3DQEBCwUAA4IBAQA89BQFXix+yBN9LlwydQrMNaT6UQxP0Itv3TMhcGLxC27u 3+EmdL/YZ/9P4SykuWQvybrNw7TfBs87EZ7bpqF+msj0JvWLZvq2EaizPOSQUKN2 KRY7dtvsvWn0MQizH1QrlkpO/NpO49AxO26viMwlWDW35lmLi+EQIzU8WMi6LmLq cQmR6KPCwLKPOPgPJ3YtqJaN8CVqQ5bc/lsO31fb9f7ouz0ElS2xgOKnpc7i3LsT ySYwi+Bx+ZhZKZueBniOh0ZMSIl3ZkGP62xR3K4EwyXOH06sjHMndDw/Xa13Dt64 r8WcntMJvmDqp9qOTifuH0OSJ4wVQGekGl//EEt4 -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:37 2024 by rpki-client on console-ams.rpki-client.org