$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: V9yddt6zFtTtVntAfSOPKd5rKpyKrL+SelFBGEOr+DQ= Subject key identifier: AC:14:2A:96:69:26:DD:9A:F7:CA:8B:55:5F:8D:CB:13:21:83:7F:BB Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Certificate serial: 53793F0A337DB0F614D848922C45E41E98709992 Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa Signing time: Fri 02 Aug 2024 12:40:58 +0000 ROA not before: Fri 02 Aug 2024 12:35:58 +0000 ROA not after: Fri 01 Aug 2025 12:40:58 +0000 asID: 153087 IP address blocks: 2404:97c0:13::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:79:3f:0a:33:7d:b0:f6:14:d8:48:92:2c:45:e4:1e:98:70:99:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Validity Not Before: Aug 2 12:35:58 2024 GMT Not After : Aug 1 12:40:58 2025 GMT Subject: CN=AC142A966926DD9AF7CA8B555F8DCB1321837FBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f8:ba:62:d2:f5:77:fd:df:31:e6:af:de:32: d7:3d:0d:b3:3e:5f:49:72:06:f6:3a:13:84:7e:c5: b1:ac:a1:c8:cc:da:88:9b:a5:cc:4a:84:ef:d2:8f: 3c:09:75:d6:1b:ae:6f:87:ec:e8:40:b0:ef:0f:60: e1:4e:db:9c:01:9c:68:83:ba:02:1f:de:49:6e:d8: b0:15:38:73:d5:94:51:48:ec:80:af:93:d5:8e:f8: 01:97:44:4c:5f:47:ae:c1:df:93:2e:d1:ca:11:b9: a9:eb:ab:19:a0:07:f3:1b:b7:da:8c:ef:34:dd:05: 9f:0d:61:e3:a0:fe:88:ed:7f:8b:70:7f:31:ca:54: 40:93:f2:3e:cb:de:76:72:60:cf:c9:3b:e3:24:72: 5a:8e:78:a2:38:a2:24:61:95:50:64:88:4f:93:c9: 26:44:29:1b:af:4d:da:c1:00:7d:60:22:a8:3e:91: 84:67:5e:09:d9:11:8f:b3:f0:3e:a8:ec:9f:80:d0: df:4f:4b:d5:2e:1f:40:30:8d:d4:9c:38:80:4c:f2: 24:93:f5:34:a3:d7:65:2e:1a:17:22:99:24:4c:02: a2:7b:51:b7:50:b4:c9:24:e8:45:4c:06:2d:03:f8: 0b:e6:ec:c2:1b:24:e6:6e:82:11:a3:0c:80:1f:46: 4c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:14:2A:96:69:26:DD:9A:F7:CA:8B:55:5F:8D:CB:13:21:83:7F:BB X509v3 Authority Key Identifier: keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:13::/48 Signature Algorithm: sha256WithRSAEncryption a4:b7:78:38:32:23:e4:ca:ed:4d:f9:16:83:1a:40:01:d4:31: 46:3e:de:5c:45:a5:20:7d:91:bb:d7:6c:b9:a4:a0:ee:f7:33: b2:92:02:09:97:71:f0:e9:ed:fd:39:7d:f6:1f:1b:da:e2:d0: e9:92:b8:46:e6:c2:90:dc:0b:6c:ed:b5:6c:24:b7:b5:f2:e9: fd:3b:d2:4e:3b:8a:3c:bc:51:bd:66:54:71:c7:cf:a8:f0:08: e0:62:a1:e3:3e:41:b1:40:11:02:16:6c:62:a0:06:44:be:af: 01:bd:06:7d:9e:5c:be:3b:5f:97:a7:5e:6e:1f:f5:58:4c:e4: c0:50:45:05:fa:98:00:79:18:af:b4:4d:f9:41:34:71:50:5f: 59:89:e8:f2:ac:4c:6c:c1:bb:07:89:6e:1d:59:55:7e:fc:e0: 86:b1:df:d0:f6:9e:63:30:cf:98:4f:79:1f:36:b1:16:9f:f9: d0:85:67:39:b8:15:2e:e5:ea:90:23:a0:c5:37:ad:9e:de:29: ac:1c:70:5a:68:d5:e8:aa:33:d7:7c:6b:3e:cb:46:57:d9:51: ee:89:95:34:e5:3e:89:43:30:2e:0d:ba:56:d9:34:4e:9b:11: 22:fb:77:6f:0a:30:5c:dc:91:e5:19:69:76:a8:b9:cb:2f:ee: ca:ba:94:0b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUU3k/CjN9sPYU2EiSLEXkHphwmZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky NzI5REVFRTAeFw0yNDA4MDIxMjM1NThaFw0yNTA4MDExMjQwNThaMDMxMTAvBgNV BAMTKEFDMTQyQTk2NjkyNkREOUFGN0NBOEI1NTVGOERDQjEzMjE4MzdGQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH+Lpi0vV3/d8x5q/eMtc9DbM+ X0lyBvY6E4R+xbGsocjM2oibpcxKhO/SjzwJddYbrm+H7OhAsO8PYOFO25wBnGiD ugIf3klu2LAVOHPVlFFI7ICvk9WO+AGXRExfR67B35Mu0coRuanrqxmgB/Mbt9qM 7zTdBZ8NYeOg/ojtf4twfzHKVECT8j7L3nZyYM/JO+MkclqOeKI4oiRhlVBkiE+T ySZEKRuvTdrBAH1gIqg+kYRnXgnZEY+z8D6o7J+A0N9PS9UuH0AwjdScOIBM8iST 9TSj12UuGhcimSRMAqJ7UbdQtMkk6EVMBi0D+Avm7MIbJOZughGjDIAfRkw3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUrBQqlmkm3Zr3yotVX43LEyGDf7swHwYDVR0j BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5 REVFRS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzEzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQEl8AA EzANBgkqhkiG9w0BAQsFAAOCAQEApLd4ODIj5MrtTfkWgxpAAdQxRj7eXEWlIH2R u9dsuaSg7vczspICCZdx8Ont/Tl99h8b2uLQ6ZK4RubCkNwLbO21bCS3tfLp/TvS TjuKPLxRvWZUccfPqPAI4GKh4z5BsUARAhZsYqAGRL6vAb0GfZ5cvjtfl6debh/1 WEzkwFBFBfqYAHkYr7RN+UE0cVBfWYno8qxMbMG7B4luHVlVfvzghrHf0PaeYzDP mE95HzaxFp/50IVnObgVLuXqkCOgxTetnt4prBxwWmjV6Koz13xrPstGV9lR7omV NOU+iUMwLg26Vtk0TpsRIvt3bwowXNyR5Rlpdqi5yy/uyrqUCw== -----END CERTIFICATE-----Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org