$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a363030663a3a2f34382d3438203d3e20313336303739.roa File: 323430353a326363303a363030663a3a2f34382d3438203d3e20313336303739.roa (raw, json) Hash identifier: I964VwwnB7pPNHUmHcIo8CkGdIsoGyVjEhbZZs/LwJs= Subject key identifier: 43:B8:C1:2F:FC:12:AE:BE:0D:6C:C0:F0:B3:AC:B3:9D:57:C9:D0:9E Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Certificate serial: 17A05DFD38DDE1A7CA6F2A0B0243D5DED5D458F7 Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a363030663a3a2f34382d3438203d3e20313336303739.roa Signing time: Mon 31 Jul 2023 00:04:00 +0000 ROA not before: Sun 30 Jul 2023 23:59:00 +0000 ROA not after: Mon 29 Jul 2024 00:04:00 +0000 asID: 136079 IP address blocks: 2405:2cc0:600f::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 18:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a0:5d:fd:38:dd:e1:a7:ca:6f:2a:0b:02:43:d5:de:d5:d4:58:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Validity Not Before: Jul 30 23:59:00 2023 GMT Not After : Jul 29 00:04:00 2024 GMT Subject: CN=43B8C12FFC12AEBE0D6CC0F0B3ACB39D57C9D09E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:9b:b3:52:f3:20:62:3a:7d:1c:75:c4:82: 20:c0:35:bb:ef:4f:8e:8c:2c:f2:a3:5e:a7:79:cb: 22:ed:e9:d4:a5:a5:12:8a:2c:65:37:75:1a:6e:53: 42:3d:91:eb:a3:33:40:98:33:a0:9a:4d:1c:73:66: 63:91:97:9e:ba:85:24:9d:24:17:4c:f8:dc:cf:25: 23:76:ed:02:5f:dc:af:68:34:14:a4:90:ca:a0:5d: bc:64:12:8d:64:b7:a1:7d:ae:c1:d0:c3:9d:8e:01: 10:3c:b2:40:93:2b:e8:6c:34:86:45:58:35:47:8d: 66:95:5a:5d:85:9e:fd:6f:47:25:af:77:f5:a3:33: 63:b3:6f:3b:a7:64:ee:a5:7e:99:b2:58:66:da:61: 00:fa:36:4c:17:07:32:73:c6:45:06:e7:2c:8f:f6: e4:2c:2e:65:22:da:bc:48:58:42:b9:0f:c5:00:96: b6:af:33:53:68:97:81:4e:16:3d:56:0c:56:f1:e4: 3b:3d:26:58:73:d2:6e:94:43:6c:a2:cc:69:73:a1: ef:6c:0e:16:b3:84:12:52:60:a5:a5:f4:26:77:2c: 89:e6:fe:5b:92:b9:86:7f:14:6d:b6:ed:b4:78:e4: ed:82:56:c9:81:de:36:61:2c:69:ab:1b:b6:53:de: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B8:C1:2F:FC:12:AE:BE:0D:6C:C0:F0:B3:AC:B3:9D:57:C9:D0:9E X509v3 Authority Key Identifier: keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a363030663a3a2f34382d3438203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2cc0:600f::/48 Signature Algorithm: sha256WithRSAEncryption 1b:2f:44:dd:9d:8b:37:82:24:b5:27:55:7a:4b:77:03:40:11: dc:54:22:b1:e0:b4:c4:45:54:62:24:b7:7f:8e:32:b2:28:54: 45:fe:79:61:9d:ca:14:78:91:a5:14:33:9e:43:03:c0:c2:e6: 15:aa:d5:f8:79:69:89:f0:c3:0f:9c:61:84:02:98:1d:41:c1: 99:fc:26:e9:6e:6e:af:3d:cf:dd:88:73:34:94:3d:68:bd:57: f3:33:90:ff:d6:6f:a3:9b:86:ab:88:e6:98:27:5f:91:c5:00: 50:8b:dc:37:c5:44:9d:d3:c1:c1:dc:a3:e7:3a:ca:dd:bd:12: 51:f4:e7:64:ff:9a:39:0f:ea:9f:b8:16:4b:1c:a8:e3:e3:e1: 12:01:86:79:fe:e0:ea:04:84:2b:d9:e2:4d:9f:04:5a:8b:3a: 1e:ef:f1:25:db:30:44:c1:e8:9a:4c:a1:9e:c0:ae:46:4f:98: b1:db:e6:fa:a8:23:e8:72:a8:a5:53:33:b9:ce:53:79:83:c9: ac:dd:ed:59:20:8d:db:a2:b8:ee:e6:1b:f0:96:b8:48:ee:04: 7f:93:31:6b:19:24:1d:b1:54:24:0d:cd:34:f3:98:f1:d9:0e: 9e:17:93:8a:e6:77:56:56:b0:18:3f:4d:6b:c7:ba:6d:3c:ca: 53:a8:05:32 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUF6Bd/Tjd4afKbyoLAkPV3tXUWPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB NzJCNTgzNzAeFw0yMzA3MzAyMzU5MDBaFw0yNDA3MjkwMDA0MDBaMDMxMTAvBgNV BAMTKDQzQjhDMTJGRkMxMkFFQkUwRDZDQzBGMEIzQUNCMzlENTdDOUQwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDU5uzUvMgYjp9HHXEgiDANbvv T46MLPKjXqd5yyLt6dSlpRKKLGU3dRpuU0I9keujM0CYM6CaTRxzZmORl566hSSd JBdM+NzPJSN27QJf3K9oNBSkkMqgXbxkEo1kt6F9rsHQw52OARA8skCTK+hsNIZF WDVHjWaVWl2Fnv1vRyWvd/WjM2OzbzunZO6lfpmyWGbaYQD6NkwXBzJzxkUG5yyP 9uQsLmUi2rxIWEK5D8UAlravM1Nol4FOFj1WDFbx5Ds9Jlhz0m6UQ2yizGlzoe9s DhazhBJSYKWl9CZ3LInm/luSuYZ/FG227bR45O2CVsmB3jZhLGmrG7ZT3ky/AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUQ7jBL/wSrr4NbMDws6yznVfJ0J4wHwYDVR0j BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC NTgzNy5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMyMzQzMDM1M2EzMjYzNjMzMDNhMzYzMDMwNjYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM3Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BSzAYA8wDQYJKoZIhvcNAQELBQADggEBABsvRN2dizeCJLUnVXpLdwNAEdxUIrHg tMRFVGIkt3+OMrIoVEX+eWGdyhR4kaUUM55DA8DC5hWq1fh5aYnwww+cYYQCmB1B wZn8Julubq89z92IczSUPWi9V/MzkP/Wb6ObhquI5pgnX5HFAFCL3DfFRJ3TwcHc o+c6yt29ElH052T/mjkP6p+4FkscqOPj4RIBhnn+4OoEhCvZ4k2fBFqLOh7v8SXb METB6JpMoZ7ArkZPmLHb5vqoI+hyqKVTM7nOU3mDyazd7VkgjduiuO7mG/CWuEju BH+TMWsZJB2xVCQNzTTzmPHZDp4Xk4rmd1ZWsBg/TWvHum08ylOoBTI= -----END CERTIFICATE-----Generated at Tue Apr 23 18:36:12 2024 by rpki-client on console-ams.rpki-client.org