$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030323a3a2f34372d3437203d3e203137373237.roa File: 323430343a633030303a633030323a3a2f34372d3437203d3e203137373237.roa (raw, json) Hash identifier: Xj3vpHX702Pba3pITwpYZwaPBRxQsYRKJwpNczTT0xM= Subject key identifier: 23:37:68:BD:E1:03:37:8B:71:8B:95:88:2E:0A:CC:0F:F0:4E:98:C8 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 6844C5376CC4521E3628649B9963907D19F24D5C Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030323a3a2f34372d3437203d3e203137373237.roa Signing time: Sun 29 Oct 2023 15:00:00 +0000 ROA not before: Sun 29 Oct 2023 14:55:00 +0000 ROA not after: Sun 27 Oct 2024 15:00:00 +0000 asID: 17727 IP address blocks: 2404:c000:c002::/47 maxlen: 47 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 18:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:44:c5:37:6c:c4:52:1e:36:28:64:9b:99:63:90:7d:19:f2:4d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 29 14:55:00 2023 GMT Not After : Oct 27 15:00:00 2024 GMT Subject: CN=233768BDE103378B718B95882E0ACC0FF04E98C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:50:50:78:53:10:12:49:65:9f:bf:60:d2:db: 45:7b:f2:5d:c7:89:8d:4c:65:56:81:b8:4c:c0:99: 05:bf:7b:84:95:21:45:85:0a:12:20:00:6b:87:a0: a6:ba:7f:ee:a6:e2:c7:82:76:c3:f8:88:a6:cd:02: 51:11:5d:3c:ef:78:47:da:c8:43:74:52:4f:b3:a6: 66:dd:bd:b5:12:77:76:85:f6:90:20:58:3f:16:98: e1:c2:fc:9a:56:f1:f2:b7:11:67:4a:20:14:73:99: a3:23:c3:42:2a:5b:02:9b:79:f0:8b:e2:ff:ba:31: c9:a5:12:07:31:9c:3f:34:74:3a:5e:3d:1f:c9:4b: 4d:d1:0c:db:e4:58:63:41:ad:3e:ee:99:fc:c9:da: 5d:77:e6:93:3a:b2:47:fd:99:d8:1a:bf:8b:87:22: 8d:c3:a5:53:e6:8d:39:8f:6f:23:1a:90:17:d6:d6: eb:d5:a3:e6:5c:b1:2b:e9:82:9a:2a:06:b7:93:74: 29:3b:f5:82:9e:ee:ec:f6:ff:55:78:4f:b4:7f:b9: d4:3b:96:88:39:ab:87:30:81:26:2f:79:fd:ee:7c: b4:c6:99:d5:2b:5d:e5:c2:da:5d:0a:d8:49:bd:f5: 8c:dc:2b:c0:9e:3e:74:d1:70:ed:b5:de:29:e7:69: 68:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:37:68:BD:E1:03:37:8B:71:8B:95:88:2E:0A:CC:0F:F0:4E:98:C8 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030323a3a2f34372d3437203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000:c002::/47 Signature Algorithm: sha256WithRSAEncryption 1e:da:28:c6:2b:33:24:92:6c:99:1b:7a:a7:c9:dc:7a:04:12: 5c:83:2c:83:72:7e:2b:00:ae:e9:39:7f:d9:3e:7e:f7:30:9a: 3d:4e:08:32:ae:7f:91:5b:3d:fb:cb:0c:52:39:36:8c:5f:65: ad:3f:ef:af:b8:f4:7e:9e:74:5d:53:72:ed:75:5c:52:b1:11: c7:01:8b:8d:56:3d:8e:ed:98:d9:49:ef:69:d3:60:78:8f:88: 15:66:3c:e1:cc:89:62:5a:54:40:28:66:33:86:38:f4:37:c1: 97:94:01:02:12:c7:fc:45:54:83:98:2c:6e:42:32:8f:85:71: 54:0d:d2:d2:6d:96:3b:af:17:fa:64:67:33:8f:9d:cc:89:0b: b2:11:d6:05:b5:99:a2:34:37:d5:34:d0:2b:f2:0f:c5:c4:37: 90:36:bc:62:99:6a:41:7d:84:de:30:87:a3:6e:e8:e9:4c:be: bd:d2:4e:7b:00:ab:4a:58:77:6d:3c:84:f6:f0:51:72:e4:d5: 57:ce:25:f8:44:0c:e2:98:d9:f4:28:c9:d4:40:b5:6f:6c:1b: 01:01:c5:d5:7e:e8:0e:a9:e2:f1:6e:0a:d7:0b:88:f7:5a:71: 1d:57:89:9d:79:e5:2c:76:ac:b0:89:99:8d:9d:a8:29:b1:3e: 5b:60:e4:cf -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUaETFN2zEUh42KGSbmWOQfRnyTVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzEwMjkxNDU1MDBaFw0yNDEwMjcxNTAwMDBaMDMxMTAvBgNV BAMTKDIzMzc2OEJERTEwMzM3OEI3MThCOTU4ODJFMEFDQzBGRjA0RTk4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvUFB4UxASSWWfv2DS20V78l3H iY1MZVaBuEzAmQW/e4SVIUWFChIgAGuHoKa6f+6m4seCdsP4iKbNAlERXTzveEfa yEN0Uk+zpmbdvbUSd3aF9pAgWD8WmOHC/JpW8fK3EWdKIBRzmaMjw0IqWwKbefCL 4v+6McmlEgcxnD80dDpePR/JS03RDNvkWGNBrT7umfzJ2l135pM6skf9mdgav4uH Io3DpVPmjTmPbyMakBfW1uvVo+ZcsSvpgpoqBreTdCk79YKe7uz2/1V4T7R/udQ7 log5q4cwgSYvef3ufLTGmdUrXeXC2l0K2Em99YzcK8CePnTRcO213innaWjnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUIzdoveEDN4txi5WILgrMD/BOmMgwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhNjMzMDMwMzIz YTNhMmYzNDM3MmQzNDM3MjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJATA AMACMA0GCSqGSIb3DQEBCwUAA4IBAQAe2ijGKzMkkmyZG3qnydx6BBJcgyyDcn4r AK7pOX/ZPn73MJo9Tggyrn+RWz37ywxSOTaMX2WtP++vuPR+nnRdU3LtdVxSsRHH AYuNVj2O7ZjZSe9p02B4j4gVZjzhzIliWlRAKGYzhjj0N8GXlAECEsf8RVSDmCxu QjKPhXFUDdLSbZY7rxf6ZGczj53MiQuyEdYFtZmiNDfVNNAr8g/FxDeQNrximWpB fYTeMIejbujpTL690k57AKtKWHdtPIT28FFy5NVXziX4RAzimNn0KMnUQLVvbBsB AcXVfugOqeLxbgrXC4j3WnEdV4mdeeUsdqywiZmNnagpsT5bYOTP -----END CERTIFICATE-----Generated at Wed May 1 18:10:56 2024 by rpki-client on console-ams.rpki-client.org