$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa File: 323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa (raw, json) Hash identifier: oZz5kGSxoE88/vTTf1u85hbLamPx54qSSmK02cHDe/Y= Subject key identifier: 74:A6:6F:B9:4C:FE:54:30:07:8A:44:52:D9:99:33:B3:C1:E3:4D:A2 Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Certificate serial: 29B11EA2BF232A269C900856A9955F930E8C0CAC Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa Signing time: Mon 26 Feb 2024 17:00:01 +0000 ROA not before: Mon 26 Feb 2024 16:55:01 +0000 ROA not after: Mon 24 Feb 2025 17:00:01 +0000 asID: 139417 IP address blocks: 2404:cac0:db5::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 20:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b1:1e:a2:bf:23:2a:26:9c:90:08:56:a9:95:5f:93:0e:8c:0c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Validity Not Before: Feb 26 16:55:01 2024 GMT Not After : Feb 24 17:00:01 2025 GMT Subject: CN=74A66FB94CFE5430078A4452D99933B3C1E34DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:d4:45:6f:11:c8:1a:8a:d1:92:cd:95:f3: 3d:22:69:f5:ca:80:14:9c:69:15:ad:d3:f2:c0:0e: 31:2d:da:77:f7:2c:ee:ad:83:68:cf:dc:20:f9:3a: a2:0e:8e:21:ce:05:f8:2f:6d:44:9a:0f:62:59:88: 59:3f:60:ad:f1:98:a8:eb:5e:38:26:5d:77:a6:84: e7:a4:02:68:a6:8e:9d:c3:0f:68:41:53:8e:42:40: 8b:b3:02:ba:21:74:5e:73:db:ac:c8:2a:1c:1c:df: 2f:a9:25:fe:d0:fa:48:a1:07:e6:f9:e7:ac:a8:d1: 8c:ae:bf:16:85:3c:90:97:44:41:36:7e:50:57:cf: f3:d8:a1:27:8f:3c:f6:1b:dc:aa:5f:87:8d:28:d4: ed:45:c6:4d:5f:2e:17:42:53:4b:27:8a:bc:9d:84: 68:3f:a9:a1:93:ab:00:df:96:c4:83:72:74:ab:b1: 4d:12:77:29:de:dd:6c:8a:8f:de:fe:51:08:f7:d5: 87:56:8b:8a:c2:6d:ae:42:6d:11:12:c2:0c:4a:0c: 93:98:be:16:97:dc:ad:a7:70:58:6c:46:0e:eb:8b: 3f:97:f1:66:83:5c:77:65:d6:fe:2c:22:68:17:9a: 90:cc:8e:4b:97:5b:17:b3:33:61:19:10:3e:cf:68: cf:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A6:6F:B9:4C:FE:54:30:07:8A:44:52:D9:99:33:B3:C1:E3:4D:A2 X509v3 Authority Key Identifier: keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:cac0:db5::/48 Signature Algorithm: sha256WithRSAEncryption a8:3a:32:3a:8f:ac:ef:cf:d6:9a:86:5d:ab:be:94:c9:4f:1b: 05:00:2a:8e:c1:a5:e3:a8:9c:86:6f:96:fa:88:d6:be:d1:34: 2f:4e:66:98:9c:2f:27:22:9e:11:a5:9c:eb:bd:aa:bc:32:38: 0b:34:f3:30:7c:19:08:52:c5:95:c8:7f:70:c4:12:e3:de:4c: 68:68:b3:75:23:ec:43:30:22:37:5c:e9:0a:9d:1a:fa:32:b1: ff:5c:4d:b1:c2:49:8e:57:4e:b5:03:75:cf:ad:93:24:e2:45: 7c:ad:01:ce:5f:c1:dc:18:ed:93:27:d7:ed:ee:f4:cd:db:84: c3:c5:6d:6e:a4:96:02:32:fa:21:0b:5b:5a:21:28:5e:bb:a2: 63:f4:ed:e9:5a:b9:6c:fc:51:14:7d:47:14:5d:8b:03:85:b9: 23:35:ec:29:23:f0:4c:5f:1b:e1:fc:c7:79:1b:12:83:45:13: 8a:06:28:c5:3b:1a:e8:d5:bf:b5:6f:6f:a3:85:6b:39:9e:95: b2:4f:ac:8b:fc:a5:e0:06:d1:95:67:c8:72:17:29:81:0a:64: 87:a0:df:8c:88:53:e0:75:0b:b7:29:91:15:ed:5b:ff:4d:09: 43:ab:6d:1c:8a:57:cb:c1:90:1c:1d:6e:f5:42:01:04:e6:79: 5c:fa:18:3c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKbEeor8jKiackAhWqZVfkw6MDKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3 MkRBRURENjAeFw0yNDAyMjYxNjU1MDFaFw0yNTAyMjQxNzAwMDFaMDMxMTAvBgNV BAMTKDc0QTY2RkI5NENGRTU0MzAwNzhBNDQ1MkQ5OTkzM0IzQzFFMzREQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLk9RFbxHIGorRks2V8z0iafXK gBScaRWt0/LADjEt2nf3LO6tg2jP3CD5OqIOjiHOBfgvbUSaD2JZiFk/YK3xmKjr XjgmXXemhOekAmimjp3DD2hBU45CQIuzArohdF5z26zIKhwc3y+pJf7Q+kihB+b5 56yo0YyuvxaFPJCXREE2flBXz/PYoSePPPYb3Kpfh40o1O1Fxk1fLhdCU0sniryd hGg/qaGTqwDflsSDcnSrsU0Sdyne3WyKj97+UQj31YdWi4rCba5CbRESwgxKDJOY vhaX3K2ncFhsRg7riz+X8WaDXHdl1v4sImgXmpDMjkuXWxezM2EZED7PaM9PAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUdKZvuUz+VDAHikRS2Zkzs8HjTaIwHwYDVR0j BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB RURENi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDEzZmY0LTIwMmItNDk5OS1i NDVkLTczYzk3MmYxMDExNi8wLzMyMzQzMDM0M2E2MzYxNjMzMDNhNjQ2MjM1M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzQzMTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATK wA21MA0GCSqGSIb3DQEBCwUAA4IBAQCoOjI6j6zvz9aahl2rvpTJTxsFACqOwaXj qJyGb5b6iNa+0TQvTmaYnC8nIp4RpZzrvaq8MjgLNPMwfBkIUsWVyH9wxBLj3kxo aLN1I+xDMCI3XOkKnRr6MrH/XE2xwkmOV061A3XPrZMk4kV8rQHOX8HcGO2TJ9ft 7vTN24TDxW1upJYCMvohC1taISheu6Jj9O3pWrls/FEUfUcUXYsDhbkjNewpI/BM Xxvh/Md5GxKDRROKBijFOxro1b+1b2+jhWs5npWyT6yL/KXgBtGVZ8hyFymBCmSH oN+MiFPgdQu3KZEV7Vv/TQlDq20cilfLwZAcHW71QgEE5nlc+hg8 -----END CERTIFICATE-----Generated at Sat Jun 1 23:00:30 2024 by rpki-client on console-ams.rpki-client.org