$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/323430343a613163303a3a2f33322d3332203d3e203535363939.roa File: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (raw, json) Hash identifier: c20EIAXMfABQNYynFBZ6UgkI4TJagUMvRavvpLmYLLk= Subject key identifier: 27:99:38:14:15:06:1A:AA:E0:2C:49:11:38:88:97:59:2C:55:9B:F6 Certificate issuer: /CN=1976DD7D4FBDFBEB355F0B96690613959E106872 Certificate serial: 5242BEADC10483B6978E4F90CA861408C26CAA0B Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/323430343a613163303a3a2f33322d3332203d3e203535363939.roa Signing time: Thu 14 Sep 2023 12:00:01 +0000 ROA not before: Thu 14 Sep 2023 11:55:01 +0000 ROA not after: Thu 12 Sep 2024 12:00:01 +0000 asID: 55699 IP address blocks: 2404:a1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 09:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:42:be:ad:c1:04:83:b6:97:8e:4f:90:ca:86:14:08:c2:6c:aa:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872 Validity Not Before: Sep 14 11:55:01 2023 GMT Not After : Sep 12 12:00:01 2024 GMT Subject: CN=2799381415061AAAE02C4911388897592C559BF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ce:f5:4b:1b:ab:9e:dc:66:89:68:fa:8f:05: 35:36:1d:2e:6e:26:b5:b7:28:cd:da:86:03:50:94: 2e:9f:b7:20:b3:dc:4d:d6:6f:81:72:02:e6:46:80: d4:7c:15:9e:07:86:ff:e3:d7:a7:ad:a1:dd:b3:3a: 8b:10:9a:8a:5e:39:b5:1a:1f:7a:e1:17:0d:f6:b3: c8:4e:d2:a8:48:af:17:93:34:cd:1c:44:c6:4a:a2: 3c:69:40:a5:e8:8e:c5:e2:73:12:d1:b8:78:d2:11: 1e:8f:ce:d0:8d:3e:99:b3:18:42:39:ca:12:f2:c9: c9:8f:3e:4e:c6:6d:1f:68:01:3f:74:04:66:bf:c1: 38:da:a5:f2:c9:d0:90:ab:89:dd:d2:6c:d1:f8:61: 4a:23:fc:d6:58:96:47:a0:26:83:17:9e:26:8b:6e: 02:31:a6:89:1c:08:f3:ae:e7:ab:e5:d4:7b:77:ba: 0b:f0:7d:cb:e2:34:a1:9d:30:56:89:d1:14:01:4c: 0a:11:47:37:5e:6f:d9:be:03:16:1c:65:e5:27:b9: f7:20:19:32:49:d9:e2:6c:e9:d1:17:30:9e:1a:79: 1e:ed:a4:37:b8:ab:01:07:98:c3:e5:52:34:70:81: 1b:36:53:0f:ae:c1:47:2b:fa:3d:5b:b0:c3:be:15: 4d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:99:38:14:15:06:1A:AA:E0:2C:49:11:38:88:97:59:2C:55:9B:F6 X509v3 Authority Key Identifier: keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/323430343a613163303a3a2f33322d3332203d3e203535363939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:a1c0::/32 Signature Algorithm: sha256WithRSAEncryption cd:ed:34:83:de:60:29:06:b6:e6:b3:ff:71:24:18:fa:51:f2: 6a:8e:13:99:f3:42:eb:6b:ec:7b:43:55:cd:6d:f5:8e:19:77: 