$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa File: 323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa (raw, json) Hash identifier: +bc7dUDcl/zyxgFD9hjH1WhAYFjRstDV27EEB/SKBg8= Subject key identifier: A6:43:E2:77:7C:B9:38:CA:64:D9:7F:D7:BA:A6:E0:29:60:F0:74:12 Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9 Certificate serial: 412A941CF3ED1B6F576C14DD3F4A17AE83040126 Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa Signing time: Wed 04 Dec 2024 09:03:04 +0000 ROA not before: Wed 04 Dec 2024 08:58:04 +0000 ROA not after: Wed 03 Dec 2025 09:03:04 +0000 asID: 139972 IP address blocks: 2405:c440:2::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 07:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2a:94:1c:f3:ed:1b:6f:57:6c:14:dd:3f:4a:17:ae:83:04:01:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9 Validity Not Before: Dec 4 08:58:04 2024 GMT Not After : Dec 3 09:03:04 2025 GMT Subject: CN=A643E2777CB938CA64D97FD7BAA6E02960F07412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9d:bb:79:24:27:89:de:ec:5e:81:82:20:d0: 2e:97:c2:d7:ee:30:b5:22:42:39:d9:98:37:f4:a2: 8d:f5:e8:ec:08:0c:25:23:e1:cf:81:f6:36:76:fc: 7c:f3:d3:86:3a:61:c5:32:e0:fd:4d:d9:53:50:9e: 6b:f1:ec:1f:a3:47:d7:ff:fe:b8:cc:66:0a:17:45: a8:8e:b9:b0:04:e7:59:40:51:a9:98:0f:a7:94:5a: 0f:1d:45:9f:6f:d9:d4:ef:8d:61:c4:fe:54:93:4e: a7:34:b0:2f:cd:b8:40:e9:42:65:c4:e5:20:45:39: 27:ce:f5:65:97:3a:13:09:13:e6:ef:00:49:b1:87: 79:48:e3:38:74:48:d6:65:31:c9:50:d5:6d:f9:69: cd:80:ef:0a:86:f0:fc:42:b6:68:f8:44:4d:e2:64: a9:f9:70:14:2b:4a:88:2f:fe:6a:21:ad:d9:23:57: 9c:58:74:61:b5:e2:f3:4a:8c:1d:0a:97:fb:67:f7: e6:03:e7:41:02:80:26:90:cc:45:15:09:cb:e4:26: 5b:70:be:e9:34:d1:48:79:ea:d4:74:c7:d1:13:88: 80:d4:e3:3d:98:26:27:04:4f:f1:2a:94:62:42:ff: d1:26:d9:55:bd:e1:7d:54:cc:2d:2d:a2:f4:98:f1: 91:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:43:E2:77:7C:B9:38:CA:64:D9:7F:D7:BA:A6:E0:29:60:F0:74:12 X509v3 Authority Key Identifier: keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c440:2::/48 Signature Algorithm: sha256WithRSAEncryption b7:49:59:c5:37:21:77:4a:9a:dd:ae:d5:ce:7c:d8:9e:a3:91: 01:db:20:3b:d8:ca:45:0b:8a:f5:c9:5a:97:eb:e9:d9:7a:1d: 98:96:64:b4:a4:81:ae:1a:84:1d:75:01:72:33:86:a6:47:a5: 63:17:23:6b:b1:6e:3f:8c:0e:aa:e6:c3:d3:c2:69:53:f2:af: d4:77:ce:a9:06:e3:af:7d:eb:1a:ff:c2:f2:a9:a7:50:bc:49: be:6f:42:d6:91:c5:c9:6e:33:7a:57:85:c2:52:a2:0e:7c:a1: e8:e3:cc:06:d7:bd:38:16:2c:4b:73:f7:0f:62:93:94:1d:e9: ee:3b:86:43:4d:c8:88:8c:e8:1e:fc:87:9c:1a:72:37:64:6d: b4:07:13:c3:8a:55:e0:cf:f8:5b:9f:e9:0a:2a:5b:f9:92:62: 7e:23:43:bc:79:88:7b:7e:c8:50:9b:27:1e:bc:68:47:9c:05: a6:1f:46:28:66:f1:d9:e2:ec:88:ad:63:e9:e8:b8:79:62:22: d4:35:24:57:1b:75:55:e4:c3:e7:75:3d:99:88:aa:8f:90:86: a5:df:d5:0e:45:16:4c:d6:4a:a8:27:92:69:ab:4d:93:d7:18: 3c:dd:e5:62:86:b7:a9:a7:24:87:83:78:bc:80:bf:a2:73:06: e7:09:a5:56 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUQSqUHPPtG29XbBTdP0oXroMEASYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD NzhGOTBGOTAeFw0yNDEyMDQwODU4MDRaFw0yNTEyMDMwOTAzMDRaMDMxMTAvBgNV BAMTKEE2NDNFMjc3N0NCOTM4Q0E2NEQ5N0ZEN0JBQTZFMDI5NjBGMDc0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDanbt5JCeJ3uxegYIg0C6Xwtfu MLUiQjnZmDf0oo316OwIDCUj4c+B9jZ2/Hzz04Y6YcUy4P1N2VNQnmvx7B+jR9f/ /rjMZgoXRaiOubAE51lAUamYD6eUWg8dRZ9v2dTvjWHE/lSTTqc0sC/NuEDpQmXE 5SBFOSfO9WWXOhMJE+bvAEmxh3lI4zh0SNZlMclQ1W35ac2A7wqG8PxCtmj4RE3i ZKn5cBQrSogv/mohrdkjV5xYdGG14vNKjB0Kl/tn9+YD50ECgCaQzEUVCcvkJltw vuk00Uh56tR0x9ETiIDU4z2YJicET/EqlGJC/9Em2VW94X1UzC0tovSY8ZFxAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUpkPid3y5OMpk2X/XuqbgKWDwdBIwHwYDVR0j BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2 NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG OTBGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04 MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAAIw DQYJKoZIhvcNAQELBQADggEBALdJWcU3IXdKmt2u1c582J6jkQHbIDvYykULivXJ Wpfr6dl6HZiWZLSkga4ahB11AXIzhqZHpWMXI2uxbj+MDqrmw9PCaVPyr9R3zqkG 46996xr/wvKpp1C8Sb5vQtaRxcluM3pXhcJSog58oejjzAbXvTgWLEtz9w9ik5Qd 6e47hkNNyIiM6B78h5wacjdkbbQHE8OKVeDP+Fuf6QoqW/mSYn4jQ7x5iHt+yFCb Jx68aEecBaYfRihm8dni7IitY+nouHliItQ1JFcbdVXkw+d1PZmIqo+QhqXf1Q5F FkzWSqgnkmmrTZPXGDzd5WKGt6mnJIeDeLyAv6JzBucJpVY= -----END CERTIFICATE-----Generated at Fri May 9 11:58:02 2025 by rpki-client