$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f34382d3438203d3e203538333936.roa File: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (raw, json) Hash identifier: mIjy4vG9DkzvsrVjDWg16zGgG1DEtjjZbFqs7ZW+uDU= Subject key identifier: 2B:DC:7D:62:83:A3:3E:4C:3C:2A:0D:92:1D:55:89:88:28:F5:65:E9 Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Certificate serial: 38E4D059BCE533F49EB79D7589D7EACDD694109A Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f34382d3438203d3e203538333936.roa Signing time: Wed 03 Jan 2024 08:02:04 +0000 ROA not before: Wed 03 Jan 2024 07:57:04 +0000 ROA not after: Wed 01 Jan 2025 08:02:04 +0000 asID: 58396 IP address blocks: 2400:9c80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 00:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e4:d0:59:bc:e5:33:f4:9e:b7:9d:75:89:d7:ea:cd:d6:94:10:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Validity Not Before: Jan 3 07:57:04 2024 GMT Not After : Jan 1 08:02:04 2025 GMT Subject: CN=2BDC7D6283A33E4C3C2A0D921D55898828F565E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:11:c2:6a:9a:c0:68:96:7c:c6:fc:51:54: da:1a:fd:01:5b:9c:70:63:55:cd:44:6d:c0:84:27: 87:ec:4d:1d:78:33:9e:5d:ef:10:88:f5:9d:b6:7c: 8e:64:6a:44:ca:97:1d:02:bb:7b:7c:72:38:08:e4: 28:c4:01:cd:ac:0c:fd:54:7b:4f:7a:8a:97:9d:db: bb:09:5d:fb:36:7b:63:6d:75:c8:13:65:28:5b:cc: 3c:66:48:29:38:f6:ab:b9:49:fa:c7:f8:50:bf:8e: 13:ec:a6:c2:17:28:83:ee:fa:94:c0:cc:f3:b6:4a: 4d:5d:f9:9e:22:99:e6:3c:07:cc:4d:a0:2a:75:ab: 8c:ed:f1:f1:fc:3e:f8:f4:5c:bd:c2:31:ea:88:8d: 51:8a:fd:8f:4e:17:33:1c:ef:ff:d7:f3:56:36:73: 9d:6f:6e:fe:f5:89:d1:a6:a3:f3:07:fd:d6:2d:11: 90:a8:33:db:8f:b5:44:26:43:ed:0e:92:ec:bc:72: 05:fd:b9:bd:85:79:b2:c6:ce:38:63:16:70:df:33: a2:b4:98:8e:0e:91:c9:25:69:94:a5:c3:19:19:bc: d6:c4:87:c8:cd:21:3f:24:55:8a:ed:5c:01:15:ef: 58:1c:4c:3b:dd:33:97:92:45:24:df:55:3d:68:6b: a2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DC:7D:62:83:A3:3E:4C:3C:2A:0D:92:1D:55:89:88:28:F5:65:E9 X509v3 Authority Key Identifier: keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f34382d3438203d3e203538333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9c80::/48 Signature Algorithm: sha256WithRSAEncryption 1d:bd:52:d5:99:50:46:80:38:4c:2f:fd:6b:de:1c:98:d7:96: 2c:a9:c9:3c:f7:cf:44:82:1a:54:2a:1c:33:f1:58:80:b2:b3: 5f:79:c0:c8:4b:6d:88:fd:ae:98:22:f8:58:79:c3:37:be:f3: 5f:bc:29:d7:f7:bc:1f:8a:73:6a:51:98:7d:0b:73:e0:a9:be: f9:c8:c4:74:40:13:0b:b8:26:63:60:fd:28:df:93:63:12:48: b5:69:de:a9:20:18:ea:2c:aa:a5:b8:c3:eb:2d:bb:38:85:6e: 6d:db:c5:33:52:56:82:ff:ce:8d:15:62:a7:2c:a9:52:6d:c1: ee:c1:36:2d:d5:51:2f:37:6d:42:38:00:8c:3a:1b:71:0f:45: 58:88:a2:13:c5:47:a3:78:00:24:0b:3e:00:6e:c9:81:28:29: 2d:00:8d:7d:84:48:62:51:96:7b:04:5c:3e:40:49:a7:68:7b: 6e:0c:d1:f7:15:8f:2a:e4:e4:df:0d:ef:4f:37:79:82:6c:4c: 73:b2:5d:05:02:8a:af:fb:b6:7b:63:ac:2f:40:ee:84:b5:7f: 91:ea:0d:7e:5d:e0:6a:c6:c5:59:79:da:b1:69:cb:d4:57:f1: c9:b0:7e:ac:0d:2d:43:09:f2:03:84:66:55:cc:c6:19:e1:80: b5:fc:68:d3 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUOOTQWbzlM/Set511idfqzdaUEJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1 N0NFQUQ4QzAeFw0yNDAxMDMwNzU3MDRaFw0yNTAxMDEwODAyMDRaMDMxMTAvBgNV BAMTKDJCREM3RDYyODNBMzNFNEMzQzJBMEQ5MjFENTU4OTg4MjhGNTY1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHxHCaprAaJZ8xvxRVNoa/QFb nHBjVc1EbcCEJ4fsTR14M55d7xCI9Z22fI5kakTKlx0Cu3t8cjgI5CjEAc2sDP1U e096iped27sJXfs2e2NtdcgTZShbzDxmSCk49qu5SfrH+FC/jhPspsIXKIPu+pTA zPO2Sk1d+Z4imeY8B8xNoCp1q4zt8fH8Pvj0XL3CMeqIjVGK/Y9OFzMc7//X81Y2 c51vbv71idGmo/MH/dYtEZCoM9uPtUQmQ+0Okuy8cgX9ub2FebLGzjhjFnDfM6K0 mI4OkcklaZSlwxkZvNbEh8jNIT8kVYrtXAEV71gcTDvdM5eSRSTfVT1oa6I3AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUK9x9YoOjPkw8Kg2SHVWJiCj1ZekwHwYDVR0j BBgwFoAUAZxOJu7CUuph+7Cf2FbN0FfOrYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDVjNDcxNS0yODJlLTQ1N2YtYjg5ZS0wNDFiZjkxMTBhZjgvMC8wMTlDNEUyNkVF QzI1MkVBNjFGQkIwOUZEODU2Q0REMDU3Q0VBRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1N0NF QUQ4Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1LTI4MmUtNDU3Zi1i ODllLTA0MWJmOTExMGFmOC8wLzMyMzQzMDMwM2EzOTYzMzgzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDM1MzgzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAJyAAAAwDQYJKoZI hvcNAQELBQADggEBAB29UtWZUEaAOEwv/WveHJjXliypyTz3z0SCGlQqHDPxWICy s195wMhLbYj9rpgi+Fh5wze+81+8Kdf3vB+Kc2pRmH0Lc+CpvvnIxHRAEwu4JmNg /Sjfk2MSSLVp3qkgGOosqqW4w+stuziFbm3bxTNSVoL/zo0VYqcsqVJtwe7BNi3V US83bUI4AIw6G3EPRViIohPFR6N4ACQLPgBuyYEoKS0AjX2ESGJRlnsEXD5ASado e24M0fcVjyrk5N8N7083eYJsTHOyXQUCiq/7tntjrC9A7oS1f5HqDX5d4GrGxVl5 2rFpy9RX8cmwfqwNLUMJ8gOEZlXMxhnhgLX8aNM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org