$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: Lh8GyhmgK8taX5pJnhVtBGQaNHkcHNTcBBhgnCLEf2U= Subject key identifier: 6F:52:A6:9C:8B:45:20:A3:2A:FB:02:28:5B:C5:4A:27:CE:B5:9C:AC Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 741657DB95F57E3340AE519CCDA14C1286F2DAA5 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa Signing time: Wed 20 Nov 2024 10:03:08 +0000 ROA not before: Wed 20 Nov 2024 09:58:08 +0000 ROA not after: Wed 19 Nov 2025 10:03:08 +0000 asID: 38156 IP address blocks: 2405:a540:1009::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:16:57:db:95:f5:7e:33:40:ae:51:9c:cd:a1:4c:12:86:f2:da:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Nov 20 09:58:08 2024 GMT Not After : Nov 19 10:03:08 2025 GMT Subject: CN=6F52A69C8B4520A32AFB02285BC54A27CEB59CAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:e1:ce:a4:2a:b4:b3:9f:29:79:23:80:18: 7e:7c:f4:48:6a:24:fe:7f:01:53:b8:e5:47:f3:fc: 50:ea:a0:4b:3e:a3:f0:b8:62:e9:ba:74:06:29:f7: 68:72:f0:81:53:95:63:39:8e:6b:9b:db:58:45:11: 18:c7:f8:ef:97:53:cc:44:81:4b:8a:c5:6b:d4:77: eb:40:73:07:aa:0b:3c:fc:62:ae:6f:3f:2e:c8:35: 8b:36:20:c7:b3:d4:71:a9:80:53:59:0e:04:0f:fc: 1b:bd:23:ca:64:22:b6:01:dd:18:89:97:d6:9d:72: e3:85:c2:9d:21:aa:2e:f1:c5:64:9c:8d:37:32:ca: 65:b3:f8:b4:05:1f:b8:ed:8f:bf:d5:46:5c:7b:80: 8f:56:d4:de:b8:3e:5d:71:a8:d3:4e:a7:6f:67:16: a0:86:f0:3c:26:bc:ac:3a:24:bf:de:2b:62:45:17: 52:f3:6e:c3:0a:f8:83:55:53:9a:2e:96:90:46:d4: 22:55:35:4a:71:56:93:95:ed:34:91:0f:79:2e:5b: bd:b3:4b:eb:6f:3b:3e:7e:77:8e:af:cd:de:3e:03: 4a:72:2c:04:1e:b0:02:ba:cb:72:3c:d9:3b:fe:4b: 50:9d:a7:3f:eb:ee:6f:90:fa:ae:2e:ee:eb:74:a7: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:52:A6:9C:8B:45:20:A3:2A:FB:02:28:5B:C5:4A:27:CE:B5:9C:AC X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1009::/48 Signature Algorithm: sha256WithRSAEncryption 9c:34:50:52:cc:9e:3e:c2:7c:8f:ea:1b:37:a9:a9:2b:37:1f: f1:c9:62:7a:94:84:76:c6:8f:5a:57:21:84:27:8e:85:1d:3c: 71:c3:14:94:e1:65:a0:9c:fb:b3:d9:ac:9f:cd:f0:7d:a4:e6: 44:54:93:09:05:aa:9b:d1:1f:01:c2:17:9e:69:d4:e4:88:55: 61:0d:5f:0d:15:9b:c3:78:fc:29:cc:07:d3:5c:96:16:98:7c: 32:ed:a5:b4:ab:2d:c7:02:ed:2a:de:0a:21:e3:dc:78:d7:79: 78:9b:3c:0e:fe:69:ce:01:b3:8d:50:a1:7c:09:59:9c:9e:18: 35:42:3b:09:55:b8:80:51:c2:59:69:9c:4b:a8:a9:40:0f:97: 7c:f0:35:e6:ca:3d:21:9e:66:b3:b9:96:1b:9c:1f:bb:21:34: ea:4c:6b:b5:20:d1:e0:a5:c9:91:82:0c:3c:21:03:66:d6:20: 80:af:6f:74:8f:fe:11:3f:ea:ab:d9:de:bf:0e:06:fc:f2:96: 58:17:7d:d0:f3:8c:7c:02:20:23:d6:7e:9c:5a:b6:42:6d:de: 4d:e1:93:8d:6a:af:3b:26:ed:09:32:c9:63:f6:1b:01:b0:d6: fd:24:af:d4:5b:f1:87:82:6a:d1:1f:c2:f4:ac:29:75:fb:d7: e5:65:47:0a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdBZX25X1fjNArlGczaFMEoby2qUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNDExMjAwOTU4MDhaFw0yNTExMTkxMDAzMDhaMDMxMTAvBgNV BAMTKDZGNTJBNjlDOEI0NTIwQTMyQUZCMDIyODVCQzU0QTI3Q0VCNTlDQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQeHOpCq0s58peSOAGH589Ehq JP5/AVO45Ufz/FDqoEs+o/C4Yum6dAYp92hy8IFTlWM5jmub21hFERjH+O+XU8xE gUuKxWvUd+tAcweqCzz8Yq5vPy7INYs2IMez1HGpgFNZDgQP/Bu9I8pkIrYB3RiJ l9adcuOFwp0hqi7xxWScjTcyymWz+LQFH7jtj7/VRlx7gI9W1N64Pl1xqNNOp29n FqCG8DwmvKw6JL/eK2JFF1LzbsMK+INVU5oulpBG1CJVNUpxVpOV7TSRD3kuW72z S+tvOz5+d46vzd4+A0pyLAQesAK6y3I82Tv+S1Cdpz/r7m+Q+q4u7ut0p6lzAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUb1KmnItFIKMq+wIoW8VKJ861nKwwHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzkz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAJMA0GCSqGSIb3DQEBCwUAA4IBAQCcNFBSzJ4+wnyP6hs3qakrNx/xyWJ6lIR2 xo9aVyGEJ46FHTxxwxSU4WWgnPuz2ayfzfB9pOZEVJMJBaqb0R8BwheeadTkiFVh DV8NFZvDePwpzAfTXJYWmHwy7aW0qy3HAu0q3goh49x413l4mzwO/mnOAbONUKF8 CVmcnhg1QjsJVbiAUcJZaZxLqKlAD5d88DXmyj0hnmazuZYbnB+7ITTqTGu1INHg pcmRggw8IQNm1iCAr290j/4RP+qr2d6/Dgb88pZYF33Q84x8AiAj1n6cWrZCbd5N 4ZONaq87Ju0JMslj9hsBsNb9JK/UW/GHgmrRH8L0rCl1+9flZUcK -----END CERTIFICATE-----Generated at Mon Nov 25 07:18:32 2024 by rpki-client on console-ams.rpki-client.org