$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa File: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (raw, json) Hash identifier: KP+NlcSqft+qPsfGGaWPNqLBJUv6Pfgnek0QNbjnhPs= Subject key identifier: 15:85:23:7F:DC:93:4A:30:7F:3F:5F:4C:F6:1C:08:B9:D1:4B:8C:0C Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 675BCA37A505ADCDBD5D942C870FEAC0DB0D0AAA Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa Signing time: Thu 24 Oct 2024 06:56:19 +0000 ROA not before: Thu 24 Oct 2024 06:51:19 +0000 ROA not after: Thu 23 Oct 2025 06:56:19 +0000 asID: 4785 IP address blocks: 2400:ddc0:a00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 09:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:5b:ca:37:a5:05:ad:cd:bd:5d:94:2c:87:0f:ea:c0:db:0d:0a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Oct 24 06:51:19 2024 GMT Not After : Oct 23 06:56:19 2025 GMT Subject: CN=1585237FDC934A307F3F5F4CF61C08B9D14B8C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:e1:7e:27:9c:58:20:c1:51:8e:17:d2:0d: 0e:54:9b:a2:73:55:ac:40:68:2e:d8:e6:cf:6e:86: d1:bc:44:f8:42:0d:c5:5b:56:ac:9a:a9:8e:43:c0: 30:4f:11:36:f9:85:21:86:bf:93:aa:a6:d5:10:e2: ed:5f:24:9c:95:2a:ac:bc:de:fc:69:fb:d4:ac:9f: be:7a:c6:f5:d9:b8:19:e3:5c:5b:33:aa:a4:54:38: 18:f9:13:ae:08:ff:77:69:e6:5c:fc:0f:da:ba:58: 5c:39:64:d7:65:62:f3:aa:72:db:92:0c:6f:b9:da: 04:fe:3f:82:bf:a7:ce:b3:d9:55:d5:bb:9f:dd:ed: 8f:7c:e8:10:69:57:95:68:15:f5:b4:d9:2a:c1:65: ca:a7:0f:9e:d1:10:d2:c1:35:5c:d7:5c:ac:70:0c: a5:9f:ae:4e:27:ca:b7:c1:f3:b7:d4:d4:23:fc:50: 81:ed:27:5e:7c:d2:6b:35:e1:f5:6f:f6:f9:bf:be: 3b:f4:f1:7c:c0:97:19:95:7c:26:d8:5d:ef:25:51: 3c:25:c5:0d:6c:b0:73:08:9c:cb:e4:6d:91:4c:e1: bc:e8:e0:31:ca:d4:c6:3d:a1:03:7a:dc:3a:22:bf: 55:9a:c7:d0:c1:57:5b:7b:a8:03:7a:69:25:0f:14: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:85:23:7F:DC:93:4A:30:7F:3F:5F:4C:F6:1C:08:B9:D1:4B:8C:0C X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ddc0:a00b::/48 Signature Algorithm: sha256WithRSAEncryption 69:66:f3:47:ed:6a:fd:3d:93:dd:9e:b0:6e:50:ec:e0:75:ba: 20:c2:29:d5:ee:d4:47:2b:8b:30:de:83:41:6f:c0:15:ba:32: c5:dc:1c:b5:fc:3e:d4:e3:c2:90:d2:72:42:d2:a6:b8:cd:78: cb:f7:66:4d:f6:59:a9:47:11:6d:41:a1:23:06:0c:15:22:da: ef:2d:04:da:1d:0a:49:6c:1c:c2:ad:90:cd:70:50:b7:e1:7b: 89:69:d5:8f:4d:6e:9d:6a:1b:2e:ad:2f:eb:74:fa:60:96:2d: 75:3e:ba:c1:68:cd:55:08:75:a4:89:71:ac:4a:de:9c:b2:48: f9:68:f7:42:34:8c:34:19:98:1f:51:61:47:64:19:78:79:b3: fc:2c:12:78:bc:54:c6:ac:59:72:87:b9:c2:51:62:6d:64:0f: 26:13:f0:98:25:6e:25:2a:d8:0f:1f:25:b6:f5:32:af:dc:3c: 5b:ba:41:38:a7:c0:6b:b7:dc:0c:08:3b:04:d9:63:2d:4c:75: f9:6c:b7:46:9f:69:64:f9:73:bc:35:2a:d4:f4:45:c5:dd:36: 08:28:9a:68:77:23:fb:3e:54:12:78:5b:29:31:16:fe:b4:8b: f4:cc:cf:e2:7c:2a:38:2b:78:bd:02:c8:8b:7f:57:9d:52:84: 84:59:5d:d6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUZ1vKN6UFrc29XZQshw/qwNsNCqowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI0MTAyNDA2NTExOVoX DTI1MTAyMzA2NTYxOVowMzExMC8GA1UEAxMoMTU4NTIzN0ZEQzkzNEEzMDdGM0Y1 RjRDRjYxQzA4QjlEMTRCOEMwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUG4X4nnFggwVGOF9INDlSbonNVrEBoLtjmz26G0bxE+EINxVtWrJqpjkPA ME8RNvmFIYa/k6qm1RDi7V8knJUqrLze/Gn71KyfvnrG9dm4GeNcWzOqpFQ4GPkT rgj/d2nmXPwP2rpYXDlk12Vi86py25IMb7naBP4/gr+nzrPZVdW7n93tj3zoEGlX lWgV9bTZKsFlyqcPntEQ0sE1XNdcrHAMpZ+uTifKt8Hzt9TUI/xQge0nXnzSazXh 9W/2+b++O/TxfMCXGZV8Jthd7yVRPCXFDWywcwicy+RtkUzhvOjgMcrUxj2hA3rc OiK/VZrH0MFXW3uoA3ppJQ8U4hUCAwEAAaOCAfMwggHvMB0GA1UdDgQWBBQVhSN/ 3JNKMH8/X0z2HAi50UuMDDAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzIzNDMwMzAzYTY0NjQ2MzMwM2E2MTMwMzA2MjNh M2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczODM1LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADdwKAL MA0GCSqGSIb3DQEBCwUAA4IBAQBpZvNH7Wr9PZPdnrBuUOzgdbogwinV7tRHK4sw 3oNBb8AVujLF3By1/D7U48KQ0nJC0qa4zXjL92ZN9lmpRxFtQaEjBgwVItrvLQTa HQpJbBzCrZDNcFC34XuJadWPTW6dahsurS/rdPpgli11PrrBaM1VCHWkiXGsSt6c skj5aPdCNIw0GZgfUWFHZBl4ebP8LBJ4vFTGrFlyh7nCUWJtZA8mE/CYJW4lKtgP HyW29TKv3DxbukE4p8Brt9wMCDsE2WMtTHX5bLdGn2lk+XO8NSrU9EXF3TYIKJpo dyP7PlQSeFspMRb+tIv0zM/ifCo4K3i9AsiLf1edUoSEWV3W -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:48 2024 by rpki-client on console-fra.rpki-client.org