$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e203233393631.roa File: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (raw, json) Hash identifier: uEYjBirJT+i0hlQMTypSSmmJ9f6MpXLy/c4beoodP6A= Subject key identifier: 80:1A:F3:DE:0F:51:FC:3C:6F:CC:AC:F7:A1:28:C3:C7:C2:9D:83:C5 Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Certificate serial: 78A7DF878A4B75A6C4E550AE8ABE8A4A431F7816 Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e203233393631.roa Signing time: Sun 03 Nov 2024 22:30:25 +0000 ROA not before: Sun 03 Nov 2024 22:25:25 +0000 ROA not after: Sun 02 Nov 2025 22:30:25 +0000 asID: 23961 IP address blocks: 2407:b9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a7:df:87:8a:4b:75:a6:c4:e5:50:ae:8a:be:8a:4a:43:1f:78:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Validity Not Before: Nov 3 22:25:25 2024 GMT Not After : Nov 2 22:30:25 2025 GMT Subject: CN=801AF3DE0F51FC3C6FCCACF7A128C3C7C29D83C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:61:2e:ab:98:f1:99:b8:42:6e:3a:85:ab:2c: e4:02:5b:1c:08:6d:ff:22:5a:ae:fd:6d:7e:94:fc: 7d:76:81:d9:cf:b1:b2:f4:57:fb:44:45:d1:8a:ba: b4:f4:18:a6:2f:af:89:bb:16:ab:1a:a4:cc:b4:d7: de:66:5e:02:16:ee:f4:e4:8a:9a:58:29:90:01:f8: 24:ea:2d:1d:82:4a:c4:28:66:dd:5e:71:83:3d:0f: 0e:31:3d:79:3a:37:73:33:aa:35:6c:e7:37:a2:a6: 6a:79:c4:6c:cb:4b:be:af:ca:db:36:cd:62:95:7b: 97:29:81:00:d0:24:53:be:84:7d:b0:7a:f7:ef:87: 85:45:e8:b1:f7:b1:f5:4e:9c:3e:86:aa:0a:ce:e9: 33:5b:74:72:23:bc:cd:ad:31:9c:e3:04:5e:bc:db: b1:b9:22:41:43:ab:ad:6e:ea:6d:5e:53:16:bb:62: be:2d:4f:96:04:13:27:ed:94:b7:d6:25:21:b9:e8: f0:a9:86:53:9f:29:ec:eb:4f:9d:0a:00:d1:35:31: 42:66:e7:5b:74:2c:62:e1:62:fc:d1:14:97:38:f7: aa:e5:a8:54:a5:d5:33:e8:78:1f:55:a2:af:ae:80: 65:35:cb:9e:19:cd:83:5c:66:6c:94:02:8a:25:33: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1A:F3:DE:0F:51:FC:3C:6F:CC:AC:F7:A1:28:C3:C7:C2:9D:83:C5 X509v3 Authority Key Identifier: keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e203233393631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:b9c0::/32 Signature Algorithm: sha256WithRSAEncryption 7a:36:f8:40:11:92:a7:23:ac:5e:ac:c1:22:61:2b:5c:84:e2: 4e:2f:1f:43:8a:0a:dd:f0:98:d1:c7:09:63:60:54:6b:c4:0a: 1a:34:11:b8:9d:e6:b6:74:89:b2:94:e8:d4:e2:e8:0e:37:b0: 70:87:99:29:37:be:06:23:2f:41:a6:a8:5d:28:44:a1:af:ce: 17:31:6f:49:5f:41:33:fb:91:8b:df:95:17:b4:c5:a3:26:cf: 0e:40:ce:5f:20:18:d8:a8:fe:f9:fd:b2:7d:07:36:b3:db:b7: aa:54:80:40:7d:d0:d2:8a:92:88:d9:59:d1:b1:2e:bf:0f:5d: bd:f3:34:60:23:fc:c1:22:ef:20:26:74:19:10:8f:90:53:d9: a7:bb:ef:8e:a2:3d:1d:a4:8a:69:ed:11:51:cb:eb:9f:d2:52: 03:d6:ab:0c:1a:ac:35:41:7e:08:67:06:84:eb:ff:34:61:25: 30:ae:df:1a:a3:7b:f9:e6:1d:0e:79:7f:53:78:6e:7a:72:19: 0f:4a:ee:fe:ce:df:52:b2:84:60:d0:6b:aa:94:c6:58:55:b9: 3c:2d:db:ae:f2:d2:8a:ae:66:3b:48:2a:75:42:28:bc:52:3c: 07:ba:b5:15:64:8b:40:9d:9e:7d:ab:01:b9:a3:ab:b4:d5:f7: 3f:b8:e6:17 -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUeKffh4pLdabE5VCuir6KSkMfeBYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0 RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI0MTEwMzIyMjUyNVoX DTI1MTEwMjIyMzAyNVowMzExMC8GA1UEAxMoODAxQUYzREUwRjUxRkMzQzZGQ0NB Q0Y3QTEyOEMzQzdDMjlEODNDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJphLquY8Zm4Qm46hass5AJbHAht/yJarv1tfpT8fXaB2c+xsvRX+0RF0Yq6 tPQYpi+vibsWqxqkzLTX3mZeAhbu9OSKmlgpkAH4JOotHYJKxChm3V5xgz0PDjE9 eTo3czOqNWznN6KmannEbMtLvq/K2zbNYpV7lymBANAkU76EfbB69++HhUXosfex 9U6cPoaqCs7pM1t0ciO8za0xnOMEXrzbsbkiQUOrrW7qbV5TFrtivi1PlgQTJ+2U t9YlIbno8KmGU58p7OtPnQoA0TUxQmbnW3QsYuFi/NEUlzj3quWoVKXVM+h4H1Wi r66AZTXLnhnNg1xmbJQCiiUzqJkCAwEAAaOCAe0wggHpMB0GA1UdDgQWBBSAGvPe D1H8PG/MrPehKMPHwp2DxTAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT 7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2 MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13 LmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJzeW5jOi8vcnN5bmMu cnAua2kvcmVwby9taXNha2Fpby8wLzMyMzQzMDM3M2E2MjM5NjMzMDNhM2EyZjMz MzIyZDM0MzgyMDNkM2UyMDMyMzMzOTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB7nAMA0GCSqG SIb3DQEBCwUAA4IBAQB6NvhAEZKnI6xerMEiYStchOJOLx9Digrd8JjRxwljYFRr xAoaNBG4nea2dImylOjU4ugON7Bwh5kpN74GIy9BpqhdKEShr84XMW9JX0Ez+5GL 35UXtMWjJs8OQM5fIBjYqP75/bJ9Bzaz27eqVIBAfdDSipKI2VnRsS6/D1298zRg I/zBIu8gJnQZEI+QU9mnu++Ooj0dpIpp7RFRy+uf0lID1qsMGqw1QX4IZwaE6/80 YSUwrt8ao3v55h0OeX9TeG56chkPSu7+zt9SsoRg0GuqlMZYVbk8Lduu8tKKrmY7 SCp1Qii8UjwHurUVZItAnZ59qwG5o6u01fc/uOYX -----END CERTIFICATE-----Generated at Sat Nov 23 06:23:51 2024 by rpki-client on console-fra.rpki-client.org