$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/323430353a636534303a3a2f33322d3438203d3e20313339393838.roa File: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (raw, json) Hash identifier: qln4Vk3LqPuSEAyfEFKIbrl7uM6MoBml3amcry/eX+k= Subject key identifier: AF:C6:11:7C:D5:CF:CB:0B:85:C3:8D:6A:36:F3:23:08:78:84:A0:5B Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 78E3DCA16ABFA6A5AB162DA5400D6E15BD90012F Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/323430353a636534303a3a2f33322d3438203d3e20313339393838.roa Signing time: Fri 10 May 2024 08:00:37 +0000 ROA not before: Fri 10 May 2024 07:55:37 +0000 ROA not after: Fri 09 May 2025 08:00:37 +0000 asID: 139988 IP address blocks: 2405:ce40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e3:dc:a1:6a:bf:a6:a5:ab:16:2d:a5:40:0d:6e:15:bd:90:01:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: May 10 07:55:37 2024 GMT Not After : May 9 08:00:37 2025 GMT Subject: CN=AFC6117CD5CFCB0B85C38D6A36F323087884A05B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:a0:ea:42:6b:03:dd:47:12:51:f4:82:85: 72:a4:1a:24:b3:81:e1:60:ab:fd:c6:24:12:94:cc: 7e:15:5d:19:98:85:f5:b6:cc:1d:06:10:ad:8f:ab: 55:71:38:1e:37:70:43:54:3a:58:22:28:ff:72:86: cc:1e:4e:d1:58:c7:0f:69:32:61:1a:9a:54:4e:68: 5c:30:c6:d5:a8:76:27:a5:03:9e:6c:0d:76:3e:fb: d3:9a:d0:b5:4f:3e:39:2b:e3:b2:b7:73:0c:65:34: e2:43:e9:ad:44:76:a8:d3:09:a9:d7:18:c9:69:1f: 52:2f:a2:5a:b4:4e:32:32:6b:4c:a1:a9:85:dc:89: 04:76:9e:32:e5:31:f9:dc:6d:14:d4:b2:25:6c:37: bd:86:69:45:8d:9e:d8:8a:ec:e0:6e:6a:01:ac:3a: 1d:3b:3e:c4:e3:9e:1a:b1:d9:82:16:11:cb:31:f9: da:0c:9f:a3:81:ae:af:3d:d7:a5:ef:91:af:f9:d5: 9d:66:af:96:63:8b:22:d4:39:fc:bb:2b:16:02:a5: 5a:cf:4a:50:78:1b:db:b1:9d:04:f2:c1:7c:fc:d8: 07:10:33:51:bc:5a:45:b1:dd:fe:f2:ee:87:65:35: 19:fa:97:28:b7:e8:31:c9:e7:d9:17:38:57:59:db: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C6:11:7C:D5:CF:CB:0B:85:C3:8D:6A:36:F3:23:08:78:84:A0:5B X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/323430353a636534303a3a2f33322d3438203d3e20313339393838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:ce40::/32 Signature Algorithm: sha256WithRSAEncryption 39:63:48:2b:5b:f0:d4:a5:c2:53:96:eb:ee:f4:00:a6:0a:ec: 73:65:4f:43:b4:5b:3b:08:c0:28:6f:29:4c:0f:26:a1:3d:7a: 13:16:ec:ec:fb:6f:62:72:4b:43:80:64:74:44:82:24:0e:aa: 65:d2:3a:6f:1b:b3:f4:3e:a9:b3:79:29:fd:16:e7:9b:ba:51: 14:8c:e5:c1:09:69:57:37:9b:26:fb:74:31:75:97:f3:f6:b5: 63:ef:3f:b6:8f:b9:9c:1b:e3:82:57:74:07:4c:b5:52:c5:44: a4:58:fc:1a:47:88:82:5c:8e:68:15:9a:5e:36:25:df:43:b4: a8:30:9d:6e:ea:b4:19:1d:44:b7:dc:86:03:54:1e:35:6b:b7: 82:31:15:0f:28:5c:4e:8a:73:8d:15:ac:51:2f:f3:db:a4:28: 2c:cc:64:c9:52:b7:f2:92:f3:d3:90:7c:ed:f6:b2:94:ec:9d: 24:64:f1:94:e3:56:13:58:08:a8:1c:27:8f:c1:b2:9a:67:a4: 1b:c8:9f:0c:38:cc:83:ef:85:9d:eb:2c:a4:75:33:ca:b3:f9: 94:a5:10:9e:4a:fe:24:73:09:f5:ca:02:67:fe:28:d8:75:a1: 81:55:ec:5b:e4:8f:e2:f4:91:0f:49:d3:bd:a5:62:f2:af:92: 6b:cb:7c:f0 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUeOPcoWq/pqWrFi2lQA1uFb2QAS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNDA1MTAwNzU1MzdaFw0yNTA1MDkwODAwMzdaMDMxMTAvBgNV BAMTKEFGQzYxMTdDRDVDRkNCMEI4NUMzOEQ2QTM2RjMyMzA4Nzg4NEEwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/SqDqQmsD3UcSUfSChXKkGiSz geFgq/3GJBKUzH4VXRmYhfW2zB0GEK2Pq1VxOB43cENUOlgiKP9yhsweTtFYxw9p MmEamlROaFwwxtWodielA55sDXY++9Oa0LVPPjkr47K3cwxlNOJD6a1EdqjTCanX GMlpH1Ivolq0TjIya0yhqYXciQR2njLlMfncbRTUsiVsN72GaUWNntiK7OBuagGs Oh07PsTjnhqx2YIWEcsx+doMn6OBrq8916Xvka/51Z1mr5ZjiyLUOfy7KxYCpVrP SlB4G9uxnQTywXz82AcQM1G8WkWx3f7y7odlNRn6lyi36DHJ59kXOFdZ20CtAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUr8YRfNXPywuFw41qNvMjCHiEoFswHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyZDY2ZDEwLWI4NTctNGJlZi05 Mzk1LTQ1ZDVhYjJjNDRmOS8wLzMyMzQzMDM1M2E2MzY1MzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFzkAwDQYJKoZI hvcNAQELBQADggEBADljSCtb8NSlwlOW6+70AKYK7HNlT0O0WzsIwChvKUwPJqE9 ehMW7Oz7b2JyS0OAZHREgiQOqmXSOm8bs/Q+qbN5Kf0W55u6URSM5cEJaVc3myb7 dDF1l/P2tWPvP7aPuZwb44JXdAdMtVLFRKRY/BpHiIJcjmgVml42Jd9DtKgwnW7q tBkdRLfchgNUHjVrt4IxFQ8oXE6Kc40VrFEv89ukKCzMZMlSt/KS89OQfO32spTs nSRk8ZTjVhNYCKgcJ4/BsppnpBvInww4zIPvhZ3rLKR1M8qz+ZSlEJ5K/iRzCfXK Amf+KNh1oYFV7Fvkj+L0kQ9J072lYvKvkmvLfPA= -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org