$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: sUugteFQuROhQywHTs9GGVW8goJIgTtPNGgF0eLjdLw= Subject key identifier: 97:30:14:60:85:D0:92:97:71:2A:35:1D:6C:86:61:00:85:74:50:0E Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 51115BCD5E389246F71934AA847084AADF8D6E52 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 08 Jun 2023 03:00:01 +0000 ROA not before: Thu 08 Jun 2023 02:55:01 +0000 ROA not after: Thu 06 Jun 2024 03:00:01 +0000 asID: 137330 IP address blocks: 2402:aa40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 01:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:11:5b:cd:5e:38:92:46:f7:19:34:aa:84:70:84:aa:df:8d:6e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Jun 8 02:55:01 2023 GMT Not After : Jun 6 03:00:01 2024 GMT Subject: CN=9730146085D09297712A351D6C8661008574500E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:60:51:8a:b3:2c:f4:3b:dc:65:82:e0:ad: de:5d:f0:75:dc:c1:db:1c:ee:c0:22:00:39:4f:b9: 46:e0:43:b2:60:3d:5d:d6:45:1f:22:72:66:6e:b1: 0f:62:d0:12:c2:a8:1a:d7:cb:4b:70:ea:2e:ac:35: a9:d7:93:f3:05:b2:39:0b:0c:9a:5c:b8:06:8e:b6: 5b:96:59:e1:d1:6d:b0:60:9a:e0:1a:01:78:9f:55: 2d:b9:5c:3a:8b:15:11:18:2b:11:c5:bb:26:cd:62: e7:e8:ef:18:46:d2:a3:72:e9:7d:33:5e:d0:f8:3f: 31:5f:20:9a:85:0a:31:96:38:93:98:46:67:84:94: a5:7f:8b:cf:56:b9:03:9d:0c:78:65:cf:b4:42:f8: 97:56:1e:ab:f2:af:d4:9d:1d:5f:70:73:18:44:a6: 36:b1:c4:e1:bf:6b:c7:df:89:98:fe:25:a1:60:7e: 9e:c2:75:ed:e1:00:ab:f9:e5:5d:d6:43:43:b3:9a: 4c:8c:9b:4f:32:24:fa:b0:70:e0:c6:29:fe:4e:6f: 9e:c0:02:fa:ce:1e:84:1f:61:b5:d9:55:9e:77:77: 99:b3:9e:5a:39:e7:29:14:da:b8:50:f2:f1:c4:37: 4c:8c:be:7a:1d:55:68:3f:ea:64:04:07:97:f4:e2: e8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:30:14:60:85:D0:92:97:71:2A:35:1D:6C:86:61:00:85:74:50:0E X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:1::/48 Signature Algorithm: sha256WithRSAEncryption 14:b5:fb:b1:46:5d:5a:6e:b5:91:60:2b:05:65:a3:37:b2:10: 7f:1b:15:85:42:fc:c2:97:be:f8:c1:46:1e:ff:c5:bb:7e:87: d9:c2:cb:4d:16:bf:54:dd:19:2a:8b:27:66:3f:8c:54:6e:f7: d5:0e:4d:eb:f7:8e:a9:35:6f:e1:02:24:1c:fa:9e:7a:83:fb: e0:61:98:43:f5:2d:25:17:b2:90:6e:73:af:aa:4d:26:bd:c5: 26:dd:6e:d7:84:86:af:13:9a:2f:ea:a6:07:0a:79:fc:d3:9b: e2:a1:56:51:ae:6a:14:a7:e0:54:7d:8f:7d:31:8a:09:a5:c9: f5:98:5f:c2:86:a5:ab:30:a9:e8:41:d4:e0:64:56:90:15:35: 86:1f:e5:1a:38:c3:af:79:18:e7:86:d4:8c:db:34:30:51:b1: b8:69:09:18:df:23:d4:cd:03:4c:67:42:8a:ed:d0:25:9b:a4: bb:bb:c7:21:9f:a2:35:56:b2:10:85:01:71:16:c9:f3:4f:9f: b1:50:4d:91:9e:2b:0d:85:52:be:52:27:3e:8c:be:17:8a:30: 9a:00:57:12:1d:e2:0f:0a:27:eb:31:cd:c0:88:2c:a7:f2:c3: 34:1b:22:41:11:18:19:0b:c1:26:6e:05:6b:fb:c7:db:53:32: ca:d8:2d:07 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUURFbzV44kkb3GTSqhHCEqt+NblIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yMzA2MDgwMjU1MDFaFw0yNDA2MDYwMzAwMDFaMDMxMTAvBgNV BAMTKDk3MzAxNDYwODVEMDkyOTc3MTJBMzUxRDZDODY2MTAwODU3NDUwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyB2BRirMs9DvcZYLgrd5d8HXc wdsc7sAiADlPuUbgQ7JgPV3WRR8icmZusQ9i0BLCqBrXy0tw6i6sNanXk/MFsjkL DJpcuAaOtluWWeHRbbBgmuAaAXifVS25XDqLFREYKxHFuybNYufo7xhG0qNy6X0z XtD4PzFfIJqFCjGWOJOYRmeElKV/i89WuQOdDHhlz7RC+JdWHqvyr9SdHV9wcxhE pjaxxOG/a8ffiZj+JaFgfp7Cde3hAKv55V3WQ0OzmkyMm08yJPqwcODGKf5Ob57A AvrOHoQfYbXZVZ53d5mznlo55ykU2rhQ8vHEN0yMvnodVWg/6mQEB5f04uhPAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUlzAUYIXQkpdxKjUdbIZhAIV0UA4wHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAEw DQYJKoZIhvcNAQELBQADggEBABS1+7FGXVputZFgKwVlozeyEH8bFYVC/MKXvvjB Rh7/xbt+h9nCy00Wv1TdGSqLJ2Y/jFRu99UOTev3jqk1b+ECJBz6nnqD++BhmEP1 LSUXspBuc6+qTSa9xSbdbteEhq8Tmi/qpgcKefzTm+KhVlGuahSn4FR9j30xigml yfWYX8KGpaswqehB1OBkVpAVNYYf5Ro4w695GOeG1IzbNDBRsbhpCRjfI9TNA0xn Qort0CWbpLu7xyGfojVWshCFAXEWyfNPn7FQTZGeKw2FUr5SJz6MvheKMJoAVxId 4g8KJ+sxzcCILKfywzQbIkERGBkLwSZuBWv7x9tTMsrYLQc= -----END CERTIFICATE-----Generated at Wed Apr 24 01:48:20 2024 by rpki-client on console-fra.rpki-client.org