$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa File: 323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa (raw, json) Hash identifier: xdPWe3KoD2BsSwTAd1VJ99KlAEASMNOdz0rYhUU0I6E= Subject key identifier: E0:A4:10:30:9C:1D:F3:F5:72:93:91:CD:A6:C2:FF:FA:85:85:3D:1C Certificate issuer: /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D Certificate serial: 22B99ACC35941A6983B77FAC70E357D9A19FE037 Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa Signing time: Thu 30 May 2024 11:00:01 +0000 ROA not before: Thu 30 May 2024 10:55:01 +0000 ROA not after: Thu 29 May 2025 11:00:01 +0000 asID: 138887 IP address blocks: 2405:c40:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b9:9a:cc:35:94:1a:69:83:b7:7f:ac:70:e3:57:d9:a1:9f:e0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D Validity Not Before: May 30 10:55:01 2024 GMT Not After : May 29 11:00:01 2025 GMT Subject: CN=E0A410309C1DF3F5729391CDA6C2FFFA85853D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:06:dc:11:8e:3c:a2:d4:f7:02:18:bd:57: b6:41:1c:8e:83:1e:03:8f:dc:a3:e4:5a:05:09:ac: 9e:44:01:52:6b:50:74:3b:32:15:6c:f2:cf:2a:93: b9:a9:c6:73:3f:98:4e:18:3f:be:51:c6:b4:72:78: 2c:4f:e8:ee:5c:3c:b0:1a:7f:64:cf:4e:df:bd:63: d8:8f:80:4a:a9:f0:12:b9:2f:c3:53:71:70:24:a8: 1c:32:de:1d:d4:be:d7:36:75:50:34:9d:0f:6f:7d: 69:e4:2b:bc:69:74:3e:5c:87:f1:a1:f6:69:9f:20: 2b:f6:e6:11:06:27:3f:db:e6:23:1a:a7:7a:9c:fd: 82:f4:eb:48:dc:f1:53:e1:85:10:9d:2c:4c:5a:f7: 16:39:f7:b7:d5:78:e3:51:16:e2:f0:f6:1f:5b:17: 27:96:a0:b4:0e:3e:26:59:33:14:6c:b8:04:1b:ee: 81:d3:26:0b:1c:6e:b4:e5:dc:e1:32:85:8b:23:c0: 49:cc:c7:3b:97:56:12:ca:46:31:40:84:70:bf:04: 65:a3:b9:67:3e:0d:6b:bd:f1:b9:8a:9b:b1:21:74: 87:22:00:a5:21:cb:d3:15:24:68:34:51:99:47:fa: d4:99:f6:1f:3a:d3:d2:4a:db:97:0a:04:29:b0:29: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A4:10:30:9C:1D:F3:F5:72:93:91:CD:A6:C2:FF:FA:85:85:3D:1C X509v3 Authority Key Identifier: keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c40:1000::/36 Signature Algorithm: sha256WithRSAEncryption 2b:d2:f2:49:31:9c:d6:a8:94:44:7d:e4:d3:ae:ad:a2:d8:26: 5a:58:9e:08:96:76:b8:ab:9c:99:86:94:16:a8:b3:09:0d:2f: 25:60:de:bb:f9:76:c2:59:6d:27:e1:ad:fa:99:13:7a:39:ab: f3:cc:40:c1:07:08:a0:6f:da:a2:2d:25:ab:af:72:63:79:ff: 1a:ec:92:6e:c5:d7:e8:ea:32:6b:d9:ac:e1:1d:2d:04:ef:0b: 52:3e:91:22:58:d8:9c:8d:17:4a:39:5e:90:44:74:6e:24:4f: f8:c1:0a:cc:16:53:0b:40:12:36:30:d7:b7:98:05:ce:e9:bc: 75:d3:34:a4:9c:dc:a6:98:f7:8f:f9:9a:0d:4d:da:83:c3:b1: 7c:06:49:7b:91:e6:ad:a8:88:f1:f2:d9:bc:38:60:2c:68:b6: 72:87:37:fa:83:8b:df:04:d2:b4:d3:a6:51:27:2e:10:4c:26: 66:b5:8b:d5:92:84:1b:a7:cf:bd:d4:9d:5f:06:2e:35:b6:f4: 2c:9a:df:90:4e:32:a0:ab:a9:6d:bc:0d:e1:7f:6c:48:13:d2: 82:b3:8f:a7:07:9c:9b:01:72:3e:b7:59:b6:58:76:13:5f:19: 22:f8:6a:02:29:86:5b:8a:03:ed:fb:e5:94:e1:6f:c4:a9:ca: 6e:e8:7e:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIrmazDWUGmmDt3+scONX2aGf4DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhG Rjg1OEUzRDAeFw0yNDA1MzAxMDU1MDFaFw0yNTA1MjkxMTAwMDFaMDMxMTAvBgNV BAMTKEUwQTQxMDMwOUMxREYzRjU3MjkzOTFDREE2QzJGRkZBODU4NTNEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GwbcEY48otT3Ahi9V7ZBHI6D HgOP3KPkWgUJrJ5EAVJrUHQ7MhVs8s8qk7mpxnM/mE4YP75RxrRyeCxP6O5cPLAa f2TPTt+9Y9iPgEqp8BK5L8NTcXAkqBwy3h3Uvtc2dVA0nQ9vfWnkK7xpdD5ch/Gh 9mmfICv25hEGJz/b5iMap3qc/YL060jc8VPhhRCdLExa9xY597fVeONRFuLw9h9b FyeWoLQOPiZZMxRsuAQb7oHTJgscbrTl3OEyhYsjwEnMxzuXVhLKRjFAhHC/BGWj uWc+DWu98bmKm7EhdIciAKUhy9MVJGg0UZlH+tSZ9h8609JK25cKBCmwKUqNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4KQQMJwd8/Vyk5HNpsL/+oWFPRwwHwYDVR0j BBgwFoAUgPntWSkK133ihW7P2DQOKP+Fjj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDdjODhkYS0yYjU2LTQ4N2UtOWVmZS01NzExNzBiMTAyODYvMC84MEY5RUQ1OTI5 MEFENzdERTI4NTZFQ0ZEODM0MEUyOEZGODU4RTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhGRjg1 OEUzRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwN2M4OGRhLTJiNTYtNDg3ZS05 ZWZlLTU3MTE3MGIxMDI4Ni8wLzMyMzQzMDM1M2E2MzM0MzAzYTMxMzAzMDMwM2Ez YTJmMzMzNjJkMzMzNjIwM2QzZTIwMzEzMzM4MzgzODM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAUM QBAwDQYJKoZIhvcNAQELBQADggEBACvS8kkxnNaolER95NOuraLYJlpYngiWdrir nJmGlBaoswkNLyVg3rv5dsJZbSfhrfqZE3o5q/PMQMEHCKBv2qItJauvcmN5/xrs km7F1+jqMmvZrOEdLQTvC1I+kSJY2JyNF0o5XpBEdG4kT/jBCswWUwtAEjYw17eY Bc7pvHXTNKSc3KaY94/5mg1N2oPDsXwGSXuR5q2oiPHy2bw4YCxotnKHN/qDi98E 0rTTplEnLhBMJma1i9WShBunz73UnV8GLjW29Cya35BOMqCrqW28DeF/bEgT0oKz j6cHnJsBcj63WbZYdhNfGSL4agIphluKA+375ZThb8Spym7ofk8= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org