$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/323430313a626663303a3a2f33322d3332203d3e20313336383430.roa File: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (raw, json) Hash identifier: ef5pyszl/eZCVNB+iIfkmyNZzW2TWgOjR8Evx4uEXR0= Subject key identifier: 25:E7:6D:83:44:EE:7E:3A:8A:58:9E:90:59:C9:FD:63:E8:F8:A9:B7 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 54D7277F8C095A1815B7088E0D33DDDDEAFA95D3 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/323430313a626663303a3a2f33322d3332203d3e20313336383430.roa Signing time: Mon 31 Jul 2023 00:09:44 +0000 ROA not before: Mon 31 Jul 2023 00:04:44 +0000 ROA not after: Mon 29 Jul 2024 00:09:44 +0000 asID: 136840 IP address blocks: 2401:bfc0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 19:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d7:27:7f:8c:09:5a:18:15:b7:08:8e:0d:33:dd:dd:ea:fa:95:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Jul 31 00:04:44 2023 GMT Not After : Jul 29 00:09:44 2024 GMT Subject: CN=25E76D8344EE7E3A8A589E9059C9FD63E8F8A9B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:db:21:ea:17:ed:a1:55:29:02:09:7e:9c: ae:a9:3b:c2:af:28:54:bb:4e:8c:64:c1:a6:18:8d: 18:42:76:94:ed:23:e3:8f:3e:dd:c4:75:ef:43:7c: ea:f6:f8:fe:32:9b:8d:45:32:cd:ba:f7:45:e3:fa: a1:47:75:4f:f3:52:2d:d9:31:f5:d6:80:57:76:61: 76:0f:e3:d9:68:14:78:bb:f0:ac:dd:52:b8:66:7f: 63:92:05:ae:14:c6:fa:ff:ad:ff:48:4e:d7:0e:67: f8:a5:36:5c:89:89:1f:b8:e6:17:bf:8c:20:03:9b: 40:30:2a:26:66:9a:2b:f0:08:57:af:8f:04:cd:b5: 0d:40:41:7e:8a:68:8c:d0:d3:39:3b:1a:77:e8:5e: eb:6c:6e:a9:58:5a:6c:cf:35:12:07:63:eb:fc:a3: 29:73:d9:84:ea:a1:a6:a2:d4:cf:96:d9:a9:16:18: 62:0d:f0:8c:f5:c4:67:b3:e8:41:47:33:e5:3d:0b: 61:5a:2e:ab:95:b8:6f:04:de:78:91:9b:44:f4:48: f4:ee:45:88:b3:63:09:d9:e5:14:8f:ec:bd:c0:29: 8d:34:e4:ec:60:c5:34:1d:a1:31:a4:6f:b6:a1:5b: 19:ed:3d:86:3b:38:f3:f7:99:0c:10:c6:d2:fb:ea: 5e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E7:6D:83:44:EE:7E:3A:8A:58:9E:90:59:C9:FD:63:E8:F8:A9:B7 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/323430313a626663303a3a2f33322d3332203d3e20313336383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:bfc0::/32 Signature Algorithm: sha256WithRSAEncryption 1f:82:19:2d:f5:c1:d0:4b:81:e6:2c:7e:3c:7a:8e:d3:a6:df: 13:4c:02:d5:f3:bf:4c:f3:35:da:65:be:bd:92:fd:90:82:35: ba:61:c0:f8:e0:35:0f:b0:16:b3:d9:c6:df:58:9b:7d:9d:6a: 7b:30:30:7a:7a:75:98:b8:14:fa:cc:1a:8a:41:07:1a:79:9f: 67:7b:ad:cd:20:b0:2c:c3:bb:16:e3:e1:fe:a0:86:52:d1:a1: a5:91:b0:4c:ca:10:ac:39:de:6c:58:0e:85:7f:be:9b:a4:8a: 02:74:74:88:98:aa:d4:1c:72:8e:1f:f4:ce:53:dc:2a:7d:c5: a9:68:65:e4:5b:d9:c6:20:fa:8e:77:b7:ce:07:bc:de:98:e5: f4:ad:0e:5a:81:74:01:2b:63:06:fa:b8:22:14:bf:aa:34:77: 0a:c7:6e:5a:d8:8d:21:a6:cc:2c:5f:ff:cf:ab:e0:e4:a2:ce: 73:b6:ba:f3:da:e1:6c:df:3d:8c:da:2d:c7:65:d0:82:0f:ad: 33:b0:7b:37:74:1d:e5:f9:0e:bc:76:b5:9b:cf:a0:7b:92:9c: 71:b6:7d:47:75:c0:b6:bb:6d:cd:8d:2f:c4:64:b1:2e:60:19: 5b:60:6e:aa:35:b9:fc:70:e5:20:1b:36:30:ea:9a:70:ce:7e: 58:67:04:24 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUVNcnf4wJWhgVtwiODTPd3er6ldMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yMzA3MzEwMDA0NDRaFw0yNDA3MjkwMDA5NDRaMDMxMTAvBgNV BAMTKDI1RTc2RDgzNDRFRTdFM0E4QTU4OUU5MDU5QzlGRDYzRThGOEE5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhtsh6hftoVUpAgl+nK6pO8Kv KFS7ToxkwaYYjRhCdpTtI+OPPt3Ede9DfOr2+P4ym41FMs2690Xj+qFHdU/zUi3Z MfXWgFd2YXYP49loFHi78KzdUrhmf2OSBa4Uxvr/rf9ITtcOZ/ilNlyJiR+45he/ jCADm0AwKiZmmivwCFevjwTNtQ1AQX6KaIzQ0zk7GnfoXutsbqlYWmzPNRIHY+v8 oylz2YTqoaai1M+W2akWGGIN8Iz1xGez6EFHM+U9C2FaLquVuG8E3niRm0T0SPTu RYizYwnZ5RSP7L3AKY005OxgxTQdoTGkb7ahWxntPYY7OPP3mQwQxtL76l7hAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUJedtg0TufjqKWJ6QWcn9Y+j4qbcwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlZjA4OTAwLWYyYzYtNGQwNy1i Njk0LWQxODhiYWEzYjhmMi8wLzMyMzQzMDMxM2E2MjY2NjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNjM4MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBv8AwDQYJKoZI hvcNAQELBQADggEBAB+CGS31wdBLgeYsfjx6jtOm3xNMAtXzv0zzNdplvr2S/ZCC NbphwPjgNQ+wFrPZxt9Ym32danswMHp6dZi4FPrMGopBBxp5n2d7rc0gsCzDuxbj 4f6ghlLRoaWRsEzKEKw53mxYDoV/vpukigJ0dIiYqtQcco4f9M5T3Cp9xaloZeRb 2cYg+o53t84HvN6Y5fStDlqBdAErYwb6uCIUv6o0dwrHblrYjSGmzCxf/8+r4OSi znO2uvPa4WzfPYzaLcdl0IIPrTOwezd0HeX5Drx2tZvPoHuSnHG2fUd1wLa7bc2N L8RksS5gGVtgbqo1ufxw5SAbNjDqmnDOflhnBCQ= -----END CERTIFICATE-----Generated at Thu Apr 18 18:14:07 2024 by rpki-client on console-fra.rpki-client.org