$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/323430303a346265303a3a2f33322d3438203d3e20313431383938.roa File: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (raw, json) Hash identifier: YeMgeIPIu434910S3YpIEelYEAJVlFY+GNTUIjHDpNQ= Subject key identifier: 26:AC:35:1D:96:4D:22:58:6E:64:82:AE:9C:B5:4E:8B:4C:36:71:92 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 4B8B38857E05B0E52AE6A8FC1119B2129E440698 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/323430303a346265303a3a2f33322d3438203d3e20313431383938.roa Signing time: Thu 05 Dec 2024 04:03:04 +0000 ROA not before: Thu 05 Dec 2024 03:58:04 +0000 ROA not after: Thu 04 Dec 2025 04:03:04 +0000 asID: 141898 IP address blocks: 2400:4be0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8b:38:85:7e:05:b0:e5:2a:e6:a8:fc:11:19:b2:12:9e:44:06:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Dec 5 03:58:04 2024 GMT Not After : Dec 4 04:03:04 2025 GMT Subject: CN=26AC351D964D22586E6482AE9CB54E8B4C367192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:55:95:ba:9b:e9:3e:70:c5:e3:af:8e:f7: 52:b1:4f:14:a9:67:82:8f:54:9e:84:68:11:bf:08: 29:74:ce:57:73:0a:a9:1f:52:2b:21:7f:69:4e:08: ff:e3:45:0c:d3:ef:23:8d:e6:8c:14:1a:3b:db:0c: 72:c1:bc:12:ad:ca:81:e6:b9:db:06:54:fb:4d:f1: 4f:fb:10:21:58:2d:76:b2:f9:21:6b:00:b0:92:35: ee:58:77:f6:79:3e:18:ae:98:52:9b:a2:cc:19:68: 65:df:4d:e2:70:e0:53:0a:c8:bd:c2:33:25:aa:a4: 74:79:39:fc:0c:56:58:46:04:f2:e7:b3:ac:f2:fa: 7b:db:cd:db:87:40:32:46:82:d2:c5:8a:2f:58:64: 20:32:fa:c2:cc:3c:e5:43:72:f2:e7:01:9d:52:a4: b3:bf:69:7a:bd:3d:12:03:4c:bc:a8:a0:3c:3d:ec: 1a:fa:da:a8:bf:34:e6:13:90:d0:f1:fd:6a:4e:2f: 62:5b:13:3a:3a:7c:90:7f:b7:d9:e1:d6:9f:b5:e2: 7b:4b:15:83:a8:33:74:e6:0b:69:2c:97:62:d8:28: b6:be:07:b3:81:09:f6:f0:b6:0a:af:40:23:9d:0b: 46:56:aa:37:9b:33:e0:3e:28:a4:67:c8:30:27:b5: e4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AC:35:1D:96:4D:22:58:6E:64:82:AE:9C:B5:4E:8B:4C:36:71:92 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/323430303a346265303a3a2f33322d3438203d3e20313431383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:4be0::/32 Signature Algorithm: sha256WithRSAEncryption af:2c:f9:ec:4e:4e:1a:64:25:ca:7a:0c:46:53:2e:75:42:65: 49:4a:1d:f1:20:50:df:d1:87:f7:8d:fb:c7:d5:32:0e:6b:02: 9e:53:ce:c1:13:ad:ec:04:7f:a7:6b:0f:cd:b0:4a:b7:a5:bd: 8e:52:d7:92:c0:b9:ef:46:c3:ce:65:6e:b9:6c:1b:26:f5:31: 59:40:58:f6:6e:ea:d8:b1:f8:87:0e:4e:b3:fb:3b:54:30:4a: 18:be:79:46:9b:3a:b8:01:14:21:06:71:50:0e:8b:21:ad:50: 76:a5:e9:be:ac:90:02:fb:5a:9e:47:06:ec:cd:a5:2a:0c:c6: 62:fd:8b:91:ef:de:a7:57:cf:5d:00:42:2a:b1:7e:b7:b2:71: 0a:53:44:dd:69:5e:17:ac:d2:d4:52:0f:c6:ab:d5:c3:d4:57: d1:c9:c9:3f:71:da:38:78:9d:1a:e8:6c:c6:26:bd:46:ec:9c: 61:b8:b3:ac:85:92:1f:69:b7:a6:2c:cb:b9:13:a8:57:4e:8e: 17:d5:a1:d9:79:05:4f:d6:5e:e2:f7:f9:af:e0:82:5a:a1:c4: e2:0e:35:4a:c2:ae:bf:53:50:72:b7:46:08:4c:3a:4e:da:4f: d8:af:d8:3a:d0:e9:85:30:aa:88:75:98:50:f1:1b:49:2d:c9: 3c:c2:1c:77 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUS4s4hX4FsOUq5qj8ERmyEp5EBpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNDEyMDUwMzU4MDRaFw0yNTEyMDQwNDAzMDRaMDMxMTAvBgNV BAMTKDI2QUMzNTFEOTY0RDIyNTg2RTY0ODJBRTlDQjU0RThCNEMzNjcxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC511WVupvpPnDF46+O91KxTxSp Z4KPVJ6EaBG/CCl0zldzCqkfUishf2lOCP/jRQzT7yON5owUGjvbDHLBvBKtyoHm udsGVPtN8U/7ECFYLXay+SFrALCSNe5Yd/Z5PhiumFKboswZaGXfTeJw4FMKyL3C MyWqpHR5OfwMVlhGBPLns6zy+nvbzduHQDJGgtLFii9YZCAy+sLMPOVDcvLnAZ1S pLO/aXq9PRIDTLyooDw97Br62qi/NOYTkNDx/WpOL2JbEzo6fJB/t9nh1p+14ntL FYOoM3TmC2ksl2LYKLa+B7OBCfbwtgqvQCOdC0ZWqjebM+A+KKRnyDAnteRvAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUJqw1HZZNIlhuZIKunLVOi0w2cZIwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiZGZmODE5LTJiYWQtNDgzZC05 ZmE4LWI2ZWJjNDg0MDMxYS8wLzMyMzQzMDMwM2EzNDYyNjUzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQAS+AwDQYJKoZI hvcNAQELBQADggEBAK8s+exOThpkJcp6DEZTLnVCZUlKHfEgUN/Rh/eN+8fVMg5r Ap5TzsETrewEf6drD82wSrelvY5S15LAue9Gw85lbrlsGyb1MVlAWPZu6tix+IcO TrP7O1QwShi+eUabOrgBFCEGcVAOiyGtUHal6b6skAL7Wp5HBuzNpSoMxmL9i5Hv 3qdXz10AQiqxfreycQpTRN1pXhes0tRSD8ar1cPUV9HJyT9x2jh4nRrobMYmvUbs nGG4s6yFkh9pt6Ysy7kTqFdOjhfVodl5BU/WXuL3+a/gglqhxOIONUrCrr9TUHK3 RghMOk7aT9iv2DrQ6YUwqoh1mFDxG0ktyTzCHHc= -----END CERTIFICATE-----Generated at Tue Apr 29 11:28:20 2025 by rpki-client