$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a3a2f33322d3438203d3e203338313538.roa File: 323430323a393830303a3a2f33322d3438203d3e203338313538.roa (raw, json) Hash identifier: GQGJbVxkJfTgmpxz5epkcf4hWfp75+/gStvwbPI61Uw= Subject key identifier: A5:AA:AA:64:09:65:59:C0:F9:FE:02:62:D5:B0:AF:0B:B5:9A:D6:91 Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Certificate serial: 61509C4E98EC2FFA5744FC0D5AE3A9EA1241D1AA Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a3a2f33322d3438203d3e203338313538.roa Signing time: Mon 31 Jul 2023 00:09:45 +0000 ROA not before: Mon 31 Jul 2023 00:04:45 +0000 ROA not after: Mon 29 Jul 2024 00:09:45 +0000 asID: 38158 IP address blocks: 2402:9800::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:50:9c:4e:98:ec:2f:fa:57:44:fc:0d:5a:e3:a9:ea:12:41:d1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Validity Not Before: Jul 31 00:04:45 2023 GMT Not After : Jul 29 00:09:45 2024 GMT Subject: CN=A5AAAA64096559C0F9FE0262D5B0AF0BB59AD691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2d:42:0d:4c:c8:da:92:d8:e9:29:21:0f:50: 35:7c:2e:bb:d5:f3:38:6c:e4:59:43:44:c2:c6:a7: 27:10:a4:68:60:6e:ed:1b:21:ac:9a:23:cb:49:53: 25:45:6f:d6:95:7c:f8:55:69:6e:aa:bd:76:fd:9f: d3:40:b8:d3:e5:0b:06:73:3f:cb:3a:36:cf:7c:d3: fb:b6:98:0e:70:ad:ef:00:3c:ca:62:c3:5d:20:34: 96:b7:42:2c:b9:5a:3f:7a:6a:73:fa:77:1f:ea:3f: a2:c0:80:4d:65:3e:95:ce:72:ca:c3:fe:58:42:01: c3:18:6d:e2:10:ca:d9:3b:ce:10:93:82:06:8b:c4: 4f:7a:bd:b6:86:50:8a:67:51:34:3b:ce:2d:5d:bd: ba:7b:db:a9:94:78:1f:c1:e3:7a:f6:ac:1b:7e:18: 99:a4:93:c6:b6:2a:ba:7f:6b:fa:f7:89:77:3d:85: 52:58:f3:74:d3:7e:e1:77:d8:81:e0:9a:79:94:a3: e9:a2:b1:e7:54:57:55:95:cc:8d:e8:65:e3:51:a9: ef:c6:0a:89:7c:4a:e8:89:c2:d7:f2:db:62:76:b4: 9c:ac:56:e2:b2:bb:18:06:ba:b1:d9:f3:c1:ee:c8: ce:2e:df:c4:85:ab:35:f7:97:27:8d:3e:dd:6c:60: 4e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AA:AA:64:09:65:59:C0:F9:FE:02:62:D5:B0:AF:0B:B5:9A:D6:91 X509v3 Authority Key Identifier: keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a3a2f33322d3438203d3e203338313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9800::/32 Signature Algorithm: sha256WithRSAEncryption 3b:01:36:b2:6c:8f:05:8b:14:8d:bd:29:c1:5f:f3:0b:7f:63: e9:d2:a3:36:d5:f4:2e:72:bb:2a:d9:ac:79:ae:24:91:82:1d: 10:68:ce:92:73:1d:33:aa:40:07:f8:e0:74:fb:77:41:c6:4a: 40:54:7f:73:ab:ba:a9:fb:2e:93:96:5e:98:b8:dd:45:2f:bd: ae:55:88:cc:d4:72:24:9d:33:a5:ac:5f:61:6d:ee:9a:b4:f5: 21:b0:ef:79:de:c8:ff:91:4b:24:90:bb:2c:03:01:ae:6f:ae: c0:ab:ee:48:10:8e:e9:bc:62:ba:5a:de:d2:00:4a:4f:0f:58: ff:98:3a:03:16:d2:29:4e:ad:14:bd:55:45:c8:cc:af:a0:5e: 1e:be:ec:29:7c:63:a8:bf:cf:4d:4c:b5:0d:08:2f:fd:7f:38: 8c:8f:26:8c:b5:7b:4c:26:b6:14:62:e3:68:b3:c2:3a:29:2d: 69:9d:e4:6a:92:c2:42:e8:92:c4:c3:34:ac:0a:83:89:03:84: 81:43:1b:bd:47:96:d5:4a:b3:24:35:9f:f5:52:dc:4d:db:78: 94:17:a7:16:2e:e1:80:e0:9c:ef:43:4e:fd:33:fc:8d:3c:c0: e3:57:b9:bc:b2:98:24:70:5f:26:db:95:7d:b9:ab:48:d5:88: 37:e0:f9:9c -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUYVCcTpjsL/pXRPwNWuOp6hJB0aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3 MkZGQUUwRTAeFw0yMzA3MzEwMDA0NDVaFw0yNDA3MjkwMDA5NDVaMDMxMTAvBgNV BAMTKEE1QUFBQTY0MDk2NTU5QzBGOUZFMDI2MkQ1QjBBRjBCQjU5QUQ2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXLUINTMjaktjpKSEPUDV8LrvV 8zhs5FlDRMLGpycQpGhgbu0bIayaI8tJUyVFb9aVfPhVaW6qvXb9n9NAuNPlCwZz P8s6Ns980/u2mA5wre8APMpiw10gNJa3Qiy5Wj96anP6dx/qP6LAgE1lPpXOcsrD /lhCAcMYbeIQytk7zhCTggaLxE96vbaGUIpnUTQ7zi1dvbp726mUeB/B43r2rBt+ GJmkk8a2Krp/a/r3iXc9hVJY83TTfuF32IHgmnmUo+misedUV1WVzI3oZeNRqe/G Col8SuiJwtfy22J2tJysVuKyuxgGurHZ88HuyM4u38SFqzX3lyeNPt1sYE4fAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUpaqqZAllWcD5/gJi1bCvC7Wa1pEwHwYDVR0j BBgwFoAU/NBThZBOAPPBCjOe4Z2STXL/rg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMC9GQ0QwNTM4NTkw NEUwMEYzQzEwQTMzOUVFMTlEOTI0RDcyRkZBRTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3MkZG QUUwRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04 MGI3LTA2ZmMxMThkZjhlMi8wLzMyMzQzMDMyM2EzOTM4MzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMzMzgzMTM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkApgAMA0GCSqGSIb3 DQEBCwUAA4IBAQA7ATaybI8FixSNvSnBX/MLf2Pp0qM21fQucrsq2ax5riSRgh0Q aM6Scx0zqkAH+OB0+3dBxkpAVH9zq7qp+y6Tll6YuN1FL72uVYjM1HIknTOlrF9h be6atPUhsO953sj/kUskkLssAwGub67Aq+5IEI7pvGK6Wt7SAEpPD1j/mDoDFtIp Tq0UvVVFyMyvoF4evuwpfGOov89NTLUNCC/9fziMjyaMtXtMJrYUYuNos8I6KS1p neRqksJC6JLEwzSsCoOJA4SBQxu9R5bVSrMkNZ/1UtxN23iUF6cWLuGA4JzvQ079 M/yNPMDjV7m8spgkcF8m25V9uatI1Yg34Pmc -----END CERTIFICATE-----Generated at Wed Apr 24 14:24:33 2024 by rpki-client on console-fra.rpki-client.org