$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa File: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (raw, json) Hash identifier: 3Rn1hnQHYQ2jUz1ODuBy29qQBOyo+Lrt/ueBY/lzmg8= Subject key identifier: 4D:65:AE:53:47:3A:1D:09:D1:C9:57:85:C8:BE:76:FE:2A:0B:EE:86 Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Certificate serial: 6979729E20BC57C737A4D952D991344227E41C82 Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa Signing time: Sun 02 Jul 2023 13:44:50 +0000 ROA not before: Sun 02 Jul 2023 13:39:50 +0000 ROA not after: Sun 30 Jun 2024 13:44:50 +0000 asID: 140413 IP address blocks: 2406:13c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:79:72:9e:20:bc:57:c7:37:a4:d9:52:d9:91:34:42:27:e4:1c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Validity Not Before: Jul 2 13:39:50 2023 GMT Not After : Jun 30 13:44:50 2024 GMT Subject: CN=4D65AE53473A1D09D1C95785C8BE76FE2A0BEE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:c6:4d:1e:dc:e8:07:05:ab:ea:7a:8c:7e: 9b:ed:8c:c0:0b:b1:c5:81:d8:1a:41:37:06:2c:b9: 8c:13:5b:db:1e:4f:52:61:b1:14:a9:0e:13:d1:ff: a2:c8:b1:ef:8e:a4:2c:6c:2d:75:0a:c6:48:d1:bf: a1:d6:60:a5:c5:b3:25:6b:68:72:7b:de:c1:a3:b4: 87:d5:7b:d1:24:c2:b5:9c:34:7c:81:21:3b:a5:1f: 19:46:5e:78:55:81:02:dd:b8:29:60:45:fb:8f:40: b5:03:b8:46:c5:2b:c2:ab:40:1e:52:db:46:eb:77: 10:bf:7f:0b:59:45:4e:63:bf:6a:0d:5d:df:1f:08: f7:da:0e:7d:28:df:c7:98:f2:15:6c:56:a4:eb:72: 06:d7:d4:46:f6:d1:b5:11:5f:c7:b7:6a:71:21:0c: 18:01:79:ec:8f:d6:3b:05:00:90:2a:5f:a9:29:9f: a3:a6:0c:e2:3e:b9:f8:fe:64:39:3f:d6:e9:14:70: 6a:a3:98:97:00:4a:5e:bf:bd:af:a3:67:99:cd:9c: f5:8e:d0:f9:27:6e:d2:a4:af:15:d1:47:b1:e4:55: bc:c2:c4:1e:c0:0b:72:c6:27:f7:11:34:5c:99:e6: 09:7f:25:8a:c2:ac:68:ce:32:7d:1a:1d:59:8f:40: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:65:AE:53:47:3A:1D:09:D1:C9:57:85:C8:BE:76:FE:2A:0B:EE:86 X509v3 Authority Key Identifier: keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:13c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 32:d7:f2:cc:d1:bd:0d:d6:51:c2:92:9e:2e:f2:f6:95:64:a1: a5:c5:6c:5d:d1:64:b7:70:c8:76:d3:85:19:49:4b:b3:b6:17: 4d:be:cb:66:72:7c:37:c1:1c:da:35:81:5b:ef:ec:80:f1:61: 6c:39:de:0b:00:18:b1:5c:ba:74:e9:4d:e6:8d:ea:1a:b0:70: bd:c4:47:e4:17:c0:ff:bf:9a:b3:31:81:7f:07:73:d7:0c:5b: 3c:32:9f:e7:7a:4d:a7:b9:3d:a1:72:6e:33:2a:6d:a8:d5:7d: 73:d6:fb:b5:75:e3:75:b7:ad:46:5d:41:e9:48:b3:58:49:85: 54:ce:47:02:59:47:50:ed:e7:7d:4f:98:cf:d1:dd:83:86:6b: af:50:09:b2:d6:b7:f8:40:9d:44:ef:34:a6:d1:25:ec:08:3f: e3:49:74:c8:8a:9c:a1:1e:8e:d5:e2:c5:dd:40:b9:02:ed:d0: f9:4e:c4:41:44:23:c5:75:eb:d6:3e:03:9c:fc:3e:81:d7:c9: e1:80:49:8a:e5:5f:21:4f:c6:ad:2b:f6:e5:1a:0a:3f:66:70: 85:69:4c:e4:a9:ed:0a:c8:57:c1:53:73:17:99:94:e9:3f:89: bb:ca:07:de:10:68:5b:09:34:ba:26:e6:a1:15:f4:0f:13:76: a5:ee:35:a9 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUaXlyniC8V8c3pNlS2ZE0QifkHIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB ODFBOTNCRTAeFw0yMzA3MDIxMzM5NTBaFw0yNDA2MzAxMzQ0NTBaMDMxMTAvBgNV BAMTKDRENjVBRTUzNDczQTFEMDlEMUM5NTc4NUM4QkU3NkZFMkEwQkVFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbMZNHtzoBwWr6nqMfpvtjMAL scWB2BpBNwYsuYwTW9seT1JhsRSpDhPR/6LIse+OpCxsLXUKxkjRv6HWYKXFsyVr aHJ73sGjtIfVe9EkwrWcNHyBITulHxlGXnhVgQLduClgRfuPQLUDuEbFK8KrQB5S 20brdxC/fwtZRU5jv2oNXd8fCPfaDn0o38eY8hVsVqTrcgbX1Eb20bURX8e3anEh DBgBeeyP1jsFAJAqX6kpn6OmDOI+ufj+ZDk/1ukUcGqjmJcASl6/va+jZ5nNnPWO 0PknbtKkrxXRR7HkVbzCxB7AC3LGJ/cRNFyZ5gl/JYrCrGjOMn0aHVmPQCMlAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUTWWuU0c6HQnRyVeFyL52/ioL7oYwHwYDVR0j BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAEw DQYJKoZIhvcNAQELBQADggEBADLX8szRvQ3WUcKSni7y9pVkoaXFbF3RZLdwyHbT hRlJS7O2F02+y2ZyfDfBHNo1gVvv7IDxYWw53gsAGLFcunTpTeaN6hqwcL3ER+QX wP+/mrMxgX8Hc9cMWzwyn+d6Tae5PaFybjMqbajVfXPW+7V143W3rUZdQelIs1hJ hVTORwJZR1Dt531PmM/R3YOGa69QCbLWt/hAnUTvNKbRJewIP+NJdMiKnKEejtXi xd1AuQLt0PlOxEFEI8V169Y+A5z8PoHXyeGASYrlXyFPxq0r9uUaCj9mcIVpTOSp 7QrIV8FTcxeZlOk/ibvKB94QaFsJNLom5qEV9A8TdqXuNak= -----END CERTIFICATE-----Generated at Thu May 2 01:04:45 2024 by rpki-client on console-fra.rpki-client.org