$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e203233393631.roa File: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (raw, json) Hash identifier: k2SgfyAQb+LyEUpKb6O73uDId6XNXaROlHHovDNCOBI= Subject key identifier: D0:00:49:EC:D2:CD:45:C3:64:A1:87:0A:C2:DB:26:1D:42:E2:C5:9D Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Certificate serial: 60390DD3039E29A8D8A6138A5CD1A4A627A0231D Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e203233393631.roa Signing time: Sun 03 Dec 2023 21:38:28 +0000 ROA not before: Sun 03 Dec 2023 21:33:28 +0000 ROA not after: Sun 01 Dec 2024 21:38:28 +0000 asID: 23961 IP address blocks: 2407:b9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 00:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:39:0d:d3:03:9e:29:a8:d8:a6:13:8a:5c:d1:a4:a6:27:a0:23:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Validity Not Before: Dec 3 21:33:28 2023 GMT Not After : Dec 1 21:38:28 2024 GMT Subject: CN=D00049ECD2CD45C364A1870AC2DB261D42E2C59D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:00:e2:90:45:2a:56:a6:c2:d7:3e:1c:8e: ae:41:a2:cd:e7:fc:e1:54:ad:e8:0f:a2:ea:71:9f: c0:c4:71:31:65:60:c7:6e:5b:af:24:1a:49:05:0c: 9c:83:29:76:31:91:17:9f:11:37:04:43:06:7c:56: 5f:57:8f:e1:25:95:35:9f:3d:8e:98:ba:9a:24:bb: c6:e2:76:f9:d0:70:c7:19:01:18:f0:4e:1f:70:b4: 15:0c:35:58:4e:89:b5:40:e2:02:46:8e:62:0c:c2: a7:4f:10:ca:b2:bf:09:05:cf:7a:3b:e3:f6:e3:1a: 76:47:71:e7:94:06:82:c5:9b:32:61:0e:8e:40:d7: 75:78:ce:ac:c9:35:c7:39:e2:0f:19:9d:11:09:78: f1:08:90:2b:86:97:04:e4:ab:31:a0:8b:8c:48:1d: 2a:d2:1e:c6:31:10:32:d8:7f:71:94:08:7c:b8:b0: 09:de:18:66:83:85:5c:43:a5:57:43:5f:27:ea:df: 1b:18:c8:21:ca:e2:54:dd:8a:43:fe:18:d7:67:c1: 5e:e5:58:a9:20:11:be:a7:a4:d2:b7:80:cc:78:22: 84:a6:63:e8:79:a6:ec:e9:d8:92:31:d9:3c:c6:15: c1:7b:49:c7:20:8b:fe:36:c9:90:92:85:d0:c7:4b: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:00:49:EC:D2:CD:45:C3:64:A1:87:0A:C2:DB:26:1D:42:E2:C5:9D X509v3 Authority Key Identifier: keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e203233393631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:b9c0::/32 Signature Algorithm: sha256WithRSAEncryption 37:cc:fc:df:0b:db:61:42:bd:4d:27:c9:14:31:2b:2b:f3:c1: fc:63:fd:17:03:31:50:75:29:28:d6:d4:2d:ed:34:5c:8b:1d: 27:42:66:8e:99:6c:f8:6b:86:86:70:08:77:30:70:6f:67:f1: eb:0b:57:ca:ac:b4:27:65:a2:3f:e7:f1:14:bd:35:93:c7:22: 84:c1:7e:a3:5b:41:b3:d2:19:bd:bc:47:ba:63:c7:93:95:95: 44:e0:ee:e0:c4:78:7c:64:38:2f:5b:d5:c6:ff:77:b7:e0:5b: 72:17:86:c9:ff:cd:fe:74:c6:50:b5:a8:a5:fc:7b:b6:31:9c: c7:57:9e:36:d0:71:f1:30:35:ac:e5:12:96:d6:ad:03:66:c7: 18:d2:42:90:3d:e7:b8:23:2c:26:65:78:09:93:14:28:4c:a5: b1:1c:e6:62:d0:ce:29:56:ea:a5:97:c3:43:e1:e9:96:9d:99: af:89:00:9d:2d:34:54:93:24:a0:6d:24:3d:44:61:81:7c:66: d8:59:43:47:72:11:64:1f:03:68:44:86:49:12:f8:01:11:b5: 2e:c5:da:e7:a8:19:28:2e:fb:08:1b:59:ee:c1:ca:ce:fa:30: 4c:8a:73:97:03:da:4c:20:9b:72:0a:2f:b2:29:db:cf:63:f0: cd:56:56:85 -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUYDkN0wOeKajYphOKXNGkpiegIx0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0 RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTIzMTIwMzIxMzMyOFoX DTI0MTIwMTIxMzgyOFowMzExMC8GA1UEAxMoRDAwMDQ5RUNEMkNENDVDMzY0QTE4 NzBBQzJEQjI2MUQ0MkUyQzU5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJ9AOKQRSpWpsLXPhyOrkGizef84VSt6A+i6nGfwMRxMWVgx25bryQaSQUM nIMpdjGRF58RNwRDBnxWX1eP4SWVNZ89jpi6miS7xuJ2+dBwxxkBGPBOH3C0FQw1 WE6JtUDiAkaOYgzCp08QyrK/CQXPejvj9uMadkdx55QGgsWbMmEOjkDXdXjOrMk1 xzniDxmdEQl48QiQK4aXBOSrMaCLjEgdKtIexjEQMth/cZQIfLiwCd4YZoOFXEOl V0NfJ+rfGxjIIcriVN2KQ/4Y12fBXuVYqSARvqek0reAzHgihKZj6Hmm7OnYkjHZ PMYVwXtJxyCL/jbJkJKF0MdL9F8CAwEAAaOCAe0wggHpMB0GA1UdDgQWBBTQAEns 0s1Fw2ShhwrC2yYdQuLFnTAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT 7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2 MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13 LmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJzeW5jOi8vcnN5bmMu cnAua2kvcmVwby9taXNha2Fpby8wLzMyMzQzMDM3M2E2MjM5NjMzMDNhM2EyZjMz MzIyZDM0MzgyMDNkM2UyMDMyMzMzOTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB7nAMA0GCSqG SIb3DQEBCwUAA4IBAQA3zPzfC9thQr1NJ8kUMSsr88H8Y/0XAzFQdSko1tQt7TRc ix0nQmaOmWz4a4aGcAh3MHBvZ/HrC1fKrLQnZaI/5/EUvTWTxyKEwX6jW0Gz0hm9 vEe6Y8eTlZVE4O7gxHh8ZDgvW9XG/3e34FtyF4bJ/83+dMZQtail/Hu2MZzHV542 0HHxMDWs5RKW1q0DZscY0kKQPee4IywmZXgJkxQoTKWxHOZi0M4pVuqll8ND4emW nZmviQCdLTRUkySgbSQ9RGGBfGbYWUNHchFkHwNoRIZJEvgBEbUuxdrnqBkoLvsI G1nuwcrO+jBMinOXA9pMIJtyCi+yKdvPY/DNVlaF -----END CERTIFICATE-----Generated at Wed May 22 00:33:32 2024 by rpki-client on console-ams.rpki-client.org