$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: 2rYoQf2XiLcQ0PD1TcVzDi2GO9pmV8h/I19htBqCTIo= Subject key identifier: A6:10:18:18:83:7C:E4:EE:1A:9E:2D:60:AD:0E:D5:A0:6C:C7:38:02 Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 1F5C8AD7D251DE81BCC3CEE5885058EE69CF1BF5 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa Signing time: Wed 20 Nov 2024 15:00:02 +0000 ROA not before: Wed 20 Nov 2024 14:55:02 +0000 ROA not after: Wed 19 Nov 2025 15:00:02 +0000 asID: 38156 IP address blocks: 2405:a540:100f::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5c:8a:d7:d2:51:de:81:bc:c3:ce:e5:88:50:58:ee:69:cf:1b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Nov 20 14:55:02 2024 GMT Not After : Nov 19 15:00:02 2025 GMT Subject: CN=A6101818837CE4EE1A9E2D60AD0ED5A06CC73802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:c9:3c:26:f7:04:0f:db:fb:a7:e5:51:34: 79:b9:4c:76:32:2b:9c:74:5e:39:be:ec:ce:3e:7d: 5a:56:a9:5f:23:2f:12:7b:f8:d6:e8:43:77:b9:6c: de:6f:55:83:7e:00:21:05:b8:0b:25:cf:e1:b5:fa: b6:78:0e:52:ec:18:43:dd:64:8b:54:b9:ef:64:27: 0f:9e:95:88:e8:62:14:b2:ab:6b:67:6d:45:e9:a0: b6:e5:e6:50:d3:cd:25:be:58:cc:3c:a3:04:ab:f3: 9a:74:3b:c5:43:ab:f9:86:d0:a4:4b:d6:a7:9c:a4: bd:4b:0e:cd:36:aa:f4:0d:b9:23:e3:70:97:9d:53: 59:da:3c:54:b6:ed:2a:30:d3:69:e1:d6:eb:39:57: 11:f6:45:62:2c:0a:75:08:88:a2:75:40:43:45:10: cf:b0:f1:d6:26:22:fa:7e:82:eb:35:bd:e9:3d:14: fa:38:58:f5:a0:ad:b1:53:b0:99:b2:50:c2:46:c5: 58:23:5f:3e:74:02:df:11:54:d9:fa:3f:ca:b4:e1: 1c:b8:f8:23:9c:85:76:43:3e:b9:c6:9b:2f:00:3f: 86:74:13:c3:88:1c:6e:f2:f9:a0:fd:d3:a1:16:38: db:53:b4:80:e6:28:e1:02:5c:c3:8c:a3:a7:f9:7c: 18:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:10:18:18:83:7C:E4:EE:1A:9E:2D:60:AD:0E:D5:A0:6C:C7:38:02 X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:100f::/48 Signature Algorithm: sha256WithRSAEncryption 45:f5:46:97:4a:e1:92:80:f8:a0:df:22:6a:fb:c4:a6:d7:5c: a1:61:f6:f3:b1:77:24:a7:4c:de:ee:2e:8f:89:8a:e3:c8:71: b7:1c:29:de:fe:86:0e:51:6e:76:be:00:61:64:7a:68:cf:21: 2f:af:78:b8:52:bb:b6:d3:83:4a:42:0e:e4:4c:ab:01:0e:d9: 1d:d2:0d:fa:72:a6:8c:40:84:e5:0f:c4:4b:99:07:4b:74:ac: bb:c6:43:f2:03:b2:2b:54:e0:5a:57:d7:0d:e9:85:74:57:d5: f5:2e:f8:a8:27:4b:21:90:fb:97:82:97:cf:b1:82:c3:f4:b3: 72:b8:43:61:03:26:98:1f:45:1d:52:fe:54:15:0f:5a:46:79: 26:94:39:b3:23:a2:46:98:83:16:aa:e8:52:a9:f9:04:ea:81: bf:21:3f:7f:99:b7:81:94:c4:83:e1:01:09:58:79:fd:77:bc: a3:e3:af:97:d2:2d:99:31:14:4d:f3:d2:34:f7:d5:31:70:a0: a9:6c:ef:80:07:ff:d2:f7:38:bc:17:f4:fe:85:f8:a2:64:75: e2:9e:ec:41:1a:8a:0c:9d:ff:34:ce:33:d4:9f:22:c4:da:18: 2d:4d:d8:7b:03:df:14:c6:1b:ee:fd:e5:60:5f:25:27:37:a6: 29:e9:05:02 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUH1yK19JR3oG8w87liFBY7mnPG/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNDExMjAxNDU1MDJaFw0yNTExMTkxNTAwMDJaMDMxMTAvBgNV BAMTKEE2MTAxODE4ODM3Q0U0RUUxQTlFMkQ2MEFEMEVENUEwNkNDNzM4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Bsk8JvcED9v7p+VRNHm5THYy K5x0Xjm+7M4+fVpWqV8jLxJ7+NboQ3e5bN5vVYN+ACEFuAslz+G1+rZ4DlLsGEPd ZItUue9kJw+elYjoYhSyq2tnbUXpoLbl5lDTzSW+WMw8owSr85p0O8VDq/mG0KRL 1qecpL1LDs02qvQNuSPjcJedU1naPFS27Sow02nh1us5VxH2RWIsCnUIiKJ1QENF EM+w8dYmIvp+gus1vek9FPo4WPWgrbFTsJmyUMJGxVgjXz50At8RVNn6P8q04Ry4 +COchXZDPrnGmy8AP4Z0E8OIHG7y+aD906EWONtTtIDmKOECXMOMo6f5fBgnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUphAYGIN85O4ani1grQ7VoGzHOAIwHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwNjYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAPMA0GCSqGSIb3DQEBCwUAA4IBAQBF9UaXSuGSgPig3yJq+8Sm11yhYfbzsXck p0ze7i6PiYrjyHG3HCne/oYOUW52vgBhZHpozyEvr3i4Uru204NKQg7kTKsBDtkd 0g36cqaMQITlD8RLmQdLdKy7xkPyA7IrVOBaV9cN6YV0V9X1LvioJ0shkPuXgpfP sYLD9LNyuENhAyaYH0UdUv5UFQ9aRnkmlDmzI6JGmIMWquhSqfkE6oG/IT9/mbeB lMSD4QEJWHn9d7yj46+X0i2ZMRRN89I099UxcKCpbO+AB//S9zi8F/T+hfiiZHXi nuxBGooMnf80zjPUnyLE2hgtTdh7A98Uxhvu/eVgXyUnN6Yp6QUC -----END CERTIFICATE-----Generated at Mon Nov 25 07:18:32 2024 by rpki-client on console-ams.rpki-client.org