$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3438203d3e203538383230.roa File: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (raw, json) Hash identifier: UjBP69qA1VuI5bse0OXE61wGmtvWuZKdF6jkvLn19Ws= Subject key identifier: 47:E5:AC:F2:D0:A6:91:BA:B1:DB:B1:EC:77:50:95:BB:EF:EA:C8:F0 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 12DF9E8267EB21BE6A387A6DEBD94400176447CF Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3438203d3e203538383230.roa Signing time: Thu 14 Mar 2024 16:01:14 +0000 ROA not before: Thu 14 Mar 2024 15:56:14 +0000 ROA not after: Thu 13 Mar 2025 16:01:14 +0000 asID: 58820 IP address blocks: 2407:7240::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 11:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:df:9e:82:67:eb:21:be:6a:38:7a:6d:eb:d9:44:00:17:64:47:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Mar 14 15:56:14 2024 GMT Not After : Mar 13 16:01:14 2025 GMT Subject: CN=47E5ACF2D0A691BAB1DBB1EC775095BBEFEAC8F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:5c:cd:73:6e:cf:01:e3:02:58:f3:2b:af: d0:a9:80:83:a4:3b:83:e3:a9:08:9b:b1:c8:1d:7f: 02:f3:61:72:1c:3d:95:48:93:c2:dc:c0:64:09:11: 15:3c:a9:c7:c0:d1:4f:d4:89:3e:da:66:23:35:fd: 51:3d:c3:82:cf:c1:64:58:2a:56:69:e0:f1:62:3f: 7f:dc:60:3b:3e:25:f7:65:6d:2a:f0:37:fe:e9:47: 5c:87:5a:34:c4:73:3e:de:7f:c9:3e:3c:9a:f6:85: 12:ff:a4:bb:12:22:38:48:10:70:86:34:91:89:92: 25:1a:6a:6c:77:6b:e0:4a:36:f4:be:35:3d:04:28: b6:ee:e4:38:6f:d9:1c:75:21:c6:b2:f8:66:65:e7: 96:e2:74:ba:f7:b1:91:47:8b:61:c7:a3:5f:12:35: 11:2e:06:5e:c3:3c:f7:6d:7c:25:8b:c1:07:f6:6b: 6e:95:a3:45:53:bc:ed:fb:de:fe:88:fe:c5:0a:6a: c2:56:9e:4d:f4:59:52:18:bb:89:b4:ff:fc:66:95: 08:0e:37:8e:ef:fa:50:ab:53:b9:f3:ba:56:33:74: 10:f7:84:58:56:0b:4a:c0:e9:26:01:d7:68:ce:ba: 74:1e:ef:b6:fa:ee:ef:39:40:f1:f6:26:4d:26:32: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E5:AC:F2:D0:A6:91:BA:B1:DB:B1:EC:77:50:95:BB:EF:EA:C8:F0 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3438203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:7240::/32 Signature Algorithm: sha256WithRSAEncryption 06:c7:42:f1:f1:35:26:b3:9a:d5:96:1e:d3:85:f3:7b:d8:30: 52:c6:73:05:80:ac:a1:d5:dc:31:16:03:28:3f:13:10:1f:af: 6f:2c:28:71:04:f4:09:a1:49:5d:25:f9:82:ee:58:13:54:84: 87:94:3c:e0:80:b6:eb:5c:1b:56:fa:ec:95:70:1e:11:e9:66: 18:51:2f:18:c2:97:c5:c7:ce:70:24:9d:4a:37:d7:ea:9d:72: 8f:5c:33:bf:1b:09:8b:60:ea:cd:63:26:56:8b:69:e3:a4:e8: 88:3a:b1:7d:8c:74:a9:c0:15:92:e2:b1:e5:b0:41:ae:d6:5d: f4:9d:c1:3b:fd:d7:17:7e:41:c8:ee:10:d5:fe:84:ba:14:8e: 75:a8:dd:c3:79:95:b4:5e:e5:c3:3b:72:3f:9a:41:5a:b6:0e: b1:32:ca:93:f5:2b:fa:bf:8d:47:ab:cf:55:15:b6:a2:9e:77: 39:12:34:00:17:43:a2:4e:2b:0e:a7:c2:98:f2:09:ea:8e:18: 88:36:2b:1e:3a:a6:79:c4:56:5e:c0:c8:bf:39:19:44:01:97: a5:a0:34:8a:73:d5:78:ea:3a:9b:f9:0e:aa:d7:6e:9d:db:d9: 4c:9d:f6:06:a4:05:10:fc:95:ef:fc:0b:2b:75:62:ec:08:03: 6f:18:39:39 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUEt+egmfrIb5qOHpt69lEABdkR88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNDAzMTQxNTU2MTRaFw0yNTAzMTMxNjAxMTRaMDMxMTAvBgNV BAMTKDQ3RTVBQ0YyRDBBNjkxQkFCMURCQjFFQzc3NTA5NUJCRUZFQUM4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsoFzNc27PAeMCWPMrr9CpgIOk O4PjqQibscgdfwLzYXIcPZVIk8LcwGQJERU8qcfA0U/UiT7aZiM1/VE9w4LPwWRY KlZp4PFiP3/cYDs+JfdlbSrwN/7pR1yHWjTEcz7ef8k+PJr2hRL/pLsSIjhIEHCG NJGJkiUaamx3a+BKNvS+NT0EKLbu5Dhv2Rx1Icay+GZl55bidLr3sZFHi2HHo18S NREuBl7DPPdtfCWLwQf2a26Vo0VTvO373v6I/sUKasJWnk30WVIYu4m0//xmlQgO N47v+lCrU7nzulYzdBD3hFhWC0rA6SYB12jOunQe77b67u85QPH2Jk0mMmo9AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUR+Ws8tCmkbqx27Hsd1CVu+/qyPAwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0YmE2Nzc4LWIxNmQtNGJhOC05 ODRmLTM0ZTQxOWZjOWM0OS8wLzMyMzQzMDM3M2EzNzMyMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB3JAMA0GCSqGSIb3 DQEBCwUAA4IBAQAGx0Lx8TUms5rVlh7ThfN72DBSxnMFgKyh1dwxFgMoPxMQH69v LChxBPQJoUldJfmC7lgTVISHlDzggLbrXBtW+uyVcB4R6WYYUS8YwpfFx85wJJ1K N9fqnXKPXDO/GwmLYOrNYyZWi2njpOiIOrF9jHSpwBWS4rHlsEGu1l30ncE7/dcX fkHI7hDV/oS6FI51qN3DeZW0XuXDO3I/mkFatg6xMsqT9Sv6v41Hq89VFbainnc5 EjQAF0OiTisOp8KY8gnqjhiINiseOqZ5xFZewMi/ORlEAZeloDSKc9V46jqb+Q6q 126d29lMnfYGpAUQ/JXv/AsrdWLsCANvGDk5 -----END CERTIFICATE-----Generated at Sun May 5 09:49:32 2024 by rpki-client on console-fra.rpki-client.org