$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030343a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030343a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: GH+hoEntLmNCp+QTBV4JLi6orJ4G98J9ErAlpxtIRpA= Subject key identifier: 91:9A:7D:89:F3:1B:E4:B0:DA:D4:A1:08:06:0D:0D:80:87:49:85:0D Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 05A60D74E7EC0FEDD6194AEB4A65902AC9A72CBA Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030343a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 27 Mar 2024 01:34:18 +0000 ROA not before: Wed 27 Mar 2024 01:29:18 +0000 ROA not after: Wed 26 Mar 2025 01:34:18 +0000 asID: 38526 IP address blocks: 2405:3740:9004::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a6:0d:74:e7:ec:0f:ed:d6:19:4a:eb:4a:65:90:2a:c9:a7:2c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Mar 27 01:29:18 2024 GMT Not After : Mar 26 01:34:18 2025 GMT Subject: CN=919A7D89F31BE4B0DAD4A108060D0D808749850D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9f:2b:7a:89:c3:96:6c:8c:a7:c0:58:c5:47: fd:a8:86:72:a7:20:2c:b8:b1:c1:f9:ab:c6:82:1b: b7:c4:68:fd:8a:32:95:f1:29:5b:0c:f2:6b:2f:30: 0c:5f:61:4f:b4:97:28:15:b9:74:8d:9d:13:43:80: a9:bb:65:57:91:1c:0b:41:88:99:12:17:b4:98:91: de:7f:c6:83:b8:ef:75:18:5e:00:30:91:7e:61:16: e6:41:a0:68:90:66:ea:a6:3f:a9:bc:01:ea:90:eb: 46:ed:89:e2:23:0b:2c:f6:d8:b8:25:66:52:e6:57: 50:cc:aa:69:ce:82:5c:25:25:5f:80:31:d2:ee:ae: cb:b9:1d:da:07:5f:7d:56:c8:50:bc:51:12:de:b9: 02:72:36:f4:c2:7f:98:00:a7:54:8b:54:65:5c:f0: 55:4b:07:9a:d9:51:2f:cf:2e:09:84:04:a5:fa:27: c1:60:ec:4d:1c:1d:0e:3b:05:5a:d8:02:fa:d2:06: 90:aa:f5:0c:2c:05:30:6f:f8:55:78:0b:e3:10:c3: 1c:d3:df:df:03:47:0d:79:52:e8:ab:d8:d8:a2:a4: 71:5e:cd:1d:f7:0b:45:11:cf:8b:8d:79:1b:17:f5: 76:a9:8d:28:92:6f:5e:20:7c:e9:9a:01:60:86:a7: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9A:7D:89:F3:1B:E4:B0:DA:D4:A1:08:06:0D:0D:80:87:49:85:0D X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030343a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:9004::/48 Signature Algorithm: sha256WithRSAEncryption cb:13:e2:b3:7e:3b:7f:6a:af:1c:9a:c6:bc:cf:eb:bc:48:71: 52:a3:17:26:23:1d:c0:00:41:de:cd:0f:70:d9:d3:b0:fa:85: f3:13:ac:51:69:8b:f8:35:56:1f:05:84:72:2a:cb:9d:c6:04: 8e:ee:6b:60:05:92:6e:17:c5:c6:74:2a:1f:54:e3:24:dd:fb: ec:f4:70:c4:1f:27:c4:19:b0:97:37:57:a4:13:e5:36:a8:26: a3:97:05:16:08:b6:e4:ae:0d:b3:73:70:4e:1c:ed:c2:fd:7b: 8a:24:61:d3:ed:b8:68:fb:38:8e:49:2c:4a:bc:2b:e4:24:d0: ae:c0:66:3a:b7:7c:d1:04:ce:b2:7b:2a:6a:54:ff:0c:b9:b7: 16:47:36:eb:79:3f:6f:f0:65:20:52:47:c0:67:09:79:4f:45: 67:df:6d:22:81:d8:4f:57:cf:c5:e9:2a:36:bd:92:41:57:ad: 06:e6:eb:85:b7:27:2e:83:93:ae:eb:7a:d4:cb:c7:0a:a8:8c: 30:20:ed:a8:cf:c1:e1:39:58:e2:23:85:c3:cd:1a:ba:52:f8: d1:34:85:c8:d9:49:1e:8e:56:3a:d1:ab:17:f3:9d:de:97:ef: 55:8e:be:da:18:59:f1:b6:16:77:dc:8b:9f:5c:59:12:eb:93: dc:95:3b:d9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBaYNdOfsD+3WGUrrSmWQKsmnLLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNDAzMjcwMTI5MThaFw0yNTAzMjYwMTM0MThaMDMxMTAvBgNV BAMTKDkxOUE3RDg5RjMxQkU0QjBEQUQ0QTEwODA2MEQwRDgwODc0OTg1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnyt6icOWbIynwFjFR/2ohnKn ICy4scH5q8aCG7fEaP2KMpXxKVsM8msvMAxfYU+0lygVuXSNnRNDgKm7ZVeRHAtB iJkSF7SYkd5/xoO473UYXgAwkX5hFuZBoGiQZuqmP6m8AeqQ60btieIjCyz22Lgl ZlLmV1DMqmnOglwlJV+AMdLursu5HdoHX31WyFC8URLeuQJyNvTCf5gAp1SLVGVc 8FVLB5rZUS/PLgmEBKX6J8Fg7E0cHQ47BVrYAvrSBpCq9QwsBTBv+FV4C+MQwxzT 398DRw15Uuir2NiipHFezR33C0URz4uNeRsX9XapjSiSb14gfOmaAWCGp+OfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUkZp9ifMb5LDa1KEIBg0NgIdJhQ0wHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzQz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAEMA0GCSqGSIb3DQEBCwUAA4IBAQDLE+Kzfjt/aq8cmsa8z+u8SHFSoxcmIx3A AEHezQ9w2dOw+oXzE6xRaYv4NVYfBYRyKsudxgSO7mtgBZJuF8XGdCofVOMk3fvs 9HDEHyfEGbCXN1ekE+U2qCajlwUWCLbkrg2zc3BOHO3C/XuKJGHT7bho+ziOSSxK vCvkJNCuwGY6t3zRBM6yeypqVP8MubcWRzbreT9v8GUgUkfAZwl5T0Vn320igdhP V8/F6So2vZJBV60G5uuFtycug5Ou63rUy8cKqIwwIO2oz8HhOVjiI4XDzRq6UvjR NIXI2UkejlY60asX853el+9Vjr7aGFnxthZ33IufXFkS65PclTvZ -----END CERTIFICATE-----Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org