$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa File: 323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa (raw, json) Hash identifier: jaSdh5ChbcV7Y0w1YVuCYU/xXUDhx6pIWMK86VmKdks= Subject key identifier: 81:E8:A5:3F:74:C8:6C:7D:B0:D8:9A:A1:9D:A0:C2:72:52:47:FA:D7 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 19F2F08EEBDB3BAFC0F757F57EA3CCB2F64388F5 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa Signing time: Sun 19 Nov 2023 13:00:00 +0000 ROA not before: Sun 19 Nov 2023 12:55:00 +0000 ROA not after: Sun 17 Nov 2024 13:00:00 +0000 asID: 17727 IP address blocks: 2404:c000:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 18:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f2:f0:8e:eb:db:3b:af:c0:f7:57:f5:7e:a3:cc:b2:f6:43:88:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Nov 19 12:55:00 2023 GMT Not After : Nov 17 13:00:00 2024 GMT Subject: CN=81E8A53F74C86C7DB0D89AA19DA0C2725247FAD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:58:ce:9e:43:c0:8c:d5:79:ba:ad:3e:b0:4b: 5c:0b:d1:a9:03:ba:fd:22:f5:8f:88:ba:04:0f:f7: c6:63:a3:3b:a2:bf:7e:fb:2f:34:7b:a8:03:5d:20: 67:90:bb:00:08:fc:ca:65:40:20:54:32:72:f5:d6: 20:35:0b:06:2e:ff:ad:af:3b:fa:40:47:dd:7c:77: 55:ee:de:8c:7e:14:27:96:63:65:ad:72:8d:31:78: cb:35:25:5f:85:c4:c8:00:d9:1c:bd:13:3f:46:bd: 1f:f9:97:1a:00:64:fc:ee:1e:c6:1e:7b:67:74:f8: de:32:df:28:47:de:e5:e9:69:d3:03:b4:69:ec:c0: e7:95:3a:7d:17:1a:e4:41:a8:d6:8a:79:c0:af:a8: e1:d9:c5:33:7b:66:39:9b:18:1d:b5:a2:7c:f4:d5: ba:ad:ef:ea:04:9c:76:14:94:43:b0:65:b6:3c:fb: 8d:4a:a0:05:7a:fe:c4:03:94:d8:a4:93:21:7b:54: b5:b9:47:3a:4f:0f:68:70:77:e5:4b:d8:ee:43:27: 44:97:ce:63:56:2e:04:d5:16:e2:f1:02:e2:35:99: e1:72:57:5a:ad:f5:4b:d4:a3:93:fc:25:7f:e9:70: ef:75:f0:d4:6e:3c:29:d4:66:2d:d2:31:2e:a5:ea: af:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E8:A5:3F:74:C8:6C:7D:B0:D8:9A:A1:9D:A0:C2:72:52:47:FA:D7 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000:c000::/48 Signature Algorithm: sha256WithRSAEncryption 7d:1c:57:30:4a:05:55:ef:68:2d:bc:3e:13:5c:f3:14:0a:8b: 57:3a:37:c2:37:da:e7:d2:95:ff:f1:b4:c4:ac:e1:a7:3b:9e: 4d:8a:19:10:0f:d8:ff:52:54:ee:e6:4a:a8:f8:a2:ed:b3:f8: dd:37:af:f3:f4:08:60:c8:32:46:5f:b7:63:59:a5:eb:06:43: 4b:e0:44:8a:8d:d8:23:06:ae:17:c1:f4:15:16:fb:8b:0d:16: 30:37:c9:f5:eb:e4:0b:d3:8a:d9:c7:68:2a:ed:63:fd:81:33: cd:ec:b0:e5:2d:d3:f4:1e:29:2b:c6:32:e6:20:5d:f2:05:9f: f9:37:0e:98:c5:43:72:c2:f2:b9:8f:b0:fb:00:89:08:7f:df: e7:95:38:60:ce:3d:e2:ce:8d:04:17:c6:8a:11:d3:13:a1:78: 8a:bb:69:9f:03:4e:7e:a3:74:a9:d2:64:6b:1f:cc:51:38:f0: 99:2f:a0:0f:5b:0d:77:46:4d:88:95:00:4d:cd:eb:5e:eb:cc: 3d:d6:c5:0a:73:66:81:b4:56:e2:ef:8f:4a:12:21:18:38:ed: c1:fb:e2:a4:4d:8f:87:97:d1:44:39:76:73:73:4b:af:5f:69: 0e:fe:7a:e0:ba:e1:fd:6b:1c:69:d4:c5:e8:02:8c:65:cb:c8: 84:03:cf:70 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGfLwjuvbO6/A91f1fqPMsvZDiPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzExMTkxMjU1MDBaFw0yNDExMTcxMzAwMDBaMDMxMTAvBgNV BAMTKDgxRThBNTNGNzRDODZDN0RCMEQ4OUFBMTlEQTBDMjcyNTI0N0ZBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgWM6eQ8CM1Xm6rT6wS1wL0akD uv0i9Y+IugQP98Zjozuiv377LzR7qANdIGeQuwAI/MplQCBUMnL11iA1CwYu/62v O/pAR918d1Xu3ox+FCeWY2Wtco0xeMs1JV+FxMgA2Ry9Ez9GvR/5lxoAZPzuHsYe e2d0+N4y3yhH3uXpadMDtGnswOeVOn0XGuRBqNaKecCvqOHZxTN7ZjmbGB21onz0 1bqt7+oEnHYUlEOwZbY8+41KoAV6/sQDlNikkyF7VLW5RzpPD2hwd+VL2O5DJ0SX zmNWLgTVFuLxAuI1meFyV1qt9UvUo5P8JX/pcO918NRuPCnUZi3SMS6l6q9BAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUgeilP3TIbH2w2JqhnaDCclJH+tcwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhNjMzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATA AMAAMA0GCSqGSIb3DQEBCwUAA4IBAQB9HFcwSgVV72gtvD4TXPMUCotXOjfCN9rn 0pX/8bTErOGnO55NihkQD9j/UlTu5kqo+KLts/jdN6/z9AhgyDJGX7djWaXrBkNL 4ESKjdgjBq4XwfQVFvuLDRYwN8n16+QL04rZx2gq7WP9gTPN7LDlLdP0HikrxjLm IF3yBZ/5Nw6YxUNywvK5j7D7AIkIf9/nlThgzj3izo0EF8aKEdMToXiKu2mfA05+ o3Sp0mRrH8xROPCZL6APWw13Rk2IlQBNzete68w91sUKc2aBtFbi749KEiEYOO3B ++KkTY+Hl9FEOXZzc0uvX2kO/nrguuH9axxp1MXoAoxly8iEA89w -----END CERTIFICATE-----Generated at Wed May 1 18:10:56 2024 by rpki-client on console-ams.rpki-client.org