$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030323a3a2f34382d3438203d3e203137373237.roa File: 323430343a633030303a383030323a3a2f34382d3438203d3e203137373237.roa (raw, json) Hash identifier: DApcd5fX7x/fY8WkcrStN/EOzktYrMIb95lRh9tTVDY= Subject key identifier: 3E:12:97:3A:72:95:4C:D0:90:CA:B4:55:9D:D6:C9:23:EE:01:57:96 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 2423084E270680DD646F793D2D2CAEFE270D9649 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030323a3a2f34382d3438203d3e203137373237.roa Signing time: Mon 03 Jul 2023 03:38:31 +0000 ROA not before: Mon 03 Jul 2023 03:33:31 +0000 ROA not after: Mon 01 Jul 2024 03:38:31 +0000 asID: 17727 IP address blocks: 2404:c000:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 18:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:23:08:4e:27:06:80:dd:64:6f:79:3d:2d:2c:ae:fe:27:0d:96:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Jul 3 03:33:31 2023 GMT Not After : Jul 1 03:38:31 2024 GMT Subject: CN=3E12973A72954CD090CAB4559DD6C923EE015796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7f:eb:c4:63:a7:d9:43:fd:c0:1a:d5:b3:76: 1a:68:7c:30:1e:65:45:9c:8d:cf:7f:24:95:7b:05: 38:fc:17:34:6c:84:1f:49:bc:fd:0a:da:b8:ef:b2: f0:84:7f:9d:b7:21:d8:31:7f:21:f2:b7:bd:22:34: ef:37:f6:02:d2:19:fa:3f:3e:fe:c8:92:8f:61:55: d8:fc:54:06:0c:05:58:a2:66:63:fc:f8:0e:e1:72: 14:9f:7f:7f:a1:5b:1c:d4:69:c5:9e:72:9d:9a:f8: 27:09:4e:1f:32:fe:f6:44:66:27:13:c5:7e:00:3d: a2:10:09:9e:64:60:f3:49:62:4d:4a:3b:85:ce:f2: 97:2f:98:6a:ad:65:47:f6:7d:a2:7d:ea:d5:58:2a: 0c:c4:80:87:1f:14:65:2e:ab:03:91:c4:32:21:b1: 9a:7d:93:f9:b7:d2:b9:21:ce:e0:0d:4f:ad:87:e1: 8c:89:a1:76:65:06:14:e6:86:e8:9d:3a:9a:f8:1a: 2c:52:bc:ac:43:37:14:86:7a:75:92:9d:8d:2a:86: 98:a1:8b:9c:2d:f3:2a:d2:61:4c:06:bf:b9:3a:16: 9f:d8:b7:a1:4b:7a:3b:f2:be:97:fb:d4:23:8a:62: 3f:78:f5:a0:b1:60:f1:e0:46:aa:fd:91:08:6e:c7: a3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:12:97:3A:72:95:4C:D0:90:CA:B4:55:9D:D6:C9:23:EE:01:57:96 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030323a3a2f34382d3438203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000:8002::/48 Signature Algorithm: sha256WithRSAEncryption 60:89:97:11:6a:a4:b5:2b:99:e0:bd:0b:1e:71:55:eb:07:8f: f2:8a:37:38:c0:4e:6b:31:f3:4f:a1:8e:9d:e3:bc:ed:ea:98: ed:dd:bf:89:c1:d2:e8:e4:e3:44:7f:ca:ac:79:25:76:e9:9b: 71:15:d6:6c:d4:bf:99:bd:aa:f3:d5:93:c7:94:5b:a8:a0:29: 26:7a:04:3e:9b:77:40:a9:af:68:b2:65:ec:20:87:ba:69:eb: d8:1c:49:0e:9d:85:bc:d3:b1:8e:0d:7d:2f:07:5d:03:1d:fe: f9:a2:cc:c7:d4:89:fd:ce:12:2a:f3:bd:26:97:25:93:82:97: 19:b2:34:83:2f:e9:54:cf:72:88:09:7e:6e:74:03:a8:76:b3: 18:20:d3:bf:7e:af:df:02:14:7e:23:fd:fa:19:07:83:c6:25: ca:ce:4d:cb:72:c5:d7:a2:89:35:00:9c:a6:c3:93:f2:62:a6: d2:13:b5:d4:a4:02:9f:ff:dc:19:9b:a2:c4:0a:0e:81:28:f4: 17:e8:1f:18:a5:86:50:34:54:0c:3a:25:49:c6:75:31:3b:a6: 85:32:b7:fc:ba:07:73:18:15:9d:81:9e:58:bc:e1:aa:78:73: 3a:b4:c5:82:ef:c5:e7:cc:ad:a5:da:63:73:46:9e:9d:09:d1: ed:24:59:1e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJCMITicGgN1kb3k9LSyu/icNlkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzA3MDMwMzMzMzFaFw0yNDA3MDEwMzM4MzFaMDMxMTAvBgNV BAMTKDNFMTI5NzNBNzI5NTRDRDA5MENBQjQ1NTlERDZDOTIzRUUwMTU3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZf+vEY6fZQ/3AGtWzdhpofDAe ZUWcjc9/JJV7BTj8FzRshB9JvP0K2rjvsvCEf523IdgxfyHyt70iNO839gLSGfo/ Pv7Iko9hVdj8VAYMBViiZmP8+A7hchSff3+hWxzUacWecp2a+CcJTh8y/vZEZicT xX4APaIQCZ5kYPNJYk1KO4XO8pcvmGqtZUf2faJ96tVYKgzEgIcfFGUuqwORxDIh sZp9k/m30rkhzuANT62H4YyJoXZlBhTmhuidOpr4GixSvKxDNxSGenWSnY0qhpih i5wt8yrSYUwGv7k6Fp/Yt6FLejvyvpf71COKYj949aCxYPHgRqr9kQhux6M7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUPhKXOnKVTNCQyrRVndbJI+4BV5YwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhMzgzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATA AIACMA0GCSqGSIb3DQEBCwUAA4IBAQBgiZcRaqS1K5ngvQsecVXrB4/yijc4wE5r MfNPoY6d47zt6pjt3b+JwdLo5ONEf8qseSV26ZtxFdZs1L+Zvarz1ZPHlFuooCkm egQ+m3dAqa9osmXsIIe6aevYHEkOnYW807GODX0vB10DHf75oszH1In9zhIq870m lyWTgpcZsjSDL+lUz3KICX5udAOodrMYINO/fq/fAhR+I/36GQeDxiXKzk3LcsXX ook1AJymw5PyYqbSE7XUpAKf/9wZm6LECg6BKPQX6B8YpYZQNFQMOiVJxnUxO6aF Mrf8ugdzGBWdgZ5YvOGqeHM6tMWC78XnzK2l2mNzRp6dCdHtJFke -----END CERTIFICATE-----Generated at Wed May 1 18:10:56 2024 by rpki-client on console-ams.rpki-client.org