$ rpki-client -vvf repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630303a3a2f34382d3438203d3e20313430333939.roa File: 323430343a326638303a666630303a3a2f34382d3438203d3e20313430333939.roa (raw, json) Hash identifier: m7QnAoAydc2Yh4QON1cIpbAKYw+ExrOXpqRoBLikFJs= Subject key identifier: E1:D6:F6:B1:A3:69:37:79:EF:DF:C2:68:AB:21:3F:B3:A4:AE:94:E1 Certificate issuer: /CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6 Certificate serial: 6DBD4D5F76B0006BD9848D9D8811E0305693EAE7 Authority key identifier: 6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630303a3a2f34382d3438203d3e20313430333939.roa Signing time: Thu 28 Dec 2023 09:00:01 +0000 ROA not before: Thu 28 Dec 2023 08:55:01 +0000 ROA not after: Thu 26 Dec 2024 09:00:01 +0000 asID: 140399 IP address blocks: 2404:2f80:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 21:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:bd:4d:5f:76:b0:00:6b:d9:84:8d:9d:88:11:e0:30:56:93:ea:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6 Validity Not Before: Dec 28 08:55:01 2023 GMT Not After : Dec 26 09:00:01 2024 GMT Subject: CN=E1D6F6B1A3693779EFDFC268AB213FB3A4AE94E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:18:09:89:82:91:54:43:2c:3b:94:6b:68: 29:7b:ee:7d:73:e0:d2:6e:ba:af:86:b7:be:42:d6: ce:e7:99:49:46:9d:55:d9:51:df:e7:f2:a7:fe:68: 6f:9c:ac:cb:81:99:17:b0:24:d4:f9:8f:4b:07:01: db:44:73:0a:e2:a3:aa:7a:4b:8e:8c:8a:e9:81:d0: 91:58:ef:ae:cf:c4:c3:a4:1f:b1:f4:fe:00:50:09: 98:0b:f5:8e:53:3e:a6:36:29:5a:88:97:cd:6c:85: e9:4c:4b:d4:4f:20:f1:aa:af:db:c6:78:48:5b:ea: 2d:c2:59:d1:2e:fa:17:e1:9d:6b:07:0e:02:9a:93: 88:85:c3:35:cc:6f:dc:05:41:95:9c:4e:a1:a1:25: a8:a3:10:b4:c3:22:46:31:72:1f:c1:32:d1:e6:a7: 38:c8:77:a8:83:67:ad:a7:6f:1e:21:93:f4:7e:d4: e8:a1:f5:c5:81:a0:a5:ab:37:7b:ef:e4:0e:32:41: 4c:18:0e:4a:40:32:db:7a:28:d7:7d:6f:04:06:27: bf:16:c0:f5:8e:cd:31:f6:94:75:af:24:bb:33:8d: 26:85:f9:e3:05:2a:66:34:6e:b0:77:d5:eb:dd:fd: 48:86:5c:26:66:33:86:86:5e:25:e1:97:55:a8:08: 51:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D6:F6:B1:A3:69:37:79:EF:DF:C2:68:AB:21:3F:B3:A4:AE:94:E1 X509v3 Authority Key Identifier: keyid:6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630303a3a2f34382d3438203d3e20313430333939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:2f80:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 3b:92:b9:88:ae:3e:5e:c5:d2:ee:d8:79:98:40:c1:18:81:aa: 4b:74:be:fd:52:84:b4:76:17:9f:f9:83:ec:95:fa:0b:89:a2: