$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/323430303a346265303a3a2f33322d3438203d3e20313431383938.roa File: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (raw, json) Hash identifier: S55zRlGilXygBYC5qEatQFr1/e7oBd/mOOgpaU3S3b0= Subject key identifier: 02:7F:E2:DB:D3:40:4C:96:30:E7:24:CD:C6:43:DC:E4:1F:21:5F:F8 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 2A46236F0F47BF2ED4E250642C99D5F7AB8E74C7 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/323430303a346265303a3a2f33322d3438203d3e20313431383938.roa Signing time: Thu 04 Jan 2024 04:00:00 +0000 ROA not before: Thu 04 Jan 2024 03:55:00 +0000 ROA not after: Thu 02 Jan 2025 04:00:00 +0000 asID: 141898 IP address blocks: 2400:4be0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 17:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:46:23:6f:0f:47:bf:2e:d4:e2:50:64:2c:99:d5:f7:ab:8e:74:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Jan 4 03:55:00 2024 GMT Not After : Jan 2 04:00:00 2025 GMT Subject: CN=027FE2DBD3404C9630E724CDC643DCE41F215FF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ac:9c:0e:26:e9:7e:c7:c2:1a:93:21:18:8c: 94:88:5a:71:94:7b:6e:49:ec:ea:bf:e5:15:3d:ab: e8:8e:f1:16:48:a2:bc:d7:39:fa:46:b4:b7:fd:73: 6f:8f:dd:d8:e7:b2:a3:d2:89:06:fd:7f:01:1a:ad: 47:61:f3:bb:f3:77:b9:ed:d4:08:8f:c0:73:be:78: d1:0c:fc:27:fa:f3:65:e2:83:46:fd:26:d4:3b:54: 06:f6:f1:ea:6b:a1:94:73:a1:6b:d3:46:a1:fb:29: de:d8:b0:a1:9b:95:91:a4:55:cc:fb:7d:ad:7b:82: 01:1c:7e:d0:2e:db:7e:8a:16:da:a4:3d:b2:47:05: 05:56:2e:1f:8c:19:7c:25:1e:54:6b:9f:8e:bd:5c: 2c:c2:98:96:75:dd:d2:9a:66:92:5d:c4:6e:4e:9d: bd:c7:fe:65:36:60:4d:67:c7:a9:a0:77:8a:c3:50: ab:8a:5a:83:37:23:40:9f:2f:28:2f:ea:d8:09:8a: 76:83:94:65:cb:cf:e2:ac:9a:18:71:ee:2e:58:1b: d6:96:c8:5c:61:cd:dd:9b:65:77:a1:2e:d5:7d:a5: 8c:3d:81:a6:6b:95:5d:d1:86:03:39:4c:76:e3:4c: 98:70:45:ee:a3:4a:41:2d:74:1b:4f:ed:54:00:f3: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7F:E2:DB:D3:40:4C:96:30:E7:24:CD:C6:43:DC:E4:1F:21:5F:F8 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/323430303a346265303a3a2f33322d3438203d3e20313431383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:4be0::/32 Signature Algorithm: sha256WithRSAEncryption 74:4a:11:ba:89:12:a8:1b:51:f5:f4:d6:b6:ff:15:82:fa:52: 05:97:22:0e:9f:4d:a7:f7:b3:ef:cc:0b:f6:8c:51:20:50:98: 08:56:2e:04:60:52:3a:75:bf:dc:d5:9f:10:43:04:d4:d5:f5: 8c:55:a4:cb:89:87:38:e8:b7:35:a2:e9:4e:ba:d6:e8:d4:1e: 61:6c:57:cd:02:5b:f2:d9:90:bb:77:06:13:07:90:9c:bc:f7: 4a:7a:18:a9:e0:e2:d2:b2:e0:d7:ac:fb:47:f3:22:25:af:bd: f2:4f:85:b5:64:93:e2:c1:2b:3c:23:06:29:61:8d:02:5e:58: 0a:29:ba:70:fd:fd:28:eb:89:77:e7:fd:97:e6:4b:7e:d4:96: dd:1e:70:42:f8:70:36:30:e5:c2:71:14:56:e8:50:44:9b:0a: 00:b8:2b:c1:47:ac:6b:8c:10:15:fa:0e:57:4b:99:cb:73:85: 43:96:0e:ac:ed:a9:c7:62:ef:2a:49:a5:87:3f:75:9c:23:b9: c9:57:95:14:32:22:8b:7d:17:d2:79:45:15:73:11:f1:7f:12: 4c:1d:6d:f9:26:fe:cb:b4:77:9b:1a:8a:68:04:6f:fc:b8:26: 7e:70:3a:f0:44:d7:21:14:f8:04:7d:5c:2c:2d:ab:e6:35:f9: b9:9e:61:7c -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUKkYjbw9Hvy7U4lBkLJnV96uOdMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNDAxMDQwMzU1MDBaFw0yNTAxMDIwNDAwMDBaMDMxMTAvBgNV BAMTKDAyN0ZFMkRCRDM0MDRDOTYzMEU3MjRDREM2NDNEQ0U0MUYyMTVGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDirJwOJul+x8IakyEYjJSIWnGU e25J7Oq/5RU9q+iO8RZIorzXOfpGtLf9c2+P3djnsqPSiQb9fwEarUdh87vzd7nt 1AiPwHO+eNEM/Cf682Xig0b9JtQ7VAb28eproZRzoWvTRqH7Kd7YsKGblZGkVcz7 fa17ggEcftAu236KFtqkPbJHBQVWLh+MGXwlHlRrn469XCzCmJZ13dKaZpJdxG5O nb3H/mU2YE1nx6mgd4rDUKuKWoM3I0CfLygv6tgJinaDlGXLz+Ksmhhx7i5YG9aW yFxhzd2bZXehLtV9pYw9gaZrlV3RhgM5THbjTJhwRe6jSkEtdBtP7VQA8083AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUAn/i29NATJYw5yTNxkPc5B8hX/gwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiZGZmODE5LTJiYWQtNDgzZC05 ZmE4LWI2ZWJjNDg0MDMxYS8wLzMyMzQzMDMwM2EzNDYyNjUzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQAS+AwDQYJKoZI hvcNAQELBQADggEBAHRKEbqJEqgbUfX01rb/FYL6UgWXIg6fTaf3s+/MC/aMUSBQ mAhWLgRgUjp1v9zVnxBDBNTV9YxVpMuJhzjotzWi6U661ujUHmFsV80CW/LZkLt3 BhMHkJy890p6GKng4tKy4Nes+0fzIiWvvfJPhbVkk+LBKzwjBilhjQJeWAopunD9 /SjriXfn/ZfmS37Ult0ecEL4cDYw5cJxFFboUESbCgC4K8FHrGuMEBX6DldLmctz hUOWDqztqcdi7ypJpYc/dZwjuclXlRQyIot9F9J5RRVzEfF/Ekwdbfkm/su0d5sa imgEb/y4Jn5wOvBE1yEU+AR9XCwtq+Y1+bmeYXw= -----END CERTIFICATE-----Generated at Thu May 2 14:39:40 2024 by rpki-client on console-ams.rpki-client.org