$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3a2f33322d3332203d3e20313533303837.roa File: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (raw, json) Hash identifier: T8cBlOmjcetrSbtW+daV9YtXlBHJ/TgUuSP0ZRu08us= Subject key identifier: 23:EE:6D:E5:9B:93:69:5D:ED:25:FE:C2:C3:06:DF:FC:A0:D8:77:BD Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 3F5190629FCFDB582C29573D129D4BFCDAFC0E5F Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3a2f33322d3332203d3e20313533303837.roa Signing time: Fri 09 Aug 2024 11:32:58 +0000 ROA not before: Fri 09 Aug 2024 11:27:58 +0000 ROA not after: Fri 08 Aug 2025 11:32:58 +0000 asID: 153087 IP address blocks: 2404:97c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 01:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:51:90:62:9f:cf:db:58:2c:29:57:3d:12:9d:4b:fc:da:fc:0e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Aug 9 11:27:58 2024 GMT Not After : Aug 8 11:32:58 2025 GMT Subject: CN=23EE6DE59B93695DED25FEC2C306DFFCA0D877BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4b:87:8a:1c:02:30:40:ae:12:92:08:94:b2: 43:92:d7:66:57:e7:97:45:8f:96:c1:d2:fd:c0:ab: be:ff:4a:35:53:16:09:a9:6f:35:cd:51:46:71:d2: cc:a1:e0:d3:a9:2b:96:68:c0:51:1d:19:ab:d3:e7: 23:c7:07:f5:33:80:0b:bc:68:90:39:96:fa:38:2c: ad:c4:b8:f2:98:b9:37:16:69:86:9e:81:99:ff:01: 2c:3b:54:15:91:aa:38:f9:ec:b6:04:50:f8:6e:c7: 6a:b2:c9:7f:6e:b5:ab:03:cb:d1:5f:06:70:4c:4a: a1:73:f1:be:f3:2c:c8:44:a6:c1:df:f5:52:8d:12: 41:d3:59:33:d2:cd:83:7f:d1:4d:9b:53:81:25:bc: b6:e1:6c:73:f7:54:e8:de:ec:18:3b:69:6a:6c:82: e3:43:92:67:31:90:7e:37:c9:8a:b5:8a:14:3a:ca: 11:4d:2e:d5:d9:de:49:2a:64:10:07:60:3f:d3:31: 6a:4e:04:db:8c:66:d7:2a:19:0b:ff:a4:0e:86:18: f6:e4:85:b3:57:87:44:00:b9:cc:95:eb:e2:64:92: ea:8e:88:5e:68:93:eb:be:75:5a:8b:51:14:60:a7: b7:57:20:5b:89:11:8f:6d:d2:57:7d:5c:f4:82:34: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EE:6D:E5:9B:93:69:5D:ED:25:FE:C2:C3:06:DF:FC:A0:D8:77:BD X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3a2f33322d3332203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0::/32 Signature Algorithm: sha256WithRSAEncryption bc:9f:1b:34:86:38:20:4c:fe:37:4e:03:22:20:52:44:b5:35: 0c:d9:65:27:8f:a7:67:7a:98:5d:39:08:3a:02:c3:20:5b:7a: 13:38:8a:ac:7d:b2:b5:65:65:dd:71:27:d2:aa:79:30:b4:c7: a4:bf:6b:9f:a9:ae:35:c4:40:df:9a:53:89:51:a6:c0:35:96: e0:d2:18:81:2c:dc:f7:5f:b4:01:b3:f9:58:3c:aa:ca:12:c2: 5d:d4:6d:b1:8b:8a:65:ed:6a:f1:34:8e:cc:cb:68:44:7d:41: 06:b8:4e:ba:18:4c:b5:cf:fb:84:f0:13:6b:79:82:cf:c5:05: b7:79:9d:ad:08:be:bb:b1:a3:ff:e8:d4:eb:a8:7d:27:38:ab: 6b:25:41:ab:30:77:f8:34:52:8e:f7:6c:6e:d1:a0:92:42:15: 75:34:04:fe:c3:b9:c5:22:77:fa:c6:89:de:ba:ac:d4:74:d1: 0b:51:42:90:a5:60:fe:00:51:a0:2e:8b:b6:02:1b:c8:32:cd: 6d:7d:a3:25:38:ef:27:72:6a:a1:b5:33:72:b5:21:35:4d:97: 55:39:05:b8:76:26:15:63:86:32:3c:bb:d2:48:db:db:d0:34: 08:aa:36:ec:38:e9:aa:d2:a5:4e:04:b6:00:76:9b:81:ea:5d: c7:a4:e3:fe -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUP1GQYp/P21gsKVc9Ep1L/Nr8Dl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNDA4MDkxMTI3NThaFw0yNTA4MDgxMTMyNThaMDMxMTAvBgNV BAMTKDIzRUU2REU1OUI5MzY5NURFRDI1RkVDMkMzMDZERkZDQTBEODc3QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1S4eKHAIwQK4SkgiUskOS12ZX 55dFj5bB0v3Aq77/SjVTFgmpbzXNUUZx0syh4NOpK5ZowFEdGavT5yPHB/UzgAu8 aJA5lvo4LK3EuPKYuTcWaYaegZn/ASw7VBWRqjj57LYEUPhux2qyyX9utasDy9Ff BnBMSqFz8b7zLMhEpsHf9VKNEkHTWTPSzYN/0U2bU4ElvLbhbHP3VOje7Bg7aWps guNDkmcxkH43yYq1ihQ6yhFNLtXZ3kkqZBAHYD/TMWpOBNuMZtcqGQv/pA6GGPbk hbNXh0QAucyV6+JkkuqOiF5ok+u+dVqLURRgp7dXIFuJEY9t0ld9XPSCNEg1AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUI+5t5ZuTaV3tJf7Cwwbf/KDYd70wHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzUzMzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEl8AwDQYJKoZI hvcNAQELBQADggEBALyfGzSGOCBM/jdOAyIgUkS1NQzZZSePp2d6mF05CDoCwyBb ehM4iqx9srVlZd1xJ9KqeTC0x6S/a5+prjXEQN+aU4lRpsA1luDSGIEs3PdftAGz +Vg8qsoSwl3UbbGLimXtavE0jszLaER9QQa4TroYTLXP+4TwE2t5gs/FBbd5na0I vruxo//o1OuofSc4q2slQaswd/g0Uo73bG7RoJJCFXU0BP7DucUid/rGid66rNR0 0QtRQpClYP4AUaAui7YCG8gyzW19oyU47ydyaqG1M3K1ITVNl1U5Bbh2JhVjhjI8 u9JI29vQNAiqNuw46arSpU4EtgB2m4HqXcek4/4= -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:01 2024 by rpki-client on console-ams.rpki-client.org