$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a3a2f33322d3332203d3e203338313536.roa File: 323430353a613534303a3a2f33322d3332203d3e203338313536.roa (raw, json) Hash identifier: Qus3Mmu52ldaC8yHNX/lLMOybvxdC/KiaabMYmXY5VE= Subject key identifier: 14:95:38:8D:13:98:CF:A6:C6:D5:B2:8F:BE:E8:60:F8:B5:85:E8:0F Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 4CA0D4C0BD1730D114D9954E7214ED54A5754B07 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a3a2f33322d3332203d3e203338313536.roa Signing time: Thu 01 Aug 2024 09:00:02 +0000 ROA not before: Thu 01 Aug 2024 08:55:02 +0000 ROA not after: Thu 31 Jul 2025 09:00:02 +0000 asID: 38156 IP address blocks: 2405:a540::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a0:d4:c0:bd:17:30:d1:14:d9:95:4e:72:14:ed:54:a5:75:4b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Aug 1 08:55:02 2024 GMT Not After : Jul 31 09:00:02 2025 GMT Subject: CN=1495388D1398CFA6C6D5B28FBEE860F8B585E80F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e3:db:6c:75:3e:cb:ab:0e:a3:32:52:fb:c2: 28:ac:e3:71:ef:71:db:36:a5:1f:38:e4:10:ed:ad: ec:f1:f9:59:3c:21:54:d6:2b:7d:6c:01:f5:d3:55: 01:a0:5c:32:1d:91:f4:b6:e0:82:59:9f:0a:89:ca: f0:2e:e7:33:36:79:8a:6c:56:a0:a9:d3:60:d0:05: 95:aa:36:c5:bd:4e:4c:6e:b3:5f:25:3a:72:88:40: af:f7:2a:f1:d7:09:6e:cf:11:24:b8:9c:9f:b4:89: 44:19:ed:5b:63:20:17:96:cd:90:bd:ac:21:ca:f2: 97:74:16:76:1b:1d:34:f9:d6:aa:c7:d6:4e:22:88: e9:93:72:57:d3:45:50:f6:97:1a:c2:a4:6e:ee:eb: e3:56:d0:b9:dd:7a:f5:f5:6b:ad:d9:87:97:a1:ca: cf:93:dd:fe:69:ad:8f:b8:15:b3:d8:2f:7d:b1:f1: 32:54:27:31:57:c8:00:01:9d:75:98:ca:59:89:9c: c3:fe:fc:2d:74:22:fa:1e:43:c8:08:4d:d7:11:10: 59:8a:9e:17:e4:5b:11:36:54:41:b9:4a:03:76:82: a1:93:80:a7:d5:3d:ad:74:fe:fd:58:fb:1c:f7:ff: 9c:5d:42:40:d6:13:ec:e9:03:45:6e:f2:cc:d9:8e: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:95:38:8D:13:98:CF:A6:C6:D5:B2:8F:BE:E8:60:F8:B5:85:E8:0F X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a3a2f33322d3332203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540::/32 Signature Algorithm: sha256WithRSAEncryption ab:c8:03:3a:14:55:75:c9:42:13:04:37:cb:e0:a5:aa:89:2e: f2:5f:a0:20:91:e6:84:48:40:c3:61:30:23:8f:92:30:c5:a6: ae:76:92:c0:18:2b:0a:83:44:c9:ec:be:02:84:5a:5b:bc:62: 50:03:5b:fe:71:b2:8d:8c:73:c6:57:16:3e:7f:e4:ed:d7:11: 06:94:54:68:d6:ff:d9:1d:8a:4e:3d:dc:cc:6f:53:80:c0:b4: d9:4d:67:26:ff:37:3b:fa:51:f0:64:66:45:28:03:24:25:45: 21:0d:1d:ea:bd:b5:c0:d3:a6:ad:ec:eb:e1:78:65:32:22:d9: c3:01:ef:60:45:bc:44:27:22:3a:4a:aa:43:f1:d8:58:19:bb: 19:48:ee:35:32:9e:42:6b:ab:35:17:b8:67:8e:25:f8:95:20: 6c:e0:85:6c:c0:4b:80:b0:eb:b9:1d:02:0d:a4:34:6f:ef:88: 4c:f2:e0:d9:cb:c3:34:71:6f:82:36:71:1e:23:97:07:5b:47: 9d:6a:0a:7a:64:ae:7b:e3:98:ee:1d:8f:7b:80:8f:3f:10:7b: e1:54:4d:e3:3a:4a:c5:54:fa:ed:14:04:a9:c0:dc:0d:18:6a: 83:02:c3:d7:f8:d7:af:14:0c:11:30:0e:c7:e2:9c:35:a3:34: dc:dc:55:68 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUTKDUwL0XMNEU2ZVOchTtVKV1SwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNDA4MDEwODU1MDJaFw0yNTA3MzEwOTAwMDJaMDMxMTAvBgNV BAMTKDE0OTUzODhEMTM5OENGQTZDNkQ1QjI4RkJFRTg2MEY4QjU4NUU4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo49tsdT7Lqw6jMlL7wiis43Hv cds2pR845BDtrezx+Vk8IVTWK31sAfXTVQGgXDIdkfS24IJZnwqJyvAu5zM2eYps VqCp02DQBZWqNsW9Tkxus18lOnKIQK/3KvHXCW7PESS4nJ+0iUQZ7VtjIBeWzZC9 rCHK8pd0FnYbHTT51qrH1k4iiOmTclfTRVD2lxrCpG7u6+NW0LndevX1a63Zh5eh ys+T3f5prY+4FbPYL32x8TJUJzFXyAABnXWYylmJnMP+/C10IvoeQ8gITdcREFmK nhfkWxE2VEG5SgN2gqGTgKfVPa10/v1Y+xz3/5xdQkDWE+zpA0Vu8szZjhxVAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUFJU4jROYz6bG1bKPvuhg+LWF6A8wHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMzMzgzMTM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBaVAMA0GCSqGSIb3 DQEBCwUAA4IBAQCryAM6FFV1yUITBDfL4KWqiS7yX6AgkeaESEDDYTAjj5Iwxaau dpLAGCsKg0TJ7L4ChFpbvGJQA1v+cbKNjHPGVxY+f+Tt1xEGlFRo1v/ZHYpOPdzM b1OAwLTZTWcm/zc7+lHwZGZFKAMkJUUhDR3qvbXA06at7OvheGUyItnDAe9gRbxE JyI6SqpD8dhYGbsZSO41Mp5Ca6s1F7hnjiX4lSBs4IVswEuAsOu5HQINpDRv74hM 8uDZy8M0cW+CNnEeI5cHW0edagp6ZK5745juHY97gI8/EHvhVE3jOkrFVPrtFASp wNwNGGqDAsPX+NevFAwRMA7H4pw1ozTc3FVo -----END CERTIFICATE-----Generated at Mon Nov 25 07:13:31 2024 by rpki-client on console-fra.rpki-client.org