$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a3a2f34382d3438203d3e20313431363038.roa File: 323430363a616563303a3a2f34382d3438203d3e20313431363038.roa (raw, json) Hash identifier: KczcNReWYkUeivDYKIxXDp5jDbj69dSn42qgUKnDpNU= Subject key identifier: F2:57:1C:C2:F0:74:E9:47:54:E3:78:5B:BD:DA:94:C5:F2:35:DA:85 Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B Certificate serial: 4E8A0CEAD378799CEEF6E44F2985C284663CC2E4 Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a3a2f34382d3438203d3e20313431363038.roa Signing time: Thu 06 Jun 2024 03:00:01 +0000 ROA not before: Thu 06 Jun 2024 02:55:01 +0000 ROA not after: Thu 05 Jun 2025 03:00:01 +0000 asID: 141608 IP address blocks: 2406:aec0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8a:0c:ea:d3:78:79:9c:ee:f6:e4:4f:29:85:c2:84:66:3c:c2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B Validity Not Before: Jun 6 02:55:01 2024 GMT Not After : Jun 5 03:00:01 2025 GMT Subject: CN=F2571CC2F074E94754E3785BBDDA94C5F235DA85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ae:24:e1:7b:36:f5:a0:07:32:e4:0a:da:e3: 69:91:1a:17:31:ad:cb:95:e7:2f:ea:d9:15:13:7d: 2d:ce:15:a6:9e:f1:7d:c4:f7:8b:7b:f1:dd:fb:45: 6d:46:04:28:4f:66:36:0f:9a:f0:67:2d:c3:86:79: 2e:34:99:bd:73:60:a5:05:15:07:d9:12:e4:3a:c4: c0:c2:ec:bd:c6:e8:2f:0c:45:14:86:01:e4:d2:48: 2b:61:bb:ef:c9:a9:eb:f1:8c:4b:51:3c:8b:51:83: b7:1a:90:b3:70:ed:11:e9:63:44:5b:bc:2a:3f:a7: 58:18:99:cb:b2:ab:0b:65:36:f0:94:ff:80:de:fc: 55:c3:b6:39:37:aa:30:37:86:ab:2e:3c:c6:b6:16: 50:c7:e5:2e:5e:08:e1:fd:14:f9:ea:7b:b3:74:82: 46:23:35:e0:da:92:40:f0:9c:c2:df:57:8c:1c:fb: 66:61:02:cb:7e:0a:90:c6:5b:36:28:f9:01:97:15: b1:f1:ef:3f:20:5e:7a:6d:17:e4:b3:2e:83:a1:ad: 4e:05:49:c0:e9:ef:67:d9:61:06:9c:90:52:0b:b6: 44:9f:af:aa:f8:9b:ad:db:82:32:99:a5:c4:99:a5: 03:92:16:52:41:d8:6f:2a:0a:f0:66:ae:2a:d6:f0: e7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:57:1C:C2:F0:74:E9:47:54:E3:78:5B:BD:DA:94:C5:F2:35:DA:85 X509v3 Authority Key Identifier: keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a3a2f34382d3438203d3e20313431363038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:aec0::/48 Signature Algorithm: sha256WithRSAEncryption 7f:31:35:9f:4e:5a:80:7f:01:84:15:3e:cf:0d:18:7c:8a:bc: aa:65:aa:a4:39:80:3b:83:55:94:d0:1f:fb:4a:1d:d2:72:82: 48:0a:c9:8d:f9:04:ea:73:76:18:f9:c6:6a:96:c2:b3:e3:17: 1c:62:3c:d5:bd:1a:73:94:4b:13:59:48:c9:7d:86:de:2c:99: 6e:8a:2d:35:38:a9:a8:f4:ec:1d:87:b7:b2:a1:90:7c:2f:a7: 01:25:b1:78:b4:e0:5b:86:a7:d3:7f:a2:42:cd:c2:ca:d2:7d: 35:39:9f:93:c4:79:bf:23:7e:44:84:9a:93:b3:ca:b3:0f:90: 83:15:6e:46:a1:80:bf:d7:8e:f4:6e:25:7a:62:49:cb:47:dd: 9c:66:4c:03:73:2f:4e:49:0b:89:84:a2:6d:82:a7:6d:3d:4e: 4d:61:ef:65:5c:87:39:ac:94:bf:07:a0:8f:e4:30:cb:68:68: c7:d9:9f:ea:ba:ff:9e:c6:cf:d7:bf:52:0d:15:4d:a0:17:54: 36:f9:80:78:46:4f:98:89:e7:1b:2b:6c:48:57:ed:57:3b:fa: 24:c6:0e:12:e3:ca:61:9b:fa:db:6d:5a:9d:96:6c:39:2d:d4: af:2b:20:74:56:2d:29:99:89:a6:74:20:d9:ba:83:71:8c:4d: 46:60:9a:76 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUTooM6tN4eZzu9uRPKYXChGY8wuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVB MDk3MzUzQjAeFw0yNDA2MDYwMjU1MDFaFw0yNTA2MDUwMzAwMDFaMDMxMTAvBgNV BAMTKEYyNTcxQ0MyRjA3NEU5NDc1NEUzNzg1QkJEREE5NEM1RjIzNURBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlriThezb1oAcy5Ara42mRGhcx rcuV5y/q2RUTfS3OFaae8X3E94t78d37RW1GBChPZjYPmvBnLcOGeS40mb1zYKUF FQfZEuQ6xMDC7L3G6C8MRRSGAeTSSCthu+/JqevxjEtRPItRg7cakLNw7RHpY0Rb vCo/p1gYmcuyqwtlNvCU/4De/FXDtjk3qjA3hqsuPMa2FlDH5S5eCOH9FPnqe7N0 gkYjNeDakkDwnMLfV4wc+2ZhAst+CpDGWzYo+QGXFbHx7z8gXnptF+SzLoOhrU4F ScDp72fZYQackFILtkSfr6r4m63bgjKZpcSZpQOSFlJB2G8qCvBmrirW8OcrAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQU8lccwvB06UdU43hbvdqUxfI12oUwHwYDVR0j BBgwFoAUGVKwdNGdWrVi1+5TetMFnqCXNTswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGYyYzAyNS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC8xOTUyQjA3NEQx OUQ1QUI1NjJEN0VFNTM3QUQzMDU5RUEwOTczNTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVBMDk3 MzUzQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0ZjJjMDI1LTFkNzYtNGEzNi04 MTYwLWE5ZThhZmUzNTc5Zi8wLzMyMzQzMDM2M2E2MTY1NjMzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDMxMzQzMTM2MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQGrsAAADANBgkq hkiG9w0BAQsFAAOCAQEAfzE1n05agH8BhBU+zw0YfIq8qmWqpDmAO4NVlNAf+0od 0nKCSArJjfkE6nN2GPnGapbCs+MXHGI81b0ac5RLE1lIyX2G3iyZbootNTipqPTs HYe3sqGQfC+nASWxeLTgW4an03+iQs3CytJ9NTmfk8R5vyN+RISak7PKsw+QgxVu RqGAv9eO9G4lemJJy0fdnGZMA3MvTkkLiYSibYKnbT1OTWHvZVyHOayUvwegj+Qw y2hox9mf6rr/nsbP179SDRVNoBdUNvmAeEZPmInnGytsSFftVzv6JMYOEuPKYZv6 221anZZsOS3UrysgdFYtKZmJpnQg2bqDcYxNRmCadg== -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org