$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: 2/FbnjwRnQLT3ND9OLxAkQ94byX0qeFZWR7TaVLT/Bw= Subject key identifier: F7:6F:BB:27:98:FB:7C:09:72:28:A4:04:C8:3A:B9:E3:1E:DE:FB:10 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 4271D684993BFD6DD4E015871CA13C62FCFD6E20 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 09 Feb 2024 11:08:20 +0000 ROA not before: Fri 09 Feb 2024 11:03:20 +0000 ROA not after: Fri 07 Feb 2025 11:08:20 +0000 asID: 140423 IP address blocks: 2406:20c0:b000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:71:d6:84:99:3b:fd:6d:d4:e0:15:87:1c:a1:3c:62:fc:fd:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Feb 9 11:03:20 2024 GMT Not After : Feb 7 11:08:20 2025 GMT Subject: CN=F76FBB2798FB7C097228A404C83AB9E31EDEFB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:ec:1c:d8:9f:7c:a3:02:fb:26:6e:81:81: a0:23:ad:e6:83:77:0d:3f:36:25:dd:95:e3:e6:23: ed:3d:f4:2c:a4:ac:17:53:dd:a3:39:f5:68:bd:92: be:86:11:66:41:17:4c:ef:e6:a3:5a:67:3a:04:7f: 2b:ed:de:b9:91:bb:d8:03:61:20:fe:21:89:21:76: d0:ae:6c:51:12:48:ef:9c:2d:4c:16:26:85:f2:46: 9d:67:54:83:e4:4d:b7:be:04:a8:e6:a1:47:4c:5e: bb:eb:38:5e:bb:16:b2:cc:ef:85:ac:9a:c6:28:0f: 23:db:5c:a3:ce:85:ce:0f:ce:41:a7:08:fe:e4:c6: e5:54:0b:5e:dd:cd:4c:08:dd:9f:e1:cc:48:3c:42: 4d:18:f1:4f:23:23:f3:39:e8:25:41:fc:ee:17:e6: 17:d4:d3:93:35:c3:4d:d0:65:0b:bc:b5:79:d7:9d: 7d:86:eb:2c:29:e7:10:ca:c9:80:6d:bd:de:23:d1: f0:c4:91:e3:05:f1:7a:66:09:12:12:76:af:f5:54: 87:9f:56:e6:46:d5:7d:b6:43:6a:2a:62:ca:47:03: 4d:d4:65:4d:bd:04:14:4c:c9:a0:94:6c:cc:b4:08: 76:a3:74:15:3d:40:63:38:ac:ad:43:3f:ec:6a:52: 73:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6F:BB:27:98:FB:7C:09:72:28:A4:04:C8:3A:B9:E3:1E:DE:FB:10 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:b000::/36 Signature Algorithm: sha256WithRSAEncryption b3:8e:f9:32:db:c8:6d:35:f8:f1:20:4f:e3:d7:c8:7e:22:13: 34:95:04:a9:a1:3f:2c:8b:98:9d:3b:3e:10:d6:07:a3:a4:d0: 5d:97:22:ac:85:f4:a9:02:02:05:a4:5a:76:97:a7:86:69:a6: 35:10:e6:36:86:80:f6:80:5b:69:ca:d5:bd:8b:c3:e5:16:1f: f7:90:4b:91:d6:59:1f:a1:ee:ee:ff:9c:d2:3c:51:c3:1b:ca: d2:50:06:65:40:56:da:84:3b:4f:b8:d7:ec:82:6d:72:fd:bc: 54:27:d2:53:1e:6f:1f:ee:31:40:03:1f:53:d2:59:47:ac:03: 62:92:a4:31:25:90:d3:e9:f7:83:fc:94:26:7b:61:89:52:40: b3:bc:58:12:2c:61:60:21:db:4a:79:36:30:c5:02:37:eb:cc: 49:3b:02:d8:29:a4:cb:79:0a:aa:ba:63:87:27:92:a2:1d:38: ab:03:15:a9:b9:4b:7c:4e:29:03:d7:c0:4b:3d:31:fd:07:a8: 10:df:6c:87:6f:ab:b8:e2:8c:0b:ec:fd:13:6e:35:71:e6:05: 34:18:db:e0:12:be:f2:c9:45:d4:64:af:8f:52:48:b3:f6:e8: a3:0d:55:be:a4:b7:0f:27:26:c7:18:2b:d1:b1:02:3c:6b:fe: eb:55:32:b1 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUQnHWhJk7/W3U4BWHHKE8Yvz9biAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNDAyMDkxMTAzMjBaFw0yNTAyMDcxMTA4MjBaMDMxMTAvBgNV BAMTKEY3NkZCQjI3OThGQjdDMDk3MjI4QTQwNEM4M0FCOUUzMUVERUZCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMuwc2J98owL7Jm6BgaAjreaD dw0/NiXdlePmI+099CykrBdT3aM59Wi9kr6GEWZBF0zv5qNaZzoEfyvt3rmRu9gD YSD+IYkhdtCubFESSO+cLUwWJoXyRp1nVIPkTbe+BKjmoUdMXrvrOF67FrLM74Ws msYoDyPbXKPOhc4PzkGnCP7kxuVUC17dzUwI3Z/hzEg8Qk0Y8U8jI/M56CVB/O4X 5hfU05M1w03QZQu8tXnXnX2G6ywp5xDKyYBtvd4j0fDEkeMF8XpmCRISdq/1VIef VuZG1X22Q2oqYspHA03UZU29BBRMyaCUbMy0CHajdBU9QGM4rK1DP+xqUnOZAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU92+7J5j7fAlyKKQEyDq54x7e+xAwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjIzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAsDANBgkqhkiG9w0BAQsFAAOCAQEAs475MtvIbTX48SBP49fIfiITNJUEqaE/ LIuYnTs+ENYHo6TQXZcirIX0qQICBaRadpenhmmmNRDmNoaA9oBbacrVvYvD5RYf 95BLkdZZH6Hu7v+c0jxRwxvK0lAGZUBW2oQ7T7jX7IJtcv28VCfSUx5vH+4xQAMf U9JZR6wDYpKkMSWQ0+n3g/yUJnthiVJAs7xYEixhYCHbSnk2MMUCN+vMSTsC2Cmk y3kKqrpjhyeSoh04qwMVqblLfE4pA9fASz0x/QeoEN9sh2+ruOKMC+z9E241ceYF NBjb4BK+8slF1GSvj1JIs/boow1VvqS3Dycmxxgr0bECPGv+61UysQ== -----END CERTIFICATE-----Generated at Fri May 3 09:07:39 2024 by rpki-client on console-fra.rpki-client.org