$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: XZLfYJRd8V22PrngoZgIiZwTDcUqDVfCYpS4DRWOBQE= Subject key identifier: F5:60:66:9A:E3:A9:9E:B9:07:26:62:87:BB:80:5E:16:F2:7E:4E:69 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 381487EF094878F8D285B6597810FEDA7C52D034 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa Signing time: Wed 31 Jan 2024 03:56:02 +0000 ROA not before: Wed 31 Jan 2024 03:51:02 +0000 ROA not after: Wed 29 Jan 2025 03:56:02 +0000 asID: 23679 IP address blocks: 2401:2900:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:14:87:ef:09:48:78:f8:d2:85:b6:59:78:10:fe:da:7c:52:d0:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Jan 31 03:51:02 2024 GMT Not After : Jan 29 03:56:02 2025 GMT Subject: CN=F560669AE3A99EB907266287BB805E16F27E4E69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:5f:72:03:4e:f6:f6:52:2d:a3:6e:91:52: cd:cc:9b:ee:c3:e0:bf:b7:09:f9:be:17:d6:1a:48: 10:fe:6c:de:33:f8:90:a2:29:cd:3e:be:38:a7:c5: c9:81:b3:61:af:e4:4c:dc:2f:90:32:1b:17:63:bc: 05:13:f9:f8:bb:61:5e:3b:dc:05:3f:b5:b8:dc:f8: df:cb:34:2a:6c:59:4e:ab:e1:3b:b6:32:a0:92:56: 32:c2:01:b0:86:f9:a7:97:20:6e:56:f2:a5:21:a3: c9:dc:d3:4f:29:89:80:35:54:e2:3c:34:69:6a:0a: 0f:47:4e:02:e8:13:bf:32:62:31:f1:78:c4:11:75: 66:20:f8:df:ee:b6:92:bb:45:2a:fe:e4:78:32:8e: 99:0b:26:34:31:4e:2b:b1:8a:88:15:3b:15:35:76: 6c:83:25:4a:92:6c:b1:12:aa:a8:fa:25:d6:e1:ea: f6:27:a9:11:d5:68:3d:fd:69:68:f5:87:3d:7f:e5: 26:f3:0a:a9:08:1e:5b:98:ff:f7:cd:f8:0c:7f:24: b5:ea:02:47:c3:6d:86:ec:e8:16:ce:64:cf:3a:46: 72:20:6c:33:34:95:e9:22:06:0b:df:36:73:3d:fc: 04:34:8f:c3:c4:88:60:eb:91:79:c6:1e:37:33:af: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:60:66:9A:E3:A9:9E:B9:07:26:62:87:BB:80:5E:16:F2:7E:4E:69 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8002::/48 Signature Algorithm: sha256WithRSAEncryption b6:ae:fa:96:99:1d:7f:65:11:9a:88:84:ad:a5:23:ef:62:5e: 73:ce:3e:a9:c5:cf:8d:e2:90:24:a8:0b:a5:ff:42:52:2c:60: 78:2e:10:0e:35:c2:d2:c4:b9:0f:84:52:c4:3c:69:01:4a:7d: 85:51:68:9d:0a:a9:6d:26:05:aa:23:40:ae:6c:77:ae:95:7c: 15:75:0e:7d:46:f2:8a:48:98:c4:bb:fb:54:0c:38:2e:e5:0c: 91:f7:8e:cb:47:d0:d3:11:25:13:03:c7:78:f4:07:b8:cc:d0: ef:5d:7a:3d:31:b6:55:64:c7:2b:e9:79:54:33:8f:b9:c1:70: c4:61:ba:fe:cc:87:33:94:d5:b6:1c:96:72:3f:2c:e9:30:05: c9:07:1f:31:48:a6:90:20:17:cb:0a:bc:7b:b9:8b:27:10:11: 4d:d7:87:2c:cb:6f:19:63:d9:d2:83:0e:b1:76:fd:95:ce:c3: 84:95:41:dc:c0:53:fe:ed:89:c6:19:d7:00:0c:43:c2:12:a8: cb:5d:01:a8:00:ef:a2:24:52:60:c9:58:51:23:61:b0:07:93: 25:5b:b7:c1:26:58:3f:fd:a0:9a:59:96:72:f3:9a:94:bc:d1: b5:cf:53:b2:8d:fc:5d:f3:e2:1b:d2:e4:99:aa:61:8c:02:35: 17:79:e2:82 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOBSH7wlIePjShbZZeBD+2nxS0DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNDAxMzEwMzUxMDJaFw0yNTAxMjkwMzU2MDJaMDMxMTAvBgNV BAMTKEY1NjA2NjlBRTNBOTlFQjkwNzI2NjI4N0JCODA1RTE2RjI3RTRFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5yF9yA0729lIto26RUs3Mm+7D 4L+3Cfm+F9YaSBD+bN4z+JCiKc0+vjinxcmBs2Gv5EzcL5AyGxdjvAUT+fi7YV47 3AU/tbjc+N/LNCpsWU6r4Tu2MqCSVjLCAbCG+aeXIG5W8qUho8nc008piYA1VOI8 NGlqCg9HTgLoE78yYjHxeMQRdWYg+N/utpK7RSr+5HgyjpkLJjQxTiuxiogVOxU1 dmyDJUqSbLESqqj6Jdbh6vYnqRHVaD39aWj1hz1/5SbzCqkIHluY//fN+Ax/JLXq AkfDbYbs6BbOZM86RnIgbDM0lekiBgvfNnM9/AQ0j8PEiGDrkXnGHjczr/eBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU9WBmmuOpnrkHJmKHu4BeFvJ+TmkwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AIACMA0GCSqGSIb3DQEBCwUAA4IBAQC2rvqWmR1/ZRGaiIStpSPvYl5zzj6pxc+N 4pAkqAul/0JSLGB4LhAONcLSxLkPhFLEPGkBSn2FUWidCqltJgWqI0CubHeulXwV dQ59RvKKSJjEu/tUDDgu5QyR947LR9DTESUTA8d49Ae4zNDvXXo9MbZVZMcr6XlU M4+5wXDEYbr+zIczlNW2HJZyPyzpMAXJBx8xSKaQIBfLCrx7uYsnEBFN14csy28Z Y9nSgw6xdv2VzsOElUHcwFP+7YnGGdcADEPCEqjLXQGoAO+iJFJgyVhRI2GwB5Ml W7fBJlg//aCaWZZy85qUvNG1z1Oyjfxd8+Ib0uSZqmGMAjUXeeKC -----END CERTIFICATE-----Generated at Fri May 3 11:55:16 2024 by rpki-client on console-fra.rpki-client.org