$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa File: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (raw, json) Hash identifier: 0gji0fcCs6ZnnvkUkhJPHtarz2Jql2Bn/mknQlm/60c= Subject key identifier: 45:6D:C7:BC:35:D8:F5:78:1C:38:1A:56:0B:68:43:A5:79:01:86:32 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 71A4C8FD1154494A33E40CF555B777C6F0014A86 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa Signing time: Mon 31 Jul 2023 00:05:08 +0000 ROA not before: Mon 31 Jul 2023 00:00:08 +0000 ROA not after: Mon 29 Jul 2024 00:05:08 +0000 asID: 38150 IP address blocks: 2402:f080:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 12:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a4:c8:fd:11:54:49:4a:33:e4:0c:f5:55:b7:77:c6:f0:01:4a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Jul 31 00:00:08 2023 GMT Not After : Jul 29 00:05:08 2024 GMT Subject: CN=456DC7BC35D8F5781C381A560B6843A579018632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7e:87:6b:a7:11:cd:4a:f4:ff:c4:51:07:e6: 96:92:9d:02:df:f9:62:55:1d:cc:82:ad:0c:aa:7c: 2a:55:ce:49:0d:30:ff:77:dc:42:68:89:cf:86:4d: 87:61:b9:f1:17:6a:81:5c:92:8b:67:f7:41:2e:e1: 7a:78:16:a6:5c:a4:25:93:d1:cb:46:1e:c5:bf:42: 9b:c7:a1:4a:a3:7f:1d:4f:84:42:7e:59:b3:51:5c: 23:a5:1d:fb:56:04:74:93:d6:43:90:94:ea:f6:86: 80:93:7f:a1:66:d8:32:bf:cc:a0:98:02:d6:b2:63: 5e:da:0d:ec:d9:15:a7:49:57:a4:bf:46:30:fe:c2: c5:c9:61:79:2b:5f:d8:ef:69:56:9a:95:14:2d:f5: df:28:2b:4f:b1:0b:fa:6d:77:18:52:fd:07:03:db: 97:b9:20:a3:01:17:0e:fa:19:33:6d:85:52:65:21: 5a:6d:d2:f3:aa:63:43:82:4d:88:16:3d:b5:05:80: 29:89:0c:20:a5:6a:60:de:c6:81:3b:ab:dc:41:00: 10:5e:5e:ab:a6:7b:03:4f:33:f6:65:08:4b:53:69: e1:81:a3:9c:14:cc:49:ae:0e:68:d8:83:c0:78:9a: 21:11:29:f5:1d:c7:73:27:de:e7:14:db:d6:3e:75: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6D:C7:BC:35:D8:F5:78:1C:38:1A:56:0B:68:43:A5:79:01:86:32 X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:f080:1::/48 Signature Algorithm: sha256WithRSAEncryption 10:e5:f8:57:eb:b8:66:d6:d7:f0:df:22:a8:ba:90:c0:15:bc: 94:4f:22:e9:f7:93:ba:2e:7d:fd:d0:c1:4d:88:2f:05:fb:ea: f0:6d:ce:30:ab:fe:72:fe:e0:b8:5d:b7:a6:5f:e0:1e:00:13: 16:06:d0:f0:f8:4a:e1:51:76:02:7d:0d:29:d8:18:5d:d4:5c: 3a:15:56:e1:98:cb:ab:74:b1:29:50:47:56:10:cb:d5:9f:80: 84:a0:0b:ea:90:a5:2e:e6:db:8a:03:55:1c:24:09:d1:3c:5f: 5d:0e:5e:59:e3:28:49:91:4c:a4:35:e7:1a:e5:8e:c5:94:49: c8:b3:80:af:1a:57:59:69:3c:13:be:e0:95:b8:2b:01:1b:20: 3c:fc:8e:d7:07:61:aa:02:88:4a:3e:95:ee:3c:0d:6c:04:51: de:6b:cf:19:90:73:87:4a:f0:99:b0:d1:0c:b6:d8:41:6a:f4: 44:b2:46:5f:51:ed:81:ae:1b:0d:e1:be:0b:d2:aa:22:ae:83: e5:0a:52:c9:6a:0e:24:3d:5c:df:fc:b3:54:34:2f:e9:f6:0b: 6b:ed:d5:1d:e6:c3:93:aa:f3:24:1e:a9:d5:75:bc:cf:7b:a6: 9a:4d:71:1c:80:6f:ca:90:f4:96:43:24:38:6f:ec:eb:e4:28: e1:f1:d2:bf -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUcaTI/RFUSUoz5Az1Vbd3xvABSoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yMzA3MzEwMDAwMDhaFw0yNDA3MjkwMDA1MDhaMDMxMTAvBgNV BAMTKDQ1NkRDN0JDMzVEOEY1NzgxQzM4MUE1NjBCNjg0M0E1NzkwMTg2MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsfodrpxHNSvT/xFEH5paSnQLf +WJVHcyCrQyqfCpVzkkNMP933EJoic+GTYdhufEXaoFckotn90Eu4Xp4FqZcpCWT 0ctGHsW/QpvHoUqjfx1PhEJ+WbNRXCOlHftWBHST1kOQlOr2hoCTf6Fm2DK/zKCY AtayY17aDezZFadJV6S/RjD+wsXJYXkrX9jvaVaalRQt9d8oK0+xC/ptdxhS/QcD 25e5IKMBFw76GTNthVJlIVpt0vOqY0OCTYgWPbUFgCmJDCClamDexoE7q9xBABBe XqumewNPM/ZlCEtTaeGBo5wUzEmuDmjYg8B4miERKfUdx3Mn3ucU29Y+da8HAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQURW3HvDXY9XgcOBpWC2hDpXkBhjIwHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMyMzQzMDMyM2E2NjMwMzgzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJALwgAABMA0G CSqGSIb3DQEBCwUAA4IBAQAQ5fhX67hm1tfw3yKoupDAFbyUTyLp95O6Ln390MFN iC8F++rwbc4wq/5y/uC4XbemX+AeABMWBtDw+ErhUXYCfQ0p2Bhd1Fw6FVbhmMur dLEpUEdWEMvVn4CEoAvqkKUu5tuKA1UcJAnRPF9dDl5Z4yhJkUykNeca5Y7FlEnI s4CvGldZaTwTvuCVuCsBGyA8/I7XB2GqAohKPpXuPA1sBFHea88ZkHOHSvCZsNEM tthBavREskZfUe2BrhsN4b4L0qoiroPlClLJag4kPVzf/LNUNC/p9gtr7dUd5sOT qvMkHqnVdbzPe6aaTXEcgG/KkPSWQyQ4b+zr5Cjh8dK/ -----END CERTIFICATE-----Generated at Tue Apr 23 18:27:33 2024 by rpki-client on console-fra.rpki-client.org