$ rpki-client -vvf rpki.co/repo/Simple/2/323030313a6466323a343563303a3a2f34382d3438203d3e20393435.roa File: 323030313a6466323a343563303a3a2f34382d3438203d3e20393435.roa (raw, json) Hash identifier: MFJe6AyQAlx0EfC/swwmCPEgsDDvmlFs7mt8AHpZVXE= Subject key identifier: 86:F7:B5:C9:57:0F:EF:0F:93:34:3F:D5:93:DB:3B:9C:66:3E:4D:0F Certificate issuer: /CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9 Certificate serial: 4E30F887D8DC062F7E6D365FFE0C4746C79B92FC Authority key identifier: 70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer Subject info access: rsync://rpki.co/repo/Simple/2/323030313a6466323a343563303a3a2f34382d3438203d3e20393435.roa Signing time: Mon 09 Oct 2023 04:41:58 +0000 ROA not before: Mon 09 Oct 2023 04:36:58 +0000 ROA not after: Mon 07 Oct 2024 04:41:58 +0000 asID: 945 IP address blocks: 2001:df2:45c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 09:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:30:f8:87:d8:dc:06:2f:7e:6d:36:5f:fe:0c:47:46:c7:9b:92:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9 Validity Not Before: Oct 9 04:36:58 2023 GMT Not After : Oct 7 04:41:58 2024 GMT Subject: CN=86F7B5C9570FEF0F93343FD593DB3B9C663E4D0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:71:c9:c2:55:85:85:ea:3b:16:32:a8:cb: ef:cc:b3:07:fe:29:c8:13:0d:01:53:7d:79:52:46: c2:d0:9f:b7:42:46:84:46:35:8f:cc:9b:e3:f5:db: 71:2a:76:1d:fd:c1:71:d2:e4:a0:88:18:0a:54:06: ee:d5:59:a5:6f:54:0f:9d:c7:bb:f0:b2:87:7d:3d: fb:d0:c5:c1:fb:d9:0f:47:7e:a4:5f:ad:85:43:1d: b1:93:23:9f:2d:6f:2b:8c:28:44:19:53:ee:33:5a: 7b:93:8f:3a:b9:6f:f6:cf:47:d8:a0:f1:d2:dc:1e: 0e:ca:92:84:03:ff:34:ff:27:83:07:ea:c2:59:09: ad:bb:96:e4:59:1d:25:34:74:2d:e4:79:ff:6a:6b: ce:c1:69:ea:87:57:33:ee:6f:b0:75:54:90:4b:19: 73:e0:a5:a8:1a:fb:e2:fe:f2:93:56:1a:02:12:bf: 36:1a:23:07:a0:b4:d8:5a:94:41:83:22:a9:c3:e8: f1:c9:9e:8f:f3:51:68:0d:6b:15:cd:6b:6e:26:a5: 9a:1b:13:d2:62:a9:f8:b2:3c:ab:d1:c7:32:33:32: 1f:45:f5:77:87:36:82:59:4b:92:7a:3d:12:70:9e: c7:de:19:25:99:7f:92:48:dc:a3:a0:17:bf:f2:18: 4c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F7:B5:C9:57:0F:EF:0F:93:34:3F:D5:93:DB:3B:9C:66:3E:4D:0F X509v3 Authority Key Identifier: keyid:70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.co/repo/Simple/2/323030313a6466323a343563303a3a2f34382d3438203d3e20393435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:45c0::/48 Signature Algorithm: sha256WithRSAEncryption 59:11:b2:39:0e:10:9c:4e:f2:2d:54:62:d4:c2:fb:b3:d7:c2: 9e:d4:64:87:6f:92:8c:54:69:a3:1a:dc:3e:37:a0:5f:2a:81: 