$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa File: 323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa (raw, json) Hash identifier: QiuFYhoiuRJEQwuc51RaCNhdxbqVH8c2Y8pffOhxxRk= Subject key identifier: 02:C7:6D:B1:3A:5D:21:82:A7:5E:B5:78:B3:1F:62:5A:9A:C3:0C:29 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 38BC6585704B2BBF5222A217490544EC111EA586 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa Signing time: Sun 29 Oct 2023 16:00:00 +0000 ROA not before: Sun 29 Oct 2023 15:55:00 +0000 ROA not after: Sun 27 Oct 2024 16:00:00 +0000 asID: 17727 IP address blocks: 2404:c000:c003::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 19:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:bc:65:85:70:4b:2b:bf:52:22:a2:17:49:05:44:ec:11:1e:a5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 29 15:55:00 2023 GMT Not After : Oct 27 16:00:00 2024 GMT Subject: CN=02C76DB13A5D2182A75EB578B31F625A9AC30C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:72:3c:32:b2:fb:26:c6:b6:7d:e1:f5:68: 32:4c:33:50:89:35:8c:8c:d7:ec:8d:98:85:1d:d5: 91:8a:37:02:5b:28:5d:f0:cd:72:82:64:c8:6f:2e: 51:5b:7e:bb:21:5b:02:3d:a7:44:fb:15:0f:73:0a: 13:46:c4:d6:dd:e3:24:ec:e1:0d:fa:ef:0b:b4:c9: f0:03:22:78:3e:90:22:a1:9c:fb:16:8e:ae:26:79: 36:58:a1:2b:32:ee:78:80:84:b3:9a:0f:47:05:ab: 81:45:05:d3:b3:7b:01:b0:59:6f:72:01:8a:3b:68: 33:9b:05:ba:ce:1d:00:5b:52:dd:41:0e:b6:2c:e3: 26:b6:f5:3a:0a:f2:e4:cf:03:8c:2f:40:78:a4:22: 2f:31:65:61:36:15:aa:c5:d5:75:34:56:52:5d:56: f2:7f:ef:b2:bb:39:0e:70:6b:1c:75:d4:ef:2c:b1: 49:de:3f:d3:7d:e4:dc:7f:a8:dc:4d:32:6a:3c:de: 93:ed:8d:07:6f:a7:91:9c:c1:dd:dd:75:15:7c:68: ac:ad:36:d2:20:8a:82:9f:54:53:5e:69:d6:03:db: a7:57:73:25:5c:ce:f0:8b:1b:ea:fa:83:07:32:b4: 7e:f4:f0:43:60:6f:1e:fc:75:22:49:f0:79:ac:a2: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C7:6D:B1:3A:5D:21:82:A7:5E:B5:78:B3:1F:62:5A:9A:C3:0C:29 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000:c003::/48 Signature Algorithm: sha256WithRSAEncryption 35:1b:38:be:a4:af:c3:7f:b4:31:04:ac:d5:6b:04:3d:de:a3: 77:25:fb:43:a3:2c:8b:4e:b0:c8:23:6e:37:c6:55:4a:c4:09: f3:e4:bb:db:3e:cf:c3:2d:ed:76:a1:3a:0a:1c:1f:35:bc:33: 4d:41:05:ee:28:b0:15:05:d7:10:43:68:01:65:63:75:95:03: 8e:f0:0f:82:47:2c:0d:bb:18:c1:7e:e1:33:ec:1d:c1:45:2a: 51:40:c4:7f:01:13:eb:30:1c:15:a5:43:b2:85:ce:4d:74:bd: 6a:6f:65:0b:fc:2f:ad:14:2b:37:9a:b9:39:ed:31:97:95:a8: 7d:84:92:47:27:cb:a7:53:3d:f8:7f:0d:f2:24:93:d3:67:09: de:48:c7:6a:78:f3:70:75:f0:83:a5:66:0d:ce:c9:50:a5:e4: 35:28:3c:56:df:39:f8:72:6e:0b:48:0f:ae:bf:f6:73:0d:fd: db:03:23:fe:90:b2:eb:49:7f:e1:88:fb:60:09:58:e1:fc:f4: 21:08:33:99:e6:40:ba:05:d9:f2:54:0e:29:10:10:f3:26:df: 27:da:39:31:92:79:36:75:b2:b9:4a:94:3b:46:f1:71:10:15: 4b:c8:36:93:f1:72:a2:86:ac:6f:e6:56:83:b3:0c:43:5d:40: 55:f2:6c:42 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOLxlhXBLK79SIqIXSQVE7BEepYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzEwMjkxNTU1MDBaFw0yNDEwMjcxNjAwMDBaMDMxMTAvBgNV BAMTKDAyQzc2REIxM0E1RDIxODJBNzVFQjU3OEIzMUY2MjVBOUFDMzBDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzS3I8MrL7Jsa2feH1aDJMM1CJ NYyM1+yNmIUd1ZGKNwJbKF3wzXKCZMhvLlFbfrshWwI9p0T7FQ9zChNGxNbd4yTs 4Q367wu0yfADIng+kCKhnPsWjq4meTZYoSsy7niAhLOaD0cFq4FFBdOzewGwWW9y AYo7aDObBbrOHQBbUt1BDrYs4ya29ToK8uTPA4wvQHikIi8xZWE2FarF1XU0VlJd VvJ/77K7OQ5waxx11O8ssUneP9N95Nx/qNxNMmo83pPtjQdvp5Gcwd3ddRV8aKyt NtIgioKfVFNeadYD26dXcyVczvCLG+r6gwcytH708ENgbx78dSJJ8HmsopzrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUAsdtsTpdIYKnXrV4sx9iWprDDCkwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhNjMzMDMwMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATA AMADMA0GCSqGSIb3DQEBCwUAA4IBAQA1Gzi+pK/Df7QxBKzVawQ93qN3JftDoyyL TrDII243xlVKxAnz5LvbPs/DLe12oToKHB81vDNNQQXuKLAVBdcQQ2gBZWN1lQOO 8A+CRywNuxjBfuEz7B3BRSpRQMR/ARPrMBwVpUOyhc5NdL1qb2UL/C+tFCs3mrk5 7TGXlah9hJJHJ8unUz34fw3yJJPTZwneSMdqePNwdfCDpWYNzslQpeQ1KDxW3zn4 cm4LSA+uv/ZzDf3bAyP+kLLrSX/hiPtgCVjh/PQhCDOZ5kC6BdnyVA4pEBDzJt8n 2jkxknk2dbK5SpQ7RvFxEBVLyDaT8XKihqxv5laDswxDXUBV8mxC -----END CERTIFICATE-----Generated at Wed May 1 19:11:08 2024 by rpki-client on console-fra.rpki-client.org