$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33342d3334203d3e203233363739.roa File: 323430313a323930303a383030303a3a2f33342d3334203d3e203233363739.roa (raw, json) Hash identifier: zMt0x5ZJiD3cco/FD3VR0RpjTUpZVkN6t8ZMgZin02Q= Subject key identifier: A2:F3:CC:D5:DB:36:58:01:D5:73:AD:A5:AA:29:94:59:66:B2:EA:58 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 1B873CF08BCDB8C4C39FF0C51814F0164F3E214E Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33342d3334203d3e203233363739.roa Signing time: Wed 31 Jan 2024 03:50:48 +0000 ROA not before: Wed 31 Jan 2024 03:45:48 +0000 ROA not after: Wed 29 Jan 2025 03:50:48 +0000 asID: 23679 IP address blocks: 2401:2900:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:87:3c:f0:8b:cd:b8:c4:c3:9f:f0:c5:18:14:f0:16:4f:3e:21:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Jan 31 03:45:48 2024 GMT Not After : Jan 29 03:50:48 2025 GMT Subject: CN=A2F3CCD5DB365801D573ADA5AA29945966B2EA58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7b:0f:12:a6:76:f1:54:ad:e8:18:b5:7d:1c: 8f:69:b0:22:bf:60:54:6b:b2:87:10:60:19:08:cb: e1:63:53:de:ce:40:d3:f4:48:94:1d:52:88:1a:74: 7b:a9:97:0c:85:99:9c:fd:92:ce:82:58:ab:79:66: e0:bb:6e:08:47:76:72:74:aa:e7:ce:af:24:5b:99: 2c:1d:2b:24:14:a7:5f:1e:b9:81:a7:c3:e3:c4:53: 8f:a5:3b:26:4b:6b:fb:71:7d:53:6b:e9:2c:0a:79: 33:01:9d:f9:cf:37:1e:fb:1b:19:a3:7d:56:7c:55: 1b:c9:6f:40:02:fd:f4:16:60:e7:f0:4c:1b:13:60: 3c:1e:b5:97:3e:be:c1:04:a1:f5:ca:0d:7a:f9:69: 15:4a:2a:cc:37:83:05:c1:98:b0:ca:4d:79:cd:e9: b5:a6:35:2a:80:77:7e:5a:e4:59:25:b7:c9:39:05: 28:c0:4f:9c:9c:86:3e:8e:a4:83:fe:ef:ac:7f:8e: 03:36:ab:f6:57:ac:1f:14:13:12:5e:17:3a:59:15: 33:dc:82:d8:3e:f0:8e:b2:71:d9:de:0a:7e:f8:68: a7:87:f0:dd:03:5b:81:67:36:25:46:4d:33:29:49: 5d:a8:4b:b7:d8:e5:42:a3:f5:ac:01:9e:2f:43:52: 8b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F3:CC:D5:DB:36:58:01:D5:73:AD:A5:AA:29:94:59:66:B2:EA:58 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33342d3334203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8000::/34 Signature Algorithm: sha256WithRSAEncryption 96:c8:20:79:43:d8:e1:5c:79:3f:7a:a1:26:38:73:6b:72:90: e3:d2:18:ad:c4:f0:dd:8a:29:97:86:a8:f5:e7:1a:09:0f:40: ae:53:a1:42:6e:b3:e3:d8:bd:e3:29:39:ee:41:26:14:49:4e: ad:f6:bb:d5:ea:f6:bd:5b:a5:68:7b:f2:66:72:b1:bd:5a:c4: 67:45:73:23:33:1d:6a:02:58:7c:f6:27:89:bd:e0:57:a9:c5: 7e:4d:8d:2e:7b:7d:78:1c:d4:f0:38:03:e9:06:b9:df:8c:05: d5:14:25:f6:f9:62:95:b0:67:8c:ed:48:b1:ba:00:20:e9:f6: d8:3f:65:5f:7f:c8:6e:99:30:6a:a1:cd:71:fe:d5:e5:fa:ba: 6c:e3:6f:bf:56:2d:76:15:27:70:6a:a8:70:e4:ad:4d:e6:1f: 55:c8:0a:e7:9c:01:6b:0c:b9:1a:25:42:f8:0e:a2:f0:36:fd: 58:ab:87:ae:31:99:16:87:05:1b:83:17:64:04:49:13:c8:19: b1:2c:24:c7:40:4e:a1:06:7d:a0:c4:fa:66:56:2f:1a:ea:cd: 0f:ca:a2:37:09:e3:1c:76:3b:3d:91:d6:d7:1e:11:18:b9:b7: 85:29:ae:13:c3:06:c5:21:15:22:dd:b0:ed:a1:d0:c1:83:3c: 4d:8e:a8:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4c88IvNuMTDn/DFGBTwFk8+IU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNDAxMzEwMzQ1NDhaFw0yNTAxMjkwMzUwNDhaMDMxMTAvBgNV BAMTKEEyRjNDQ0Q1REIzNjU4MDFENTczQURBNUFBMjk5NDU5NjZCMkVBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJew8SpnbxVK3oGLV9HI9psCK/ YFRrsocQYBkIy+FjU97OQNP0SJQdUogadHuplwyFmZz9ks6CWKt5ZuC7bghHdnJ0 qufOryRbmSwdKyQUp18euYGnw+PEU4+lOyZLa/txfVNr6SwKeTMBnfnPNx77Gxmj fVZ8VRvJb0AC/fQWYOfwTBsTYDwetZc+vsEEofXKDXr5aRVKKsw3gwXBmLDKTXnN 6bWmNSqAd35a5Fklt8k5BSjAT5ychj6OpIP+76x/jgM2q/ZXrB8UExJeFzpZFTPc gtg+8I6ycdneCn74aKeH8N0DW4FnNiVGTTMpSV2oS7fY5UKj9awBni9DUouFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUovPM1ds2WAHVc62lqimUWWay6lgwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzAz YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJAEp AIAwDQYJKoZIhvcNAQELBQADggEBAJbIIHlD2OFceT96oSY4c2tykOPSGK3E8N2K KZeGqPXnGgkPQK5ToUJus+PYveMpOe5BJhRJTq32u9Xq9r1bpWh78mZysb1axGdF cyMzHWoCWHz2J4m94FepxX5NjS57fXgc1PA4A+kGud+MBdUUJfb5YpWwZ4ztSLG6 ACDp9tg/ZV9/yG6ZMGqhzXH+1eX6umzjb79WLXYVJ3BqqHDkrU3mH1XICuecAWsM uRolQvgOovA2/Virh64xmRaHBRuDF2QESRPIGbEsJMdATqEGfaDE+mZWLxrqzQ/K ojcJ4xx2Oz2R1tceERi5t4UprhPDBsUhFSLdsO2h0MGDPE2OqIE= -----END CERTIFICATE-----Generated at Fri May 3 12:58:05 2024 by rpki-client on console-ams.rpki-client.org