$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e20313432363136.roa File: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (raw, json) Hash identifier: 4z11sQdUJz1Zykfa5O/UqcXdJZq+xLbs1EF1QSPhnXw= Subject key identifier: 1B:C8:49:BC:2B:17:6A:5C:7C:02:8F:8B:40:95:BE:7D:20:2E:92:35 Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Certificate serial: 11AFE5CBE7BB48495EF52FA42500B25074DCECC4 Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e20313432363136.roa Signing time: Sun 03 Nov 2024 22:30:26 +0000 ROA not before: Sun 03 Nov 2024 22:25:26 +0000 ROA not after: Sun 02 Nov 2025 22:30:26 +0000 asID: 142616 IP address blocks: 2407:b9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:af:e5:cb:e7:bb:48:49:5e:f5:2f:a4:25:00:b2:50:74:dc:ec:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Validity Not Before: Nov 3 22:25:26 2024 GMT Not After : Nov 2 22:30:26 2025 GMT Subject: CN=1BC849BC2B176A5C7C028F8B4095BE7D202E9235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e8:54:6f:4e:a3:43:2c:52:08:76:14:4b:66: 40:ea:5b:19:cd:6a:7c:43:15:d1:71:3c:b5:c3:db: 9a:30:58:f4:ac:73:b1:d3:b9:43:de:bb:f6:bf:80: de:5c:f8:14:2b:10:b9:c3:be:5a:e8:4d:1f:b9:ae: dd:5a:8c:14:17:16:18:d9:2a:13:e0:1e:32:27:12: ed:a2:99:8d:18:70:ed:bc:65:ba:be:02:8a:88:2e: be:4b:00:28:0b:a1:2f:ce:e6:6f:9d:03:c1:4c:ee: 9a:3c:13:e0:ed:e4:ea:71:43:69:9e:9d:54:f6:eb: 6a:a1:c3:27:77:0b:99:8f:cc:81:4c:c7:aa:44:10: 42:96:a2:fa:ff:94:6b:eb:d2:48:88:95:fa:06:a5: 5a:d1:3b:64:d8:b2:f7:07:38:c3:ba:d4:f6:72:aa: 7b:e7:3b:c5:dc:5d:18:ee:d8:d9:40:65:12:0d:39: 59:cd:2e:ad:94:e3:8e:8f:86:14:b9:89:53:8e:f3: cf:5c:1d:98:5c:20:c7:c9:77:51:55:09:7b:fa:23: 82:e7:b3:9e:88:fc:1e:c8:b4:e6:8a:12:a1:b1:b5: c0:75:44:cc:13:d6:aa:91:4e:03:89:7a:ec:28:b1: cd:a6:b5:ad:a2:79:d1:d8:f3:0a:a2:2a:72:8c:71: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C8:49:BC:2B:17:6A:5C:7C:02:8F:8B:40:95:BE:7D:20:2E:92:35 X509v3 Authority Key Identifier: keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e20313432363136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:b9c0::/32 Signature Algorithm: sha256WithRSAEncryption a5:56:31:8b:d7:cf:f7:5b:f5:b3:cb:6f:16:0e:21:e1:d2:c1: a7:cd:09:fe:c8:2d:93:65:a6:04:26:01:8a:25:c8:31:89:23: 80:5d:2e:0d:ca:92:c2:6f:be:b2:ef:7b:62:6e:19:5d:88:80: c3:4f:d1:77:8d:b9:7c:e4:1c:5a:66:7a:83:f4:fd:40:62:ac: 32:92:3d:0c:65:85:68:b3:ca:ef:aa:60:8e:1e:cd:f9:19:61: 92:a0:a7:66:df:8b:80:85:1f:4c:a6:42:c2:17:ca:74:13:aa: 69:23:db:15:0e:59:ba:29:31:30:bf:db:b4:e2:7a:bf:ee:3f: fd:26:42:14:27:2c:66:be:79:e6:bd:85:cf:79:e8:a3:15:e1: eb:97:91:4f:e7:21:06:78:b4:23:d0:cb:a9:43:e0:77:0d:6e: 26:5c:ea:70:8f:35:34:4e:f4:14:3d:2c:c1:f5:6d:9f:7b:ee: 49:3c:25:5d:c6:89:16:a0:f5:99:a0:61:fc:01:0d:0b:14:55: ea:21:e1:e3:19:f3:ee:7f:a5:0e:f0:f3:11:10:47:92:77:b9: e9:b0:60:f7:32:15:0d:d4:fd:27:2b:25:2f:89:27:80:41:bf: 1b:9f:f6:02:3b:60:3a:3d:a5:26:53:3d:bf:f5:15:e4:df:c3: 3c:de:36:55 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUEa/ly+e7SEle9S+kJQCyUHTc7MQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0 RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI0MTEwMzIyMjUyNloX DTI1MTEwMjIyMzAyNlowMzExMC8GA1UEAxMoMUJDODQ5QkMyQjE3NkE1QzdDMDI4 RjhCNDA5NUJFN0QyMDJFOTIzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJboVG9Oo0MsUgh2FEtmQOpbGc1qfEMV0XE8tcPbmjBY9KxzsdO5Q9679r+A 3lz4FCsQucO+WuhNH7mu3VqMFBcWGNkqE+AeMicS7aKZjRhw7bxlur4CioguvksA KAuhL87mb50DwUzumjwT4O3k6nFDaZ6dVPbraqHDJ3cLmY/MgUzHqkQQQpai+v+U a+vSSIiV+galWtE7ZNiy9wc4w7rU9nKqe+c7xdxdGO7Y2UBlEg05Wc0urZTjjo+G FLmJU47zz1wdmFwgx8l3UVUJe/ojgueznoj8Hsi05ooSobG1wHVEzBPWqpFOA4l6 7Cixzaa1raJ50djzCqIqcoxxIh8CAwEAAaOCAe8wggHrMB0GA1UdDgQWBBQbyEm8 KxdqXHwCj4tAlb59IC6SNTAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT 7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2 MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13 LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcnN5bmMu cnAua2kvcmVwby9taXNha2Fpby8wLzMyMzQzMDM3M2E2MjM5NjMzMDNhM2EyZjMz MzIyZDM0MzgyMDNkM2UyMDMxMzQzMjM2MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQHucAwDQYJ KoZIhvcNAQELBQADggEBAKVWMYvXz/db9bPLbxYOIeHSwafNCf7ILZNlpgQmAYol yDGJI4BdLg3KksJvvrLve2JuGV2IgMNP0XeNuXzkHFpmeoP0/UBirDKSPQxlhWiz yu+qYI4ezfkZYZKgp2bfi4CFH0ymQsIXynQTqmkj2xUOWbopMTC/27Tier/uP/0m QhQnLGa+eea9hc956KMV4euXkU/nIQZ4tCPQy6lD4HcNbiZc6nCPNTRO9BQ9LMH1 bZ977kk8JV3GiRag9ZmgYfwBDQsUVeoh4eMZ8+5/pQ7w8xEQR5J3uemwYPcyFQ3U /ScrJS+JJ4BBvxuf9gI7YDo9pSZTPb/1FeTfwzzeNlU= -----END CERTIFICATE-----Generated at Sat Nov 23 06:23:51 2024 by rpki-client on console-fra.rpki-client.org