$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/323430313a316230303a3a2f33322d3438203d3e203138313033.roa File: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (raw, json) Hash identifier: 99GC+WkZ9dJFNYACT2DN6pLmn7/RgzwBYW2m/6TCiHw= Subject key identifier: 2F:84:21:4E:1E:7A:31:17:25:C3:21:F2:B7:F1:D2:4F:B9:FC:13:13 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 681D9494F07D7DBB5A4FA32CCE0A530CC8A53628 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/323430313a316230303a3a2f33322d3438203d3e203138313033.roa Signing time: Mon 22 Apr 2024 05:09:11 +0000 ROA not before: Mon 22 Apr 2024 05:04:11 +0000 ROA not after: Mon 21 Apr 2025 05:09:11 +0000 asID: 18103 IP address blocks: 2401:1b00::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 09:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1d:94:94:f0:7d:7d:bb:5a:4f:a3:2c:ce:0a:53:0c:c8:a5:36:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Apr 22 05:04:11 2024 GMT Not After : Apr 21 05:09:11 2025 GMT Subject: CN=2F84214E1E7A311725C321F2B7F1D24FB9FC1313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:74:45:4a:e3:01:6d:49:43:47:52:d5:50: 5e:06:c2:f3:7e:c9:4b:cf:9e:5f:35:bf:4d:10:0c: 9e:9b:19:12:72:de:b1:ca:0d:96:79:fc:65:64:75: 3d:b0:b1:11:4f:29:7e:3f:fc:4e:27:ba:70:d2:7d: b6:a5:83:d2:bc:d4:23:25:e5:24:42:79:38:9b:66: 94:b0:91:cf:f1:bf:23:da:e3:a8:f7:96:d7:c0:5a: 83:4f:d1:eb:6a:d1:f6:03:7c:29:20:87:a7:ff:5d: 67:e6:5a:46:94:4d:c1:92:9c:c1:9d:97:2e:a8:80: e6:8b:5e:ce:53:13:e6:c0:30:0d:84:71:02:1f:fc: 4b:85:05:a7:01:d6:f0:07:fb:6b:6a:b9:da:77:11: 6b:2b:de:d7:a6:0d:55:27:0e:db:6f:fa:23:b7:52: 9f:25:ce:16:1d:07:6a:6a:31:e7:cd:d1:ed:6b:fc: 0b:0c:aa:9e:6d:57:ce:cd:58:7c:3c:e6:0a:92:44: 40:e3:b1:c1:28:e3:4c:86:3f:37:f2:15:87:d5:a9: 70:d7:86:ba:38:82:d1:49:15:cc:4b:9b:ba:da:57: be:b0:e3:92:96:68:f6:7a:71:6f:76:09:83:9b:ba: c1:49:72:52:fa:7c:41:47:d8:03:79:f0:f6:ab:6e: c7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:84:21:4E:1E:7A:31:17:25:C3:21:F2:B7:F1:D2:4F:B9:FC:13:13 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/323430313a316230303a3a2f33322d3438203d3e203138313033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:1b00::/32 Signature Algorithm: sha256WithRSAEncryption 90:bf:85:5c:53:d1:42:4c:af:0c:5c:35:a5:e6:c9:3b:29:bf: a0:8e:96:e0:fd:94:af:78:69:70:55:6d:c0:36:93:08:8a:c7: 4a:3c:19:19:e6:55:48:2a:90:aa:a3:2e:cc:92:50:05:79:aa: 03:0b:cf:dc:91:25:55:86:33:b2:49:95:c1:9e:fe:87:3e:9b: ba:93:d9:67:ab:b7:d3:00:c3:76:5d:07:c6:16:c4:c3:eb:c2: 92:9b:c2:b7:54:00:25:4b:1e:3b:34:3a:98:3e:82:59:48:17: 3a:5b:2b:47:88:2a:b4:77:40:b4:cf:6a:ca:f0:a3:1f:6b:78: cb:5a:ac:65:e7:20:9f:f6:6e:a2:a0:e0:1f:6f:30:1f:89:9e: c9:6b:19:f6:6f:ac:e3:8d:51:fd:34:2d:6f:17:7a:fc:4a:79: 22:72:45:28:a6:32:97:8f:9b:2d:bb:7d:5a:4e:cc:ff:26:ac: 4f:4e:49:f3:da:54:6f:bf:38:55:74:73:64:f8:6b:2e:52:8e: 08:6d:31:f0:76:ba:18:01:50:b3:50:95:4c:71:7a:f4:05:5c: ff:ef:6c:b3:74:51:1b:4f:f8:74:ac:d3:12:b8:92:91:d2:3d: ce:9a:05:93:ec:58:89:45:99:d8:e4:67:e2:82:4b:38:ad:ec: bd:9f:8c:ae -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUaB2UlPB9fbtaT6MszgpTDMilNigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNDA0MjIwNTA0MTFaFw0yNTA0MjEwNTA5MTFaMDMxMTAvBgNV BAMTKDJGODQyMTRFMUU3QTMxMTcyNUMzMjFGMkI3RjFEMjRGQjlGQzEzMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5B3RFSuMBbUlDR1LVUF4GwvN+ yUvPnl81v00QDJ6bGRJy3rHKDZZ5/GVkdT2wsRFPKX4//E4nunDSfbalg9K81CMl 5SRCeTibZpSwkc/xvyPa46j3ltfAWoNP0etq0fYDfCkgh6f/XWfmWkaUTcGSnMGd ly6ogOaLXs5TE+bAMA2EcQIf/EuFBacB1vAH+2tqudp3EWsr3temDVUnDttv+iO3 Up8lzhYdB2pqMefN0e1r/AsMqp5tV87NWHw85gqSREDjscEo40yGPzfyFYfVqXDX hro4gtFJFcxLm7raV76w45KWaPZ6cW92CYObusFJclL6fEFH2AN58ParbseZAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUL4QhTh56MRclwyHyt/HST7n8ExMwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxOTljMWFmLWQ5YzctNGZmZC1i YTAzLWEzZTFjZGQ4YWVlMC8wLzMyMzQzMDMxM2EzMTYyMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzgzMTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkARsAMA0GCSqGSIb3 DQEBCwUAA4IBAQCQv4VcU9FCTK8MXDWl5sk7Kb+gjpbg/ZSveGlwVW3ANpMIisdK PBkZ5lVIKpCqoy7MklAFeaoDC8/ckSVVhjOySZXBnv6HPpu6k9lnq7fTAMN2XQfG FsTD68KSm8K3VAAlSx47NDqYPoJZSBc6WytHiCq0d0C0z2rK8KMfa3jLWqxl5yCf 9m6ioOAfbzAfiZ7Jaxn2b6zjjVH9NC1vF3r8SnkickUopjKXj5stu31aTsz/JqxP Tknz2lRvvzhVdHNk+GsuUo4IbTHwdroYAVCzUJVMcXr0BVz/72yzdFEbT/h0rNMS uJKR0j3OmgWT7FiJRZnY5Gfigks4rey9n4yu -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:31 2024 by rpki-client on console-fra.rpki-client.org