$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: 8LsVHahdUoPleu20C45yeBI8EhbUp30pYf/Ev3LanrU= Subject key identifier: 80:37:AC:38:F1:71:F8:61:C4:09:C9:68:C0:CC:C8:1C:2D:33:47:E0 Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 1B3D50259FFEEEF08E3E04E20F9731ED6092F39D Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa Signing time: Mon 28 Oct 2024 05:02:58 +0000 ROA not before: Mon 28 Oct 2024 04:57:58 +0000 ROA not after: Mon 27 Oct 2025 05:02:58 +0000 asID: 38156 IP address blocks: 2405:a540:1007::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3d:50:25:9f:fe:ee:f0:8e:3e:04:e2:0f:97:31:ed:60:92:f3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Oct 28 04:57:58 2024 GMT Not After : Oct 27 05:02:58 2025 GMT Subject: CN=8037AC38F171F861C409C968C0CCC81C2D3347E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:0b:00:b8:4a:35:d2:d2:16:68:2c:f6:82: c0:a4:b8:b7:71:44:b5:91:64:a8:63:94:93:be:52: b6:77:72:5c:ce:5b:40:4e:c7:87:5d:13:52:5a:1b: a4:22:a0:f4:28:89:53:c4:bf:9d:0a:8b:0a:b7:b4: e9:37:8b:04:09:80:16:5c:af:fb:a6:79:dc:9d:25: 61:7e:a5:6e:b3:b3:1c:28:2f:45:f1:72:be:db:1a: e8:df:0f:50:cd:a3:ac:7a:34:a8:7c:7f:77:0a:69: 35:02:f0:5e:61:28:72:b9:01:38:45:c5:77:23:a4: 84:3c:60:dd:2f:e3:60:12:1a:c3:e5:ae:f6:7b:a3: ae:a8:72:37:e7:e2:87:7b:c2:98:24:b3:7d:4f:7b: ef:35:7d:54:53:b8:57:34:a6:61:71:a8:4e:75:05: c3:bc:ca:8d:c8:8f:c1:f8:e2:3d:85:42:76:6f:11: b0:37:3c:05:29:c6:d8:fd:8c:27:ca:9b:71:da:f9: c7:33:d0:6c:9a:a6:ad:d5:97:78:f1:4c:d1:82:32: 4e:0e:ea:74:61:5e:6c:eb:2b:81:8d:4d:8a:80:48: 7f:56:db:a7:f5:86:4e:8b:f1:71:f0:9d:23:12:91: ee:10:66:e4:bb:00:cd:28:01:e2:4c:55:68:a5:3e: 6d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:37:AC:38:F1:71:F8:61:C4:09:C9:68:C0:CC:C8:1C:2D:33:47:E0 X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1007::/48 Signature Algorithm: sha256WithRSAEncryption 49:2e:21:60:3f:4e:19:c4:69:9c:70:bc:46:5c:9f:0d:3b:08: fb:dc:4d:64:23:ab:18:e2:26:fb:6f:ae:dd:30:6d:84:5d:6e: 78:58:3a:7f:a9:1f:88:84:93:53:fc:1e:94:4f:e3:82:5b:18: ff:10:d3:ad:29:42:7e:8a:46:15:61:3a:b2:b1:4f:db:6c:d3: 07:9b:0c:25:5d:01:60:51:ad:a8:82:2d:8f:81:ac:37:6e:33: 6a:f8:15:c0:f1:58:6e:69:83:9b:18:f1:98:32:40:72:3b:1d: 59:70:12:a7:7d:f6:c9:9f:2d:8c:89:ee:d3:8c:3c:5c:ac:92: 86:02:cf:3b:32:0b:16:af:e9:71:1e:c9:37:d9:d5:9c:03:30: a7:f2:17:1d:10:1f:13:6b:94:c4:b5:a9:7a:b7:f9:8a:c1:cf: 8c:42:9c:7f:fe:2d:99:9f:f3:c5:06:ad:c3:73:3d:4e:07:62: de:2f:23:47:d6:06:dc:da:6b:27:e6:63:07:bd:2f:3a:d0:17: 39:09:7e:97:5c:a5:13:35:aa:73:74:b1:bd:ee:bb:87:6c:3d: 24:40:74:2f:fe:1a:14:86:31:8c:ac:59:cc:3c:72:e5:90:78: 42:9d:e4:46:31:67:7b:35:80:d5:af:2b:b6:4e:d4:12:aa:be: 32:44:7a:f7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGz1QJZ/+7vCOPgTiD5cx7WCS850wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNDEwMjgwNDU3NThaFw0yNTEwMjcwNTAyNThaMDMxMTAvBgNV BAMTKDgwMzdBQzM4RjE3MUY4NjFDNDA5Qzk2OEMwQ0NDODFDMkQzMzQ3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJQsAuEo10tIWaCz2gsCkuLdx RLWRZKhjlJO+UrZ3clzOW0BOx4ddE1JaG6QioPQoiVPEv50Kiwq3tOk3iwQJgBZc r/umedydJWF+pW6zsxwoL0Xxcr7bGujfD1DNo6x6NKh8f3cKaTUC8F5hKHK5AThF xXcjpIQ8YN0v42ASGsPlrvZ7o66ocjfn4od7wpgks31Pe+81fVRTuFc0pmFxqE51 BcO8yo3Ij8H44j2FQnZvEbA3PAUpxtj9jCfKm3Ha+ccz0Gyapq3Vl3jxTNGCMk4O 6nRhXmzrK4GNTYqASH9W26f1hk6L8XHwnSMSke4QZuS7AM0oAeJMVWilPm09AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUgDesOPFx+GHECclowMzIHC0zR+AwHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzcz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAHMA0GCSqGSIb3DQEBCwUAA4IBAQBJLiFgP04ZxGmccLxGXJ8NOwj73E1kI6sY 4ib7b67dMG2EXW54WDp/qR+IhJNT/B6UT+OCWxj/ENOtKUJ+ikYVYTqysU/bbNMH mwwlXQFgUa2ogi2Pgaw3bjNq+BXA8VhuaYObGPGYMkByOx1ZcBKnffbJny2Mie7T jDxcrJKGAs87MgsWr+lxHsk32dWcAzCn8hcdEB8Ta5TEtal6t/mKwc+MQpx//i2Z n/PFBq3Dcz1OB2LeLyNH1gbc2msn5mMHvS860Bc5CX6XXKUTNapzdLG97ruHbD0k QHQv/hoUhjGMrFnMPHLlkHhCneRGMWd7NYDVryu2TtQSqr4yRHr3 -----END CERTIFICATE-----Generated at Mon Nov 25 07:18:32 2024 by rpki-client on console-ams.rpki-client.org