$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa File: 323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa (raw, json) Hash identifier: WhHuzfN3KzqEKbS7/abaNBWCoJ4BMh66R4YQr10VLTA= Subject key identifier: 9A:32:F8:B6:DE:F8:CA:B8:D9:2C:09:74:58:7B:D9:01:32:E6:6B:A8 Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Certificate serial: 1C902703823E80047D2EA96E2C128354CA2EAA03 Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa Signing time: Mon 26 Feb 2024 17:00:01 +0000 ROA not before: Mon 26 Feb 2024 16:55:01 +0000 ROA not after: Mon 24 Feb 2025 17:00:01 +0000 asID: 139417 IP address blocks: 2404:cac0:d35::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:90:27:03:82:3e:80:04:7d:2e:a9:6e:2c:12:83:54:ca:2e:aa:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Validity Not Before: Feb 26 16:55:01 2024 GMT Not After : Feb 24 17:00:01 2025 GMT Subject: CN=9A32F8B6DEF8CAB8D92C0974587BD90132E66BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:43:13:56:83:93:7a:45:ee:52:ae:02:b0: 71:c8:25:ba:6f:66:4f:6c:41:6b:3d:12:12:d2:e2: 39:ff:68:05:3e:e9:1d:6b:e4:0b:f2:ad:78:90:da: 3d:2e:f3:70:0f:b9:02:a1:c3:d0:bf:c2:5e:f1:0d: 8e:f1:38:06:7f:e3:f9:2d:2b:51:d1:28:da:d6:c0: 90:e9:cc:49:8b:bd:49:50:43:a9:a6:f1:0b:95:ce: 27:a5:2d:8e:4b:bf:fa:5e:ff:00:d7:ba:bc:96:43: 01:e6:ac:7b:09:25:21:38:0c:bd:4c:47:fd:b5:fe: 5d:78:6e:f4:ed:13:a4:b0:f4:5d:5c:94:47:fa:0c: 7c:47:cf:cd:45:fb:d5:3e:f8:9a:e3:b9:c7:32:c3: d7:db:87:5b:d0:bc:b1:d0:68:ba:db:46:2a:6b:d0: 52:40:03:ad:1a:eb:5f:0f:5a:bd:74:2d:59:a6:3f: 49:46:91:9f:80:97:41:5c:5c:77:70:6b:97:a7:32: e5:fa:47:07:1d:b8:d3:be:56:1b:8d:c1:8d:ec:b3: 5d:4f:a1:da:60:ae:6a:90:57:1b:e3:78:74:54:d0: e2:bb:e1:ae:ea:6e:79:6b:4d:4c:8b:ea:8d:1f:d3: c5:6a:75:94:64:77:ff:dd:d7:f8:d0:53:b8:05:4f: a5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:32:F8:B6:DE:F8:CA:B8:D9:2C:09:74:58:7B:D9:01:32:E6:6B:A8 X509v3 Authority Key Identifier: keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:cac0:d35::/48 Signature Algorithm: sha256WithRSAEncryption a4:ae:e8:c0:39:9a:b3:47:34:22:4c:da:74:ff:04:6a:f5:ab: 04:24:23:a9:19:bc:b6:2f:ea:a7:87:91:ab:21:a3:5b:48:ca: b4:53:4c:ef:70:b2:2a:d0:a3:5c:28:0c:60:bf:a1:70:27:50: 72:eb:42:55:5c:30:c8:3c:6b:e1:07:f4:51:34:e4:04:d2:56: cb:b8:75:2e:19:f4:38:b0:5d:d1:12:a9:49:48:8c:ab:0a:2a: fa:9d:22:82:24:79:c5:17:3d:c9:94:dd:aa:5e:37:b2:1f:77: 2f:f7:b7:43:95:06:27:50:24:dd:ef:1d:87:35:61:8b:c6:9c: 4f:a9:b0:66:8d:51:a5:3e:a4:4d:21:bd:8f:96:10:16:8a:fd: 3a:48:e8:52:ab:4b:1a:d6:87:df:ad:48:1b:0e:16:43:24:b1: 57:0f:4e:fb:56:96:d6:35:b3:5f:f0:2a:44:8a:9f:9a:7e:2b: 30:78:65:34:eb:7d:f0:03:32:92:a6:2d:48:cb:1f:5f:3b:27: a6:95:d4:a5:fb:8a:b5:14:10:67:c9:6a:e1:89:21:ab:f9:1f: 47:0e:57:9a:5e:77:22:c8:fe:59:31:f5:0c:16:93:df:e9:b4: 8f:8a:1c:13:b6:f7:e3:4f:97:cf:3b:cc:68:1a:12:91:87:d7: dc:b5:23:69 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHJAnA4I+gAR9LqluLBKDVMouqgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3 MkRBRURENjAeFw0yNDAyMjYxNjU1MDFaFw0yNTAyMjQxNzAwMDFaMDMxMTAvBgNV BAMTKDlBMzJGOEI2REVGOENBQjhEOTJDMDk3NDU4N0JEOTAxMzJFNjZCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjkMTVoOTekXuUq4CsHHIJbpv Zk9sQWs9EhLS4jn/aAU+6R1r5AvyrXiQ2j0u83APuQKhw9C/wl7xDY7xOAZ/4/kt K1HRKNrWwJDpzEmLvUlQQ6mm8QuVzielLY5Lv/pe/wDXuryWQwHmrHsJJSE4DL1M R/21/l14bvTtE6Sw9F1clEf6DHxHz81F+9U++Jrjuccyw9fbh1vQvLHQaLrbRipr 0FJAA60a618PWr10LVmmP0lGkZ+Al0FcXHdwa5enMuX6RwcduNO+VhuNwY3ss11P odpgrmqQVxvjeHRU0OK74a7qbnlrTUyL6o0f08VqdZRkd//d1/jQU7gFT6VBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUmjL4tt74yrjZLAl0WHvZATLma6gwHwYDVR0j BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB RURENi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDEzZmY0LTIwMmItNDk5OS1i NDVkLTczYzk3MmYxMDExNi8wLzMyMzQzMDM0M2E2MzYxNjMzMDNhNjQzMzM1M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzQzMTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATK wA01MA0GCSqGSIb3DQEBCwUAA4IBAQCkrujAOZqzRzQiTNp0/wRq9asEJCOpGby2 L+qnh5GrIaNbSMq0U0zvcLIq0KNcKAxgv6FwJ1By60JVXDDIPGvhB/RRNOQE0lbL uHUuGfQ4sF3REqlJSIyrCir6nSKCJHnFFz3JlN2qXjeyH3cv97dDlQYnUCTd7x2H NWGLxpxPqbBmjVGlPqRNIb2PlhAWiv06SOhSq0sa1offrUgbDhZDJLFXD077VpbW NbNf8CpEip+afisweGU0633wAzKSpi1Iyx9fOyemldSl+4q1FBBnyWrhiSGr+R9H DleaXnciyP5ZMfUMFpPf6bSPihwTtvfjT5fPO8xoGhKRh9fctSNp -----END CERTIFICATE-----Generated at Sat Jun 1 22:08:22 2024 by rpki-client on console-fra.rpki-client.org