$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa File: 323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa (raw, json) Hash identifier: 6AwEo/e34T52pGPjVftinSiroJLAo7obr8TQlwaRxt4= Subject key identifier: 3C:20:7D:A0:97:25:05:10:D9:19:D8:AC:2E:F8:EF:3E:FC:B4:59:4C Certificate issuer: /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F Certificate serial: 0269164FAE1C18D27D3C58DEDD49C91297CEDDB1 Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa Signing time: Mon 31 Jul 2023 00:04:37 +0000 ROA not before: Sun 30 Jul 2023 23:59:37 +0000 ROA not after: Mon 29 Jul 2024 00:04:37 +0000 asID: 38506 IP address blocks: 2403:b200:a99c::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:69:16:4f:ae:1c:18:d2:7d:3c:58:de:dd:49:c9:12:97:ce:dd:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F Validity Not Before: Jul 30 23:59:37 2023 GMT Not After : Jul 29 00:04:37 2024 GMT Subject: CN=3C207DA097250510D919D8AC2EF8EF3EFCB4594C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:71:2f:06:99:37:af:62:ef:af:e9:16:09: c6:ae:b3:9a:48:5a:9c:aa:15:b8:30:f8:29:ac:fc: 9b:5b:f2:ec:2d:55:3f:1b:6c:bd:27:e4:34:d9:fb: 5c:fb:6b:65:7d:7a:84:7e:e5:2a:79:7c:09:a4:46: 6f:8c:00:34:d7:c2:99:38:55:89:9d:21:4e:5c:92: 34:01:d2:81:fa:18:c0:a6:15:89:09:82:88:31:7e: 89:5e:2d:2e:3d:e4:23:a8:6d:9c:16:3e:df:08:7d: 9b:7f:a2:21:bc:48:57:c6:ae:02:59:63:d3:34:eb: ea:dc:a6:a0:c8:fe:e5:77:fb:8d:4a:df:b3:f7:0d: 3d:57:b3:e4:42:80:5d:78:ef:80:b6:f4:95:d9:6e: 47:5e:dc:c2:3d:62:1d:7d:35:74:0f:c8:47:97:fb: c8:ec:ca:86:12:eb:99:99:e6:c3:ea:bc:7b:8c:d8: 5d:af:4c:c0:9a:86:7e:44:16:52:8c:11:44:bf:2f: af:97:1c:c3:5b:b0:3c:72:f5:26:a0:9d:0f:af:65: cd:93:4e:20:52:18:d9:1e:8d:88:0b:98:22:ec:ee: 38:f1:eb:2f:9e:87:f7:3b:e9:8b:7a:d9:a3:8d:06: e6:78:ba:e5:a6:52:f6:69:3b:ec:1d:cd:b2:7c:5f: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:20:7D:A0:97:25:05:10:D9:19:D8:AC:2E:F8:EF:3E:FC:B4:59:4C X509v3 Authority Key Identifier: keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b200:a99c::/48 Signature Algorithm: sha256WithRSAEncryption 74:b7:73:0e:db:7d:67:78:67:da:b8:2d:35:5f:17:a4:e6:e9: 2a:cb:3f:47:92:3e:53:04:7a:8d:22:71:f0:22:8a:d1:b0:39: ae:5b:6b:26:76:dc:ec:dd:12:e4:66:68:c3:8f:52:b0:4f:75: 94:5e:79:02:fc:f5:45:f0:72:aa:1e:a6:c7:c9:d7:6b:5f:6e: 83:9c:24:72:c8:a7:ef:d4:b5:97:30:81:07:cc:69:3b:68:2b: 3f:dc:15:28:90:ec:45:1d:86:d2:26:33:93:5f:36:c4:43:23: 74:8c:d2:44:2c:1d:6d:bb:d6:a9:67:3a:45:28:e6:21:43:99: 3a:7c:f7:c7:af:b0:e3:f8:b9:6f:68:71:df:05:ac:60:58:2d: c8:ed:3f:34:25:32:24:33:25:31:ef:99:c8:26:a0:fb:5f:01: 37:26:dd:10:32:f7:03:12:c0:1c:92:94:57:eb:61:ae:ef:37: c4:df:53:1b:f5:db:c5:b7:1d:c8:17:cc:26:16:e3:b3:c0:e2: fa:3b:ec:18:72:dd:b1:1e:1a:fe:35:45:65:b9:a4:bd:b0:45: f6:2b:e4:63:48:8c:6a:f7:52:e8:ec:29:a2:4e:e0:4f:98:46: 13:85:93:17:bd:52:8a:3a:18:65:5d:62:17:87:06:8f:c9:80: 09:c8:23:e4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAmkWT64cGNJ9PFje3UnJEpfO3bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEy MTg4ODY2RjAeFw0yMzA3MzAyMzU5MzdaFw0yNDA3MjkwMDA0MzdaMDMxMTAvBgNV BAMTKDNDMjA3REEwOTcyNTA1MTBEOTE5RDhBQzJFRjhFRjNFRkNCNDU5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/eXEvBpk3r2Lvr+kWCcaus5pI WpyqFbgw+Cms/Jtb8uwtVT8bbL0n5DTZ+1z7a2V9eoR+5Sp5fAmkRm+MADTXwpk4 VYmdIU5ckjQB0oH6GMCmFYkJgogxfoleLS495COobZwWPt8IfZt/oiG8SFfGrgJZ Y9M06+rcpqDI/uV3+41K37P3DT1Xs+RCgF1474C29JXZbkde3MI9Yh19NXQPyEeX +8jsyoYS65mZ5sPqvHuM2F2vTMCahn5EFlKMEUS/L6+XHMNbsDxy9SagnQ+vZc2T TiBSGNkejYgLmCLs7jjx6y+eh/c76Yt62aONBuZ4uuWmUvZpO+wdzbJ8XyutAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUPCB9oJclBRDZGdisLvjvPvy0WUwwHwYDVR0j BBgwFoAUR2YdxCorzFvO7nOsirpxsSGIhm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDliYTk1My04NDg5LTQ1MGUtYmJkZi03NjQ1NzFmYmFjZTcvMC80NzY2MURDNDJB MkJDQzVCQ0VFRTczQUM4QUJBNzFCMTIxODg4NjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEyMTg4 ODY2Ri5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i YmRmLTc2NDU3MWZiYWNlNy8wLzMyMzQzMDMzM2E2MjMyMzAzMDNhNjEzOTM5NjMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAOy AKmcMA0GCSqGSIb3DQEBCwUAA4IBAQB0t3MO231neGfauC01Xxek5ukqyz9Hkj5T BHqNInHwIorRsDmuW2smdtzs3RLkZmjDj1KwT3WUXnkC/PVF8HKqHqbHyddrX26D nCRyyKfv1LWXMIEHzGk7aCs/3BUokOxFHYbSJjOTXzbEQyN0jNJELB1tu9apZzpF KOYhQ5k6fPfHr7Dj+LlvaHHfBaxgWC3I7T80JTIkMyUx75nIJqD7XwE3Jt0QMvcD EsAckpRX62Gu7zfE31Mb9dvFtx3IF8wmFuOzwOL6O+wYct2xHhr+NUVluaS9sEX2 K+RjSIxq91Lo7CmiTuBPmEYThZMXvVKKOhhlXWIXhwaPyYAJyCPk -----END CERTIFICATE-----Generated at Sat Jun 1 11:46:17 2024 by rpki-client on console-ams.rpki-client.org