$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: bFOQ9KKsZaf60dZun0MRaQhTh2+QB2dqfmgicV0bp0E= Subject key identifier: 25:34:AC:12:C7:7D:36:EF:6F:84:53:9D:16:39:43:2E:90:63:1E:73 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 74B08E311893FE65D72A2C8E616342CA9CD22B79 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 09 Feb 2024 11:05:58 +0000 ROA not before: Fri 09 Feb 2024 11:00:58 +0000 ROA not after: Fri 07 Feb 2025 11:05:58 +0000 asID: 140423 IP address blocks: 2406:20c0:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b0:8e:31:18:93:fe:65:d7:2a:2c:8e:61:63:42:ca:9c:d2:2b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Feb 9 11:00:58 2024 GMT Not After : Feb 7 11:05:58 2025 GMT Subject: CN=2534AC12C77D36EF6F84539D1639432E90631E73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b6:1a:c9:34:b1:d4:25:8f:3a:84:dc:4d:8d: df:8d:b3:f0:73:84:61:06:f3:5f:94:dd:12:87:fd: 75:74:97:68:78:ab:5b:d8:a3:29:6e:09:ea:78:99: cb:fb:3c:48:5c:bb:ce:fe:de:5d:d9:04:36:ab:a9: 0e:1f:23:4b:81:03:50:32:85:cb:9f:7e:4f:d0:c2: 99:05:bf:4e:e0:db:56:da:73:61:84:10:1b:c1:ab: 31:1c:af:4f:6d:47:bc:da:a1:8c:bc:14:06:a1:be: 98:58:94:3a:36:86:33:ce:b9:47:67:6f:a1:7b:57: ef:25:0a:76:4c:22:06:12:23:95:12:bc:24:15:f1: 97:90:3f:29:a4:b3:2e:4a:c9:03:f6:c3:cf:7d:1b: 32:69:e2:e6:70:70:44:77:38:6a:39:5e:e9:60:6c: 70:e8:98:3f:40:5f:bf:96:c5:9f:f9:fa:d9:0e:a5: 21:3a:43:a3:a9:76:2b:f6:b9:f1:92:23:d2:1a:33: e4:e9:07:38:fd:7d:9a:c6:37:dc:01:96:22:7b:56: 8f:0d:ff:c7:96:23:10:d0:a3:44:9c:e5:3d:6d:33: 1d:9a:5e:9c:7e:3c:cd:b7:82:ee:96:1d:c9:4b:3d: f4:e9:e5:2d:0c:f3:f9:b3:30:50:7c:29:f2:b8:96: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:34:AC:12:C7:7D:36:EF:6F:84:53:9D:16:39:43:2E:90:63:1E:73 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:2000::/36 Signature Algorithm: sha256WithRSAEncryption 91:8d:2d:7d:1e:fa:a5:f2:d9:28:ce:43:6e:fe:8f:91:37:fe: 5f:b2:64:98:36:f6:05:c1:96:86:66:da:a1:0b:92:87:b3:75: 41:f4:9a:9f:77:f1:f9:60:72:56:ac:34:5d:f3:e2:ee:d9:a6: 46:c9:29:43:09:ae:00:39:5b:3e:9b:7a:18:31:82:ca:9b:49: d1:ad:32:9a:ff:71:ec:df:a1:21:f0:49:40:58:9a:ba:7d:e3: 77:57:db:0f:9d:c3:89:a5:f0:d3:1c:d2:54:78:ad:f5:8a:c7: 3f:a1:0e:4e:88:42:e5:56:11:88:73:71:d1:11:d1:46:35:5c: 66:6b:b7:68:db:77:8a:9b:0c:ca:42:a8:c8:8a:72:1f:71:5d: a2:29:b9:3b:c5:fa:59:46:7e:4d:17:2c:34:48:5b:18:40:eb: 03:2b:d3:50:cf:99:35:6d:23:23:07:e4:c1:bc:d0:f6:a7:df: 09:6f:c3:c1:b0:92:64:02:9a:d6:bb:54:62:37:20:42:e4:6b: 14:df:5e:5f:b8:9f:17:9a:9f:e7:6a:c3:c0:10:52:3d:cd:da: 8c:b2:53:86:06:9c:8d:48:f9:1d:4a:66:ed:70:41:49:cb:2f: 20:0d:7b:b1:78:57:3f:45:d2:fc:a9:eb:f7:3d:0d:c7:f6:3a: 50:3e:94:a8 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUdLCOMRiT/mXXKiyOYWNCypzSK3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNDAyMDkxMTAwNThaFw0yNTAyMDcxMTA1NThaMDMxMTAvBgNV BAMTKDI1MzRBQzEyQzc3RDM2RUY2Rjg0NTM5RDE2Mzk0MzJFOTA2MzFFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwthrJNLHUJY86hNxNjd+Ns/Bz hGEG81+U3RKH/XV0l2h4q1vYoyluCep4mcv7PEhcu87+3l3ZBDarqQ4fI0uBA1Ay hcuffk/QwpkFv07g21bac2GEEBvBqzEcr09tR7zaoYy8FAahvphYlDo2hjPOuUdn b6F7V+8lCnZMIgYSI5USvCQV8ZeQPymksy5KyQP2w899GzJp4uZwcER3OGo5Xulg bHDomD9AX7+WxZ/5+tkOpSE6Q6Opdiv2ufGSI9IaM+TpBzj9fZrGN9wBliJ7Vo8N /8eWIxDQo0Sc5T1tMx2aXpx+PM23gu6WHclLPfTp5S0M8/mzMFB8KfK4lv4FAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUJTSsEsd9Nu9vhFOdFjlDLpBjHnMwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzIzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAIDANBgkqhkiG9w0BAQsFAAOCAQEAkY0tfR76pfLZKM5Dbv6PkTf+X7JkmDb2 BcGWhmbaoQuSh7N1QfSan3fx+WByVqw0XfPi7tmmRskpQwmuADlbPpt6GDGCyptJ 0a0ymv9x7N+hIfBJQFiaun3jd1fbD53DiaXw0xzSVHit9YrHP6EOTohC5VYRiHNx 0RHRRjVcZmu3aNt3ipsMykKoyIpyH3Fdoim5O8X6WUZ+TRcsNEhbGEDrAyvTUM+Z NW0jIwfkwbzQ9qffCW/DwbCSZAKa1rtUYjcgQuRrFN9eX7ifF5qf52rDwBBSPc3a jLJThgacjUj5HUpm7XBBScsvIA17sXhXP0XS/Knr9z0Nx/Y6UD6UqA== -----END CERTIFICATE-----Generated at Wed May 1 04:48:04 2024 by rpki-client on console-ams.rpki-client.org