$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/323430323a333730303a3a2f33322d3438203d3e20313337333436.roa File: 323430323a333730303a3a2f33322d3438203d3e20313337333436.roa (raw, json) Hash identifier: g9UvlWBVruYSoblSi/yPaRMlRd59n+M0iW74jeqAj0o= Subject key identifier: EE:B6:93:EA:58:59:8F:83:0E:67:8F:7C:9D:39:01:CE:78:1C:8B:85 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 7DD5394AB604FDB8A34323448F07C3D5960FC843 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/323430323a333730303a3a2f33322d3438203d3e20313337333436.roa Signing time: Wed 03 Jan 2024 03:00:01 +0000 ROA not before: Wed 03 Jan 2024 02:55:01 +0000 ROA not after: Wed 01 Jan 2025 03:00:01 +0000 asID: 137346 IP address blocks: 2402:3700::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d5:39:4a:b6:04:fd:b8:a3:43:23:44:8f:07:c3:d5:96:0f:c8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Jan 3 02:55:01 2024 GMT Not After : Jan 1 03:00:01 2025 GMT Subject: CN=EEB693EA58598F830E678F7C9D3901CE781C8B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:95:dc:62:c1:b8:68:fa:fb:c1:f9:38:b2: 5a:15:f5:d0:7f:57:f3:43:64:2e:0f:87:b8:71:24: ce:fd:2a:5d:1d:49:3c:ed:83:d2:d6:07:bb:a3:4d: 8d:df:c3:18:a7:d3:a6:da:c9:bc:ac:c9:a8:67:06: c1:5f:92:78:b5:be:c8:84:a5:fe:8c:c6:ee:38:2f: 79:e8:38:9b:d2:cc:03:cb:2c:f3:6b:4f:ad:4d:ff: 3e:0e:04:63:09:14:34:32:12:7d:90:c1:5c:71:c5: 57:40:55:e6:dd:db:b0:45:29:0c:78:3e:a2:6e:68: 0b:81:d9:8b:41:12:96:c7:1c:63:66:d1:a6:a0:ce: 80:03:c2:d0:d9:d7:44:25:59:fa:6b:46:58:e4:dc: 2d:df:a9:a8:f6:88:9d:89:8d:88:c0:b4:44:9e:10: fd:b0:b9:af:aa:18:9f:58:f4:ce:47:3d:28:23:59: 11:8f:44:4b:bb:3a:89:05:df:93:9a:39:e9:f7:89: 75:d6:02:f5:e0:2e:64:33:32:8c:c7:d1:c9:7a:cf: 59:a9:88:09:ac:99:56:ac:24:d2:85:ca:65:82:6d: 4f:2a:27:fb:56:11:2d:fe:03:34:47:c8:5a:4b:e2: e2:d8:72:86:0e:16:75:30:19:00:82:1b:21:5e:e6: 8b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B6:93:EA:58:59:8F:83:0E:67:8F:7C:9D:39:01:CE:78:1C:8B:85 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/323430323a333730303a3a2f33322d3438203d3e20313337333436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:3700::/32 Signature Algorithm: sha256WithRSAEncryption 32:04:5c:11:97:33:24:c1:d7:fb:d7:f6:71:63:cb:34:2b:2d: 40:1d:14:91:5a:c0:b2:a1:08:74:0c:99:0a:40:02:3e:a8:f9: 04:86:73:d0:33:d3:42:2d:34:1e:91:fd:2c:42:3e:98:50:3a: 62:cb:0c:c7:f9:19:b8:5b:53:2b:45:96:67:13:1a:cb:99:eb: f0:95:b9:49:9f:a9:33:27:ea:60:8a:13:84:75:3c:39:22:04: 86:f4:18:b7:38:4c:22:c4:08:b1:43:8f:4c:16:85:e0:ef:11: 26:db:fc:b6:d1:47:41:72:7f:64:0a:bf:c9:35:26:eb:c5:91: 6a:6d:f8:bd:59:fd:b2:aa:46:5a:f8:76:8c:3f:67:5b:59:1a: e9:f7:38:b2:ea:dd:99:34:11:dd:cc:8d:27:e5:be:16:b1:23: 13:36:58:8d:2e:91:b0:12:13:aa:4c:eb:07:16:73:c0:b7:42: 26:87:ed:0b:33:e1:12:f1:5f:59:96:c7:c0:e5:a2:3b:fc:86: da:9c:f7:ef:e8:e3:50:81:14:09:f6:03:b6:a6:23:83:88:80: 7d:5b:5e:8e:d1:31:a8:8a:5a:60:20:5a:3f:10:08:95:7e:55: 4f:24:9d:f3:fd:65:10:6a:a7:18:40:bf:64:d0:ad:61:e7:40: 51:7f:e3:c2 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUfdU5SrYE/bijQyNEjwfD1ZYPyEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDAxMDMwMjU1MDFaFw0yNTAxMDEwMzAwMDFaMDMxMTAvBgNV BAMTKEVFQjY5M0VBNTg1OThGODMwRTY3OEY3QzlEMzkwMUNFNzgxQzhCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcs5XcYsG4aPr7wfk4sloV9dB/ V/NDZC4Ph7hxJM79Kl0dSTztg9LWB7ujTY3fwxin06baybysyahnBsFfkni1vsiE pf6Mxu44L3noOJvSzAPLLPNrT61N/z4OBGMJFDQyEn2QwVxxxVdAVebd27BFKQx4 PqJuaAuB2YtBEpbHHGNm0aagzoADwtDZ10QlWfprRljk3C3fqaj2iJ2JjYjAtESe EP2wua+qGJ9Y9M5HPSgjWRGPREu7OokF35OaOen3iXXWAvXgLmQzMozH0cl6z1mp iAmsmVasJNKFymWCbU8qJ/tWES3+AzRHyFpL4uLYcoYOFnUwGQCCGyFe5ouPAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU7raT6lhZj4MOZ498nTkBzngci4UwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzQzMDMyM2EzMzM3MzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCNwAwDQYJKoZI hvcNAQELBQADggEBADIEXBGXMyTB1/vX9nFjyzQrLUAdFJFawLKhCHQMmQpAAj6o +QSGc9Az00ItNB6R/SxCPphQOmLLDMf5GbhbUytFlmcTGsuZ6/CVuUmfqTMn6mCK E4R1PDkiBIb0GLc4TCLECLFDj0wWheDvESbb/LbRR0Fyf2QKv8k1JuvFkWpt+L1Z /bKqRlr4dow/Z1tZGun3OLLq3Zk0Ed3MjSflvhaxIxM2WI0ukbASE6pM6wcWc8C3 QiaH7Qsz4RLxX1mWx8Dlojv8htqc9+/o41CBFAn2A7amI4OIgH1bXo7RMaiKWmAg Wj8QCJV+VU8knfP9ZRBqpxhAv2TQrWHnQFF/48I= -----END CERTIFICATE-----Generated at Sun Nov 24 00:14:31 2024 by rpki-client on console-ams.rpki-client.org