$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323232383a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a323232383a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: ih7R2U6hwcPrwTQF+RMuT4GtaGNiEdkJw2imrIQUyp8= Subject key identifier: 8C:9D:9F:3B:4D:B7:72:F7:AC:A2:FD:C7:D7:86:86:22:44:AE:A2:36 Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Certificate serial: 234C903617CFC8413ABB83CEABCBE45E1A3C81EE Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323232383a3a2f34382d3438203d3e20313533303837.roa Signing time: Fri 02 Aug 2024 12:47:06 +0000 ROA not before: Fri 02 Aug 2024 12:42:06 +0000 ROA not after: Fri 01 Aug 2025 12:47:06 +0000 asID: 153087 IP address blocks: 2404:97c0:2228::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4c:90:36:17:cf:c8:41:3a:bb:83:ce:ab:cb:e4:5e:1a:3c:81:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Validity Not Before: Aug 2 12:42:06 2024 GMT Not After : Aug 1 12:47:06 2025 GMT Subject: CN=8C9D9F3B4DB772F7ACA2FDC7D786862244AEA236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c6:b5:82:ff:b6:71:51:43:ac:13:1a:74:11: ea:d6:08:af:77:b2:b8:54:c9:5e:fc:9c:2d:a8:2a: b8:eb:2d:79:68:0a:3f:17:d3:c6:77:7a:ab:f0:50: 96:07:63:4c:75:af:76:d8:c9:29:3b:bf:88:6e:97: b5:67:3e:2a:23:b6:ed:30:9e:c7:da:30:e2:72:02: ac:9b:c7:46:07:9a:f5:d0:a5:a3:89:7c:df:c9:8a: bb:07:a3:df:3f:cb:11:b1:aa:e6:0a:68:ba:1a:ee: 38:62:9d:e4:66:46:77:42:84:2b:27:e3:96:e3:fe: e6:23:df:a3:39:51:36:e2:8a:a5:84:41:0e:80:02: 08:a2:46:bf:48:be:27:85:2b:40:91:7f:8e:11:c9: 47:31:86:30:12:2d:08:fe:c2:29:46:d6:8f:5b:0c: 71:94:42:9d:52:51:76:65:e4:0c:26:6d:a7:dd:e8: 82:1c:f4:73:83:eb:f1:6d:07:22:66:9a:08:a9:86: 4b:12:37:b7:a4:0f:17:dd:f3:69:be:47:de:ce:80: 94:a5:71:27:56:b8:97:45:d7:a8:43:b3:4a:a9:65: 89:8a:a1:c4:90:99:a9:b4:95:cc:65:bc:d3:87:cc: bd:78:b2:90:60:ca:e9:1c:30:17:b0:1b:35:e2:17: 31:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9D:9F:3B:4D:B7:72:F7:AC:A2:FD:C7:D7:86:86:22:44:AE:A2:36 X509v3 Authority Key Identifier: keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323232383a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:2228::/48 Signature Algorithm: sha256WithRSAEncryption ac:78:1a:82:1d:c2:bd:ac:e9:a6:65:29:1a:6d:a5:b9:04:2f: 9c:31:aa:7d:5b:67:11:1c:d3:66:5f:db:85:85:3c:72:f9:bb: fc:92:e6:c4:41:4f:98:65:42:5e:53:d0:a7:de:c2:c9:f3:e6: 89:97:85:8b:53:16:02:3d:23:74:39:ab:3a:45:93:29:ba:2a: 88:1f:78:b5:15:ff:60:de:43:47:49:a0:f0:93:fb:56:85:71: 6f:2a:ab:4a:92:71:7f:c4:03:c6:9c:ca:12:98:00:00:a4:1d: 68:c9:71:45:52:44:89:ee:3b:15:0c:f9:fa:d9:b9:de:61:54: b5:0c:b7:c0:c0:10:8a:26:cc:f8:c9:40:79:01:1f:3e:89:cf: fa:4d:a6:ec:c2:d3:46:80:2a:6f:ef:d8:fe:e8:4d:a0:eb:16: 07:fb:8d:9d:03:fa:49:bf:72:91:d7:6a:e4:99:0d:10:3e:be: 84:8f:93:72:53:3d:28:a2:b6:d4:90:c5:40:a6:d7:22:10:77: a7:3a:86:6d:ea:13:3e:e6:cf:ea:09:ba:ee:e1:a9:cd:a2:d3: 09:5a:a6:09:bd:55:2e:d6:63:1d:cd:36:2a:3c:53:d3:ab:0c: a3:6a:b6:57:d0:8d:31:ce:a6:88:c4:29:8a:da:6b:1c:54:1a: 0f:32:b3:e6 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUI0yQNhfPyEE6u4POq8vkXho8ge4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky NzI5REVFRTAeFw0yNDA4MDIxMjQyMDZaFw0yNTA4MDExMjQ3MDZaMDMxMTAvBgNV BAMTKDhDOUQ5RjNCNERCNzcyRjdBQ0EyRkRDN0Q3ODY4NjIyNDRBRUEyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaxrWC/7ZxUUOsExp0EerWCK93 srhUyV78nC2oKrjrLXloCj8X08Z3eqvwUJYHY0x1r3bYySk7v4hul7VnPiojtu0w nsfaMOJyAqybx0YHmvXQpaOJfN/JirsHo98/yxGxquYKaLoa7jhineRmRndChCsn 45bj/uYj36M5UTbiiqWEQQ6AAgiiRr9IvieFK0CRf44RyUcxhjASLQj+wilG1o9b DHGUQp1SUXZl5Awmbafd6IIc9HOD6/FtByJmmgiphksSN7ekDxfd82m+R97OgJSl cSdWuJdF16hDs0qpZYmKocSQmam0lcxlvNOHzL14spBgyukcMBewGzXiFzEfAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUjJ2fO023cvesov3H14aGIkSuojYwHwYDVR0j BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5 REVFRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMjMyMzgz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAIigwDQYJKoZIhvcNAQELBQADggEBAKx4GoIdwr2s6aZlKRptpbkEL5wxqn1b ZxEc02Zf24WFPHL5u/yS5sRBT5hlQl5T0Kfewsnz5omXhYtTFgI9I3Q5qzpFkym6 KogfeLUV/2DeQ0dJoPCT+1aFcW8qq0qScX/EA8acyhKYAACkHWjJcUVSRInuOxUM +frZud5hVLUMt8DAEIomzPjJQHkBHz6Jz/pNpuzC00aAKm/v2P7oTaDrFgf7jZ0D +km/cpHXauSZDRA+voSPk3JTPSiittSQxUCm1yIQd6c6hm3qEz7mz+oJuu7hqc2i 0wlapgm9VS7WYx3NNio8U9OrDKNqtlfQjTHOpojEKYraaxxUGg8ys+Y= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org