$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a3a2f33322d3332203d3e203234323036.roa File: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (raw, json) Hash identifier: lKtbNRGZP6sx00TcAsCja7L9CbiLdDsBEUqBTV3MEA8= Subject key identifier: 47:27:7F:5D:8B:0F:DF:0B:6C:71:40:92:0A:9A:3F:5D:78:FE:97:E1 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 14F395C516E72F1EC3E2F8714CA76560E527C1BA Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a3a2f33322d3332203d3e203234323036.roa Signing time: Wed 09 Aug 2023 09:00:00 +0000 ROA not before: Wed 09 Aug 2023 08:55:00 +0000 ROA not after: Wed 07 Aug 2024 09:00:00 +0000 asID: 24206 IP address blocks: 2402:ab00::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 03:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f3:95:c5:16:e7:2f:1e:c3:e2:f8:71:4c:a7:65:60:e5:27:c1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Aug 9 08:55:00 2023 GMT Not After : Aug 7 09:00:00 2024 GMT Subject: CN=47277F5D8B0FDF0B6C7140920A9A3F5D78FE97E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:32:79:04:c8:4b:86:5c:1a:d6:c0:80:c2:d1: 3e:f6:5e:88:17:1c:e5:7c:1b:5d:a0:25:cf:09:5a: c2:a7:1c:e7:a2:d3:db:ad:83:91:90:ab:dd:b8:9a: 9a:b6:55:46:cf:52:98:70:2a:98:92:ae:5c:ab:48: b6:5d:77:da:56:dc:cf:c8:c4:7a:54:55:ff:e0:f0: 80:ab:53:7d:50:27:4d:c8:1c:40:e1:6e:ba:a3:12: d4:c5:58:18:6e:6b:b4:45:8d:3c:a8:fc:c7:f0:cc: 60:c5:ca:e0:25:5a:5a:45:86:2b:9c:68:ae:5b:e0: 36:8c:8f:2a:3c:b8:97:cd:ac:20:66:9c:b6:2e:a1: 9c:6a:fc:c4:90:49:f1:5e:7d:d7:86:fa:0d:81:fb: ab:62:ba:8c:35:e2:aa:1d:6a:9d:60:08:75:64:00: 2d:d7:b1:74:93:25:93:60:41:50:ef:58:f1:65:6e: f2:d8:eb:74:f4:65:bb:41:23:c6:ea:19:79:c7:68: e6:5c:67:d1:70:e0:d5:1b:77:4d:21:d1:5a:0d:18: 23:3d:52:b0:79:b1:80:a3:4c:73:82:06:66:b7:37: 99:99:47:15:5e:e4:07:3d:89:51:a4:1a:35:d1:4c: 5a:c2:01:81:14:d1:ee:03:df:23:7c:2a:13:5a:a7: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:27:7F:5D:8B:0F:DF:0B:6C:71:40:92:0A:9A:3F:5D:78:FE:97:E1 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a3a2f33322d3332203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:ab00::/32 Signature Algorithm: sha256WithRSAEncryption 6f:8f:4e:b2:da:e4:ac:8e:a6:5e:18:12:ed:f2:e8:9c:7e:0e: f4:30:d8:f3:a3:9c:b2:f9:17:72:a2:4b:a2:ba:f9:e0:a8:c8: ac:72:7c:5c:c9:92:b2:d5:56:ff:6d:92:3a:4c:ee:31:60:7b: 60:5e:dc:3a:eb:ee:31:79:e8:a3:55:48:e5:b7:2f:30:b8:48: 84:39:be:65:bf:0b:67:b6:9b:2a:1d:0b:c9:13:63:23:a7:2a: 03:72:c7:d6:34:a3:92:9f:0c:cd:ce:79:08:e4:6d:9f:19:71: dd:0a:3b:1e:77:44:99:33:f7:a7:38:6c:d5:b4:03:6f:64:11: 7a:01:bd:8b:9e:e7:f7:3c:8f:dc:a1:52:26:07:c5:88:34:6a: d5:16:84:51:83:39:1b:d4:96:67:c8:c7:c7:6f:3f:1a:99:c7: d5:66:1b:9f:87:17:e9:6c:94:b5:89:be:96:c6:4e:5b:e9:2f: 75:fd:6e:9e:f2:db:64:96:9f:4c:86:67:75:1b:29:3a:8b:7d: 81:f3:e6:1a:00:0a:a4:84:61:bf:f6:19:85:49:2f:2a:e1:18: ad:1e:d6:33:8e:75:2d:98:e1:ee:e7:14:21:4a:29:2c:58:5d: 9c:b7:2e:77:ad:a7:9f:bd:cc:f8:99:75:ad:98:c3:b8:1d:3c: 4d:85:53:bc -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUFPOVxRbnLx7D4vhxTKdlYOUnwbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yMzA4MDkwODU1MDBaFw0yNDA4MDcwOTAwMDBaMDMxMTAvBgNV BAMTKDQ3Mjc3RjVEOEIwRkRGMEI2QzcxNDA5MjBBOUEzRjVENzhGRTk3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMnkEyEuGXBrWwIDC0T72XogX HOV8G12gJc8JWsKnHOei09utg5GQq924mpq2VUbPUphwKpiSrlyrSLZdd9pW3M/I xHpUVf/g8ICrU31QJ03IHEDhbrqjEtTFWBhua7RFjTyo/MfwzGDFyuAlWlpFhiuc aK5b4DaMjyo8uJfNrCBmnLYuoZxq/MSQSfFefdeG+g2B+6tiuow14qodap1gCHVk AC3XsXSTJZNgQVDvWPFlbvLY63T0ZbtBI8bqGXnHaOZcZ9Fw4NUbd00h0VoNGCM9 UrB5sYCjTHOCBma3N5mZRxVe5Ac9iVGkGjXRTFrCAYEU0e4D3yN8KhNap7qnAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQURyd/XYsP3wtscUCSCpo/XXj+l+EwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzQzMDMyM2E2MTYyMzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMyMzQzMjMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAqsAMA0GCSqGSIb3 DQEBCwUAA4IBAQBvj06y2uSsjqZeGBLt8uicfg70MNjzo5yy+RdyokuiuvngqMis cnxcyZKy1Vb/bZI6TO4xYHtgXtw66+4xeeijVUjlty8wuEiEOb5lvwtntpsqHQvJ E2MjpyoDcsfWNKOSnwzNznkI5G2fGXHdCjsed0SZM/enOGzVtANvZBF6Ab2Lnuf3 PI/coVImB8WINGrVFoRRgzkb1JZnyMfHbz8amcfVZhufhxfpbJS1ib6Wxk5b6S91 /W6e8ttklp9Mhmd1Gyk6i32B8+YaAAqkhGG/9hmFSS8q4RitHtYzjnUtmOHu5xQh SiksWF2cty53raefvcz4mXWtmMO4HTxNhVO8 -----END CERTIFICATE-----Generated at Sat Jun 1 23:00:29 2024 by rpki-client on console-ams.rpki-client.org