$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: QifdkHa4/VbOHQT3KlMoy5LnuJ2NpTgbdtLpxfi1thI= Subject key identifier: CA:A7:B1:9E:4F:AC:F9:82:D2:9A:52:AE:E7:59:3F:6B:FB:80:5A:31 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 5F06FAF96BCFF38512B749BD13D89103700F268F Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 27 Mar 2024 01:33:40 +0000 ROA not before: Wed 27 Mar 2024 01:28:40 +0000 ROA not after: Wed 26 Mar 2025 01:33:40 +0000 asID: 38526 IP address blocks: 2405:3740:9002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:06:fa:f9:6b:cf:f3:85:12:b7:49:bd:13:d8:91:03:70:0f:26:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Mar 27 01:28:40 2024 GMT Not After : Mar 26 01:33:40 2025 GMT Subject: CN=CAA7B19E4FACF982D29A52AEE7593F6BFB805A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:a4:8f:8b:f5:70:62:ab:02:ec:44:7b:43: 57:3a:84:61:1f:a0:69:6a:bb:38:9c:2f:f6:1d:84: 23:34:9f:36:c3:24:f3:cd:21:f8:cd:a8:37:d6:5e: 0a:5d:a0:95:2e:04:25:5a:4d:f7:60:ec:83:3a:8d: ba:d2:59:8d:99:6a:ba:87:b2:44:ef:1d:06:2e:30: 2f:87:83:e4:27:87:74:d8:d9:56:66:eb:45:a3:50: fa:3c:ac:0f:1e:22:c8:55:c7:6f:82:25:b1:7b:3b: e1:75:ff:ea:07:37:6f:44:a6:42:fc:6d:a1:8e:ef: 05:8b:ff:30:a8:ea:18:11:16:bd:c2:f5:b8:2f:5e: c1:15:10:dc:e0:cd:54:1f:25:e8:c0:29:40:17:b0: 39:b2:16:91:3c:f1:5d:3b:01:a4:0f:bc:c3:bb:ca: 9f:a3:4d:27:4e:de:29:c3:2c:d3:63:df:66:01:73: 10:0a:fc:c0:eb:bf:ce:68:67:f3:e3:0a:8d:73:3c: 7a:4b:43:15:e5:fa:a1:6f:0c:a8:85:0a:67:a7:a7: 9a:f7:5f:e5:0b:75:fc:86:62:27:50:43:f4:1a:b1: 34:10:00:78:f6:7c:fe:db:38:99:f0:6e:a4:34:96: 29:4b:67:e9:97:9a:ee:a7:20:df:83:eb:d1:9c:3e: db:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A7:B1:9E:4F:AC:F9:82:D2:9A:52:AE:E7:59:3F:6B:FB:80:5A:31 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:9002::/48 Signature Algorithm: sha256WithRSAEncryption 29:35:49:17:fb:0e:80:47:8d:78:e9:ea:ce:98:58:8b:88:f9: 64:54:2a:3b:df:4a:71:bd:a1:3c:ea:ca:4f:74:10:c6:a4:3e: 16:11:c9:8d:2c:fa:36:f7:ed:fd:79:f8:0d:79:d9:5b:fc:26: 92:20:de:b8:72:29:79:4f:76:43:fc:a2:db:df:6e:e5:3d:d7: 46:3d:41:a9:ba:cc:81:78:7f:db:db:27:73:6a:ca:97:a2:27: 1e:bb:bd:e4:6f:2c:2a:c5:52:d5:25:9d:4c:ca:40:81:72:24: 3b:74:cf:1f:2a:da:d6:74:2e:4a:53:01:e5:0a:d2:a8:c2:85: ba:a7:c0:90:2b:9c:d2:ea:f9:66:01:ba:ca:17:36:68:6a:74: d3:ad:c7:2f:cc:e7:64:c3:fc:02:dc:41:29:08:c2:04:de:38: 5d:2f:dd:53:7b:3e:14:7b:ce:7b:ac:f2:84:db:64:6b:4d:d9: 64:ae:44:f9:60:9b:ce:a1:a1:ed:43:5f:c0:eb:fe:f4:70:a3: 61:cc:b0:2b:ac:97:eb:49:af:8c:d7:f6:29:2b:f3:42:7c:59: ab:2f:5e:b0:9a:fe:24:1c:41:9a:60:aa:93:4a:b5:91:74:2d: c3:67:21:d0:b7:cf:d5:16:0b:21:19:34:a2:be:bd:29:f0:bd: 81:6a:9a:cd -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXwb6+WvP84USt0m9E9iRA3APJo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNDAzMjcwMTI4NDBaFw0yNTAzMjYwMTMzNDBaMDMxMTAvBgNV BAMTKENBQTdCMTlFNEZBQ0Y5ODJEMjlBNTJBRUU3NTkzRjZCRkI4MDVBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHOqSPi/VwYqsC7ER7Q1c6hGEf oGlquzicL/YdhCM0nzbDJPPNIfjNqDfWXgpdoJUuBCVaTfdg7IM6jbrSWY2ZarqH skTvHQYuMC+Hg+Qnh3TY2VZm60WjUPo8rA8eIshVx2+CJbF7O+F1/+oHN29EpkL8 baGO7wWL/zCo6hgRFr3C9bgvXsEVENzgzVQfJejAKUAXsDmyFpE88V07AaQPvMO7 yp+jTSdO3inDLNNj32YBcxAK/MDrv85oZ/PjCo1zPHpLQxXl+qFvDKiFCmenp5r3 X+ULdfyGYidQQ/QasTQQAHj2fP7bOJnwbqQ0lilLZ+mXmu6nIN+D69GcPtsvAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUyqexnk+s+YLSmlKu51k/a/uAWjEwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJACMA0GCSqGSIb3DQEBCwUAA4IBAQApNUkX+w6AR4146erOmFiLiPlkVCo730px vaE86spPdBDGpD4WEcmNLPo29+39efgNedlb/CaSIN64cil5T3ZD/KLb327lPddG PUGpusyBeH/b2ydzasqXoiceu73kbywqxVLVJZ1MykCBciQ7dM8fKtrWdC5KUwHl CtKowoW6p8CQK5zS6vlmAbrKFzZoanTTrccvzOdkw/wC3EEpCMIE3jhdL91Tez4U e857rPKE22RrTdlkrkT5YJvOoaHtQ1/A6/70cKNhzLArrJfrSa+M1/YpK/NCfFmr L16wmv4kHEGaYKqTSrWRdC3DZyHQt8/VFgshGTSivr0p8L2BaprN -----END CERTIFICATE-----Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org