49:34:16:4b:2a:b3:97:fb:e4:09:78:13:bc:d6:1a:b5:55:a1: 8c:ba:3a:36:03:ce:aa:ab:ad:91:47:fa:a5:d5:b8:dd:1f:84: 06:bb:98:91:8a:10:39:6c:43:ef:e0:f1:e4:aa:42:c8:93:b6: d8:67:52:36:9b:57:4f:2f:fb:f9:05:90:16:da:0a:9c:7c:f8: 78:66:0a:39:9d:4e:1f:7b:ac:35:51:73:79:93:45:67:c5:d8: bc:c4:64:d5:9b:22:05:4f:35:22:57:ff:f2:c7:fd:9a:33:7b: c4:80:35:b1:20:1d:6d:c3:ad:b3:ee:e0:97:f3:1d:3b:f8:1a: 7c:f5:de:90:68:93:d3:54:7d:85:b4:68:97:74:89:21:0e:d6: ae:b4:6f:85:84:da:9e:a5:47:f8:69:c4:01:26:bd:e9:07:b0: 3d:a9:97:57:0a:7f:5e:27:aa:c9:b1:96:e4:f8:ac:6b:1e:37: 11:88:ad:48:8c:87:c0:d4:42:1a:90:c4:22:63:f1:73:16:79: 00:86:d4:48:97:1b:cb:07:16:85:49:31:db:0e:e9:d9:d0:36: 31:24:82:ec -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUUkK+rcEEg7aXjk+QyoYUCMJsqgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5 RTEwNjg3MjAeFw0yMzA5MTQxMTU1MDFaFw0yNDA5MTIxMjAwMDFaMDMxMTAvBgNV BAMTKDI3OTkzODE0MTUwNjFBQUFFMDJDNDkxMTM4ODg5NzU5MkM1NTlCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzvVLG6ue3GaJaPqPBTU2HS5u JrW3KM3ahgNQlC6ftyCz3E3Wb4FyAuZGgNR8FZ4Hhv/j16etod2zOosQmopeObUa H3rhFw32s8hO0qhIrxeTNM0cRMZKojxpQKXojsXicxLRuHjSER6PztCNPpmzGEI5 yhLyycmPPk7GbR9oAT90BGa/wTjapfLJ0JCrid3SbNH4YUoj/NZYlkegJoMXniaL bgIxpokcCPOu56vl1Ht3ugvwfcviNKGdMFaJ0RQBTAoRRzdeb9m+AxYcZeUnufcg GTJJ2eJs6dEXMJ4aeR7tpDe4qwEHmMPlUjRwgRs2Uw+uwUcr+j1bsMO+FU2xAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUJ5k4FBUGGqrgLEkROIiXWSxVm/YwHwYDVR0j BBgwFoAUGXbdfU+9++s1XwuWaQYTlZ4QaHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTk5ZWQ5Ni1kNDA4LTQ0MTgtYjgyYS01ZDVhOGU2NjU3ZjMvMC8xOTc2REQ3RDRG QkRGQkVCMzU1RjBCOTY2OTA2MTM5NTlFMTA2ODcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5RTEw Njg3Mi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1OTllZDk2LWQ0MDgtNDQxOC1i ODJhLTVkNWE4ZTY2NTdmMy8wLzMyMzQzMDM0M2E2MTMxNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM1MzUzNjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBKHAMA0GCSqGSIb3 DQEBCwUAA4IBAQDN7TSD3mApBrbms/9xJBj6UfJqjhOZ80Lra+x7Q1XNbfWOGXdJ NBZLKrOX++QJeBO81hq1VaGMujo2A86qq62RR/ql1bjdH4QGu5iRihA5bEPv4PHk qkLIk7bYZ1I2m1dPL/v5BZAW2gqcfPh4Zgo5nU4fe6w1UXN5k0Vnxdi8xGTVmyIF TzUiV//yx/2aM3vEgDWxIB1tw62z7uCX8x07+Bp89d6QaJPTVH2FtGiXdIkhDtau tG+FhNqepUf4acQBJr3pB7A9qZdXCn9eJ6rJsZbk+KxrHjcRiK1IjIfA1EIakMQi Y/FzFnkAhtRIlxvLBxaFSTHbDunZ0DYxJILs -----END CERTIFICATE-----Generated at Tue Apr 23 18:28:04 2024 by rpki-client on console-fra.rpki-client.org