$ rpki-client -vvf repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/323430343a363134303a3a2f33322d3438203d3e20313338313433.roa File: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (raw, json) Hash identifier: pKR339ofpGjf7MVHBnj0O7EOFG9t26YO8GsduB5PdCI= Subject key identifier: C3:2A:FD:4D:8E:CC:FB:BA:A4:B2:66:42:0E:B3:21:3A:87:86:54:1E Certificate issuer: /CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Certificate serial: 2622A6BE21CE1A8DDBA5B3B20BE98870356AAA93 Authority key identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/323430343a363134303a3a2f33322d3438203d3e20313338313433.roa Signing time: Wed 04 Dec 2024 05:02:35 +0000 ROA not before: Wed 04 Dec 2024 04:57:35 +0000 ROA not after: Wed 03 Dec 2025 05:02:35 +0000 asID: 138143 IP address blocks: 2404:6140::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 16:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:22:a6:be:21:ce:1a:8d:db:a5:b3:b2:0b:e9:88:70:35:6a:aa:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Validity Not Before: Dec 4 04:57:35 2024 GMT Not After : Dec 3 05:02:35 2025 GMT Subject: CN=C32AFD4D8ECCFBBAA4B266420EB3213A8786541E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:62:42:27:6f:c4:12:a7:d1:49:ce:f5:25:9d: 26:c2:2b:7f:29:49:bf:43:f7:60:6c:4d:3b:36:0e: 72:4c:52:6c:a6:d2:79:7f:0e:04:21:5f:0d:34:8f: 1e:61:0f:6c:df:41:4d:c4:fd:b1:97:7b:91:37:14: a6:e3:3b:5c:0a:70:bf:08:57:d9:cb:c8:39:a3:f1: ab:3b:08:66:e9:eb:60:8e:30:65:6e:2f:62:c6:b1: b0:a3:0b:be:bc:35:8f:cf:3f:3c:15:03:40:1d:2f: fc:32:a8:45:d7:08:2f:bf:8a:0b:72:95:20:9a:f1: 9c:ba:e3:29:71:68:ac:0d:f3:7b:9c:c9:46:eb:a0: fe:92:64:0e:40:22:59:04:c9:42:5e:09:59:a3:0c: 86:c5:72:c4:c6:17:e5:91:a1:96:32:08:d4:d3:dd: 17:34:5a:5d:c5:01:52:10:69:13:71:40:c0:ad:e5: c2:72:6e:b2:bb:60:43:ea:83:5d:ec:82:35:f8:6b: 69:75:9d:8b:b2:ff:0f:bc:15:6b:65:16:f3:14:fd: 00:7a:91:e5:37:68:dd:ed:fb:89:1e:fa:95:7f:b1: 65:f5:0f:15:e8:51:3f:3b:f6:ca:5b:d5:d1:5b:63: 6c:84:ce:51:94:32:2e:8a:c2:02:33:8d:03:ee:5f: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2A:FD:4D:8E:CC:FB:BA:A4:B2:66:42:0E:B3:21:3A:87:86:54:1E X509v3 Authority Key Identifier: keyid:F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/323430343a363134303a3a2f33322d3438203d3e20313338313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:6140::/32 Signature Algorithm: sha256WithRSAEncryption a6:e1:b7:8d:9e:54:58:66:da:43:77:78:5f:9d:cc:77:d4:b2: 