$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/323430333a626130303a3a2f33322d3438203d3e203234353231.roa File: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (raw, json) Hash identifier: sfl8slCC5bZPVp1guecn1+OA9OjY5bgvzmhO26wAt8o= Subject key identifier: CF:08:40:64:A4:AC:CE:69:34:75:C7:F5:6A:6A:3D:41:63:05:F2:94 Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Certificate serial: 2ED5DFA656C0D217711BD878792605C532261712 Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/323430333a626130303a3a2f33322d3438203d3e203234353231.roa Signing time: Mon 31 Jul 2023 00:05:44 +0000 ROA not before: Mon 31 Jul 2023 00:00:44 +0000 ROA not after: Mon 29 Jul 2024 00:05:44 +0000 asID: 24521 IP address blocks: 2403:ba00::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 00:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d5:df:a6:56:c0:d2:17:71:1b:d8:78:79:26:05:c5:32:26:17:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Validity Not Before: Jul 31 00:00:44 2023 GMT Not After : Jul 29 00:05:44 2024 GMT Subject: CN=CF084064A4ACCE693475C7F56A6A3D416305F294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dd:fa:48:e5:39:19:31:38:aa:c7:9d:01:8d: 6d:7c:d9:d1:d8:41:f3:15:f7:f5:ab:92:4b:6b:b5: c0:a4:fe:9e:b9:59:1a:f5:30:67:9a:ae:3e:a4:41: 14:e3:e7:03:16:6a:73:fa:f8:03:86:d4:36:6c:7b: 6b:4b:3c:62:2e:01:55:d8:16:06:d2:6a:a2:e3:a7: ec:c1:61:af:48:71:0f:6a:4e:5e:a2:79:b5:12:49: 21:e1:4b:94:cc:bc:db:34:c1:82:32:d0:c8:bd:90: 4b:b4:f9:4d:e3:82:48:4b:cf:2a:0d:8f:7b:f9:eb: b1:fa:5d:31:ed:f6:df:ff:15:56:6e:90:56:c6:33: aa:cf:cb:a6:8d:c9:22:d4:72:41:91:15:3a:88:04: ee:b2:a0:5e:43:79:b6:a8:44:e9:a2:54:58:12:d3: 0e:a0:20:2b:48:a3:98:a8:67:ba:d3:01:0d:18:21: d6:a5:cd:31:69:f3:9e:a8:a1:14:00:c9:fd:e5:6f: df:09:ac:5f:64:33:70:d2:60:be:8f:e7:08:96:c3: 27:00:21:4a:9f:e7:23:9e:fd:64:ab:8b:f6:33:30: 9a:4f:9b:2b:34:a4:99:06:bd:2f:03:a3:b8:b2:38: 85:27:8d:be:c3:a1:4b:9a:9a:2a:3e:2b:f7:72:ac: 5f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:08:40:64:A4:AC:CE:69:34:75:C7:F5:6A:6A:3D:41:63:05:F2:94 X509v3 Authority Key Identifier: keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/323430333a626130303a3a2f33322d3438203d3e203234353231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:ba00::/32 Signature Algorithm: sha256WithRSAEncryption 30:4f:c1:a1:cf:c5:25:c4:05:53:37:9d:f3:67:a6:e6:73:0d: ed:21:9f:f2:77:4e:7e:22:32:42:f0:66:cb:de:36:ad:4b:be: d5:58:c0:e3:76:ab:70:86:20:ba:8a:6a:39:5e:4a:11:53:50: f5:cb:a8:7d:ec:20:69:7f:40:46:97:7e:b3:8d:f7:1a:80:05: 5d:17:da:2a:34:65:70:f2:32:78:c6:94:31:e8:ae:ac:8a:17: 7d:fd:af:e1:e6:02:54:7c:e8:cc:24:0d:8a:56:d9:ce:b1:47: 57:c8:1f:2a:3e:21:59:c6:a5:cf:21:7d:1a:a4:16:5d:d9:5b: 8c:12:c4:db:77:5f:31:94:10:0a:6e:9b:66:6a:b0:81:4c:50: 10:d5:d6:99:bf:b2:fd:f0:32:fc:fc:d9:b0:79:5e:e7:ee:04: 74:69:29:56:b0:93:a4:a4:29:07:28:ca:bc:02:18:b9:61:20: cd:21:b6:d1:53:ba:99:7f:9d:2f:51:19:04:07:c9:70:30:29: 84:04:a9:c7:61:e4:c9:9d:84:9d:a3:89:65:24:62:c4:d5:7d: 26:55:4a:36:a6:8c:31:16:ed:44:ad:3a:d8:47:0f:b5:84:89: 65:68:ca:19:f2:7a:3f:3b:09:27:78:3f:56:a1:a1:d5:d9:3e: ee:ad:dd:15 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIULtXfplbA0hdxG9h4eSYFxTImFxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz QjI3MUUzRTAeFw0yMzA3MzEwMDAwNDRaFw0yNDA3MjkwMDA1NDRaMDMxMTAvBgNV BAMTKENGMDg0MDY0QTRBQ0NFNjkzNDc1QzdGNTZBNkEzRDQxNjMwNUYyOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn3fpI5TkZMTiqx50BjW182dHY QfMV9/WrkktrtcCk/p65WRr1MGearj6kQRTj5wMWanP6+AOG1DZse2tLPGIuAVXY FgbSaqLjp+zBYa9IcQ9qTl6iebUSSSHhS5TMvNs0wYIy0Mi9kEu0+U3jgkhLzyoN j3v567H6XTHt9t//FVZukFbGM6rPy6aNySLUckGRFTqIBO6yoF5DebaoROmiVFgS 0w6gICtIo5ioZ7rTAQ0YIdalzTFp856ooRQAyf3lb98JrF9kM3DSYL6P5wiWwycA IUqf5yOe/WSri/YzMJpPmys0pJkGvS8Do7iyOIUnjb7DoUuamio+K/dyrF8vAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUzwhAZKSszmk0dcf1amo9QWMF8pQwHwYDVR0j BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3 RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3 MUUzRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwOWMyMmIxLTFiN2ItNDY3MS1h Yjk0LTVjNWU3NDg4MjU0Ny8wLzMyMzQzMDMzM2E2MjYxMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMyMzQzNTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA7oAMA0GCSqGSIb3 DQEBCwUAA4IBAQAwT8Ghz8UlxAVTN53zZ6bmcw3tIZ/yd05+IjJC8GbL3jatS77V WMDjdqtwhiC6imo5XkoRU1D1y6h97CBpf0BGl36zjfcagAVdF9oqNGVw8jJ4xpQx 6K6sihd9/a/h5gJUfOjMJA2KVtnOsUdXyB8qPiFZxqXPIX0apBZd2VuMEsTbd18x lBAKbptmarCBTFAQ1daZv7L98DL8/NmweV7n7gR0aSlWsJOkpCkHKMq8Ahi5YSDN IbbRU7qZf50vURkEB8lwMCmEBKnHYeTJnYSdo4llJGLE1X0mVUo2powxFu1ErTrY Rw+1hIllaMoZ8no/OwkneD9WoaHV2T7urd0V -----END CERTIFICATE-----Generated at Fri Apr 19 01:15:57 2024 by rpki-client on console-fra.rpki-client.org