$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: D9z0XyRnIBxyuVCQSHNxCZWuB4tf7WpTkC318+YEGM0= Subject key identifier: 82:71:E0:3A:DD:FF:C9:98:A7:A1:99:FD:B1:CE:6C:C9:CA:96:4B:1D Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 3EC3FB82AC335EE97EFFFE03A3CE5E4064D077B3 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa Signing time: Wed 20 Nov 2024 15:00:02 +0000 ROA not before: Wed 20 Nov 2024 14:55:02 +0000 ROA not after: Wed 19 Nov 2025 15:00:02 +0000 asID: 38156 IP address blocks: 2405:a540:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c3:fb:82:ac:33:5e:e9:7e:ff:fe:03:a3:ce:5e:40:64:d0:77:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Nov 20 14:55:02 2024 GMT Not After : Nov 19 15:00:02 2025 GMT Subject: CN=8271E03ADDFFC998A7A199FDB1CE6CC9CA964B1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:c1:da:26:33:4b:f4:44:51:af:01:60:79: 02:55:ce:b2:55:fa:af:5c:f7:f2:b6:05:e3:8c:94: bc:21:92:30:b2:36:60:94:14:ad:9f:fb:df:a8:24: 69:03:b5:73:41:c7:cf:e2:ba:44:cb:d8:81:ed:16: be:52:00:06:e7:b0:79:8e:48:5d:e7:ef:a5:a5:30: f8:8f:c0:7f:37:e4:f3:a5:00:91:1d:3a:41:d7:33: 7f:6f:0c:da:9b:d3:4d:77:56:7e:8c:03:f7:90:fa: 5c:c9:1e:12:6b:6c:fb:e7:20:0c:79:54:e2:f2:16: 87:0a:66:e8:81:db:60:30:b8:25:80:eb:cf:2e:18: 74:a8:28:5e:a1:3b:93:ba:c2:4c:4d:29:47:89:ec: a5:b9:1f:66:99:13:42:08:ed:02:15:43:52:f6:02: 9e:12:48:ad:80:07:64:bc:96:9f:16:b5:0c:fe:72: 53:1e:d8:df:c3:81:b8:c8:9d:72:da:58:29:ad:19: df:de:3e:6a:6a:37:e8:bc:b5:d9:ab:48:c0:8d:12: a9:b7:84:3e:8d:c7:86:67:c4:55:e1:9a:2b:a4:dc: bc:96:ef:1d:d7:2d:cd:aa:da:92:ba:d7:2e:cb:5b: cf:0d:b9:37:88:64:b1:b3:90:9d:aa:9e:a5:fe:2a: c9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:71:E0:3A:DD:FF:C9:98:A7:A1:99:FD:B1:CE:6C:C9:CA:96:4B:1D X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1005::/48 Signature Algorithm: sha256WithRSAEncryption 8c:45:ba:db:2f:3e:51:30:2a:55:8d:04:93:46:c8:d2:a2:a3: 50:84:c6:29:ee:6c:04:c6:ba:d6:42:55:25:7c:20:d5:3f:18: 46:b9:77:6b:fe:e5:32:f2:2b:1d:b0:6b:5b:e1:50:92:f4:cc: 6a:e9:c5:be:d5:3e:36:85:6a:1c:a3:35:d8:11:d0:5f:c7:0e: 70:10:d6:d7:fe:55:4b:60:98:3f:15:52:b0:c4:14:c4:82:50: f3:93:f2:00:21:39:8c:88:b7:89:19:15:6d:8f:97:fc:ea:ff: 9a:3c:2f:69:e3:3e:0c:3c:c2:f2:ae:97:d0:6f:71:0d:8e:41: 0c:14:db:3e:8b:de:6b:b4:c3:e0:55:53:56:c8:88:94:da:6a: 7b:2c:08:7e:11:50:5b:45:20:c7:52:b7:c8:85:21:78:81:51: 80:a8:fd:a9:01:db:fd:c5:86:fa:5d:c8:f0:ce:7a:cd:75:e9: 95:53:0f:c8:34:87:ed:3d:aa:27:70:a7:b6:b0:e7:d3:a0:24: 6f:38:7d:3f:19:1e:b5:66:7d:63:6b:51:70:51:11:c2:1c:55: ec:61:c5:fc:18:a6:07:3b:1d:ce:08:f0:e2:b0:93:d0:c5:17: 54:5f:ac:c8:a2:e1:5b:4d:cf:2a:11:53:23:3f:ad:82:2f:2f: c7:5e:cd:2b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPsP7gqwzXul+//4Do85eQGTQd7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNDExMjAxNDU1MDJaFw0yNTExMTkxNTAwMDJaMDMxMTAvBgNV BAMTKDgyNzFFMDNBRERGRkM5OThBN0ExOTlGREIxQ0U2Q0M5Q0E5NjRCMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJWMHaJjNL9ERRrwFgeQJVzrJV +q9c9/K2BeOMlLwhkjCyNmCUFK2f+9+oJGkDtXNBx8/iukTL2IHtFr5SAAbnsHmO SF3n76WlMPiPwH835POlAJEdOkHXM39vDNqb0013Vn6MA/eQ+lzJHhJrbPvnIAx5 VOLyFocKZuiB22AwuCWA688uGHSoKF6hO5O6wkxNKUeJ7KW5H2aZE0II7QIVQ1L2 Ap4SSK2AB2S8lp8WtQz+clMe2N/DgbjInXLaWCmtGd/ePmpqN+i8tdmrSMCNEqm3 hD6Nx4ZnxFXhmiuk3LyW7x3XLc2q2pK61y7LW88NuTeIZLGzkJ2qnqX+Ksl7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUgnHgOt3/yZinoZn9sc5sycqWSx0wHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAFMA0GCSqGSIb3DQEBCwUAA4IBAQCMRbrbLz5RMCpVjQSTRsjSoqNQhMYp7mwE xrrWQlUlfCDVPxhGuXdr/uUy8isdsGtb4VCS9Mxq6cW+1T42hWocozXYEdBfxw5w ENbX/lVLYJg/FVKwxBTEglDzk/IAITmMiLeJGRVtj5f86v+aPC9p4z4MPMLyrpfQ b3ENjkEMFNs+i95rtMPgVVNWyIiU2mp7LAh+EVBbRSDHUrfIhSF4gVGAqP2pAdv9 xYb6XcjwznrNdemVUw/INIftPaoncKe2sOfToCRvOH0/GR61Zn1ja1FwURHCHFXs YcX8GKYHOx3OCPDisJPQxRdUX6zIouFbTc8qEVMjP62CLy/HXs0r -----END CERTIFICATE-----Generated at Mon Nov 25 07:18:32 2024 by rpki-client on console-ams.rpki-client.org