07:c9:17:da:6e:9b:7d:99:f5:31:2d:3a:fc:14:49:bd:c6:2c: a2:ae:04:7d:fb:fc:28:3a:fc:d7:40:06:5d:07:07:16:de:78: 1c:0e:fe:13:f4:b2:0d:fe:f8:e4:f6:f9:d0:5e:6c:a3:20:b1: 6b:81:fb:9c:5c:f5:e9:92:58:2c:8a:98:d5:a8:97:41:db:6c: 10:19:0f:df:2d:30:31:c0:e3:1b:fa:a8:c3:c1:63:0d:3a:a0: b6:bd:7a:54:75:d5:48:29:3a:f8:d0:00:d0:95:f1:53:0f:25: 30:87:c9:07:04:eb:63:b4:0b:e0:83:49:e0:3f:53:f7:79:5b: 52:64:68:84:eb:90:dc:43:49:84:2a:9d:1c:48:4d:7e:02:56: 01:4d:34:bd:16:11:3a:0d:cd:ab:4b:58:ee:cf:92:d6:08:1c: 52:7f:18:81:6c:ba:38:cf:16:ba:ce:46:cf:89:ea:bf:e6:81: fb:34:cc:44:77:76:65:8b:7d:5d:52:cd:fa:43:33:0c:45:27: d0:d8:9d:a7:87:f1:72:aa:fb:0d:a6:91:d7:c4:dc:66:7f:7d: fd:20:0c:30:fb:d5:ca:d7:fc:8e:c9:88:54:74:dc:ac:43:ae: c4:45:4f:6b -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUJiKmviHOGo3bpbOyC+mIcDVqqpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1 RThFMjIwQjAeFw0yNDEyMDQwNDU3MzVaFw0yNTEyMDMwNTAyMzVaMDMxMTAvBgNV BAMTKEMzMkFGRDREOEVDQ0ZCQkFBNEIyNjY0MjBFQjMyMTNBODc4NjU0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWYkInb8QSp9FJzvUlnSbCK38p Sb9D92BsTTs2DnJMUmym0nl/DgQhXw00jx5hD2zfQU3E/bGXe5E3FKbjO1wKcL8I V9nLyDmj8as7CGbp62COMGVuL2LGsbCjC768NY/PPzwVA0AdL/wyqEXXCC+/igty lSCa8Zy64ylxaKwN83ucyUbroP6SZA5AIlkEyUJeCVmjDIbFcsTGF+WRoZYyCNTT 3Rc0Wl3FAVIQaRNxQMCt5cJybrK7YEPqg13sgjX4a2l1nYuy/w+8FWtlFvMU/QB6 keU3aN3t+4ke+pV/sWX1DxXoUT879spb1dFbY2yEzlGUMi6KwgIzjQPuX32BAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUwyr9TY7M+7qksmZCDrMhOoeGVB4wHwYDVR0j BBgwFoAU9cwI8c0LlFedT3c87lq/vV6OIgswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDc5NGQzNi02OWY4LTQ0MDYtYmY5Zi0xMjJkZGQxN2Y0NTAvMC9GNUNDMDhGMUNE MEI5NDU3OUQ0Rjc3M0NFRTVBQkZCRDVFOEUyMjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1RThF MjIwQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkNzk0ZDM2LTY5ZjgtNDQwNi1i ZjlmLTEyMmRkZDE3ZjQ1MC8wLzMyMzQzMDM0M2EzNjMxMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzODMxMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEYUAwDQYJKoZI hvcNAQELBQADggEBAKbht42eVFhm2kN3eF+dzHfUsgfJF9pum32Z9TEtOvwUSb3G LKKuBH37/Cg6/NdABl0HBxbeeBwO/hP0sg3++OT2+dBebKMgsWuB+5xc9emSWCyK mNWol0HbbBAZD98tMDHA4xv6qMPBYw06oLa9elR11UgpOvjQANCV8VMPJTCHyQcE 62O0C+CDSeA/U/d5W1JkaITrkNxDSYQqnRxITX4CVgFNNL0WEToNzatLWO7PktYI HFJ/GIFsujjPFrrORs+J6r/mgfs0zER3dmWLfV1SzfpDMwxFJ9DYnaeH8XKq+w2m kdfE3GZ/ff0gDDD71crX/I7JiFR03KxDrsRFT2s= -----END CERTIFICATE-----Generated at Sun May 11 10:19:15 2025 by rpki-client