$ rpki-client -vvf repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/323430333a393530303a3a2f33322d3336203d3e2039363537.roa File: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (raw, json) Hash identifier: /XG+lytKF9G+VA2amT+fC00B7QHTsK+t9xE6Tjsy41A= Subject key identifier: F6:C1:6F:11:B0:94:59:DB:BA:EA:25:6D:1D:B6:1A:05:80:14:77:12 Certificate issuer: /CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Certificate serial: 5F816A01309038EAD1DACC3C8E58AFC26FE6F5E3 Authority key identifier: A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/323430333a393530303a3a2f33322d3336203d3e2039363537.roa Signing time: Mon 01 Jul 2024 01:03:42 +0000 ROA not before: Mon 01 Jul 2024 00:58:42 +0000 ROA not after: Mon 30 Jun 2025 01:03:42 +0000 asID: 9657 IP address blocks: 2403:9500::/32 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:81:6a:01:30:90:38:ea:d1:da:cc:3c:8e:58:af:c2:6f:e6:f5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Validity Not Before: Jul 1 00:58:42 2024 GMT Not After : Jun 30 01:03:42 2025 GMT Subject: CN=F6C16F11B09459DBBAEA256D1DB61A0580147712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4b:d9:89:3c:cc:a1:0f:54:2c:65:17:5b:2a: 74:0e:96:96:35:f2:99:24:cf:45:67:0f:2a:b2:d2: fe:16:b6:22:53:de:c7:2b:14:b1:a7:29:ca:cd:d8: ed:99:a1:6e:9e:48:f8:83:39:39:aa:f4:c1:e8:75: a5:9b:1e:72:43:3b:34:93:e7:8f:5f:92:3b:aa:d2: 05:22:ca:2e:ef:20:c0:c1:dd:31:27:f5:b6:02:06: 2f:7b:74:ca:af:50:fb:d8:bf:47:67:a1:5e:9e:7a: 21:d2:79:b5:ab:36:77:4d:15:1b:c1:68:89:27:91: 29:c2:1b:0f:3a:81:20:0a:64:2d:96:42:31:0e:f4: 14:d3:4f:24:77:c0:45:4c:29:4c:67:80:42:cb:6d: af:ae:00:e6:ae:73:f7:1e:47:eb:d0:af:04:8c:75: cb:36:87:e4:fd:de:37:e3:e0:90:28:1a:bc:dc:2b: 3e:71:17:13:15:f5:3c:1d:68:ac:67:09:7c:7d:74: ad:99:f7:c1:84:8e:3c:c2:5f:fe:1a:9f:93:27:7a: 17:b4:8a:8d:de:b7:0f:47:84:bd:98:a2:5b:d0:e4: 8d:3a:6f:e6:34:db:1b:a1:aa:19:98:e6:12:85:37: fc:01:05:40:6e:81:aa:ef:0f:a6:0f:20:70:3f:86: 84:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C1:6F:11:B0:94:59:DB:BA:EA:25:6D:1D:B6:1A:05:80:14:77:12 X509v3 Authority Key Identifier: keyid:A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/323430333a393530303a3a2f33322d3336203d3e2039363537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:9500::/32 Signature Algorithm: sha256WithRSAEncryption 77:b4:55:0b:7c:7a:95:9a:70:83:d1:1a:38:42:4e:a3:e4:a9: 1c:75:c1:23:c6:82:ae:b5:1d:d2:37:28:0d:37:69:3c:81:af: 54:43:16:e7:ba:2a:41:3d:ef:0f:15:a7:8e:9f:96:32:e0:d4: 40:02:1a:c2:4e:93:bb:53:9e:b7:e5:bd:d9:c0:68:8f:c8:0a: 07:d6:8f:f4:e2:8d:37:96:b9:63:be:ab:4e:2e:20:4e:90:28: 17:f7:a9:1c:f8:aa:d5:00:dc:4a:2b:bf:e9:02:e4:69:aa:ca: 1f:0d:cc:5a:53:59:da:48:bd:3d:61:89:7c:f2:62:b0:62:f0: 5e:31:93:ca:42:e6:10:53:c2:bf:91:f6:3c:d4:5c:78:a2:eb: 55:5d:b2:f6:5b:12:63:9a:87:ef:31:8c:f0:c5:2e:b1:5d:3c: 4e:f7:6a:ca:44:b6:4c:a6:c6:a9:43:e1:b3:fd:05:66:bd:bc: f7:30:b9:aa:87:1c:fc:c5:84:b2:95:91:28:64:e6:33:fe:76: 13:b5:18:30:c0:b9:77:ae:26:e1:27:94:20:32:c0:e2:19:a1: e0:d5:13:89:b5:85:3c:3b:0c:3d:2f:95:b7:d5:2c:13:c4:e6: 8b:54:da:67:2b:74:cf:e2:6c:62:e7:25:72:34:7b:b5:08:4c: 1b:69:14:1a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUX4FqATCQOOrR2sw8jlivwm/m9eMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUy NjZGOEE2RDAeFw0yNDA3MDEwMDU4NDJaFw0yNTA2MzAwMTAzNDJaMDMxMTAvBgNV BAMTKEY2QzE2RjExQjA5NDU5REJCQUVBMjU2RDFEQjYxQTA1ODAxNDc3MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaS9mJPMyhD1QsZRdbKnQOlpY1 8pkkz0VnDyqy0v4WtiJT3scrFLGnKcrN2O2ZoW6eSPiDOTmq9MHodaWbHnJDOzST 549fkjuq0gUiyi7vIMDB3TEn9bYCBi97dMqvUPvYv0dnoV6eeiHSebWrNndNFRvB aIknkSnCGw86gSAKZC2WQjEO9BTTTyR3wEVMKUxngELLba+uAOauc/ceR+vQrwSM dcs2h+T93jfj4JAoGrzcKz5xFxMV9TwdaKxnCXx9dK2Z98GEjjzCX/4an5Mnehe0 io3etw9HhL2YolvQ5I06b+Y02xuhqhmY5hKFN/wBBUBugarvD6YPIHA/hoStAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQU9sFvEbCUWdu66iVtHbYaBYAUdxIwHwYDVR0j BBgwFoAUp5/TB8N+jFWfZaWOyc6VviZvim0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGY2YmViOC1lNGU4LTRlMzktODI3NS0xYzZkNzdjM2VlZjgvMC9BNzlGRDMwN0Mz N0U4QzU1OUY2NUE1OEVDOUNFOTVCRTI2NkY4QTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUyNjZG OEE2RC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvMzIzNDMwMzMzYTM5MzUzMDMwM2EzYTJmMzMzMjJk MzMzNjIwM2QzZTIwMzkzNjM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA5UAMA0GCSqGSIb3DQEB CwUAA4IBAQB3tFULfHqVmnCD0Ro4Qk6j5KkcdcEjxoKutR3SNygNN2k8ga9UQxbn uipBPe8PFaeOn5Yy4NRAAhrCTpO7U5635b3ZwGiPyAoH1o/04o03lrljvqtOLiBO kCgX96kc+KrVANxKK7/pAuRpqsofDcxaU1naSL09YYl88mKwYvBeMZPKQuYQU8K/ kfY81Fx4outVXbL2WxJjmofvMYzwxS6xXTxO92rKRLZMpsapQ+Gz/QVmvbz3MLmq hxz8xYSylZEoZOYz/nYTtRgwwLl3ribhJ5QgMsDiGaHg1ROJtYU8Oww9L5W31SwT xOaLVNpnK3TP4mxi5yVyNHu1CEwbaRQa -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org