$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a653030303a3a2f33362d3336203d3e20313338383134.roa File: 323430343a393763303a653030303a3a2f33362d3336203d3e20313338383134.roa (raw, json) Hash identifier: OWnilJIIJDR9J4a6Gzw39UPg+Z0Jf4UIprf0upaJUEk= Subject key identifier: 79:22:FE:62:55:41:D3:6F:41:5D:1D:8E:E4:2B:79:EE:08:14:CB:7A Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Certificate serial: 2C59FC46D4703525F2379B051789D8BF6E59CC21 Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a653030303a3a2f33362d3336203d3e20313338383134.roa Signing time: Thu 27 Jul 2023 14:00:01 +0000 ROA not before: Thu 27 Jul 2023 13:55:01 +0000 ROA not after: Thu 25 Jul 2024 14:00:01 +0000 asID: 138814 IP address blocks: 2404:97c0:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:59:fc:46:d4:70:35:25:f2:37:9b:05:17:89:d8:bf:6e:59:cc:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Validity Not Before: Jul 27 13:55:01 2023 GMT Not After : Jul 25 14:00:01 2024 GMT Subject: CN=7922FE625541D36F415D1D8EE42B79EE0814CB7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:a8:59:0d:bf:04:f3:72:cd:e6:73:a8:0e: 66:d9:67:14:4e:e8:be:de:a2:07:dd:eb:1f:09:f2: c4:33:cb:7a:60:84:12:08:e2:b6:84:a5:d9:4d:80: 2f:12:44:0f:21:cc:ac:bd:a9:d2:e4:23:a6:3c:1f: 7a:97:d8:d6:35:41:6e:5b:4b:b6:b8:25:29:8b:ed: b9:92:08:c5:ae:6b:c3:51:81:eb:c4:0e:f1:b7:5b: d4:e4:5b:9f:08:0a:0d:8c:73:c1:59:b8:41:e8:f5: c7:a3:d2:7b:66:70:a0:56:22:04:1f:f2:ba:b0:a3: 4e:27:d9:55:b8:f7:3f:88:c2:d3:b0:d0:d0:ba:ab: b9:56:cc:8d:37:3a:da:6c:75:37:d1:78:5a:a4:97: 3f:11:d8:f4:07:b8:df:42:9a:25:19:8e:2e:11:ae: 6b:5f:bc:89:d2:46:38:bd:65:5c:29:3b:2f:d8:6b: b7:dc:f1:33:d0:39:f9:5c:e0:83:ae:1a:ee:01:bd: d3:bf:3a:f7:12:0f:f9:e2:1e:15:e2:77:bc:61:59: 39:05:b8:02:a3:5b:dc:2e:b0:a6:64:58:a6:98:87: 6f:27:46:fd:1a:70:8a:26:d0:97:a8:74:18:c6:56: c9:31:08:c4:4b:a2:1f:7a:a0:f2:ca:ab:18:0a:29: 63:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:22:FE:62:55:41:D3:6F:41:5D:1D:8E:E4:2B:79:EE:08:14:CB:7A X509v3 Authority Key Identifier: keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a653030303a3a2f33362d3336203d3e20313338383134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:e000::/36 Signature Algorithm: sha256WithRSAEncryption 3a:95:ed:06:d5:2c:e2:1d:07:84:a5:6c:a2:88:45:2a:9f:a7: 0e:1f:a4:13:a8:ff:30:c5:b9:f2:95:7c:da:14:0f:90:c0:3a: c2:ac:23:67:bb:c7:56:61:02:95:76:09:87:1a:3f:3b:0a:18: 53:3c:ec:f4:2b:00:56:86:46:e5:5c:38:89:82:ad:45:0d:cb: 48:02:86:b8:d9:da:ae:73:4e:81:98:08:ff:cc:c1:72:af:da: 90:cc:ac:07:ea:22:1d:35:08:1a:b4:78:d4:1b:7d:17:95:e7: 75:a5:9f:48:13:1e:bb:86:42:64:b8:ee:1e:d8:93:38:d9:75: 07:fb:cf:14:d7:d0:23:96:ef:62:5e:d9:16:e2:76:4c:b0:69: c2:85:a8:29:ef:f8:51:3b:30:b9:ac:3c:15:0a:9d:2a:64:eb: 0a:73:50:c2:67:73:a2:c1:7a:76:5b:a9:11:0f:f9:b0:fe:dd: 2c:5f:67:47:63:3a:c7:60:ef:ba:b8:18:dc:02:70:d7:35:dc: 74:44:86:90:9c:44:02:9b:08:ea:e6:67:f1:d1:c4:54:7f:4e: ee:24:66:2f:cf:7a:a6:13:b7:8c:20:21:48:09:a3:01:7f:7c: 69:74:22:e0:5e:83:a7:91:b9:80:54:85:0a:37:47:d5:fe:31: ee:e5:ef:03 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIULFn8RtRwNSXyN5sFF4nYv25ZzCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky NzI5REVFRTAeFw0yMzA3MjcxMzU1MDFaFw0yNDA3MjUxNDAwMDFaMDMxMTAvBgNV BAMTKDc5MjJGRTYyNTU0MUQzNkY0MTVEMUQ4RUU0MkI3OUVFMDgxNENCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZqhZDb8E83LN5nOoDmbZZxRO 6L7eogfd6x8J8sQzy3pghBII4raEpdlNgC8SRA8hzKy9qdLkI6Y8H3qX2NY1QW5b S7a4JSmL7bmSCMWua8NRgevEDvG3W9TkW58ICg2Mc8FZuEHo9cej0ntmcKBWIgQf 8rqwo04n2VW49z+IwtOw0NC6q7lWzI03OtpsdTfReFqklz8R2PQHuN9CmiUZji4R rmtfvInSRji9ZVwpOy/Ya7fc8TPQOflc4IOuGu4BvdO/OvcSD/niHhXid7xhWTkF uAKjW9wusKZkWKaYh28nRv0acIom0JeodBjGVskxCMRLoh96oPLKqxgKKWO9AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUeSL+YlVB029BXR2O5Ct57ggUy3owHwYDVR0j BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5 REVFRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhNjUzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTMzMzgzODMxMzQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfA4DANBgkqhkiG9w0BAQsFAAOCAQEAOpXtBtUs4h0HhKVsoohFKp+nDh+kE6j/ MMW58pV82hQPkMA6wqwjZ7vHVmEClXYJhxo/OwoYUzzs9CsAVoZG5Vw4iYKtRQ3L SAKGuNnarnNOgZgI/8zBcq/akMysB+oiHTUIGrR41Bt9F5XndaWfSBMeu4ZCZLju HtiTONl1B/vPFNfQI5bvYl7ZFuJ2TLBpwoWoKe/4UTswuaw8FQqdKmTrCnNQwmdz osF6dlupEQ/5sP7dLF9nR2M6x2DvurgY3AJw1zXcdESGkJxEApsI6uZn8dHEVH9O 7iRmL896phO3jCAhSAmjAX98aXQi4F6Dp5G5gFSFCjdH1f4x7uXvAw== -----END CERTIFICATE-----Generated at Sat Jun 1 11:46:14 2024 by rpki-client on console-ams.rpki-client.org