$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: WFd+xuIHy/wkgLOHia1FObSOnZ/KV0GWg+B0e2pCXJs= Subject key identifier: C1:DD:18:F0:FC:6D:4A:3D:86:2D:6F:9C:1C:06:4F:45:16:EE:35:70 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 1C3E158578F266A339DC26F594CF2CEC9639CE8F Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 29 Nov 2024 05:00:01 +0000 ROA not before: Fri 29 Nov 2024 04:55:01 +0000 ROA not after: Fri 28 Nov 2025 05:00:01 +0000 asID: 58552 IP address blocks: 2404:fd00:11::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 23:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3e:15:85:78:f2:66:a3:39:dc:26:f5:94:cf:2c:ec:96:39:ce:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Nov 29 04:55:01 2024 GMT Not After : Nov 28 05:00:01 2025 GMT Subject: CN=C1DD18F0FC6D4A3D862D6F9C1C064F4516EE3570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:97:66:6f:05:a5:f7:de:e3:b7:fb:ba:96: 55:2f:e7:47:f1:6a:63:90:d0:2f:37:cb:d5:4a:8b: 71:69:0a:0a:2f:eb:af:1a:39:f8:63:09:fa:cf:63: ba:50:64:e6:1e:fd:7a:b9:9a:be:cd:57:f6:74:f7: f3:61:fc:dd:4c:5d:b2:74:d4:68:d2:ba:2d:9b:99: c1:25:2b:94:ce:7f:f4:9c:3f:bd:75:79:d8:56:4a: 51:af:a4:a9:3c:56:5d:3a:be:92:b4:0a:09:b9:44: 0b:48:9d:0d:ef:1c:78:80:a0:35:e5:f9:d7:26:b1: e3:d7:9c:57:c8:f2:8a:0b:de:47:d8:c6:b3:bd:8c: 70:4a:77:46:e5:f1:87:8a:a5:17:be:35:d7:9c:f1: d5:f6:bf:e5:e3:5d:bf:a5:2d:d3:cf:f1:75:cd:a4: 4f:a3:04:af:e1:81:cd:af:50:20:cf:2b:30:62:2f: 68:37:d2:cf:c7:48:b8:b1:0b:b3:19:47:53:c3:46: 84:b5:a6:9b:07:4a:a7:ee:f6:4d:41:37:f7:21:0e: 73:df:42:9c:ec:2b:e3:a5:97:db:ba:fa:98:50:bf: 0f:29:b4:ce:7a:20:87:3f:4d:2a:08:cf:86:f3:75: b2:98:90:f3:54:a2:0b:d1:1e:5b:b3:40:db:c3:9e: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DD:18:F0:FC:6D:4A:3D:86:2D:6F:9C:1C:06:4F:45:16:EE:35:70 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:11::/48 Signature Algorithm: sha256WithRSAEncryption 1b:48:35:93:4a:13:4c:3b:f2:9c:81:a5:91:b9:3f:f1:aa:c4: 84:b6:fe:79:c7:00:b0:a1:b7:6c:01:ea:70:d1:b0:9b:58:5d: d1:9a:05:6f:0b:f1:f0:ea:c0:dd:41:88:1c:5d:50:48:a4:1a: 4f:fc:74:a7:5c:d7:9d:73:24:6f:ba:8b:20:58:81:37:4f:2a: 28:61:7c:1c:ae:3f:5b:0a:c8:e5:7d:12:1e:c4:d5:c7:50:cc: 8b:bb:59:8a:95:b4:e3:7c:b6:ed:f1:26:a5:aa:53:b5:d0:5e: 78:59:1b:77:50:15:3a:1b:e4:0c:3a:5c:ce:0c:4e:3a:8b:33: d4:5e:8c:10:5c:a2:84:16:07:58:14:c2:64:2f:6a:3d:e7:8e: a6:f2:40:6e:1d:02:73:b7:d7:e5:12:e3:1d:aa:4b:bd:4f:16: a4:a0:55:74:07:e3:6e:d5:65:43:83:74:ed:ed:2c:e0:64:53: c5:87:71:93:1c:ac:bd:aa:0e:ab:1d:00:31:19:51:de:ff:77: e2:64:5b:5a:25:34:a7:63:c7:f3:72:bd:a6:33:3e:5c:2b:80: b3:79:16:62:42:23:e3:07:3a:9a:1f:5d:0e:9a:b4:b3:af:ee: 5b:40:a3:5f:8b:7d:eb:a3:f2:c5:ec:fc:65:d6:c9:63:7e:a6: 38:d3:4a:82 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUHD4VhXjyZqM53Cb1lM8s7JY5zo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNDExMjkwNDU1MDFaFw0yNTExMjgwNTAwMDFaMDMxMTAvBgNV BAMTKEMxREQxOEYwRkM2RDRBM0Q4NjJENkY5QzFDMDY0RjQ1MTZFRTM1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRw5dmbwWl997jt/u6llUv50fx amOQ0C83y9VKi3FpCgov668aOfhjCfrPY7pQZOYe/Xq5mr7NV/Z09/Nh/N1MXbJ0 1GjSui2bmcElK5TOf/ScP711edhWSlGvpKk8Vl06vpK0Cgm5RAtInQ3vHHiAoDXl +dcmsePXnFfI8ooL3kfYxrO9jHBKd0bl8YeKpRe+Ndec8dX2v+XjXb+lLdPP8XXN pE+jBK/hgc2vUCDPKzBiL2g30s/HSLixC7MZR1PDRoS1ppsHSqfu9k1BN/chDnPf QpzsK+Oll9u6+phQvw8ptM56IIc/TSoIz4bzdbKYkPNUogvRHluzQNvDnm5VAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUwd0Y8PxtSj2GLW+cHAZPRRbuNXAwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABEw DQYJKoZIhvcNAQELBQADggEBABtINZNKE0w78pyBpZG5P/GqxIS2/nnHALCht2wB 6nDRsJtYXdGaBW8L8fDqwN1BiBxdUEikGk/8dKdc151zJG+6iyBYgTdPKihhfByu P1sKyOV9Eh7E1cdQzIu7WYqVtON8tu3xJqWqU7XQXnhZG3dQFTob5Aw6XM4MTjqL M9RejBBcooQWB1gUwmQvaj3njqbyQG4dAnO31+US4x2qS71PFqSgVXQH427VZUOD dO3tLOBkU8WHcZMcrL2qDqsdADEZUd7/d+JkW1olNKdjx/NyvaYzPlwrgLN5FmJC I+MHOpofXQ6atLOv7ltAo1+Lfeuj8sXs/GXWyWN+pjjTSoI= -----END CERTIFICATE-----Generated at Thu May 8 18:56:16 2025 by rpki-client