$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/323430323a613130303a3a2f33322d3332203d3e203435323839.roa File: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (raw, json) Hash identifier: beHWq0GS2obo+X3GSMRaiVPGdQpRPml1kAdwRQsNLTc= Subject key identifier: A1:CD:A5:E6:78:39:26:52:88:E7:6D:96:82:92:11:F0:21:E6:32:78 Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 5B01A47CBFE27360C378F20582807EA82A9C1C9B Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/323430323a613130303a3a2f33322d3332203d3e203435323839.roa Signing time: Wed 20 Mar 2024 07:02:05 +0000 ROA not before: Wed 20 Mar 2024 06:57:05 +0000 ROA not after: Wed 19 Mar 2025 07:02:05 +0000 asID: 45289 IP address blocks: 2402:a100::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:01:a4:7c:bf:e2:73:60:c3:78:f2:05:82:80:7e:a8:2a:9c:1c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: Mar 20 06:57:05 2024 GMT Not After : Mar 19 07:02:05 2025 GMT Subject: CN=A1CDA5E67839265288E76D96829211F021E63278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:46:54:80:8e:4d:36:04:af:ee:2f:d9:4c: 63:6c:c6:27:4f:05:85:41:5e:28:42:6d:d1:6f:43: 0c:71:aa:4d:a3:09:ec:cf:4c:ae:51:b9:83:40:22: 40:15:1e:6a:2c:28:6d:5d:df:f0:bc:08:94:f2:00: 08:2c:05:db:2d:5c:03:66:2f:bd:c9:6f:d4:90:84: 0a:72:0b:1f:27:bc:00:9f:62:ad:f5:d6:ed:ed:26: f5:31:f6:42:ce:2b:43:81:08:f6:1e:c6:10:2b:af: 38:4a:76:85:c6:4d:c3:22:ec:44:a6:17:de:97:69: 41:d9:d8:ef:98:d3:46:9b:47:1b:2c:2f:67:ac:03: 84:14:7c:c4:d9:7f:b0:48:6d:17:26:35:db:92:39: 4e:a2:ac:1b:e4:b8:2c:df:fb:8f:81:1d:e4:1e:22: 6f:b2:dc:ef:df:1d:c9:ca:23:82:00:11:6d:67:82: 61:93:a1:7b:1b:4b:94:01:f8:6c:05:c6:07:90:bc: 13:84:df:a4:da:e3:16:49:88:58:c1:d0:c4:1e:6c: e5:2a:f2:d3:be:60:2e:76:32:65:58:3e:9c:2c:90: a5:59:07:f9:cd:d3:1b:88:5c:e6:39:40:2c:c9:22: 67:b3:f0:20:45:2c:bf:60:6f:85:d4:07:c7:82:46: 37:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CD:A5:E6:78:39:26:52:88:E7:6D:96:82:92:11:F0:21:E6:32:78 X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/323430323a613130303a3a2f33322d3332203d3e203435323839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:a100::/32 Signature Algorithm: sha256WithRSAEncryption 2a:8c:87:e9:4b:c2:57:9d:84:1f:a1:4a:c8:06:8c:8b:d4:e0: 47:28:09:bb:2b:4f:b9:87:6c:f6:b2:87:ef:77:d5:64:2a:dd: 67:5f:ed:64:01:25:8f:8b:8d:98:bd:80:0f:53:a2:1e:d7:7a: aa:2c:57:dd:cb:98:c4:4f:02:2d:f0:cb:35:d2:f4:cb:f7:5f: e2:04:71:35:fd:9f:c7:de:61:2e:89:e9:a6:3a:f5:64:6f:cd: 78:35:0d:2b:b2:f9:bd:ce:c2:a1:e2:fa:ea:3e:a0:cd:82:c9: 92:c0:f0:1f:76:57:6b:7f:8a:8b:74:33:ce:c1:8d:04:d7:55: 03:8d:8f:c5:03:eb:4a:a4:27:d8:13:e1:f6:9b:f7:f5:9b:bf: 5b:f3:72:09:a7:ca:9f:5c:b6:b4:2c:a8:17:e0:39:5a:66:68: 67:76:9a:ff:2f:b9:21:0e:92:f3:56:83:f4:2b:1b:8c:2a:87: e1:20:47:83:73:91:5c:06:99:16:3f:ab:19:b6:5f:14:92:f7: 85:99:68:17:63:26:5e:66:40:28:65:8a:46:81:6c:75:4f:4c: 57:48:f3:87:f3:f0:05:03:d7:95:a9:f7:5b:89:7a:67:6a:fe: 2f:8c:b1:9b:a1:36:13:5c:e8:58:6a:4a:26:a5:41:4f:65:6d: d3:b9:e0:b5 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUWwGkfL/ic2DDePIFgoB+qCqcHJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNDAzMjAwNjU3MDVaFw0yNTAzMTkwNzAyMDVaMDMxMTAvBgNV BAMTKEExQ0RBNUU2NzgzOTI2NTI4OEU3NkQ5NjgyOTIxMUYwMjFFNjMyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UEZUgI5NNgSv7i/ZTGNsxidP BYVBXihCbdFvQwxxqk2jCezPTK5RuYNAIkAVHmosKG1d3/C8CJTyAAgsBdstXANm L73Jb9SQhApyCx8nvACfYq311u3tJvUx9kLOK0OBCPYexhArrzhKdoXGTcMi7ESm F96XaUHZ2O+Y00abRxssL2esA4QUfMTZf7BIbRcmNduSOU6irBvkuCzf+4+BHeQe Im+y3O/fHcnKI4IAEW1ngmGToXsbS5QB+GwFxgeQvBOE36Ta4xZJiFjB0MQebOUq 8tO+YC52MmVYPpwskKVZB/nN0xuIXOY5QCzJImez8CBFLL9gb4XUB8eCRjclAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUoc2l5ng5JlKI522WgpIR8CHmMngwHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmNjMDBkLWNlNzktNDIxNi1h NjJiLWUzZDUwY2M3OTQ0Mi8wLzMyMzQzMDMyM2E2MTMxMzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM0MzUzMjM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAqEAMA0GCSqGSIb3 DQEBCwUAA4IBAQAqjIfpS8JXnYQfoUrIBoyL1OBHKAm7K0+5h2z2sofvd9VkKt1n X+1kASWPi42YvYAPU6Ie13qqLFfdy5jETwIt8Ms10vTL91/iBHE1/Z/H3mEuiemm OvVkb814NQ0rsvm9zsKh4vrqPqDNgsmSwPAfdldrf4qLdDPOwY0E11UDjY/FA+tK pCfYE+H2m/f1m79b83IJp8qfXLa0LKgX4DlaZmhndpr/L7khDpLzVoP0KxuMKofh IEeDc5FcBpkWP6sZtl8UkveFmWgXYyZeZkAoZYpGgWx1T0xXSPOH8/AFA9eVqfdb iXpnav4vjLGboTYTXOhYakompUFPZW3TueC1 -----END CERTIFICATE-----Generated at Mon Jun 24 01:36:05 2024 by rpki-client on console-fra.rpki-client.org