$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a3a2f33322d3332203d3e20313331373137.roa File: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (raw, json) Hash identifier: n+sWaLQ7QvZWP5713NKoQOGIQEnxS+/D0IsByO3BXCI= Subject key identifier: DC:A9:54:9B:74:C7:89:73:F1:7E:56:1C:4B:5A:3F:9C:CC:F9:30:22 Certificate issuer: /CN=882209E37356E0512FBE4E81B00E4F2481865087 Certificate serial: 4DE063E160B6E1645B429395C0449A2A735D7DF6 Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a3a2f33322d3332203d3e20313331373137.roa Signing time: Mon 31 Jul 2023 00:03:12 +0000 ROA not before: Sun 30 Jul 2023 23:58:12 +0000 ROA not after: Mon 29 Jul 2024 00:03:12 +0000 asID: 131717 IP address blocks: 2401:10c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 22:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e0:63:e1:60:b6:e1:64:5b:42:93:95:c0:44:9a:2a:73:5d:7d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087 Validity Not Before: Jul 30 23:58:12 2023 GMT Not After : Jul 29 00:03:12 2024 GMT Subject: CN=DCA9549B74C78973F17E561C4B5A3F9CCCF93022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:77:5d:ca:b6:b0:0a:58:91:52:24:38:e3:31: 8b:cb:6f:97:3c:92:90:4e:f9:c4:48:b9:ba:58:29: 4b:65:fa:45:45:fc:0c:69:59:09:47:3e:6c:a5:5f: 68:9c:46:5f:96:97:58:9e:3b:ea:0e:9f:f9:1b:db: a3:4d:f5:38:b5:bb:1c:48:fa:ef:c3:71:8c:b6:cb: fe:01:c6:a0:17:7c:ff:b6:bd:e8:5c:56:cf:92:3e: da:76:26:89:de:54:a0:72:af:75:55:b6:09:98:d2: 28:fc:72:e7:3e:98:4b:ff:97:69:cd:85:1b:0c:12: 4a:9c:d1:08:cc:e2:5d:64:e4:13:ea:76:b5:da:ca: 32:ad:48:34:d2:bc:86:76:fd:21:cc:6e:bf:12:53: af:19:7d:f4:fe:96:2a:c9:cf:69:58:59:b1:9b:ec: e5:4b:20:21:b9:b6:df:1b:dd:56:17:f6:20:cb:08: fe:d9:73:bb:1e:54:b2:db:db:70:24:2d:bd:04:a6: 9e:dd:0a:8e:60:26:27:4e:bc:c6:30:02:ce:53:c1: 99:d2:fc:68:7c:57:b2:c6:48:7f:ff:68:94:a0:84: 39:99:4b:e6:ff:86:d6:7b:27:92:eb:e9:61:56:03: 87:f3:69:cf:1e:95:b7:ae:72:1d:c3:d2:f2:96:63: 94:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A9:54:9B:74:C7:89:73:F1:7E:56:1C:4B:5A:3F:9C:CC:F9:30:22 X509v3 Authority Key Identifier: keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a3a2f33322d3332203d3e20313331373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:10c0::/32 Signature Algorithm: sha256WithRSAEncryption 23:10:36:c5:82:01:2b:a8:d1:70:30:7a:08:e9:7b:48:3e:f4: 7d:0f:56:bf:af:75:04:b9:e1:92:c1:5a:82:6c:92:20:d6:86: 8a:4d:08:1f:d0:64:ed:36:e6:de:65:b4:4e:0a:9d:c2:f9:8a: 9e:9e:dc:c9:00:62:f7:be:cd:00:34:79:c3:c0:66:d2:12:30: 41:55:f3:98:07:ab:9f:6d:66:60:ea:e8:7f:cb:8a:81:1e:8a: 08:fc:78:7d:03:f2:c2:78:96:7e:e7:6f:3d:44:e9:9c:c0:f5: 17:59:a5:9b:a7:51:ed:ea:73:dd:74:61:15:ba:ec:5a:5a:4e: 85:a6:19:82:f1:cb:fc:14:a3:d6:e1:e9:8e:eb:75:c1:c3:c2: 14:09:29:e0:87:3d:a7:a1:23:83:39:3d:49:55:d8:4e:cc:35: dc:81:ef:34:c0:b5:1d:b2:65:f5:5e:3e:51:d1:fe:10:76:29: a7:86:f0:b2:c2:19:f6:35:62:eb:9f:8c:9b:25:b9:08:4b:59: e7:85:57:bd:2c:6d:c4:74:b8:fc:36:0b:80:65:69:36:0a:42: d5:80:ce:b1:6b:12:31:0b:b6:ef:de:95:a5:cf:0e:a9:05:cf: a5:1d:ec:94:2a:b2:52:7a:55:bd:4c:f6:58:ae:1d:7d:eb:e5: 5b:1d:e2:4b -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUTeBj4WC24WRbQpOVwESaKnNdffYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4 MTg2NTA4NzAeFw0yMzA3MzAyMzU4MTJaFw0yNDA3MjkwMDAzMTJaMDMxMTAvBgNV BAMTKERDQTk1NDlCNzRDNzg5NzNGMTdFNTYxQzRCNUEzRjlDQ0NGOTMwMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXd13KtrAKWJFSJDjjMYvLb5c8 kpBO+cRIubpYKUtl+kVF/AxpWQlHPmylX2icRl+Wl1ieO+oOn/kb26NN9Ti1uxxI +u/DcYy2y/4BxqAXfP+2vehcVs+SPtp2JoneVKByr3VVtgmY0ij8cuc+mEv/l2nN hRsMEkqc0QjM4l1k5BPqdrXayjKtSDTSvIZ2/SHMbr8SU68ZffT+lirJz2lYWbGb 7OVLICG5tt8b3VYX9iDLCP7Zc7seVLLb23AkLb0Epp7dCo5gJidOvMYwAs5TwZnS /Gh8V7LGSH//aJSghDmZS+b/htZ7J5Lr6WFWA4fzac8elbeuch3D0vKWY5S9AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU3KlUm3THiXPxflYcS1o/nMz5MCIwHwYDVR0j BBgwFoAUiCIJ43NW4FEvvk6BsA5PJIGGUIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDc0NzFhMy1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMC84ODIyMDlFMzcz NTZFMDUxMkZCRTRFODFCMDBFNEYyNDgxODY1MDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4MTg2 NTA4Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05 ZjJkLWNmMTZiMWU0YTM1My8wLzMyMzQzMDMxM2EzMTMwNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzMTM3MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBEMAwDQYJKoZI hvcNAQELBQADggEBACMQNsWCASuo0XAwegjpe0g+9H0PVr+vdQS54ZLBWoJskiDW hopNCB/QZO025t5ltE4KncL5ip6e3MkAYve+zQA0ecPAZtISMEFV85gHq59tZmDq 6H/LioEeigj8eH0D8sJ4ln7nbz1E6ZzA9RdZpZunUe3qc910YRW67FpaToWmGYLx y/wUo9bh6Y7rdcHDwhQJKeCHPaehI4M5PUlV2E7MNdyB7zTAtR2yZfVePlHR/hB2 KaeG8LLCGfY1YuufjJsluQhLWeeFV70sbcR0uPw2C4BlaTYKQtWAzrFrEjELtu/e laXPDqkFz6Ud7JQqslJ6Vb1M9liuHX3r5Vsd4ks= -----END CERTIFICATE-----Generated at Tue Apr 23 18:28:06 2024 by rpki-client on console-fra.rpki-client.org