$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/323430333a343334303a3a2f33322d3332203d3e20313337333738.roa File: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (raw, json) Hash identifier: 2BV3EyPfq3Gz4n47aIlvuKCYgncQwFtfKoJ0PKtbJeE= Subject key identifier: 6F:28:13:95:53:5E:A1:91:D1:3A:19:24:42:7F:86:7A:08:E4:31:BC Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 0242976DD954B0F7EE107DDF0C8763294DFF9375 Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/323430333a343334303a3a2f33322d3332203d3e20313337333738.roa Signing time: Mon 31 Jul 2023 00:04:39 +0000 ROA not before: Sun 30 Jul 2023 23:59:39 +0000 ROA not after: Mon 29 Jul 2024 00:04:39 +0000 asID: 137378 IP address blocks: 2403:4340::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:42:97:6d:d9:54:b0:f7:ee:10:7d:df:0c:87:63:29:4d:ff:93:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Jul 30 23:59:39 2023 GMT Not After : Jul 29 00:04:39 2024 GMT Subject: CN=6F281395535EA191D13A1924427F867A08E431BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:29:72:49:98:98:a2:9f:7a:88:84:34:f5:c3: c9:ce:cf:1a:fc:10:27:cc:b9:04:cb:ba:ae:73:57: a9:47:64:ef:2d:e7:f2:cc:db:5e:25:e1:ba:7a:87: 0d:03:f1:4a:26:67:5e:1b:e5:f5:f6:14:99:de:af: 81:c9:d5:f9:5c:aa:d5:f5:b3:87:e6:3c:12:29:58: e8:cd:c0:32:59:9e:6f:bf:3a:d2:04:9e:76:5f:39: f9:ef:ce:62:17:b2:b7:47:39:16:6d:28:ec:d0:e2: a5:8c:22:7c:df:4e:84:ee:f4:6b:84:4e:f1:4f:c6: 0b:b8:48:92:4b:06:9f:7e:c8:b6:5c:7a:7b:d9:e7: b6:fe:77:a8:a1:f0:c3:49:bf:df:3a:ed:33:8e:f7: 15:f8:7f:6b:87:ed:5c:cc:88:2f:2a:51:94:b9:d2: 08:93:14:c1:f0:25:68:2f:55:4a:3c:16:7f:04:83: aa:b4:13:eb:57:e7:26:42:31:37:3f:9b:25:42:76: 5f:88:ba:05:36:75:1c:dc:fb:e6:22:50:e4:29:ec: 27:b8:f1:3b:6a:67:76:83:c7:d8:f6:0f:c4:e9:5d: ed:64:d0:c4:53:d4:43:6a:a5:39:e6:26:1a:e0:9e: b0:58:31:4f:a2:50:45:7b:79:43:ba:bb:44:54:30: 68:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:28:13:95:53:5E:A1:91:D1:3A:19:24:42:7F:86:7A:08:E4:31:BC X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/323430333a343334303a3a2f33322d3332203d3e20313337333738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:4340::/32 Signature Algorithm: sha256WithRSAEncryption 50:ae:4a:cf:fa:36:30:b4:de:20:9c:11:ad:77:05:b3:c6:93: ec:cd:25:da:af:27:22:92:7b:17:b3:82:00:ca:b9:71:e2:81: 4f:19:fe:60:e8:73:55:67:b5:c9:0a:e9:79:db:db:c5:3a:43: f1:30:8d:14:c9:92:66:32:c2:5f:5e:ea:69:5d:c2:8b:fc:22: aa:a7:ee:42:97:9f:ca:92:4e:f3:2c:1b:17:c1:d6:c3:bc:4a: dc:c1:74:77:87:5e:4d:72:c9:b5:f9:7f:d0:33:c4:dc:1a:4f: 80:11:35:d3:ad:c3:bb:d9:d8:b6:fb:3e:44:01:67:2f:4d:e4: 5d:b7:f3:22:e7:0a:13:19:36:e3:c2:24:ce:f2:ca:a3:4c:61: c7:00:ae:fb:48:30:71:99:ae:76:5a:2f:84:a3:60:7f:56:b5: 21:4c:20:61:a5:5c:e0:a7:73:a4:01:f9:df:41:42:7a:73:97: 7a:54:84:eb:de:39:2c:8c:08:ed:b4:14:c7:9e:7c:78:91:46: 45:b2:d8:69:5d:f7:ce:ef:ea:41:e7:e0:1d:a0:e0:4b:49:e7: 61:24:1e:20:42:9b:b7:ca:35:41:51:10:69:9b:5a:1f:50:2f: 0f:7d:9e:6e:81:f8:79:58:0d:83:58:5e:e8:72:37:09:d3:cc: 5c:24:f8:c4 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUAkKXbdlUsPfuEH3fDIdjKU3/k3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yMzA3MzAyMzU5MzlaFw0yNDA3MjkwMDA0MzlaMDMxMTAvBgNV BAMTKDZGMjgxMzk1NTM1RUExOTFEMTNBMTkyNDQyN0Y4NjdBMDhFNDMxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlKXJJmJiin3qIhDT1w8nOzxr8 ECfMuQTLuq5zV6lHZO8t5/LM214l4bp6hw0D8UomZ14b5fX2FJner4HJ1flcqtX1 s4fmPBIpWOjNwDJZnm+/OtIEnnZfOfnvzmIXsrdHORZtKOzQ4qWMInzfToTu9GuE TvFPxgu4SJJLBp9+yLZcenvZ57b+d6ih8MNJv9867TOO9xX4f2uH7VzMiC8qUZS5 0giTFMHwJWgvVUo8Fn8Eg6q0E+tX5yZCMTc/myVCdl+IugU2dRzc++YiUOQp7Ce4 8TtqZ3aDx9j2D8TpXe1k0MRT1ENqpTnmJhrgnrBYMU+iUEV7eUO6u0RUMGiFAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUbygTlVNeoZHROhkkQn+GegjkMbwwHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlODk1MGYwLTNiMTQtNGE2ZC1i MzBmLTc1Mzc5Y2IyZWJjZS8wLzMyMzQzMDMzM2EzNDMzMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNzMzMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQDQ0AwDQYJKoZI hvcNAQELBQADggEBAFCuSs/6NjC03iCcEa13BbPGk+zNJdqvJyKSexezggDKuXHi gU8Z/mDoc1VntckK6Xnb28U6Q/EwjRTJkmYywl9e6mldwov8Iqqn7kKXn8qSTvMs GxfB1sO8StzBdHeHXk1yybX5f9AzxNwaT4ARNdOtw7vZ2Lb7PkQBZy9N5F238yLn ChMZNuPCJM7yyqNMYccArvtIMHGZrnZaL4SjYH9WtSFMIGGlXOCnc6QB+d9BQnpz l3pUhOveOSyMCO20FMeefHiRRkWy2Gld987v6kHn4B2g4EtJ52EkHiBCm7fKNUFR EGmbWh9QLw99nm6B+HlYDYNYXuhyNwnTzFwk+MQ= -----END CERTIFICATE-----Generated at Thu Apr 25 22:30:51 2024 by rpki-client on console-fra.rpki-client.org