$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa File: 323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa (raw, json) Hash identifier: 8y+XoYezcam62FJiVxsj4m8iAkEJZIBTdapyJ5XUNwk= Subject key identifier: FC:9A:0B:CA:36:CD:B6:E3:43:CD:2A:8E:C8:DE:09:44:98:4E:F9:9B Certificate issuer: /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D Certificate serial: 0DDBAE805184ED02ACC1F7168BEF275F94D85DFD Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa Signing time: Thu 04 Jul 2024 14:00:01 +0000 ROA not before: Thu 04 Jul 2024 13:55:01 +0000 ROA not after: Thu 03 Jul 2025 14:00:01 +0000 asID: 138887 IP address blocks: 2405:c40:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:db:ae:80:51:84:ed:02:ac:c1:f7:16:8b:ef:27:5f:94:d8:5d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D Validity Not Before: Jul 4 13:55:01 2024 GMT Not After : Jul 3 14:00:01 2025 GMT Subject: CN=FC9A0BCA36CDB6E343CD2A8EC8DE0944984EF99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:2a:00:dd:a4:58:6a:51:81:e0:1c:9f:8d: a2:23:07:be:86:18:c5:cf:cd:1f:9c:c7:e0:ff:4c: 6b:65:60:c1:ec:a5:db:22:e1:ef:70:6b:4c:ce:92: 11:04:a3:42:70:a7:52:5d:c4:17:b3:84:aa:d6:ef: 50:71:51:ce:32:a2:cb:89:93:d0:b9:8d:b5:78:57: ca:93:fc:b5:83:d1:f9:4e:b8:6f:be:b6:61:6e:d2: 40:15:86:d2:fd:e0:09:23:75:33:70:81:f7:8a:75: 3a:d7:d5:8f:3f:8d:e7:69:cc:35:2e:81:15:17:31: 47:c1:5f:4d:76:98:36:1a:4d:6c:ca:ca:7b:71:a8: 7b:a4:f8:c7:43:59:c1:43:09:56:23:e9:ec:a9:3b: 89:8d:9e:7b:84:45:36:de:8c:af:eb:83:d7:d9:b8: f5:14:9d:86:4b:6a:5a:e0:81:2a:9e:5b:02:b7:96: 61:64:64:c3:ce:36:fa:c4:69:7c:e5:45:97:e3:7e: e7:8e:f1:99:70:b5:68:3f:f8:0a:70:d9:52:46:e6: fe:3a:38:eb:19:0c:f5:e2:dc:47:c5:e4:2b:54:26: 4e:ad:e8:6a:fb:10:0d:7a:9b:d0:b1:e6:f0:4f:fa: 64:5a:f2:2d:06:64:8c:d7:c7:4a:e0:7c:69:f4:6e: c4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9A:0B:CA:36:CD:B6:E3:43:CD:2A:8E:C8:DE:09:44:98:4E:F9:9B X509v3 Authority Key Identifier: keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c40:f000::/40 Signature Algorithm: sha256WithRSAEncryption 67:5a:fe:24:91:35:87:ce:b7:b5:ed:87:80:c0:d1:de:cc:75: b5:15:64:26:c8:2e:a6:37:d2:fa:7b:eb:c9:a6:cd:af:c3:25: 0e:87:a9:e9:85:9a:4b:81:5c:1a:2b:90:e8:5f:cf:50:bd:c3: 30:e1:d7:c1:82:65:2b:b6:b0:5b:ad:30:8d:f1:54:17:99:56: db:c0:af:16:f4:47:9a:20:6f:80:4b:b5:ff:e6:bf:00:25:c4: 2d:ce:10:cc:ad:21:57:9d:e6:53:c0:f5:21:db:d4:71:10:6c: e5:54:ab:f9:30:b8:c5:d8:ce:4b:6d:d6:b3:91:7e:44:53:67: cd:a6:19:d8:75:8d:f3:17:24:4f:29:b9:c2:2d:49:ac:91:18: 23:27:37:5c:a3:37:c1:69:30:10:8f:ad:3e:66:d2:af:e4:c0: 20:d4:f9:cd:35:a1:67:18:d3:af:94:1b:a2:70:77:e1:23:0a: d3:ea:cb:8a:a9:55:cf:69:57:a5:b1:bf:12:4a:ca:0a:de:4e: c1:7e:81:5a:da:00:a2:10:69:c2:47:14:6d:b1:a5:b4:52:0c: c1:5c:63:1c:82:77:7b:56:b3:c2:d7:74:ba:79:68:d7:32:68: a4:66:5b:d7:55:7b:17:ad:bd:52:a0:c0:20:6c:67:63:b7:d6: c2:74:30:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDduugFGE7QKswfcWi+8nX5TYXf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhG Rjg1OEUzRDAeFw0yNDA3MDQxMzU1MDFaFw0yNTA3MDMxNDAwMDFaMDMxMTAvBgNV BAMTKEZDOUEwQkNBMzZDREI2RTM0M0NEMkE4RUM4REUwOTQ0OTg0RUY5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaACoA3aRYalGB4ByfjaIjB76G GMXPzR+cx+D/TGtlYMHspdsi4e9wa0zOkhEEo0Jwp1JdxBezhKrW71BxUc4yosuJ k9C5jbV4V8qT/LWD0flOuG++tmFu0kAVhtL94AkjdTNwgfeKdTrX1Y8/jedpzDUu gRUXMUfBX012mDYaTWzKyntxqHuk+MdDWcFDCVYj6eypO4mNnnuERTbejK/rg9fZ uPUUnYZLalrggSqeWwK3lmFkZMPONvrEaXzlRZfjfueO8ZlwtWg/+Apw2VJG5v46 OOsZDPXi3EfF5CtUJk6t6Gr7EA16m9Cx5vBP+mRa8i0GZIzXx0rgfGn0bsSfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/JoLyjbNtuNDzSqOyN4JRJhO+ZswHwYDVR0j BBgwFoAUgPntWSkK133ihW7P2DQOKP+Fjj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDdjODhkYS0yYjU2LTQ4N2UtOWVmZS01NzExNzBiMTAyODYvMC84MEY5RUQ1OTI5 MEFENzdERTI4NTZFQ0ZEODM0MEUyOEZGODU4RTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhGRjg1 OEUzRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwN2M4OGRhLTJiNTYtNDg3ZS05 ZWZlLTU3MTE3MGIxMDI4Ni8wLzMyMzQzMDM1M2E2MzM0MzAzYTY2MzAzMDMwM2Ez YTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEzMzM4MzgzODM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAUM QPAwDQYJKoZIhvcNAQELBQADggEBAGda/iSRNYfOt7Xth4DA0d7MdbUVZCbILqY3 0vp768mmza/DJQ6HqemFmkuBXBorkOhfz1C9wzDh18GCZSu2sFutMI3xVBeZVtvA rxb0R5ogb4BLtf/mvwAlxC3OEMytIVed5lPA9SHb1HEQbOVUq/kwuMXYzktt1rOR fkRTZ82mGdh1jfMXJE8pucItSayRGCMnN1yjN8FpMBCPrT5m0q/kwCDU+c01oWcY 06+UG6Jwd+EjCtPqy4qpVc9pV6WxvxJKygreTsF+gVraAKIQacJHFG2xpbRSDMFc YxyCd3tWs8LXdLp5aNcyaKRmW9dVexetvVKgwCBsZ2O31sJ0MAk= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org