$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa File: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (raw, json) Hash identifier: DXHHrR56q/VFhnEdLVNUD8gSSDdXE61ooWF2sxdNIBM= Subject key identifier: 54:DA:D2:EF:F1:D3:2B:09:23:40:9E:82:5F:FA:7D:BB:76:3A:38:85 Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 563E66F5B9A6AF6F4230A737E4FF26FCABFAD6B0 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa Signing time: Mon 31 Jul 2023 00:03:03 +0000 ROA not before: Sun 30 Jul 2023 23:58:03 +0000 ROA not after: Mon 29 Jul 2024 00:03:03 +0000 asID: 131749 IP address blocks: 2402:be80:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 06:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3e:66:f5:b9:a6:af:6f:42:30:a7:37:e4:ff:26:fc:ab:fa:d6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Jul 30 23:58:03 2023 GMT Not After : Jul 29 00:03:03 2024 GMT Subject: CN=54DAD2EFF1D32B0923409E825FFA7DBB763A3885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:58:2c:ff:20:49:12:5e:fc:cf:9f:2b:25:a5: 48:d6:c3:17:75:4c:a7:66:5b:1e:2c:d6:e3:c1:83: 96:41:f9:86:81:3b:37:1c:f1:d3:69:92:20:08:99: 91:ac:76:3d:60:36:b1:c7:a4:8d:99:96:b2:da:78: 10:d1:f6:99:b8:cb:d2:94:b9:a8:36:db:b4:a4:18: cb:de:13:2c:1b:e3:00:c1:5e:7a:5a:c0:10:e7:82: 70:21:46:62:a9:bf:1f:53:12:e0:2c:7a:55:67:f3: 17:4b:91:bd:17:1f:cb:c9:06:4c:39:bb:ec:1d:4b: a2:b7:35:4d:c2:ea:10:c2:7a:2b:b7:67:1e:3a:07: e4:fa:8e:3b:0e:e0:fa:32:d0:de:15:b9:47:84:c1: 77:87:d1:50:e2:91:9b:23:10:b7:cd:00:ec:5d:73: a3:47:d6:e3:1f:67:20:97:3e:d2:23:24:29:ef:40: 26:b2:ab:05:05:f5:9a:ae:11:c4:12:6c:1f:74:5e: 33:62:28:63:9e:2f:93:b8:17:ac:4c:e7:1d:6d:f0: 28:d0:b6:cb:fd:f6:09:db:74:ce:7a:20:a1:f1:6c: aa:12:42:fc:b9:8e:ef:c5:c8:88:a7:dc:6a:83:bb: 0f:95:2b:3f:8a:a0:36:49:51:f4:2c:40:e8:69:06: 51:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DA:D2:EF:F1:D3:2B:09:23:40:9E:82:5F:FA:7D:BB:76:3A:38:85 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:2000::/35 Signature Algorithm: sha256WithRSAEncryption 7f:54:87:7a:19:b5:26:7f:40:e2:41:9a:ba:f4:1b:ae:a2:38: cf:41:47:8a:bd:e5:62:69:ec:9b:4c:59:6a:77:bb:5e:4b:58: 46:eb:00:0f:7c:2b:2b:d3:ae:f5:c0:90:57:b1:ae:3c:cf:c6: 02:c9:79:1a:a4:b8:79:7a:10:dc:79:97:e6:2c:55:97:86:75: 34:61:65:f1:1b:68:70:54:11:8b:30:15:1c:95:f4:db:1f:d1: 23:e2:26:4c:ac:47:32:34:95:ec:bc:54:8c:30:a5:fd:9d:25: 28:f9:95:b2:d5:8e:ca:e0:62:69:f4:fe:ce:73:38:18:b4:b9: 0c:e8:9f:ed:3c:5b:6d:8a:6a:d6:31:2a:88:78:fd:c4:89:2e: f0:89:e3:e4:c3:c4:1f:48:33:d5:29:11:ab:61:5a:ab:31:7f: 88:ae:f5:23:73:0f:e9:e6:c7:5f:fa:a2:b1:8d:5c:83:b8:8b: d2:c7:cf:06:ab:46:73:7d:ed:41:86:47:8f:1c:bc:ae:eb:4c: 40:fa:cd:64:39:11:4e:3c:6a:54:92:28:b7:1d:d7:18:b0:f5: 14:f9:33:33:bb:8c:40:39:8c:01:99:f3:75:fc:90:16:b8:e0: 9b:e4:82:16:4d:78:fd:34:13:b6:a1:e2:0b:9e:2d:13:c3:de: f5:b3:73:d2 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUVj5m9bmmr29CMKc35P8m/Kv61rAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yMzA3MzAyMzU4MDNaFw0yNDA3MjkwMDAzMDNaMDMxMTAvBgNV BAMTKDU0REFEMkVGRjFEMzJCMDkyMzQwOUU4MjVGRkE3REJCNzYzQTM4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWCz/IEkSXvzPnyslpUjWwxd1 TKdmWx4s1uPBg5ZB+YaBOzcc8dNpkiAImZGsdj1gNrHHpI2ZlrLaeBDR9pm4y9KU uag227SkGMveEywb4wDBXnpawBDngnAhRmKpvx9TEuAselVn8xdLkb0XH8vJBkw5 u+wdS6K3NU3C6hDCeiu3Zx46B+T6jjsO4Poy0N4VuUeEwXeH0VDikZsjELfNAOxd c6NH1uMfZyCXPtIjJCnvQCayqwUF9ZquEcQSbB90XjNiKGOeL5O4F6xM5x1t8CjQ tsv99gnbdM56IKHxbKoSQvy5ju/FyIin3GqDuw+VKz+KoDZJUfQsQOhpBlHtAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUVNrS7/HTKwkjQJ6CX/p9u3Y6OIUwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhMzIzMDMwMzAz YTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk Ar6AIDANBgkqhkiG9w0BAQsFAAOCAQEAf1SHehm1Jn9A4kGauvQbrqI4z0FHir3l Ymnsm0xZane7XktYRusAD3wrK9Ou9cCQV7GuPM/GAsl5GqS4eXoQ3HmX5ixVl4Z1 NGFl8RtocFQRizAVHJX02x/RI+ImTKxHMjSV7LxUjDCl/Z0lKPmVstWOyuBiafT+ znM4GLS5DOif7TxbbYpq1jEqiHj9xIku8Inj5MPEH0gz1SkRq2FaqzF/iK71I3MP 6ebHX/qisY1cg7iL0sfPBqtGc33tQYZHjxy8rutMQPrNZDkRTjxqVJIotx3XGLD1 FPkzM7uMQDmMAZnzdfyQFrjgm+SCFk14/TQTtqHiC54tE8Pe9bNz0g== -----END CERTIFICATE-----Generated at Wed Apr 24 06:08:03 2024 by rpki-client on console-fra.rpki-client.org