$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa File: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (raw, json) Hash identifier: 15aCkbtpDqy675EMIeZbhedx0CLNKf1SygF3FFngnoo= Subject key identifier: 55:C2:F4:5C:66:17:84:E8:C3:BC:42:83:11:79:F0:18:DD:91:13:2B Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 28A8AF1CC6955E598235CF5E6CCF019E6DAACA24 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa Signing time: Fri 14 Jul 2023 07:17:11 +0000 ROA not before: Fri 14 Jul 2023 07:12:11 +0000 ROA not after: Fri 12 Jul 2024 07:17:11 +0000 asID: 131705 IP address blocks: 2406:5c40:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a8:af:1c:c6:95:5e:59:82:35:cf:5e:6c:cf:01:9e:6d:aa:ca:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Jul 14 07:12:11 2023 GMT Not After : Jul 12 07:17:11 2024 GMT Subject: CN=55C2F45C661784E8C3BC42831179F018DD91132B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:44:92:11:b8:57:2d:05:d9:c4:13:7d:78: 41:49:69:d8:ce:d4:98:fb:63:ed:6d:c1:db:44:bd: 17:60:9c:4b:7f:0f:15:1f:33:6d:26:82:2f:79:d6: dc:64:ae:2f:b5:d3:5c:c8:fa:02:4a:60:15:6e:69: f6:6e:4c:19:40:aa:3f:a3:ee:84:31:81:24:72:dc: dc:7e:d9:5c:58:f4:b7:8b:1d:fd:32:e0:da:ad:13: 06:26:b9:51:62:5a:bb:e8:3d:5f:20:10:69:bd:60: 6e:a2:cb:b7:15:6e:62:97:d0:21:89:cf:b6:42:94: 1a:09:85:7b:95:2a:40:45:94:10:94:76:5e:82:94: 34:64:bc:a3:27:85:1b:42:17:90:40:27:26:be:b6: d6:44:f0:d3:a1:49:e0:48:77:fc:c5:fe:2a:f0:f1: 44:48:31:da:69:73:75:72:50:88:76:5b:cd:41:8d: 64:43:45:8e:0a:3b:b4:92:56:97:37:52:03:53:1c: 8a:cb:d8:46:19:57:b9:24:d4:d5:38:ab:22:96:ed: fa:a9:8e:b8:0a:cf:ad:e8:55:6b:56:19:eb:4c:e0: 74:74:8e:bf:e4:d1:3d:af:5f:bd:9a:8c:e7:6d:d7: 37:a5:e9:19:df:47:7b:0c:4b:3b:9a:c6:7e:f7:aa: 1d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C2:F4:5C:66:17:84:E8:C3:BC:42:83:11:79:F0:18:DD:91:13:2B X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:5c40:1000::/36 Signature Algorithm: sha256WithRSAEncryption 1f:a0:47:2a:7b:78:92:5a:56:45:7c:c1:83:70:d8:8f:9d:b6: b8:18:2d:e6:d9:08:fc:aa:e1:f5:f7:c2:37:46:e2:87:19:7d: 36:d6:34:9c:a3:9a:84:a8:d9:a6:00:b1:88:a1:bd:68:9c:b3: c4:26:aa:49:4d:f4:60:e8:33:29:f7:43:45:75:97:36:b3:29: 79:2d:8a:64:fa:b9:45:25:15:e7:8c:bd:4c:24:fd:14:c7:29: f3:f8:48:02:59:d1:30:5d:54:50:8e:f4:15:20:5d:58:4f:58: 0c:e9:b4:37:fb:fe:e9:ea:e1:12:3e:f0:3b:59:09:3e:b3:bc: 48:b3:ab:92:a3:60:e4:bf:29:27:dd:53:c6:6d:5a:bd:1c:29: 60:12:bf:05:2c:81:12:24:b4:24:b6:ba:2f:d3:d5:94:37:da: 32:23:c9:1a:2a:57:d6:ff:c0:67:bc:01:40:e5:f8:44:2f:48: 85:bf:01:ef:24:fe:47:96:e9:8a:af:67:d8:bf:59:47:67:01: 03:e1:1a:c9:76:57:9b:0d:e2:c2:e6:15:45:02:ba:b5:b2:be: 32:bc:ea:01:66:41:61:2b:53:4e:1d:cf:4b:08:59:37:24:96: 2c:93:5f:df:56:9d:5e:f9:4c:1d:20:e3:4b:d1:37:f1:7b:88: dc:ad:bd:e4 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUKKivHMaVXlmCNc9ebM8Bnm2qyiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yMzA3MTQwNzEyMTFaFw0yNDA3MTIwNzE3MTFaMDMxMTAvBgNV BAMTKDU1QzJGNDVDNjYxNzg0RThDM0JDNDI4MzExNzlGMDE4REQ5MTEzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKESSEbhXLQXZxBN9eEFJadjO 1Jj7Y+1twdtEvRdgnEt/DxUfM20mgi951txkri+101zI+gJKYBVuafZuTBlAqj+j 7oQxgSRy3Nx+2VxY9LeLHf0y4NqtEwYmuVFiWrvoPV8gEGm9YG6iy7cVbmKX0CGJ z7ZClBoJhXuVKkBFlBCUdl6ClDRkvKMnhRtCF5BAJya+ttZE8NOhSeBId/zF/irw 8URIMdppc3VyUIh2W81BjWRDRY4KO7SSVpc3UgNTHIrL2EYZV7kk1NU4qyKW7fqp jrgKz63oVWtWGetM4HR0jr/k0T2vX72ajOdt1zel6RnfR3sMSzuaxn73qh0dAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUVcL0XGYXhOjDvEKDEXnwGN2REyswHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05 OWE0LTBmNDVlOGVjZjU3Ni8wLzMyMzQzMDM2M2EzNTYzMzQzMDNhMzEzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTMzMzEzNzMwMzUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BlxAEDANBgkqhkiG9w0BAQsFAAOCAQEAH6BHKnt4klpWRXzBg3DYj522uBgt5tkI /Krh9ffCN0bihxl9NtY0nKOahKjZpgCxiKG9aJyzxCaqSU30YOgzKfdDRXWXNrMp eS2KZPq5RSUV54y9TCT9FMcp8/hIAlnRMF1UUI70FSBdWE9YDOm0N/v+6erhEj7w O1kJPrO8SLOrkqNg5L8pJ91Txm1avRwpYBK/BSyBEiS0JLa6L9PVlDfaMiPJGipX 1v/AZ7wBQOX4RC9Ihb8B7yT+R5bpiq9n2L9ZR2cBA+EayXZXmw3iwuYVRQK6tbK+ MrzqAWZBYStTTh3PSwhZNySWLJNf31adXvlMHSDjS9E38XuI3K295A== -----END CERTIFICATE-----Generated at Sat Jun 1 07:07:12 2024 by rpki-client on console-ams.rpki-client.org