$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: N0JEl5mCrRx1semSFWu8H1/bmxyDCo6xhdzLtOb9u7M= Subject key identifier: F7:93:04:74:9C:1C:4B:AC:32:93:6C:8B:72:D3:06:E5:3A:0D:F3:7D Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 0D175F43CDDA7A7C60F977C9FAC181D7B83AE881 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa Signing time: Mon 01 Jul 2024 01:05:08 +0000 ROA not before: Mon 01 Jul 2024 01:00:08 +0000 ROA not after: Mon 30 Jun 2025 01:05:08 +0000 asID: 38156 IP address blocks: 2405:a540:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:17:5f:43:cd:da:7a:7c:60:f9:77:c9:fa:c1:81:d7:b8:3a:e8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Jul 1 01:00:08 2024 GMT Not After : Jun 30 01:05:08 2025 GMT Subject: CN=F79304749C1C4BAC32936C8B72D306E53A0DF37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d5:0c:ee:79:cb:23:64:07:f7:0b:46:29:33: 95:92:43:ba:8a:f7:39:85:6a:7b:d3:c5:17:d8:a9: 34:ec:f8:da:ec:5c:d8:bc:f2:c6:7c:46:f1:04:52: 8f:07:d8:61:82:c3:09:8e:26:a1:6d:b5:74:7f:47: b0:10:86:84:0c:cd:13:59:62:fd:10:a1:b0:7a:7c: cf:8f:ca:03:46:13:ff:df:c9:90:a4:84:0f:f2:82: 65:16:4d:dd:64:eb:ba:28:89:fe:90:39:2d:dd:41: 0a:9f:fc:eb:76:4b:cd:a4:16:31:f7:7b:20:5a:e2: 08:7a:33:1f:7e:a3:5d:b2:ec:0a:52:02:6c:d6:26: 99:ef:2f:d2:a0:ae:f5:59:11:1c:0c:a7:d2:92:a5: 95:2a:93:06:9a:d9:ba:02:48:1f:1b:c1:bf:dd:5c: a9:ff:af:79:05:71:1e:75:52:25:a4:37:06:d2:21: ec:ac:f5:4a:32:36:2a:b7:2e:8a:92:27:0a:ac:93: 3e:af:d1:e7:ff:07:f7:47:7d:91:9a:b6:d2:d3:1b: 5e:9b:b0:44:1f:f4:1e:91:64:59:f9:7f:38:28:d8: db:9d:c3:ab:41:bb:ee:a1:58:1a:f6:2d:dd:91:65: 0f:1f:66:9b:20:38:66:6d:95:8b:d4:35:3c:9d:d7: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:93:04:74:9C:1C:4B:AC:32:93:6C:8B:72:D3:06:E5:3A:0D:F3:7D X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1002::/48 Signature Algorithm: sha256WithRSAEncryption 43:ab:08:6b:c1:e6:57:c5:f7:ef:3d:be:3c:90:45:7c:e8:a5: 9e:6e:e5:71:92:a8:a8:82:5a:c9:e7:4c:7b:39:6f:88:a1:18: d1:7e:8e:a0:c3:cb:02:58:9e:b2:a7:ae:b5:2f:31:41:45:76: c9:c5:f0:e3:73:9f:a3:c3:e0:e0:e1:73:42:44:d2:46:3c:2f: 94:0e:c3:10:bb:b0:e2:ad:1b:95:72:01:47:b1:c7:df:75:5e: 7f:d6:7c:38:dc:1f:90:4f:73:f4:c6:c9:2a:f1:87:d6:2c:b5: 50:32:d3:ee:53:4f:dd:3f:12:0d:9b:8a:94:1f:6b:0b:1a:06: d5:26:a0:17:67:42:53:89:da:f2:1c:35:55:a0:1c:6c:aa:cc: 08:41:2e:02:de:da:1c:6f:ba:ce:c0:42:90:6d:47:ee:79:4e: 86:95:fb:c3:44:fb:35:f1:08:52:7d:24:a9:3e:c8:cd:b1:c1: 38:ea:4a:65:52:8b:ab:c2:a6:ba:da:90:87:ff:50:29:f1:89: 4b:1c:1f:5e:fe:30:d6:13:80:26:dd:bf:69:88:ee:91:15:ff: 83:37:eb:32:ab:1a:18:8f:e3:1d:12:ce:ac:90:58:9a:bf:e5: 78:10:1a:ed:ce:93:b2:eb:73:2c:32:ea:eb:38:72:b6:31:fc: 21:d5:ac:ba -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUDRdfQ83aenxg+XfJ+sGB17g66IEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNDA3MDEwMTAwMDhaFw0yNTA2MzAwMTA1MDhaMDMxMTAvBgNV BAMTKEY3OTMwNDc0OUMxQzRCQUMzMjkzNkM4QjcyRDMwNkU1M0EwREYzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV1QzuecsjZAf3C0YpM5WSQ7qK 9zmFanvTxRfYqTTs+NrsXNi88sZ8RvEEUo8H2GGCwwmOJqFttXR/R7AQhoQMzRNZ Yv0QobB6fM+PygNGE//fyZCkhA/ygmUWTd1k67ooif6QOS3dQQqf/Ot2S82kFjH3 eyBa4gh6Mx9+o12y7ApSAmzWJpnvL9KgrvVZERwMp9KSpZUqkwaa2boCSB8bwb/d XKn/r3kFcR51UiWkNwbSIeys9UoyNiq3LoqSJwqskz6v0ef/B/dHfZGattLTG16b sEQf9B6RZFn5fzgo2Nudw6tBu+6hWBr2Ld2RZQ8fZpsgOGZtlYvUNTyd16UxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU95MEdJwcS6wyk2yLctMG5ToN830wHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBACMA0GCSqGSIb3DQEBCwUAA4IBAQBDqwhrweZXxffvPb48kEV86KWebuVxkqio glrJ50x7OW+IoRjRfo6gw8sCWJ6yp661LzFBRXbJxfDjc5+jw+Dg4XNCRNJGPC+U DsMQu7DirRuVcgFHscffdV5/1nw43B+QT3P0xskq8YfWLLVQMtPuU0/dPxINm4qU H2sLGgbVJqAXZ0JTidryHDVVoBxsqswIQS4C3tocb7rOwEKQbUfueU6GlfvDRPs1 8QhSfSSpPsjNscE46kplUourwqa62pCH/1Ap8YlLHB9e/jDWE4Am3b9piO6RFf+D N+syqxoYj+MdEs6skFiav+V4EBrtzpOy63MsMurrOHK2Mfwh1ay6 -----END CERTIFICATE-----Generated at Mon Nov 25 07:13:31 2024 by rpki-client on console-fra.rpki-client.org