$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: 6ieSx7+pWxTcla0spEHrjSsvfMc9vh5YVZYMh7JUb3Q= Subject key identifier: 6E:2D:B8:43:5D:36:1E:34:AC:0E:8F:19:F4:5E:2E:B9:7F:5D:67:16 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 34BF31A47EEEA8B0ABAF336523AE4FF55E056509 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 09 Feb 2024 11:07:49 +0000 ROA not before: Fri 09 Feb 2024 11:02:49 +0000 ROA not after: Fri 07 Feb 2025 11:07:49 +0000 asID: 140423 IP address blocks: 2406:20c0:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:bf:31:a4:7e:ee:a8:b0:ab:af:33:65:23:ae:4f:f5:5e:05:65:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Feb 9 11:02:49 2024 GMT Not After : Feb 7 11:07:49 2025 GMT Subject: CN=6E2DB8435D361E34AC0E8F19F45E2EB97F5D6716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:34:71:c4:79:a0:a9:1d:e0:e3:9b:c8:1b: e9:e7:ca:f1:f6:30:2c:84:bc:0e:14:86:9c:23:0e: 7d:ff:47:2e:c6:a9:18:21:24:51:6a:3b:29:d5:7c: 68:1a:4c:60:a3:89:a1:c5:03:90:2a:5e:09:8d:e0: 6b:09:f2:9b:06:4f:aa:5b:e9:da:46:93:23:e1:b4: ed:cf:d4:ff:c3:7d:74:c7:5d:36:d4:d9:56:70:33: 45:20:1e:09:2a:65:e9:dd:b5:86:c8:6c:67:64:1f: 5d:d6:6d:a7:ae:7d:1d:63:26:ad:68:7a:83:80:d9: 85:33:0f:5a:8b:19:9a:9a:b3:f1:4f:f6:29:80:61: b9:da:4b:5b:a0:67:f8:a7:e6:f2:2f:97:3c:53:ce: fb:cf:b6:be:f0:18:e8:a7:8a:6f:37:9d:8d:4c:11: 39:4b:0a:60:17:9f:68:43:2b:41:b5:b8:05:ba:9a: df:bd:c7:de:3a:0a:ff:37:ee:b2:15:a0:eb:d3:df: e5:f3:25:f9:ca:f7:6d:ac:d3:cc:96:d3:29:5f:92: 7d:6e:e3:d2:83:8e:bb:7a:b2:c0:2e:c2:3b:a6:4b: 0f:b9:0d:33:89:f7:ab:93:d2:97:b0:7b:1e:2d:06: 00:68:a5:24:37:d9:c7:c6:40:56:39:68:fb:5e:c8: 1d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2D:B8:43:5D:36:1E:34:AC:0E:8F:19:F4:5E:2E:B9:7F:5D:67:16 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:8000::/36 Signature Algorithm: sha256WithRSAEncryption 88:8d:b6:09:90:28:c9:dc:73:66:2f:40:b8:f9:f0:19:35:fa: 6d:7f:cf:62:f3:05:7d:e8:8b:d9:3a:d9:fb:b3:02:5d:4c:15: d6:f3:1a:f0:d1:05:df:5f:2f:d9:8a:39:5a:ee:b7:1e:7c:38: 27:3d:01:ac:da:a2:b6:2f:11:0e:76:67:75:7d:15:71:98:81: 66:3b:f2:12:00:97:f9:60:92:0b:9b:74:b6:1f:eb:14:6b:16: 1b:e5:90:a0:30:9f:1b:e8:07:39:ff:d3:60:27:07:2f:09:f2: 4f:34:58:f6:93:c9:98:3c:9e:cb:06:eb:ce:c9:8a:8d:be:f8: a6:f3:b7:76:d2:36:c0:ca:a5:86:9b:cc:65:4d:1a:a0:54:98: 1b:34:f7:cb:f6:f1:75:c2:ec:f0:3d:a4:e6:0e:13:83:9d:42: bf:5c:c9:aa:3a:77:8b:c3:aa:d1:28:b1:6b:90:08:b7:3f:58: a7:b9:38:0b:19:08:2b:4f:21:82:7f:0e:12:21:da:50:95:33: ef:2d:21:57:53:46:38:c3:01:30:ee:4c:00:0e:6d:f7:53:a4: 85:a7:df:6b:13:f9:74:78:f0:29:97:d0:6d:04:61:2f:cc:42: d2:19:a3:65:56:90:ba:9c:94:63:48:a9:6e:25:22:48:aa:70: a3:a5:2d:c6 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUNL8xpH7uqLCrrzNlI65P9V4FZQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNDAyMDkxMTAyNDlaFw0yNTAyMDcxMTA3NDlaMDMxMTAvBgNV BAMTKDZFMkRCODQzNUQzNjFFMzRBQzBFOEYxOUY0NUUyRUI5N0Y1RDY3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcDRxxHmgqR3g45vIG+nnyvH2 MCyEvA4UhpwjDn3/Ry7GqRghJFFqOynVfGgaTGCjiaHFA5AqXgmN4GsJ8psGT6pb 6dpGkyPhtO3P1P/DfXTHXTbU2VZwM0UgHgkqZendtYbIbGdkH13WbaeufR1jJq1o eoOA2YUzD1qLGZqas/FP9imAYbnaS1ugZ/in5vIvlzxTzvvPtr7wGOinim83nY1M ETlLCmAXn2hDK0G1uAW6mt+9x946Cv837rIVoOvT3+XzJfnK922s08yW0ylfkn1u 49KDjrt6ssAuwjumSw+5DTOJ96uT0pewex4tBgBopSQ32cfGQFY5aPteyB2bAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUbi24Q102HjSsDo8Z9F4uuX9dZxYwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzgzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAgDANBgkqhkiG9w0BAQsFAAOCAQEAiI22CZAoydxzZi9AuPnwGTX6bX/PYvMF feiL2TrZ+7MCXUwV1vMa8NEF318v2Yo5Wu63Hnw4Jz0BrNqiti8RDnZndX0VcZiB ZjvyEgCX+WCSC5t0th/rFGsWG+WQoDCfG+gHOf/TYCcHLwnyTzRY9pPJmDyeywbr zsmKjb74pvO3dtI2wMqlhpvMZU0aoFSYGzT3y/bxdcLs8D2k5g4Tg51Cv1zJqjp3 i8Oq0Sixa5AItz9Yp7k4CxkIK08hgn8OEiHaUJUz7y0hV1NGOMMBMO5MAA5t91Ok haffaxP5dHjwKZfQbQRhL8xC0hmjZVaQupyUY0ipbiUiSKpwo6Utxg== -----END CERTIFICATE-----Generated at Wed May 1 05:56:37 2024 by rpki-client on console-fra.rpki-client.org