$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3a2f33322d3438203d3e203234313938.roa File: 323430323a623234303a3a2f33322d3438203d3e203234313938.roa (raw, json) Hash identifier: gKJL/u4Oym0TDB2/ReYA3EQ0pyNk0zlegbrcFF32QG4= Subject key identifier: 31:CF:01:ED:36:EB:F7:95:E0:57:D8:A2:C1:78:58:9E:D3:75:0E:8B Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Certificate serial: 5B87361167978206EDF398DBDE081190E5E502B9 Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3a2f33322d3438203d3e203234313938.roa Signing time: Fri 01 Dec 2023 01:18:33 +0000 ROA not before: Fri 01 Dec 2023 01:13:33 +0000 ROA not after: Fri 29 Nov 2024 01:18:33 +0000 asID: 24198 IP address blocks: 2402:b240::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:87:36:11:67:97:82:06:ed:f3:98:db:de:08:11:90:e5:e5:02:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02 Validity Not Before: Dec 1 01:13:33 2023 GMT Not After : Nov 29 01:18:33 2024 GMT Subject: CN=31CF01ED36EBF795E057D8A2C178589ED3750E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:3f:06:8f:9d:d0:f3:de:63:0b:53:85:1b: 71:e7:a0:18:7f:30:62:99:51:41:23:4e:c4:7c:f8: 56:1b:ee:dc:ea:9e:30:10:4b:09:f9:2b:80:52:54: 73:56:4c:fb:c8:be:1f:65:3f:cf:29:45:f2:9b:91: 72:43:df:09:7f:1f:15:5e:39:0d:82:5e:24:94:df: 5a:c3:fc:8e:c6:6d:3f:93:f4:04:83:bb:17:3e:01: 17:d1:bb:f6:ac:72:27:91:47:94:d2:7c:d4:ba:bf: 2a:eb:75:59:20:e9:62:c4:a9:c4:4f:4c:bb:3e:62: 69:12:f2:5b:00:ae:cb:75:c6:d4:97:9a:6c:1b:28: e4:b0:f7:c7:a9:85:dc:7f:b7:28:e2:73:6b:76:cc: e7:6a:aa:93:aa:17:f8:25:6f:d5:c6:a4:45:25:63: e8:89:04:87:58:d6:15:24:05:3b:1d:c2:25:6d:97: 17:1d:5b:f0:b0:e5:ac:e3:17:e6:38:ec:5f:49:8d: f5:fc:d7:5b:82:95:1f:e7:7b:73:da:be:91:2f:2d: 47:46:84:2f:99:9e:11:a1:76:89:08:d6:77:0b:ce: 5a:27:9e:9f:1c:31:b5:0d:e3:cd:60:d9:9d:a2:cb: 5b:9e:81:a1:7b:13:34:eb:fc:51:0c:a6:45:9b:cf: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CF:01:ED:36:EB:F7:95:E0:57:D8:A2:C1:78:58:9E:D3:75:0E:8B X509v3 Authority Key Identifier: keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3a2f33322d3438203d3e203234313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:b240::/32 Signature Algorithm: sha256WithRSAEncryption 85:67:e0:30:8b:0a:3f:b6:0d:f8:2d:ab:ed:6c:34:1c:1a:51: a1:75:19:67:fa:d3:c2:f9:c9:6b:54:3a:91:0e:d0:fa:ac:62: 2a:b0:0c:64:5b:52:e4:24:64:1d:a7:da:c8:15:43:d4:fd:ff: f1:49:fb:f3:e1:35:3c:c3:e1:96:94:79:2b:1c:a2:68:47:94: 46:1e:11:c6:63:bd:12:f2:99:29:cd:2d:66:16:16:19:14:c2: 7b:1e:e9:7e:5a:9c:86:5b:a3:4a:3d:49:2b:3e:10:4d:21:23: 67:5d:ba:d7:fe:d0:9a:21:ca:ff:9c:e1:49:7c:f3:ca:59:36: cc:07:95:20:54:d5:68:a6:2d:f8:e1:46:91:a9:b9:72:9d:e3: be:a4:ad:d1:d7:36:65:0d:17:cb:87:49:1b:35:75:4c:7b:8c: 65:44:56:d3:75:5d:f8:d7:40:5c:b4:60:e4:e8:7e:a3:aa:d3: bf:0c:de:15:80:49:a1:5c:91:b6:b9:17:58:e1:fc:4a:d5:52: f6:d7:8e:e8:4e:94:c6:4c:16:b8:a7:49:ce:f1:db:31:2f:90: 06:a7:f0:b5:24:0e:82:f3:a2:4c:fa:8a:69:3e:80:d0:18:46: 21:12:c0:95:1a:8f:ea:72:a8:11:58:b3:4c:5f:84:78:2c:38: 43:b1:fc:3a -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUW4c2EWeXggbt85jb3ggRkOXlArkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3 NzgwOUQwMjAeFw0yMzEyMDEwMTEzMzNaFw0yNDExMjkwMTE4MzNaMDMxMTAvBgNV BAMTKDMxQ0YwMUVEMzZFQkY3OTVFMDU3RDhBMkMxNzg1ODlFRDM3NTBFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mz8Gj53Q895jC1OFG3HnoBh/ MGKZUUEjTsR8+FYb7tzqnjAQSwn5K4BSVHNWTPvIvh9lP88pRfKbkXJD3wl/HxVe OQ2CXiSU31rD/I7GbT+T9ASDuxc+ARfRu/ascieRR5TSfNS6vyrrdVkg6WLEqcRP TLs+YmkS8lsArst1xtSXmmwbKOSw98ephdx/tyjic2t2zOdqqpOqF/glb9XGpEUl Y+iJBIdY1hUkBTsdwiVtlxcdW/Cw5azjF+Y47F9JjfX811uClR/ne3PavpEvLUdG hC+ZnhGhdokI1ncLzlonnp8cMbUN481g2Z2iy1uegaF7EzTr/FEMpkWbz4+ZAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUMc8B7Tbr95XgV9iiwXhYntN1DoswHwYDVR0j BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw OUQwMi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhZDZkY2M5LTE3MDAtNDhlYi05 MDk5LTY2NzhmOTFiZjQ0ZS8wLzMyMzQzMDMyM2E2MjMyMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMyMzQzMTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkArJAMA0GCSqGSIb3 DQEBCwUAA4IBAQCFZ+Awiwo/tg34LavtbDQcGlGhdRln+tPC+clrVDqRDtD6rGIq sAxkW1LkJGQdp9rIFUPU/f/xSfvz4TU8w+GWlHkrHKJoR5RGHhHGY70S8pkpzS1m FhYZFMJ7Hul+WpyGW6NKPUkrPhBNISNnXbrX/tCaIcr/nOFJfPPKWTbMB5UgVNVo pi344UaRqblyneO+pK3R1zZlDRfLh0kbNXVMe4xlRFbTdV3410BctGDk6H6jqtO/ DN4VgEmhXJG2uRdY4fxK1VL2147oTpTGTBa4p0nO8dsxL5AGp/C1JA6C86JM+opp PoDQGEYhEsCVGo/qcqgRWLNMX4R4LDhDsfw6 -----END CERTIFICATE-----Generated at Fri May 3 04:35:14 2024 by rpki-client on console-ams.rpki-client.org