$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a3a2f33322d3332203d3e203538353532.roa File: 323430343a666430303a3a2f33322d3332203d3e203538353532.roa (raw, json) Hash identifier: pWZXjxOEeWcQxlaGZ9ZyAKe4tC4WYptt/U5JVXti0fA= Subject key identifier: 2A:00:6B:8D:48:4E:A8:83:07:51:AB:75:32:3C:9A:BD:D8:37:87:EC Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 3B01AB7360DD77BF93BF180A4F890B9902765007 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a3a2f33322d3332203d3e203538353532.roa Signing time: Mon 31 Jul 2023 00:03:58 +0000 ROA not before: Sun 30 Jul 2023 23:58:58 +0000 ROA not after: Mon 29 Jul 2024 00:03:58 +0000 asID: 58552 IP address blocks: 2404:fd00::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 18:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:01:ab:73:60:dd:77:bf:93:bf:18:0a:4f:89:0b:99:02:76:50:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jul 30 23:58:58 2023 GMT Not After : Jul 29 00:03:58 2024 GMT Subject: CN=2A006B8D484EA8830751AB75323C9ABDD83787EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:02:e5:35:d2:58:27:94:64:7f:44:37:bd: e4:b2:7d:64:4e:06:12:c3:b5:f2:ce:4d:53:00:e3: 5c:27:f6:23:93:70:07:69:58:9b:30:64:f3:0a:15: d8:39:58:49:70:2a:50:4d:73:5e:c4:46:bf:65:bb: b5:b1:bb:4b:a2:81:b9:87:b1:60:3c:bd:df:66:0a: c6:74:69:7a:6b:8d:4c:69:12:d2:f5:f7:f3:b5:ea: c9:82:b2:e3:e6:f9:c1:cc:b6:26:35:10:62:b5:36: b1:48:28:cb:10:70:0d:9b:69:60:1e:eb:1e:ab:91: 52:ba:d6:26:d1:e7:b9:e1:a2:58:26:76:b2:2e:7c: 6f:fb:55:4e:7e:c6:d4:57:c9:2a:a7:34:4f:ae:10: fe:43:bd:af:2f:27:d0:bf:8c:8e:02:5a:11:70:2c: de:f6:bb:3b:ef:b6:69:09:e2:2b:36:a1:b6:93:1e: d3:89:ed:03:3f:ec:2d:54:4f:32:de:b0:64:82:7a: d7:e8:91:f5:25:bb:de:72:8b:7a:09:35:97:16:e3: 70:2f:7e:07:11:c4:51:f8:d4:7d:8d:c3:54:c7:71: cf:4f:64:45:e4:2c:b5:27:eb:43:79:44:05:82:d2: b0:28:f9:9a:38:fa:60:3e:d3:7a:74:41:d3:a7:87: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:00:6B:8D:48:4E:A8:83:07:51:AB:75:32:3C:9A:BD:D8:37:87:EC X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a3a2f33322d3332203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00::/32 Signature Algorithm: sha256WithRSAEncryption 73:71:0e:71:d1:18:27:95:24:73:90:b0:8a:8b:fc:f4:1f:78: 8b:3c:e1:3e:bf:a2:f0:ae:db:2f:43:d1:c3:05:ba:c4:e8:51: 24:c1:8f:74:0d:53:46:97:32:60:1d:88:3e:75:8f:81:3a:e5: 3a:ea:28:af:30:76:44:96:7e:92:59:d8:1d:d0:aa:be:c0:38: de:55:95:9a:55:03:2b:93:8c:14:96:35:a8:ca:07:82:7d:3d: 83:c1:68:a5:06:63:2b:d6:4c:6c:ec:8c:72:29:8c:68:ef:54: 71:a4:4b:68:a3:6d:76:2a:14:08:a3:e0:62:0a:ea:ef:70:a3: 31:64:0c:5c:df:13:82:73:10:a2:31:da:bb:30:b4:3b:f3:b5: 27:06:3a:b0:41:68:a4:ed:72:57:e2:df:cb:02:e8:ca:8c:da: b6:f5:9b:3d:36:83:12:4c:aa:19:0e:f9:86:a0:ee:62:69:89: 6a:a6:e6:13:b2:a2:fd:21:b0:ad:8b:1a:e6:20:67:3e:4a:13: b9:2b:c8:5d:11:cb:64:26:c2:55:11:7d:4f:f4:bd:b6:8c:0b: 1a:7a:96:90:3e:10:a2:6f:02:b0:b8:20:81:24:ca:bd:bb:b2: 4b:17:66:d4:2d:c3:b4:d8:f9:bb:8f:e8:94:6a:0d:2b:43:bf: 31:66:7e:bc -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUOwGrc2Ddd7+TvxgKT4kLmQJ2UAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yMzA3MzAyMzU4NThaFw0yNDA3MjkwMDAzNThaMDMxMTAvBgNV BAMTKDJBMDA2QjhENDg0RUE4ODMwNzUxQUI3NTMyM0M5QUJERDgzNzg3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvALlNdJYJ5Rkf0Q3veSyfWRO BhLDtfLOTVMA41wn9iOTcAdpWJswZPMKFdg5WElwKlBNc17ERr9lu7Wxu0uigbmH sWA8vd9mCsZ0aXprjUxpEtL19/O16smCsuPm+cHMtiY1EGK1NrFIKMsQcA2baWAe 6x6rkVK61ibR57nholgmdrIufG/7VU5+xtRXySqnNE+uEP5Dva8vJ9C/jI4CWhFw LN72uzvvtmkJ4is2obaTHtOJ7QM/7C1UTzLesGSCetfokfUlu95yi3oJNZcW43Av fgcRxFH41H2Nw1THcc9PZEXkLLUn60N5RAWC0rAo+Zo4+mA+03p0QdOnh5V5AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUKgBrjUhOqIMHUat1Mjyavdg3h+wwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBP0AMA0GCSqGSIb3 DQEBCwUAA4IBAQBzcQ5x0RgnlSRzkLCKi/z0H3iLPOE+v6LwrtsvQ9HDBbrE6FEk wY90DVNGlzJgHYg+dY+BOuU66iivMHZEln6SWdgd0Kq+wDjeVZWaVQMrk4wUljWo ygeCfT2DwWilBmMr1kxs7IxyKYxo71RxpEtoo212KhQIo+BiCurvcKMxZAxc3xOC cxCiMdq7MLQ787UnBjqwQWik7XJX4t/LAujKjNq29Zs9NoMSTKoZDvmGoO5iaYlq puYTsqL9IbCtixrmIGc+ShO5K8hdEctkJsJVEX1P9L22jAsaepaQPhCibwKwuCCB JMq9u7JLF2bULcO02Pm7j+iUag0rQ78xZn68 -----END CERTIFICATE-----Generated at Fri Apr 19 11:24:28 2024 by rpki-client on console-fra.rpki-client.org