$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: rc1mokxPbd+8BXU2Xt+KGVT8so7qqif99EY1tkQxcSU= Subject key identifier: D4:CA:93:87:1E:74:DF:BC:85:B0:35:55:F7:3A:56:CC:28:41:50:00 Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 5CD213E5655A9FFC8337D687EC5BA2E85D583C2D Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa Signing time: Wed 20 Nov 2024 16:00:02 +0000 ROA not before: Wed 20 Nov 2024 15:55:02 +0000 ROA not after: Wed 19 Nov 2025 16:00:02 +0000 asID: 38156 IP address blocks: 2405:a540:100c::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d2:13:e5:65:5a:9f:fc:83:37:d6:87:ec:5b:a2:e8:5d:58:3c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Nov 20 15:55:02 2024 GMT Not After : Nov 19 16:00:02 2025 GMT Subject: CN=D4CA93871E74DFBC85B03555F73A56CC28415000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:40:11:26:dd:d4:13:6b:58:40:b4:0c:53: fb:e4:a0:ec:85:c8:f0:b6:38:e5:08:3f:20:18:df: e5:f9:80:ee:f9:82:e4:5a:06:b4:2d:a0:86:eb:6b: 00:f9:6e:6b:de:dd:50:6c:d7:e5:54:26:ca:c9:95: 5d:ee:0c:0c:d9:0f:db:73:bd:4e:7d:6a:61:86:5a: 42:77:e9:2f:c7:0f:af:8f:f1:c0:c5:c1:e8:32:ab: 3c:8c:fe:59:b5:36:88:46:4c:9d:4b:b6:35:42:2b: d4:95:af:1b:68:6e:f9:d6:88:1c:d1:98:e2:95:02: ee:dc:b3:35:9b:c9:40:15:c4:01:c6:a5:09:71:db: fa:b9:ea:ff:30:39:e2:93:03:51:2a:83:4a:46:06: 97:87:2a:90:78:93:f7:c2:51:56:d4:52:c9:d9:7f: 25:55:75:21:76:22:3b:37:2d:1c:87:0a:45:62:ff: a1:67:aa:64:b0:a6:2f:50:7b:c9:1b:85:a8:db:fc: c4:9a:e5:88:e3:ff:d4:52:2f:4f:41:1f:9d:83:ed: 22:d5:29:16:14:1e:4f:b7:2f:75:e7:3d:8c:d0:7a: 8d:d2:4a:94:e2:a7:3b:60:3e:10:7a:92:f1:bc:cf: 72:fc:e2:b6:ef:e5:d8:a5:27:48:50:2f:f5:b3:2a: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CA:93:87:1E:74:DF:BC:85:B0:35:55:F7:3A:56:CC:28:41:50:00 X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:100c::/48 Signature Algorithm: sha256WithRSAEncryption 2b:90:47:2c:82:19:98:be:da:9b:b6:83:d0:ec:c6:d0:7b:7d: ff:3c:40:c0:6f:99:c4:92:d1:c6:96:dd:10:df:1c:e2:08:a3: 00:5e:d4:58:b5:9f:ff:53:a2:37:95:d7:c3:40:d8:18:37:29: 54:b5:6f:80:ef:36:7d:86:8d:a0:b0:02:3d:7e:7c:a5:5e:5a: d7:53:49:40:e8:6f:31:cb:bf:74:70:57:02:40:cd:75:05:fe: b8:9d:cb:03:01:97:a1:ba:e7:71:7e:10:44:d4:f2:f7:90:e5: 5f:44:ad:72:7b:fd:7d:3b:ef:c7:f7:10:60:fb:b2:d9:f7:d8: 68:0d:df:c2:4e:04:6f:8f:e7:10:fd:ba:66:30:27:ed:19:74: 1f:78:1e:1b:90:d2:96:5d:18:95:6f:42:c5:2e:05:7e:8d:14: b6:6e:73:ef:f2:86:36:05:c9:81:d7:56:63:6f:a0:b5:83:c4: 08:83:4b:06:bc:22:ee:d0:5c:b9:ea:c6:49:8e:88:81:e0:63: cb:88:e0:ba:59:8f:b1:e9:76:83:7c:21:20:74:a5:e4:8d:8c: 01:40:38:49:78:3b:b9:7a:6f:08:02:a1:92:39:5f:4f:07:6d: b2:19:80:cd:b6:df:6a:42:28:41:e2:a3:23:00:d5:5e:b8:c0: 2e:3c:08:e2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXNIT5WVan/yDN9aH7Fui6F1YPC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNDExMjAxNTU1MDJaFw0yNTExMTkxNjAwMDJaMDMxMTAvBgNV BAMTKEQ0Q0E5Mzg3MUU3NERGQkM4NUIwMzU1NUY3M0E1NkNDMjg0MTUwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnOUARJt3UE2tYQLQMU/vkoOyF yPC2OOUIPyAY3+X5gO75guRaBrQtoIbrawD5bmve3VBs1+VUJsrJlV3uDAzZD9tz vU59amGGWkJ36S/HD6+P8cDFwegyqzyM/lm1NohGTJ1LtjVCK9SVrxtobvnWiBzR mOKVAu7cszWbyUAVxAHGpQlx2/q56v8wOeKTA1Eqg0pGBpeHKpB4k/fCUVbUUsnZ fyVVdSF2Ijs3LRyHCkVi/6FnqmSwpi9Qe8kbhajb/MSa5Yjj/9RSL09BH52D7SLV KRYUHk+3L3XnPYzQeo3SSpTipztgPhB6kvG8z3L84rbv5dilJ0hQL/WzKrflAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU1MqThx5037yFsDVV9zpWzChBUAAwHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwNjMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAMMA0GCSqGSIb3DQEBCwUAA4IBAQArkEcsghmYvtqbtoPQ7MbQe33/PEDAb5nE ktHGlt0Q3xziCKMAXtRYtZ//U6I3ldfDQNgYNylUtW+A7zZ9ho2gsAI9fnylXlrX U0lA6G8xy790cFcCQM11Bf64ncsDAZehuudxfhBE1PL3kOVfRK1ye/19O+/H9xBg +7LZ99hoDd/CTgRvj+cQ/bpmMCftGXQfeB4bkNKWXRiVb0LFLgV+jRS2bnPv8oY2 BcmB11Zjb6C1g8QIg0sGvCLu0Fy56sZJjoiB4GPLiOC6WY+x6XaDfCEgdKXkjYwB QDhJeDu5em8IAqGSOV9PB22yGYDNtt9qQihB4qMjANVeuMAuPAji -----END CERTIFICATE-----Generated at Mon Nov 25 07:18:32 2024 by rpki-client on console-ams.rpki-client.org