$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: C7y41yN+uJ7/R4Kko+YepzMhVvoP9jXYr9rw0oywBZo= Subject key identifier: C9:A8:04:7F:0D:F4:87:9A:99:B7:2D:84:CD:2B:9B:7E:53:6B:34:EB Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 429DC6DD83B7D379DDEA1848FD54A75FF9E38C6A Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 29 Dec 2023 04:00:02 +0000 ROA not before: Fri 29 Dec 2023 03:55:02 +0000 ROA not after: Fri 27 Dec 2024 04:00:02 +0000 asID: 58552 IP address blocks: 2404:fd00:11::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 11:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9d:c6:dd:83:b7:d3:79:dd:ea:18:48:fd:54:a7:5f:f9:e3:8c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Dec 29 03:55:02 2023 GMT Not After : Dec 27 04:00:02 2024 GMT Subject: CN=C9A8047F0DF4879A99B72D84CD2B9B7E536B34EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:96:3c:07:cd:c3:94:47:ac:75:c6:14:85:66: e6:b9:de:f2:db:68:fd:d6:ed:25:24:3d:c6:b5:fc: af:08:5d:4b:cf:47:43:ed:47:2f:8d:82:be:86:fc: 67:f6:1d:af:73:d3:47:69:b6:e6:bb:df:b8:89:42: d2:0a:fb:47:1f:b3:a7:86:04:cf:97:63:ab:18:c3: 95:3f:2e:18:83:bc:a4:35:2c:47:de:35:1a:75:e6: 7d:5a:bd:3a:bd:11:6f:69:9f:83:b3:8a:85:85:84: b4:be:1c:43:4c:5b:2e:a8:e8:3e:45:4a:5f:7c:1a: ed:b3:1f:29:92:14:14:2d:76:78:6c:96:2d:e6:8e: 0e:75:bf:35:3b:ed:40:a6:44:3f:45:c9:bc:72:13: f6:ba:33:ec:2d:f7:ab:0b:9b:81:e4:6f:56:bd:ac: 39:e4:2d:46:08:cc:87:71:bf:07:e9:f0:1e:41:e7: db:8b:80:9e:3c:81:3b:a8:d7:1a:32:77:e0:89:08: d5:59:0d:77:e4:31:bc:2e:ac:9d:78:8b:93:ee:83: 48:61:f0:90:ae:33:e3:d2:f1:8e:e5:18:60:52:f6: 33:61:ca:28:7a:e6:0c:80:63:a6:00:cf:c8:8e:91: d2:55:5a:0d:46:34:80:a6:f9:97:21:36:6d:28:45: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A8:04:7F:0D:F4:87:9A:99:B7:2D:84:CD:2B:9B:7E:53:6B:34:EB X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:11::/48 Signature Algorithm: sha256WithRSAEncryption 2a:48:67:2e:20:76:d9:d8:e1:2d:43:62:9e:be:32:eb:be:52: 05:95:dd:5c:5a:b3:04:68:74:2c:88:91:6a:e2:3b:9e:4f:40: d5:8f:ae:68:85:bb:e9:28:b1:a8:5c:0b:51:3c:b1:a2:ec:e2: 5a:b0:a9:c9:85:44:ef:f7:91:00:59:6a:77:7c:18:12:bf:90: 85:f5:fb:e6:a1:3f:7b:8e:e4:58:66:49:47:f2:c4:ff:33:e7: f8:8e:6d:93:1e:2f:2f:8e:b3:82:03:0c:41:3d:fb:eb:c9:ff: 6b:9e:29:c0:fe:ef:82:6a:20:d9:72:2f:a5:89:99:e4:7b:48: 64:3f:a5:3f:e1:20:c9:9b:5f:f9:30:e1:d5:00:24:bb:19:d5: 45:d6:c3:39:e7:0a:94:b9:55:52:35:19:41:85:47:94:73:2e: 99:e1:e4:ed:5e:6d:42:d3:b8:42:6b:22:69:f2:73:8f:cd:a7: d0:e6:08:f0:57:f6:df:cb:c1:37:79:00:46:33:45:5d:80:4b: 25:3e:9f:16:8c:a1:7a:2b:1b:b6:0c:61:59:c7:44:2e:81:a8: 0c:4d:cd:10:59:fb:a6:b4:97:67:47:a9:59:2b:70:ba:fd:99: ee:2d:06:e3:44:6e:b8:3e:d1:a7:6f:9b:59:c4:bc:62:9a:5a: 1b:73:f9:54 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUQp3G3YO303nd6hhI/VSnX/njjGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yMzEyMjkwMzU1MDJaFw0yNDEyMjcwNDAwMDJaMDMxMTAvBgNV BAMTKEM5QTgwNDdGMERGNDg3OUE5OUI3MkQ4NENEMkI5QjdFNTM2QjM0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaljwHzcOUR6x1xhSFZua53vLb aP3W7SUkPca1/K8IXUvPR0PtRy+Ngr6G/Gf2Ha9z00dptua737iJQtIK+0cfs6eG BM+XY6sYw5U/LhiDvKQ1LEfeNRp15n1avTq9EW9pn4OzioWFhLS+HENMWy6o6D5F Sl98Gu2zHymSFBQtdnhsli3mjg51vzU77UCmRD9FybxyE/a6M+wt96sLm4Hkb1a9 rDnkLUYIzIdxvwfp8B5B59uLgJ48gTuo1xoyd+CJCNVZDXfkMbwurJ14i5Pug0hh 8JCuM+PS8Y7lGGBS9jNhyih65gyAY6YAz8iOkdJVWg1GNICm+ZchNm0oRVpfAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUyagEfw30h5qZty2EzSubflNrNOswHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABEw DQYJKoZIhvcNAQELBQADggEBACpIZy4gdtnY4S1DYp6+Muu+UgWV3VxaswRodCyI kWriO55PQNWPrmiFu+kosahcC1E8saLs4lqwqcmFRO/3kQBZand8GBK/kIX1++ah P3uO5FhmSUfyxP8z5/iObZMeLy+Os4IDDEE9++vJ/2ueKcD+74JqINlyL6WJmeR7 SGQ/pT/hIMmbX/kw4dUAJLsZ1UXWwznnCpS5VVI1GUGFR5RzLpnh5O1ebULTuEJr Imnyc4/Np9DmCPBX9t/LwTd5AEYzRV2ASyU+nxaMoXorG7YMYVnHRC6BqAxNzRBZ +6a0l2dHqVkrcLr9me4tBuNEbrg+0advm1nEvGKaWhtz+VQ= -----END CERTIFICATE-----Generated at Thu May 2 11:32:09 2024 by rpki-client on console-fra.rpki-client.org