$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: WmY8H1zMSrU0biPQLmTue1SczqssAZlWH/rkzB+vHI4= Subject key identifier: 7F:F5:3D:D2:13:45:BA:7E:18:CE:B8:D3:92:33:66:78:DF:F2:71:AE Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 663FC5C9A0AE840B0C882525ED194539AD870B78 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 09 Feb 2024 11:09:22 +0000 ROA not before: Fri 09 Feb 2024 11:04:22 +0000 ROA not after: Fri 07 Feb 2025 11:09:22 +0000 asID: 140423 IP address blocks: 2406:20c0:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3f:c5:c9:a0:ae:84:0b:0c:88:25:25:ed:19:45:39:ad:87:0b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Feb 9 11:04:22 2024 GMT Not After : Feb 7 11:09:22 2025 GMT Subject: CN=7FF53DD21345BA7E18CEB8D392336678DFF271AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:7a:36:09:db:ea:51:c3:dc:02:da:f4:ec: 27:e8:39:c6:83:2d:d2:89:44:fb:cb:98:be:9f:aa: f5:2b:cb:0d:82:9e:45:6b:e1:d8:4d:26:39:74:ee: f5:5a:b8:82:ce:6d:70:2f:9b:57:95:4b:b8:40:ed: c8:c0:61:98:3c:df:a6:82:12:2c:a3:2c:b4:98:87: f6:77:e5:02:cb:ab:6c:ce:96:ac:19:9d:c3:67:c8: a0:ab:71:a2:18:fe:a9:f8:a1:f3:4c:64:b5:4d:4b: 77:b6:c9:f8:dd:b4:2c:59:c4:8a:1b:81:1f:a7:8e: 89:cf:9e:e5:11:fd:5d:1d:df:6b:f9:c2:9d:61:9d: cc:b1:13:1f:7a:12:c7:e4:5e:b1:37:2c:54:a5:1d: 57:a2:da:0d:a4:53:ef:4c:54:9f:5a:11:81:c9:61: 36:e9:30:48:41:0d:55:1a:17:91:d1:d9:eb:03:fa: 82:ca:d3:80:a3:27:af:ba:cf:6f:43:86:88:e0:bc: 48:8d:c8:68:40:82:c6:da:91:f5:73:41:75:05:a4: 35:15:56:dc:3b:b6:54:84:ab:30:38:cc:82:9d:b9: be:0c:9c:09:c7:93:de:a9:dc:0d:87:05:c6:fe:6c: d8:ab:26:38:85:97:82:3a:a3:2f:ab:42:62:40:de: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F5:3D:D2:13:45:BA:7E:18:CE:B8:D3:92:33:66:78:DF:F2:71:AE X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:f000::/36 Signature Algorithm: sha256WithRSAEncryption 0a:e5:c0:87:03:76:12:e1:18:08:43:e2:64:2e:07:83:f4:19: d8:c2:ff:79:17:dc:a9:80:4e:89:e2:b2:3c:5e:b1:4b:a1:70: df:64:ae:9f:98:5f:0d:d5:90:f2:48:af:ca:77:82:1e:a8:ae: 2b:98:6a:d9:a0:68:b5:e4:a0:78:6e:27:ef:6a:c3:d5:cf:18: 00:cf:7f:6b:c8:da:ed:7c:fc:69:b3:a8:91:9e:f4:6c:df:ec: ed:ea:2f:26:e0:53:07:dd:5e:46:63:88:e8:b3:a5:7c:09:17: 9e:53:e4:80:13:16:54:42:3f:7f:1f:a8:c3:ff:76:93:47:eb: 72:3e:47:a2:ba:c4:30:49:ca:01:bb:ed:ad:00:ef:aa:b9:8f: 73:ae:7c:5e:f4:12:f0:2c:8b:81:14:1b:1e:05:27:f6:9b:25: 3e:84:44:af:b7:9b:52:ae:21:20:72:1d:1c:86:2a:80:f5:c1: 32:11:52:97:69:57:7a:94:8b:86:4a:7a:cc:ef:84:cd:95:ed: 47:41:48:1d:d7:62:9a:c0:66:78:c5:d2:f2:8a:33:7b:b1:b1: d7:75:1f:e1:51:e0:f8:eb:6d:97:c0:f0:6a:5f:24:d1:ee:c7: b6:9b:e8:44:f2:5b:e9:64:d6:0a:23:28:37:d8:69:69:4b:5d: ee:c3:98:96 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUZj/FyaCuhAsMiCUl7RlFOa2HC3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNDAyMDkxMTA0MjJaFw0yNTAyMDcxMTA5MjJaMDMxMTAvBgNV BAMTKDdGRjUzREQyMTM0NUJBN0UxOENFQjhEMzkyMzM2Njc4REZGMjcxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6no2CdvqUcPcAtr07CfoOcaD LdKJRPvLmL6fqvUryw2CnkVr4dhNJjl07vVauILObXAvm1eVS7hA7cjAYZg836aC EiyjLLSYh/Z35QLLq2zOlqwZncNnyKCrcaIY/qn4ofNMZLVNS3e2yfjdtCxZxIob gR+njonPnuUR/V0d32v5wp1hncyxEx96EsfkXrE3LFSlHVei2g2kU+9MVJ9aEYHJ YTbpMEhBDVUaF5HR2esD+oLK04CjJ6+6z29DhojgvEiNyGhAgsbakfVzQXUFpDUV Vtw7tlSEqzA4zIKdub4MnAnHk96p3A2HBcb+bNirJjiFl4I6oy+rQmJA3pOfAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUf/U90hNFun4YzrjTkjNmeN/yca4wHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjYzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDA8DANBgkqhkiG9w0BAQsFAAOCAQEACuXAhwN2EuEYCEPiZC4Hg/QZ2ML/eRfc qYBOieKyPF6xS6Fw32Sun5hfDdWQ8kivyneCHqiuK5hq2aBoteSgeG4n72rD1c8Y AM9/a8ja7Xz8abOokZ70bN/s7eovJuBTB91eRmOI6LOlfAkXnlPkgBMWVEI/fx+o w/92k0frcj5HorrEMEnKAbvtrQDvqrmPc658XvQS8CyLgRQbHgUn9pslPoREr7eb Uq4hIHIdHIYqgPXBMhFSl2lXepSLhkp6zO+EzZXtR0FIHddimsBmeMXS8ooze7Gx 13Uf4VHg+Ottl8Dwal8k0e7HtpvoRPJb6WTWCiMoN9hpaUtd7sOYlg== -----END CERTIFICATE-----Generated at Wed May 1 05:56:37 2024 by rpki-client on console-fra.rpki-client.org