$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: ajihe5wSxJ3sfR9A5rNCNS9xQzbiekAQa7lYwKWuATs= Subject key identifier: 35:2D:D5:02:08:41:D4:C2:3B:6E:38:92:BC:F3:00:66:61:B7:E7:4D Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 6F60C0CF2982B3D418E5FD890E1D0B04A146E307 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 08 Jun 2023 03:00:03 +0000 ROA not before: Thu 08 Jun 2023 02:55:03 +0000 ROA not after: Thu 06 Jun 2024 03:00:03 +0000 asID: 137330 IP address blocks: 2402:aa40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:60:c0:cf:29:82:b3:d4:18:e5:fd:89:0e:1d:0b:04:a1:46:e3:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Jun 8 02:55:03 2023 GMT Not After : Jun 6 03:00:03 2024 GMT Subject: CN=352DD5020841D4C23B6E3892BCF3006661B7E74D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d6:11:13:33:75:a5:05:0e:61:37:2e:99:f6: 24:87:7d:46:3a:96:e9:5b:a9:37:a0:f6:de:c0:eb: cc:39:81:b2:95:bc:f3:61:3c:c3:ee:b5:e4:03:63: 18:be:97:ec:e2:37:0c:46:a5:9a:0f:79:3d:f0:0e: 2c:7f:15:06:ff:44:db:7f:df:b6:9b:32:4a:f7:b4: a5:83:98:f2:4f:95:40:18:e8:29:fe:0a:8e:bb:d2: e0:db:0a:d7:79:82:a0:24:da:c2:4c:f0:63:c4:bd: c0:51:c2:ee:bc:cb:9e:3c:04:d3:7d:0c:db:bc:0b: 14:9b:7d:53:df:4d:08:5f:ff:aa:78:72:77:0b:22: 54:d5:ba:a5:84:9c:07:5d:23:37:e1:3c:b5:ff:98: 00:da:b4:87:3c:f7:b1:98:8e:d4:ae:da:53:70:3f: f3:17:43:51:1e:ab:1e:7f:83:08:8e:56:e8:8c:c4: af:a3:b4:5d:1c:f4:a1:e7:84:d0:bb:ae:7b:51:79: 6d:58:34:81:e5:ce:f9:82:c7:69:9f:d4:cc:28:d4: 8e:f0:f4:f7:8c:b0:b1:b2:11:cc:ce:d8:63:17:b6: ec:49:42:7f:d3:c8:2a:7c:59:0f:63:ba:61:07:7e: 46:90:b1:ea:67:f3:74:c1:5d:16:64:e8:17:c6:29: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2D:D5:02:08:41:D4:C2:3B:6E:38:92:BC:F3:00:66:61:B7:E7:4D X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:3::/48 Signature Algorithm: sha256WithRSAEncryption 41:30:5f:15:03:76:3c:1e:b2:03:74:09:d2:7b:e1:32:a3:6a: b4:95:b5:65:95:e3:2d:bb:61:83:8b:29:bf:b5:b3:0f:2e:f6: 9b:c5:e0:b3:45:c0:fd:63:71:44:fc:20:1c:84:cf:aa:b5:be: 3f:c0:29:2f:d8:da:98:66:79:b4:88:66:77:c9:10:77:89:20: 7d:c9:a8:cd:3e:52:84:6f:ff:4f:2b:70:16:13:28:32:df:07: e0:d8:49:72:90:ab:92:3d:78:01:4f:7f:a3:65:8f:2e:8d:00: 15:b1:e1:ff:8d:32:ef:97:b0:10:59:79:25:d2:c0:c9:f7:a4: cd:43:f2:e9:60:cb:49:24:d5:d9:4f:6d:72:57:8e:cf:f2:6c: 0c:09:0d:1e:c6:82:70:07:2a:3a:90:89:f6:38:7a:ce:27:c4: d4:5b:e1:e5:63:88:5d:99:df:a8:8c:1d:ff:c1:4e:d5:7c:4a: 8d:a1:15:7f:b1:d1:22:2d:5f:7e:8d:8b:38:76:1e:5e:50:bb: 2d:70:19:1a:50:89:48:44:af:e1:04:84:5d:bd:a3:a8:17:33: 75:53:ee:27:e0:9a:f4:f3:d6:33:2c:79:ba:58:0b:51:b8:ab: b2:2a:17:6c:98:f4:a5:d3:d5:b0:71:08:44:0b:95:a4:81:3d: 0f:0a:fd:06 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUb2DAzymCs9QY5f2JDh0LBKFG4wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yMzA2MDgwMjU1MDNaFw0yNDA2MDYwMzAwMDNaMDMxMTAvBgNV BAMTKDM1MkRENTAyMDg0MUQ0QzIzQjZFMzg5MkJDRjMwMDY2NjFCN0U3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1hETM3WlBQ5hNy6Z9iSHfUY6 lulbqTeg9t7A68w5gbKVvPNhPMPuteQDYxi+l+ziNwxGpZoPeT3wDix/FQb/RNt/ 37abMkr3tKWDmPJPlUAY6Cn+Co670uDbCtd5gqAk2sJM8GPEvcBRwu68y548BNN9 DNu8CxSbfVPfTQhf/6p4cncLIlTVuqWEnAddIzfhPLX/mADatIc897GYjtSu2lNw P/MXQ1Eeqx5/gwiOVuiMxK+jtF0c9KHnhNC7rntReW1YNIHlzvmCx2mf1Mwo1I7w 9PeMsLGyEczO2GMXtuxJQn/TyCp8WQ9jumEHfkaQsepn83TBXRZk6BfGKRu9AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUNS3VAghB1MI7bjiSvPMAZmG3500wHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAMw DQYJKoZIhvcNAQELBQADggEBAEEwXxUDdjwesgN0CdJ74TKjarSVtWWV4y27YYOL Kb+1sw8u9pvF4LNFwP1jcUT8IByEz6q1vj/AKS/Y2phmebSIZnfJEHeJIH3JqM0+ UoRv/08rcBYTKDLfB+DYSXKQq5I9eAFPf6Nljy6NABWx4f+NMu+XsBBZeSXSwMn3 pM1D8ulgy0kk1dlPbXJXjs/ybAwJDR7GgnAHKjqQifY4es4nxNRb4eVjiF2Z36iM Hf/BTtV8So2hFX+x0SItX36Nizh2Hl5Quy1wGRpQiUhEr+EEhF29o6gXM3VT7ifg mvTz1jMsebpYC1G4q7IqF2yY9KXT1bBxCEQLlaSBPQ8K/QY= -----END CERTIFICATE-----Generated at Tue Apr 30 18:54:25 2024 by rpki-client on console-fra.rpki-client.org