$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa File: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (raw, json) Hash identifier: HgT0zWqGsVo/A44wtsD2sn4SQOnXdiq4EqXeX3vHjlc= Subject key identifier: 19:35:F3:2B:DC:F4:71:E6:AA:68:99:03:A4:BE:CD:07:E4:FA:A8:88 Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Certificate serial: 6346BF35EAAA05AB1922BB51E61A3BF86991E779 Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa Signing time: Tue 27 Feb 2024 16:32:05 +0000 ROA not before: Tue 27 Feb 2024 16:27:05 +0000 ROA not after: Tue 25 Feb 2025 16:32:05 +0000 asID: 24429 IP address blocks: 2405:1640:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 11:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:46:bf:35:ea:aa:05:ab:19:22:bb:51:e6:1a:3b:f8:69:91:e7:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Validity Not Before: Feb 27 16:27:05 2024 GMT Not After : Feb 25 16:32:05 2025 GMT Subject: CN=1935F32BDCF471E6AA689903A4BECD07E4FAA888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:1c:cb:ab:b0:30:0c:aa:59:d1:66:5d:c1: 0a:e5:70:3a:55:9e:62:43:08:4c:4c:3d:a9:6c:db: 29:07:ff:eb:ed:14:a0:38:df:1e:3a:11:8b:d7:84: 21:79:41:75:72:72:b8:03:52:ad:87:bb:5a:19:0b: 59:08:8e:4f:1f:55:f4:41:78:f3:73:9a:7c:94:e1: 9a:fa:ee:e8:8e:05:ea:81:a9:b6:e0:00:ad:e7:8e: 94:4c:73:4b:68:2c:04:e3:b7:02:61:c2:59:88:7e: 23:c8:ab:0c:a9:78:54:33:25:a4:37:5b:e5:b3:fc: 96:73:09:d3:a9:22:e1:46:c8:be:df:73:41:d0:13: 4e:52:c8:30:1f:1a:05:87:36:79:1b:08:b2:7b:a9: 27:22:b2:b8:e6:42:fc:15:43:eb:5a:b3:38:db:6c: 5e:a5:9e:a2:ab:05:d4:1c:27:26:e9:a8:b6:98:6d: 4a:bc:8c:13:71:9b:b7:9c:c5:bb:80:54:de:27:96: 4f:b1:ac:59:21:10:03:39:4d:e7:69:3d:00:21:63: 74:79:14:ad:cf:e5:5a:cb:51:51:be:79:0e:bd:e3: 20:89:51:7e:c9:e4:44:dc:30:2f:f9:ed:5d:c6:c5: 33:4b:20:b6:0f:d6:c6:b9:6a:90:fd:bf:6b:1a:36: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:35:F3:2B:DC:F4:71:E6:AA:68:99:03:A4:BE:CD:07:E4:FA:A8:88 X509v3 Authority Key Identifier: keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:1640:6::/48 Signature Algorithm: sha256WithRSAEncryption 82:b6:85:c1:92:1c:1d:66:e1:eb:d6:05:5b:ee:3e:52:6e:6c: 17:86:b5:24:d6:f3:a1:9e:cf:90:12:c1:1b:74:73:03:38:9f: a1:9e:2d:36:be:73:62:52:d8:93:c9:d8:93:be:f0:a5:47:51: d6:9b:60:11:07:6c:42:76:81:cd:b4:06:8c:97:cc:cc:71:b7: 48:c3:d7:fd:4b:c8:5d:06:66:e7:65:25:51:fe:11:d9:9a:37: ac:d3:4d:fe:01:23:01:d8:d0:ab:f6:5a:25:d0:ae:93:8f:7f: 7f:85:2b:76:55:b6:3c:96:31:d6:1a:e1:00:98:20:22:cb:2f: ca:2a:bb:7d:10:e8:1d:5e:d3:f8:25:11:eb:76:66:e8:1f:63: d7:7c:cd:6a:c4:ad:a7:fe:66:c9:88:71:d7:c2:01:e4:90:9b: 99:38:97:f6:bf:35:fd:e7:cc:61:82:b0:4e:02:84:f8:74:d3: d6:d0:6a:91:3b:cb:b4:d0:a3:6c:03:db:ad:0b:88:89:68:f4: 6f:db:a9:f5:10:7c:b3:78:54:3b:de:f2:2c:4b:aa:10:e4:c8: fe:91:8e:ab:5a:ed:e5:ea:dd:6c:f5:73:02:30:fa:8a:d8:64: 96:2f:da:0b:87:75:5a:64:6d:6e:88:e5:fe:78:64:7f:36:ac: e0:45:6b:d9 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUY0a/NeqqBasZIrtR5ho7+GmR53kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3 QjQ1Q0IzNTAeFw0yNDAyMjcxNjI3MDVaFw0yNTAyMjUxNjMyMDVaMDMxMTAvBgNV BAMTKDE5MzVGMzJCRENGNDcxRTZBQTY4OTkwM0E0QkVDRDA3RTRGQUE4ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLrRzLq7AwDKpZ0WZdwQrlcDpV nmJDCExMPals2ykH/+vtFKA43x46EYvXhCF5QXVycrgDUq2Hu1oZC1kIjk8fVfRB ePNzmnyU4Zr67uiOBeqBqbbgAK3njpRMc0toLATjtwJhwlmIfiPIqwypeFQzJaQ3 W+Wz/JZzCdOpIuFGyL7fc0HQE05SyDAfGgWHNnkbCLJ7qScisrjmQvwVQ+taszjb bF6lnqKrBdQcJybpqLaYbUq8jBNxm7ecxbuAVN4nlk+xrFkhEAM5TedpPQAhY3R5 FK3P5VrLUVG+eQ694yCJUX7J5ETcMC/57V3GxTNLILYP1sa5apD9v2saNh9fAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUGTXzK9z0ceaqaJkDpL7NB+T6qIgwHwYDVR0j BBgwFoAUFbfr+Ss1/bW8aZC7jsosKXtFyzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjU1MWFiOS04MDQxLTRhOWEtOWI1MC1jN2M2ZGVjMjE2NmYvMC8xNUI3RUJGOTJC MzVGREI1QkM2OTkwQkI4RUNBMkMyOTdCNDVDQjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3QjQ1 Q0IzNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmNTUxYWI5LTgwNDEtNGE5YS05 YjUwLWM3YzZkZWMyMTY2Zi8wLzMyMzQzMDM1M2EzMTM2MzQzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMjM0MzQzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAUWQAAGMA0G CSqGSIb3DQEBCwUAA4IBAQCCtoXBkhwdZuHr1gVb7j5SbmwXhrUk1vOhns+QEsEb dHMDOJ+hni02vnNiUtiTydiTvvClR1HWm2ARB2xCdoHNtAaMl8zMcbdIw9f9S8hd BmbnZSVR/hHZmjes003+ASMB2NCr9lol0K6Tj39/hSt2VbY8ljHWGuEAmCAiyy/K Krt9EOgdXtP4JRHrdmboH2PXfM1qxK2n/mbJiHHXwgHkkJuZOJf2vzX958xhgrBO AoT4dNPW0GqRO8u00KNsA9utC4iJaPRv26n1EHyzeFQ73vIsS6oQ5Mj+kY6rWu3l 6t1s9XMCMPqK2GSWL9oLh3VaZG1uiOX+eGR/NqzgRWvZ -----END CERTIFICATE-----Generated at Mon Nov 25 10:55:39 2024 by rpki-client on console-ams.rpki-client.org