58:2d:4c:a3:c2:16:fd:4d:62:c1:11:bd:96:7c:49:fe:8d:be: 1a:fd:ed:9a:1f:c3:97:f1:c2:de:d7:80:80:92:34:bd:ec:21: 24:61:16:63:17:00:0e:ba:3a:4f:44:51:95:2d:bc:8f:9c:75: c5:5c:11:34:85:5e:ff:b0:16:73:d1:25:d3:b8:2f:ba:64:c5: 7d:70:c9:ba:35:75:57:69:1f:ac:7d:a5:d5:cc:98:fc:0d:4d: 20:38:f3:34:9e:a5:6f:56:77:be:15:e9:39:53:94:ba:02:ce: ca:14:bc:3c:9e:9b:42:89:54:82:1e:6c:d2:5c:40:44:5c:2f: 70:95:cd:42:3f:18:48:a6:95:9f:8a:d5:bb:55:5a:65:f3:9e: 1c:aa:d6:02:63:c4:db:e5:1e:d0:30:f6:87:0e:c0:4e:dd:97: 61:59:88:46:9a:a8:c9:1c:b3:35:76:a9:94:2b:0a:5e:55:e3: db:2c:46:c5:e0:6d:e5:0d:48:aa:cc:8e:ce:57:f1:4e:28:bb: 7f:a9:d5:48:78:64:1f:f6:00:b8:da:e2:b8:20:35:79:16:ae: f9:bc:e4:67 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUTjD4h9jcBi9+bTZf/gxHRsebkvwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRThERjUwMDAwMTEwLwYDVQQFEyg3MDYxMDAyNkM3 RjJBMDRFMTYzRDRGRTU1MzFEN0JDNDZFNzU0N0M5MB4XDTIzMTAwOTA0MzY1OFoX DTI0MTAwNzA0NDE1OFowMzExMC8GA1UEAxMoODZGN0I1Qzk1NzBGRUYwRjkzMzQz RkQ1OTNEQjNCOUM2NjNFNEQwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVnccnCVYWF6jsWMqjL78yzB/4pyBMNAVN9eVJGwtCft0JGhEY1j8yb4/Xb cSp2Hf3BcdLkoIgYClQG7tVZpW9UD53Hu/Cyh309+9DFwfvZD0d+pF+thUMdsZMj ny1vK4woRBlT7jNae5OPOrlv9s9H2KDx0tweDsqShAP/NP8ngwfqwlkJrbuW5Fkd JTR0LeR5/2przsFp6odXM+5vsHVUkEsZc+ClqBr74v7yk1YaAhK/NhojB6C02FqU QYMiqcPo8cmej/NRaA1rFc1rbialmhsT0mKp+LI8q9HHMjMyH0X1d4c2gllLkno9 EnCex94ZJZl/kkjco6AXv/IYTPcCAwEAAaOCAecwggHjMB0GA1UdDgQWBBSG97XJ Vw/vD5M0P9WT2zucZj5NDzAfBgNVHSMEGDAWgBRwYQAmx/KgThY9T+VTHXvEbnVH yTAOBgNVHQ8BAf8EBAMCB4AwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6Ly9ycGtp LmNvL3JlcG8vU2ltcGxlLzIvNzA2MTAwMjZDN0YyQTA0RTE2M0Q0RkU1NTMxRDdC QzQ2RTc1NDdDOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJC NDY4RjdDNzJGRDFGRjIvY0dFQUpzZnlvRTRXUFVfbFV4MTd4RzUxUjhrLmNlcjB2 BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5jOi8vcnBraS5jby9yZXBv L1NpbXBsZS8yLzMyMzAzMDMxM2E2NDY2MzIzYTM0MzU2MzMwM2EzYTJmMzQzODJk MzQzODIwM2QzZTIwMzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8kXAMA0GCSqGSIb3DQEB CwUAA4IBAQBZEbI5DhCcTvItVGLUwvuz18Ke1GSHb5KMVGmjGtw+N6BfKoFYLUyj whb9TWLBEb2WfEn+jb4a/e2aH8OX8cLe14CAkjS97CEkYRZjFwAOujpPRFGVLbyP nHXFXBE0hV7/sBZz0SXTuC+6ZMV9cMm6NXVXaR+sfaXVzJj8DU0gOPM0nqVvVne+ Fek5U5S6As7KFLw8nptCiVSCHmzSXEBEXC9wlc1CPxhIppWfitW7VVpl854cqtYC Y8Tb5R7QMPaHDsBO3ZdhWYhGmqjJHLM1dqmUKwpeVePbLEbF4G3lDUiqzI7OV/FO KLt/qdVIeGQf9gC42uK4IDV5Fq75vORn -----END CERTIFICATE-----Generated at Sun May 5 11:58:55 2024 by rpki-client on console-ams.rpki-client.org