$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/323430343a366434303a3a2f33322d3332203d3e20313338383130.roa File: 323430343a366434303a3a2f33322d3332203d3e20313338383130.roa (raw, json) Hash identifier: qtxNos309BTuvJdf/QylmBTCJa0j3Kyz5OMrU2YifdY= Subject key identifier: 50:8C:51:3D:E9:97:2D:4C:04:AF:50:C3:AD:F4:0D:0D:C4:DF:80:9C Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 5F26EB3ECA3D960DA589F952030A517C395A01F2 Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/323430343a366434303a3a2f33322d3332203d3e20313338383130.roa Signing time: Mon 31 Jul 2023 00:08:14 +0000 ROA not before: Mon 31 Jul 2023 00:03:14 +0000 ROA not after: Mon 29 Jul 2024 00:08:14 +0000 asID: 138810 IP address blocks: 2404:6d40::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 14:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:26:eb:3e:ca:3d:96:0d:a5:89:f9:52:03:0a:51:7c:39:5a:01:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Jul 31 00:03:14 2023 GMT Not After : Jul 29 00:08:14 2024 GMT Subject: CN=508C513DE9972D4C04AF50C3ADF40D0DC4DF809C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:36:24:ec:ed:15:87:2e:a3:11:3e:6e:81:5b: a3:71:de:f3:b7:c6:96:d3:ca:ef:44:49:66:57:11: f5:05:81:57:6f:e4:37:8a:bc:ee:65:3d:e5:3b:41: 8c:8d:83:86:da:df:75:5b:16:08:d4:e6:03:ef:5e: c1:b3:7f:5c:bd:58:f6:98:b5:4a:64:ac:92:6b:6a: 4a:de:33:93:31:49:12:eb:62:d8:cd:50:49:1d:0b: 5a:f6:f8:ef:2c:6d:96:33:bc:24:0b:94:34:ed:d9: bc:7c:b3:24:fa:b1:f3:69:a2:46:7a:51:2b:34:15: 1e:c0:3b:86:e8:f2:f9:4d:85:79:52:2d:93:a5:7b: 2d:c2:0a:74:98:2a:0d:44:87:a1:f7:0c:16:39:65: a7:32:ab:c3:1f:20:3f:6a:94:1c:45:ad:ef:27:f7: a6:e6:8f:b4:48:9f:1d:48:42:62:b2:7f:2b:c2:90: 50:7a:10:99:f9:2a:52:89:1b:e0:6d:1f:46:83:7c: 7b:cf:43:a3:c6:38:c9:41:e6:a9:a9:3e:f0:8a:22: 1a:3e:b6:23:bf:84:9c:ba:8e:dc:e8:da:42:e2:c3: 34:45:1c:df:2d:87:4e:3d:77:81:5f:c4:64:bc:39: 4a:c1:38:0e:34:27:0c:ac:87:9f:41:9e:d8:17:31: 7b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8C:51:3D:E9:97:2D:4C:04:AF:50:C3:AD:F4:0D:0D:C4:DF:80:9C X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/323430343a366434303a3a2f33322d3332203d3e20313338383130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 88:00:f8:5a:10:3f:5d:da:12:7b:9b:ca:e2:cf:98:66:5d:24: b8:71:d1:43:0a:c6:a2:6a:2a:05:ee:01:1a:25:3b:5a:94:10: a2:5f:5c:e5:ac:35:93:2a:d1:08:f7:79:92:9f:87:e1:7e:2c: f1:02:aa:00:fb:60:d0:51:64:6e:a1:8c:50:85:d2:3b:92:87: 88:e7:e8:77:c5:e2:52:01:b2:98:e8:85:16:ee:de:aa:cb:a2: cb:9d:ab:b2:54:2d:fd:2c:68:57:22:ba:e6:ff:34:a3:f6:ee: 63:69:85:7f:a1:d5:e1:45:d7:fb:a4:22:81:6d:a9:d1:1d:ce: 2a:2d:ab:f7:66:f7:21:6c:db:17:81:57:02:2b:b5:79:08:f0: 38:5c:b2:47:6c:9a:e0:de:9c:c7:17:ad:41:5f:2e:16:83:da: 0c:46:de:8a:a9:de:73:ec:3f:56:04:fc:bd:0c:b5:07:8a:31: 5c:ea:a8:02:f1:8b:0e:d3:01:19:ee:6f:00:c2:5f:b6:1f:6e: a0:a8:61:ab:49:36:35:1f:f0:4d:ad:0f:fc:0e:4e:3a:3f:ab: e2:2a:13:b6:67:25:5f:b8:2d:ab:cb:ec:e1:4e:3d:c2:48:23: bf:4b:b3:15:a2:86:6b:08:63:c6:3c:6a:88:e7:d4:69:1d:9f: ac:5a:60:e0 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUXybrPso9lg2liflSAwpRfDlaAfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yMzA3MzEwMDAzMTRaFw0yNDA3MjkwMDA4MTRaMDMxMTAvBgNV BAMTKDUwOEM1MTNERTk5NzJENEMwNEFGNTBDM0FERjQwRDBEQzRERjgwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYNiTs7RWHLqMRPm6BW6Nx3vO3 xpbTyu9ESWZXEfUFgVdv5DeKvO5lPeU7QYyNg4ba33VbFgjU5gPvXsGzf1y9WPaY tUpkrJJrakreM5MxSRLrYtjNUEkdC1r2+O8sbZYzvCQLlDTt2bx8syT6sfNpokZ6 USs0FR7AO4bo8vlNhXlSLZOley3CCnSYKg1Eh6H3DBY5Zacyq8MfID9qlBxFre8n 96bmj7RInx1IQmKyfyvCkFB6EJn5KlKJG+BtH0aDfHvPQ6PGOMlB5qmpPvCKIho+ tiO/hJy6jtzo2kLiwzRFHN8th049d4FfxGS8OUrBOA40Jwysh59BntgXMXvDAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUUIxRPemXLUwEr1DDrfQNDcTfgJwwHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiMzZlODhkLWQ1NzMtNGNiYi1i NDYwLWEwYjk2OWFhODRkNS8wLzMyMzQzMDM0M2EzNjY0MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzODM4MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEbUAwDQYJKoZI hvcNAQELBQADggEBAIgA+FoQP13aEnubyuLPmGZdJLhx0UMKxqJqKgXuARolO1qU EKJfXOWsNZMq0Qj3eZKfh+F+LPECqgD7YNBRZG6hjFCF0juSh4jn6HfF4lIBspjo hRbu3qrLosudq7JULf0saFciuub/NKP27mNphX+h1eFF1/ukIoFtqdEdziotq/dm 9yFs2xeBVwIrtXkI8DhcskdsmuDenMcXrUFfLhaD2gxG3oqp3nPsP1YE/L0MtQeK MVzqqALxiw7TARnubwDCX7YfbqCoYatJNjUf8E2tD/wOTjo/q+IqE7ZnJV+4LavL 7OFOPcJII79LsxWihmsIY8Y8aojn1Gkdn6xaYOA= -----END CERTIFICATE-----Generated at Thu Apr 18 14:06:40 2024 by rpki-client on console-fra.rpki-client.org