$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa File: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (raw, json) Hash identifier: g1W1fbAAntyshZjuJZfaFhGj+tUw3AHNMJ24ABWFkPI= Subject key identifier: 9C:19:06:92:4D:E9:C5:9A:DF:69:F3:59:8A:65:51:2B:B4:B0:29:F9 Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 0601FCB833990B998333D0785B7AE28117248320 Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa Signing time: Mon 31 Jul 2023 00:04:37 +0000 ROA not before: Sun 30 Jul 2023 23:59:37 +0000 ROA not after: Mon 29 Jul 2024 00:04:37 +0000 asID: 24211 IP address blocks: 2402:a000:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 12:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:01:fc:b8:33:99:0b:99:83:33:d0:78:5b:7a:e2:81:17:24:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Jul 30 23:59:37 2023 GMT Not After : Jul 29 00:04:37 2024 GMT Subject: CN=9C1906924DE9C59ADF69F3598A65512BB4B029F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:3c:95:c8:18:a6:40:9a:34:b3:fe:4a:40: 7f:a0:22:a0:fa:a7:0c:bc:ca:d0:18:de:cd:02:8d: 5f:3f:4a:ce:b6:7d:10:41:d8:35:9a:6d:23:a0:2e: 7b:63:da:19:6f:77:ea:9e:35:cb:56:a5:b9:93:b5: 19:73:6a:1e:6f:b2:25:1e:98:84:cc:bc:8a:c8:0e: e6:6c:ea:f3:3f:e8:b9:5d:a3:2a:2c:5b:85:47:15: 45:5a:cf:15:fa:58:4f:1e:fd:e2:82:91:8f:5b:6d: 3c:ca:a4:2f:40:a3:c9:4f:23:a7:73:03:fb:cc:c7: c5:67:3c:29:85:63:98:78:63:e1:b7:7d:17:b1:ea: b0:cb:da:f1:5c:af:f7:5b:82:36:0a:b4:35:c5:1e: f8:a2:34:6b:c4:5c:d7:6f:80:00:bd:ba:cc:a1:b2: 8b:89:c8:d1:39:88:55:56:ba:93:d8:40:eb:ca:f7: 26:97:db:62:e1:10:9a:55:89:d1:6f:95:c8:f0:bf: 87:4c:b5:7f:a6:ec:93:26:a9:32:4d:51:d6:d0:45: b4:85:94:98:34:48:07:66:07:cc:5b:9b:86:44:93: 26:6d:b4:2c:56:63:80:01:93:24:f2:7a:ab:df:da: da:86:1f:8a:3c:75:9a:ba:9b:97:65:75:84:e4:70: 37:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:19:06:92:4D:E9:C5:9A:DF:69:F3:59:8A:65:51:2B:B4:B0:29:F9 X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:a000:8000::/34 Signature Algorithm: sha256WithRSAEncryption 11:50:df:ef:b9:6e:45:53:e0:cb:58:73:35:4d:07:4f:c0:af: e3:d5:dc:cb:f5:62:57:63:05:fe:a9:ce:96:79:a6:e4:cf:06: f3:f5:7e:92:60:b0:64:ad:11:98:7c:2f:5a:a2:2b:b5:be:c3: ef:39:b1:03:c5:e6:df:2d:dc:f1:fd:85:2d:f3:ed:2f:4a:b6: d1:cb:9c:d8:5d:55:2e:56:c3:1a:86:46:ca:d3:46:61:8b:24: 1e:75:c2:29:df:97:dd:2d:f4:ec:fb:f9:29:9e:20:8d:8b:d5: 52:0c:19:6b:d1:f5:5a:50:b3:31:af:3c:e3:cb:68:3f:7b:25: 80:f1:f8:b2:82:5d:90:25:f1:a0:3b:85:a4:aa:3f:38:cc:72: fa:7b:f3:c2:ec:07:fa:9f:35:c8:bf:d1:35:57:30:ab:71:6b: b1:96:3e:a0:63:c8:dc:dd:b6:20:c9:55:dd:bd:5e:ac:a6:bf: 59:6f:52:89:7d:09:14:24:3d:2b:de:78:05:87:a1:6c:7c:2b: 5c:f2:ed:7b:91:f5:e7:3e:e8:ef:09:5e:40:9e:b2:e8:62:24: a8:72:b9:86:b6:1e:41:35:8c:fb:9f:e0:db:ef:55:a8:c6:88: 51:8a:fe:52:e5:ac:43:ee:82:b1:98:c7:0c:cc:59:c1:8d:c6: 59:0b:77:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgH8uDOZC5mDM9B4W3rigRckgyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yMzA3MzAyMzU5MzdaFw0yNDA3MjkwMDA0MzdaMDMxMTAvBgNV BAMTKDlDMTkwNjkyNERFOUM1OUFERjY5RjM1OThBNjU1MTJCQjRCMDI5RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXDyVyBimQJo0s/5KQH+gIqD6 pwy8ytAY3s0CjV8/Ss62fRBB2DWabSOgLntj2hlvd+qeNctWpbmTtRlzah5vsiUe mITMvIrIDuZs6vM/6LldoyosW4VHFUVazxX6WE8e/eKCkY9bbTzKpC9Ao8lPI6dz A/vMx8VnPCmFY5h4Y+G3fRex6rDL2vFcr/dbgjYKtDXFHviiNGvEXNdvgAC9usyh souJyNE5iFVWupPYQOvK9yaX22LhEJpVidFvlcjwv4dMtX+m7JMmqTJNUdbQRbSF lJg0SAdmB8xbm4ZEkyZttCxWY4ABkyTyeqvf2tqGH4o8dZq6m5dldYTkcDchAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnBkGkk3pxZrfafNZimVRK7SwKfkwHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h YWM1LTA4MDQxYjNmNjVlNi8wLzMyMzQzMDMyM2E2MTMwMzAzMDNhMzgzMDMwMzAz YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM0MzIzMTMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJAKg AIAwDQYJKoZIhvcNAQELBQADggEBABFQ3++5bkVT4MtYczVNB0/Ar+PV3Mv1Yldj Bf6pzpZ5puTPBvP1fpJgsGStEZh8L1qiK7W+w+85sQPF5t8t3PH9hS3z7S9KttHL nNhdVS5WwxqGRsrTRmGLJB51winfl90t9Oz7+SmeII2L1VIMGWvR9VpQszGvPOPL aD97JYDx+LKCXZAl8aA7haSqPzjMcvp788LsB/qfNci/0TVXMKtxa7GWPqBjyNzd tiDJVd29Xqymv1lvUol9CRQkPSveeAWHoWx8K1zy7XuR9ec+6O8JXkCesuhiJKhy uYa2HkE1jPuf4NvvVajGiFGK/lLlrEPugrGYxwzMWcGNxlkLd20= -----END CERTIFICATE-----Generated at Thu Apr 25 14:06:02 2024 by rpki-client on console-ams.rpki-client.org