$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f33322d3438203d3e203538333936.roa File: 323430303a396338303a3a2f33322d3438203d3e203538333936.roa (raw, json) Hash identifier: OSLjhKgnb6Lo4gqrmy0viWqKviTqdFEXFz6x1ALGsXY= Subject key identifier: E0:34:7B:AA:77:AE:FB:EB:00:6C:BC:88:B9:4E:26:B9:80:13:CF:01 Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Certificate serial: 29360E14F3755D711A084D62F7F5AFD3A691C835 Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f33322d3438203d3e203538333936.roa Signing time: Sat 26 Oct 2024 16:26:00 +0000 ROA not before: Sat 26 Oct 2024 16:21:00 +0000 ROA not after: Sat 25 Oct 2025 16:26:00 +0000 asID: 58396 IP address blocks: 2400:9c80::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 00:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:36:0e:14:f3:75:5d:71:1a:08:4d:62:f7:f5:af:d3:a6:91:c8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Validity Not Before: Oct 26 16:21:00 2024 GMT Not After : Oct 25 16:26:00 2025 GMT Subject: CN=E0347BAA77AEFBEB006CBC88B94E26B98013CF01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:46:6a:6c:b1:5c:19:59:9c:5f:de:ad:51:61: c3:33:1b:a6:7c:c1:d1:ca:60:34:b5:82:e5:b8:0d: df:5d:25:21:6a:4d:5b:6f:6c:7d:23:e0:d4:ae:5b: ed:bb:2b:8a:a0:b1:18:c6:0a:89:3a:2a:9d:07:74: e7:b0:18:a8:9a:d3:77:2e:24:83:64:97:c3:f9:10: d0:6a:44:ac:27:75:78:b5:06:26:a3:8e:00:96:2a: e2:88:af:60:88:58:ec:27:47:6d:78:ff:f0:d5:93: 99:78:5e:17:f3:0a:b0:d7:a5:e5:46:3e:d8:53:2f: 7c:9e:1f:ad:fc:99:d0:26:2c:b2:18:3d:b5:7a:aa: 6b:d1:2e:50:11:63:f9:e0:a6:b0:81:e4:70:7c:68: 84:2a:76:72:90:a3:3d:13:f1:ff:7d:3c:c7:39:f7: b0:c0:26:74:24:72:42:2e:7a:1a:f4:a1:1b:a8:34: d3:72:17:a4:98:46:ed:4e:46:ba:81:75:08:04:7f: 00:d3:67:2d:06:ba:87:c1:a4:95:77:7f:25:38:ad: e2:f6:88:45:f2:66:7d:17:b2:b6:76:df:98:a4:f7: 64:4f:c5:28:7e:8a:8e:c5:d6:67:8b:3a:fa:15:78: d3:a2:5c:2e:71:00:82:b2:ec:0e:1e:40:20:2a:e0: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:34:7B:AA:77:AE:FB:EB:00:6C:BC:88:B9:4E:26:B9:80:13:CF:01 X509v3 Authority Key Identifier: keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f33322d3438203d3e203538333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9c80::/32 Signature Algorithm: sha256WithRSAEncryption 3b:02:b5:82:cc:4e:c5:07:e6:71:ae:16:1b:ca:63:0d:80:12: 6c:1a:f4:76:41:46:91:b6:c9:02:b5:fb:b2:68:dd:b0:41:83: f5:f8:a8:69:fc:a9:92:e1:38:08:81:5f:af:50:29:a2:44:cd: 10:8a:10:1f:79:4a:03:ea:bc:33:ab:12:77:c4:73:b8:07:d6: 8c:e0:63:c4:09:1d:c4:da:c9:33:52:53:aa:d6:c7:ad:7c:13: 8f:11:8e:2c:f3:42:90:f5:dc:ce:89:e5:1d:e1:d4:72:b3:3b: 4e:f1:42:64:73:d3:09:1a:dd:f7:f5:4f:5a:55:97:41:3f:35: 03:11:da:b1:93:c7:fb:62:59:3f:dc:bf:a8:ba:5e:c9:26:9e: 5a:3e:3d:b9:d3:ad:0b:92:58:04:79:c6:10:1f:a2:97:11:40: e6:32:b8:35:72:9f:df:56:52:1d:50:27:43:40:4e:46:3c:49: c7:16:0e:08:39:c2:d9:97:49:18:5a:7e:f7:92:73:d2:8f:23: fe:67:db:97:a0:b9:98:de:2a:46:0c:7b:6c:a1:9a:d2:59:0c: 39:f3:c3:e8:83:d5:ed:bb:f8:23:d7:2e:53:18:82:ee:d8:6b: 28:7a:6b:9f:3f:92:6d:80:87:75:c2:b3:2c:bf:60:41:d0:60: ad:1c:84:aa -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUKTYOFPN1XXEaCE1i9/Wv06aRyDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1 N0NFQUQ4QzAeFw0yNDEwMjYxNjIxMDBaFw0yNTEwMjUxNjI2MDBaMDMxMTAvBgNV BAMTKEUwMzQ3QkFBNzdBRUZCRUIwMDZDQkM4OEI5NEUyNkI5ODAxM0NGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYRmpssVwZWZxf3q1RYcMzG6Z8 wdHKYDS1guW4Dd9dJSFqTVtvbH0j4NSuW+27K4qgsRjGCok6Kp0HdOewGKia03cu JINkl8P5ENBqRKwndXi1BiajjgCWKuKIr2CIWOwnR214//DVk5l4XhfzCrDXpeVG PthTL3yeH638mdAmLLIYPbV6qmvRLlARY/ngprCB5HB8aIQqdnKQoz0T8f99PMc5 97DAJnQkckIuehr0oRuoNNNyF6SYRu1ORrqBdQgEfwDTZy0GuofBpJV3fyU4reL2 iEXyZn0XsrZ235ik92RPxSh+io7F1meLOvoVeNOiXC5xAIKy7A4eQCAq4LVRAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU4DR7qneu++sAbLyIuU4muYATzwEwHwYDVR0j BBgwFoAUAZxOJu7CUuph+7Cf2FbN0FfOrYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDVjNDcxNS0yODJlLTQ1N2YtYjg5ZS0wNDFiZjkxMTBhZjgvMC8wMTlDNEUyNkVF QzI1MkVBNjFGQkIwOUZEODU2Q0REMDU3Q0VBRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1N0NF QUQ4Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1LTI4MmUtNDU3Zi1i ODllLTA0MWJmOTExMGFmOC8wLzMyMzQzMDMwM2EzOTYzMzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzgzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAJyAMA0GCSqGSIb3 DQEBCwUAA4IBAQA7ArWCzE7FB+ZxrhYbymMNgBJsGvR2QUaRtskCtfuyaN2wQYP1 +Khp/KmS4TgIgV+vUCmiRM0QihAfeUoD6rwzqxJ3xHO4B9aM4GPECR3E2skzUlOq 1setfBOPEY4s80KQ9dzOieUd4dRysztO8UJkc9MJGt339U9aVZdBPzUDEdqxk8f7 Ylk/3L+oul7JJp5aPj25060LklgEecYQH6KXEUDmMrg1cp/fVlIdUCdDQE5GPEnH Fg4IOcLZl0kYWn73knPSjyP+Z9uXoLmY3ipGDHtsoZrSWQw588Pog9Xtu/gj1y5T GILu2GsoemufP5JtgId1wrMsv2BB0GCtHISq -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org