$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/323430363a343534303a3a2f33322d3332203d3e20313430343634.roa File: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (raw, json) Hash identifier: F7cFJQFEjfvXg1C+34og09B2xj2ZP3I7i6FogOXdxpk= Subject key identifier: 54:5C:74:F3:8F:73:66:8F:89:6E:57:9C:90:B1:57:EF:67:96:40:0F Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 19F180B164715BC9640479FE9EB6E660C0B7492E Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/323430363a343534303a3a2f33322d3332203d3e20313430343634.roa Signing time: Tue 17 Oct 2023 11:00:01 +0000 ROA not before: Tue 17 Oct 2023 10:55:01 +0000 ROA not after: Tue 15 Oct 2024 11:00:01 +0000 asID: 140464 IP address blocks: 2406:4540::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f1:80:b1:64:71:5b:c9:64:04:79:fe:9e:b6:e6:60:c0:b7:49:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Oct 17 10:55:01 2023 GMT Not After : Oct 15 11:00:01 2024 GMT Subject: CN=545C74F38F73668F896E579C90B157EF6796400F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:03:1f:f9:a7:aa:da:f9:fc:7b:f8:d5:98:65: aa:88:21:fc:10:6d:56:83:32:27:27:2b:66:c3:06: 78:d8:bd:a7:16:43:45:41:41:3f:bf:4e:9d:a8:b1: f9:17:53:d2:29:f1:74:5c:a5:6d:f8:ce:c3:25:27: 64:fe:c7:34:f4:88:04:5a:52:18:1b:07:3d:ce:98: 87:e5:ec:d3:d0:b0:81:53:a3:09:14:6d:f7:50:ff: c9:45:3b:c5:cb:15:d8:d1:b0:cc:0c:10:0f:6f:b1: 3f:19:7f:ed:b1:d6:45:ac:38:76:e4:2a:5e:b9:9e: 5c:f4:12:0c:61:12:8c:d0:95:c6:c0:16:04:9b:81: 4e:ce:c2:01:02:e3:3b:b4:f3:9e:99:e8:44:5e:22: 7e:0c:04:23:c5:da:03:89:94:be:8b:5e:8a:6f:e0: 3a:7e:58:80:13:92:7c:b0:31:ff:f3:49:fb:9e:af: 3e:bf:f5:82:72:71:90:e0:a0:30:9c:41:49:3f:e2: f8:99:fe:4f:e0:89:9f:fe:33:74:78:16:e0:42:62: f3:d8:29:1f:47:d4:93:24:7a:82:e8:30:ba:fd:4b: 54:5d:64:d5:c5:77:9d:d1:1c:40:c0:12:02:57:41: e0:de:90:f8:57:dd:82:90:c7:aa:f2:39:08:26:bb: e1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5C:74:F3:8F:73:66:8F:89:6E:57:9C:90:B1:57:EF:67:96:40:0F X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/323430363a343534303a3a2f33322d3332203d3e20313430343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4540::/32 Signature Algorithm: sha256WithRSAEncryption b3:03:2c:db:43:75:83:6a:09:34:bf:8f:22:62:09:a7:98:a9: 04:f3:17:20:cf:ba:e1:56:bc:27:2e:cd:13:89:5d:bc:95:c5: 4c:28:46:ff:10:d0:e0:44:d4:95:f9:b0:a8:dd:78:2a:4c:05: a3:b0:4d:ce:eb:bb:45:40:f9:63:17:27:ec:36:12:5c:36:dd: 86:d6:e2:d2:1b:2c:18:b3:da:42:db:d2:86:33:f9:f0:60:11: d7:7a:48:01:d6:56:13:b0:c6:f3:f1:c0:0e:7c:a1:c1:83:fa: 0d:22:94:9e:48:e3:47:d9:be:cf:1e:28:62:06:4a:5e:51:d0: cc:1b:53:c6:71:27:7a:05:42:fd:60:6d:4c:c8:0e:e1:c7:ca: 1e:f6:12:95:a3:8d:9a:b2:b7:dc:85:43:1d:34:33:fe:5a:60: cd:9e:b9:fe:37:2e:b8:34:85:80:1b:33:69:1d:08:c0:88:92: 99:eb:96:bb:22:18:98:1a:61:52:a3:28:66:d4:62:8b:22:6e: c9:a8:af:a0:b8:6b:ef:f9:e1:6c:d4:02:c7:b4:c7:f4:17:a5: 5a:8f:e3:2c:06:13:53:57:69:0d:7d:83:91:9a:df:62:7a:6e: 39:4f:27:bb:b1:d1:c0:25:fc:f7:d0:a1:fb:bf:1c:b8:a5:ac: 86:75:ab:a6 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUGfGAsWRxW8lkBHn+nrbmYMC3SS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yMzEwMTcxMDU1MDFaFw0yNDEwMTUxMTAwMDFaMDMxMTAvBgNV BAMTKDU0NUM3NEYzOEY3MzY2OEY4OTZFNTc5QzkwQjE1N0VGNjc5NjQwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNAx/5p6ra+fx7+NWYZaqIIfwQ bVaDMicnK2bDBnjYvacWQ0VBQT+/Tp2osfkXU9Ip8XRcpW34zsMlJ2T+xzT0iARa UhgbBz3OmIfl7NPQsIFTowkUbfdQ/8lFO8XLFdjRsMwMEA9vsT8Zf+2x1kWsOHbk Kl65nlz0EgxhEozQlcbAFgSbgU7OwgEC4zu0856Z6EReIn4MBCPF2gOJlL6LXopv 4Dp+WIATknywMf/zSfuerz6/9YJycZDgoDCcQUk/4viZ/k/giZ/+M3R4FuBCYvPY KR9H1JMkeoLoMLr9S1RdZNXFd53RHEDAEgJXQeDekPhX3YKQx6ryOQgmu+HpAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUVFx0849zZo+JbleckLFX72eWQA8wHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiOGJlOTA1LWYyOTYtNDVkMS1h ODc5LTRhNGRlNTJjYjJkNi8wLzMyMzQzMDM2M2EzNDM1MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGRUAwDQYJKoZI hvcNAQELBQADggEBALMDLNtDdYNqCTS/jyJiCaeYqQTzFyDPuuFWvCcuzROJXbyV xUwoRv8Q0OBE1JX5sKjdeCpMBaOwTc7ru0VA+WMXJ+w2Elw23YbW4tIbLBiz2kLb 0oYz+fBgEdd6SAHWVhOwxvPxwA58ocGD+g0ilJ5I40fZvs8eKGIGSl5R0MwbU8Zx J3oFQv1gbUzIDuHHyh72EpWjjZqyt9yFQx00M/5aYM2euf43Lrg0hYAbM2kdCMCI kpnrlrsiGJgaYVKjKGbUYosibsmor6C4a+/54WzUAse0x/QXpVqP4ywGE1NXaQ19 g5Ga32J6bjlPJ7ux0cAl/PfQofu/HLilrIZ1q6Y= -----END CERTIFICATE-----Generated at Sat Jun 22 12:35:22 2024 by rpki-client on console-fra.rpki-client.org