$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/323430313a626538303a3a2f33322d3332203d3e20313333373939.roa File: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (raw, json) Hash identifier: C4RD7yWpQLN/zIKEeL7gOdqXppRBKPVIwhC99j3g7Cg= Subject key identifier: 6A:E4:8E:95:A2:21:9C:92:C5:9E:BC:9C:B9:5B:D0:99:2E:04:2F:C5 Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 493E9E91504F2D8C5BD0F157BF748F501AB7C944 Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/323430313a626538303a3a2f33322d3332203d3e20313333373939.roa Signing time: Sat 04 May 2024 16:16:12 +0000 ROA not before: Sat 04 May 2024 16:11:12 +0000 ROA not after: Sat 03 May 2025 16:16:12 +0000 asID: 133799 IP address blocks: 2401:be80::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 06:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3e:9e:91:50:4f:2d:8c:5b:d0:f1:57:bf:74:8f:50:1a:b7:c9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: May 4 16:11:12 2024 GMT Not After : May 3 16:16:12 2025 GMT Subject: CN=6AE48E95A2219C92C59EBC9CB95BD0992E042FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:48:a4:7b:19:26:ff:74:1f:87:4a:40:88: 94:19:58:b1:41:f1:bd:f9:84:e7:b2:3d:2b:11:90: 68:e7:61:af:37:e3:e1:cc:3c:b5:68:89:6b:db:f1: 8b:0a:21:bd:ec:b2:bd:ea:ad:67:70:e6:fb:d6:f0: 45:33:0b:1b:d1:eb:ff:8e:74:7f:eb:ed:37:78:42: 89:64:c1:51:6b:cb:6d:e3:5b:6c:12:e4:73:ed:44: 7c:14:f5:21:44:e9:99:e7:bc:f3:e3:2f:f3:ef:28: d5:99:48:e7:17:5f:21:fe:a7:a0:a4:c6:6f:16:ae: e9:b1:96:25:56:4b:58:38:02:93:57:23:f3:22:9e: ac:ad:8b:90:60:59:44:2d:68:dc:cd:85:d4:de:0d: 6e:78:65:51:36:95:ca:d7:60:9a:f6:8e:2e:81:5a: d1:e0:fc:a0:75:7c:8b:be:ef:1a:28:00:35:8f:5e: cc:d8:14:3c:77:58:08:62:6b:d4:88:77:80:b0:1f: 02:70:e6:c3:e7:63:d4:66:8e:5b:4e:4c:b8:90:e6: 89:4b:80:f6:2e:37:e1:da:20:ce:9f:59:75:bd:6b: 80:00:20:11:10:03:f6:74:ae:82:00:5d:ba:43:89: 0a:a0:60:77:31:83:db:5e:b9:d0:75:0b:c5:32:72: 5e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E4:8E:95:A2:21:9C:92:C5:9E:BC:9C:B9:5B:D0:99:2E:04:2F:C5 X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/323430313a626538303a3a2f33322d3332203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be80::/32 Signature Algorithm: sha256WithRSAEncryption 5a:ab:b5:d4:fb:0e:fb:b8:bb:42:97:66:46:f1:ff:7f:68:b1: 8d:11:2e:ec:d9:5f:27:62:dc:4b:2c:92:4f:8a:e7:bc:92:24: 08:01:20:44:1e:de:1d:80:05:9b:fd:b4:45:de:89:1c:ac:00: cc:0c:c9:7e:0b:0a:3c:00:97:81:f0:19:65:01:1f:55:b9:f4: 3b:cc:2d:74:9b:23:cd:15:39:3b:1e:56:21:1d:eb:89:8f:c6: ac:89:fd:d8:af:c0:a7:c0:85:63:ac:a7:1c:43:b2:be:48:a9: eb:f1:c9:0b:3e:46:7b:ec:fe:66:d4:ad:c3:2b:cc:1c:9b:7d: f6:d1:d4:41:9e:d7:25:86:5a:b4:eb:de:ed:19:be:61:8b:99: 0b:cb:c3:bc:9c:2b:5f:76:3c:65:ff:e4:ce:bd:1d:ea:8c:f3: 4a:ae:ac:17:02:5a:0d:08:d5:ca:a1:07:14:99:ce:98:5a:7e: 40:c7:12:3b:40:3a:b6:d2:f3:87:cc:ea:4e:05:16:c4:bd:14: e2:36:a6:56:00:6f:d9:55:ab:8a:69:f4:03:5a:dc:ed:8b:a3: 4b:f5:ea:ae:2d:01:c4:b9:11:a3:65:2e:14:b9:03:56:2b:c2: 65:f7:82:a7:9f:92:f7:b2:c5:87:80:25:de:35:bc:44:e5:a8: 0d:43:44:31 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUST6ekVBPLYxb0PFXv3SPUBq3yUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNDA1MDQxNjExMTJaFw0yNTA1MDMxNjE2MTJaMDMxMTAvBgNV BAMTKDZBRTQ4RTk1QTIyMTlDOTJDNTlFQkM5Q0I5NUJEMDk5MkUwNDJGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQUikexkm/3Qfh0pAiJQZWLFB 8b35hOeyPSsRkGjnYa834+HMPLVoiWvb8YsKIb3ssr3qrWdw5vvW8EUzCxvR6/+O dH/r7Td4QolkwVFry23jW2wS5HPtRHwU9SFE6ZnnvPPjL/PvKNWZSOcXXyH+p6Ck xm8WrumxliVWS1g4ApNXI/Minqyti5BgWUQtaNzNhdTeDW54ZVE2lcrXYJr2ji6B WtHg/KB1fIu+7xooADWPXszYFDx3WAhia9SId4CwHwJw5sPnY9RmjltOTLiQ5olL gPYuN+HaIM6fWXW9a4AAIBEQA/Z0roIAXbpDiQqgYHcxg9teudB1C8Uycl6DAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUauSOlaIhnJLFnrycuVvQmS4EL8UwHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMyMzQzMDMxM2E2MjY1MzgzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzMzM3MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBvoAwDQYJKoZI hvcNAQELBQADggEBAFqrtdT7Dvu4u0KXZkbx/39osY0RLuzZXydi3Esskk+K57yS JAgBIEQe3h2ABZv9tEXeiRysAMwMyX4LCjwAl4HwGWUBH1W59DvMLXSbI80VOTse ViEd64mPxqyJ/divwKfAhWOspxxDsr5IqevxyQs+Rnvs/mbUrcMrzBybffbR1EGe 1yWGWrTr3u0ZvmGLmQvLw7ycK192PGX/5M69HeqM80qurBcCWg0I1cqhBxSZzpha fkDHEjtAOrbS84fM6k4FFsS9FOI2plYAb9lVq4pp9ANa3O2Lo0v16q4tAcS5EaNl LhS5A1YrwmX3gqefkveyxYeAJd41vETlqA1DRDE= -----END CERTIFICATE-----Generated at Fri Sep 27 12:47:17 2024 by rpki-client on console-fra.rpki-client.org