b0:e8:07:c6:ad:a2:da:37:55:a8:08:c8:7a:b6:0a:1b:0f:e8: 66:9c:ee:32:fd:32:b1:1a:c8:21:68:3e:d2:76:e5:73:cd:c9: e3:3e:f0:a4:8d:15:fa:38:9f:56:9c:b4:71:b0:d0:c7:af:a0: 9d:e5:38:56:b1:35:89:a3:ea:f2:10:38:5a:6f:68:68:5d:d9: ff:e7:cf:f9:45:f4:fd:21:0c:9f:91:da:00:b1:fe:05:cb:91: af:61:dc:e3:09:27:ff:83:f3:ab:ec:24:3c:2c:bd:43:33:4f: 9c:10:e8:d5:9f:87:dc:96:b4:a0:94:bf:9b:95:3d:28:9f:38: ed:86:8c:37:c8:2f:b4:2d:e1:44:d3:c2:17:8f:99:8f:e1:b5: c7:0a:4c:44:f6:05:2f:f3:d3:77:3d:cf:ab:0e:de:d4:14:c1: 44:d1:c5:d9:a8:da:75:e6:a5:1c:46:62:f2:91:0f:2e:66:f0: ff:4d:d0:d3:40:54:eb:42:8a:0d:b0:77:90:5b:17:df:3b:e1: ba:ac:51:9c:d7:10:ab:56:2a:fc:18:bc:e5:75:b1:aa:0d:d5: 39:3c:75:1d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUbb1NX3awAGvZhI2diBHgMFaT6ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU1NTM0QUJBNkVGM0M5OEM4RDBDRjQzNzc5NUQyNUEz QTlDMjVDNjAeFw0yMzEyMjgwODU1MDFaFw0yNDEyMjYwOTAwMDFaMDMxMTAvBgNV BAMTKEUxRDZGNkIxQTM2OTM3NzlFRkRGQzI2OEFCMjEzRkIzQTRBRTk0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20hgJiYKRVEMsO5RraCl77n1z 4NJuuq+Gt75C1s7nmUlGnVXZUd/n8qf+aG+crMuBmRewJNT5j0sHAdtEcwrio6p6 S46MiumB0JFY767PxMOkH7H0/gBQCZgL9Y5TPqY2KVqIl81shelMS9RPIPGqr9vG eEhb6i3CWdEu+hfhnWsHDgKak4iFwzXMb9wFQZWcTqGhJaijELTDIkYxch/BMtHm pzjId6iDZ62nbx4hk/R+1Oih9cWBoKWrN3vv5A4yQUwYDkpAMtt6KNd9bwQGJ78W wPWOzTH2lHWvJLszjSaF+eMFKmY0brB31evd/UiGXCZmM4aGXiXhl1WoCFExAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU4db2saNpN3nv38JoqyE/s6SulOEwHwYDVR0j BBgwFoAUblU0q6bvPJjI0M9Dd5XSWjqcJcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjkxNzc3ZS1jZGI0LTQ4OTctYjI4Ny1lNThlNDI0YzE5OWQvMC82RTU1MzRBQkE2 RUYzQzk4QzhEMENGNDM3Nzk1RDI1QTNBOUMyNUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU1NTM0QUJBNkVGM0M5OEM4RDBDRjQzNzc5NUQyNUEzQTlD MjVDNi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2OTE3NzdlLWNkYjQtNDg5Ny1i Mjg3LWU1OGU0MjRjMTk5ZC8wLzMyMzQzMDM0M2EzMjY2MzgzMDNhNjY2NjMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzMzM5Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BC+A/wAwDQYJKoZIhvcNAQELBQADggEBADuSuYiuPl7F0u7YeZhAwRiBqkt0vv1S hLR2F5/5g+yV+guJorDoB8atoto3VagIyHq2ChsP6Gac7jL9MrEayCFoPtJ25XPN yeM+8KSNFfo4n1actHGw0MevoJ3lOFaxNYmj6vIQOFpvaGhd2f/nz/lF9P0hDJ+R 2gCx/gXLka9h3OMJJ/+D86vsJDwsvUMzT5wQ6NWfh9yWtKCUv5uVPSifOO2GjDfI L7Qt4UTTwhePmY/htccKTET2BS/z03c9z6sO3tQUwUTRxdmo2nXmpRxGYvKRDy5m 8P9N0NNAVOtCig2wd5BbF9874bqsUZzXEKtWKvwYvOV1saoN1Tk8dR0= -----END CERTIFICATE-----Generated at Wed May 1 16:08:44 2024 by rpki-client on console-fra.rpki-client.org