$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa File: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (raw, json) Hash identifier: lga8YFz2K/INsnjeCpjIZbIJnrlqp0ZoeupwLrLPcs4= Subject key identifier: 21:16:6E:08:3B:02:CA:C9:C2:4C:44:0F:77:D2:C3:8B:BF:A0:E6:09 Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 17BCFA84803B532E5CCC4A2FE21A1C7928018E77 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa Signing time: Wed 20 Sep 2023 02:00:00 +0000 ROA not before: Wed 20 Sep 2023 01:55:00 +0000 ROA not after: Wed 18 Sep 2024 02:00:00 +0000 asID: 131749 IP address blocks: 2402:be80:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:bc:fa:84:80:3b:53:2e:5c:cc:4a:2f:e2:1a:1c:79:28:01:8e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Sep 20 01:55:00 2023 GMT Not After : Sep 18 02:00:00 2024 GMT Subject: CN=21166E083B02CAC9C24C440F77D2C38BBFA0E609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7f:92:32:9f:f5:f9:ab:b4:88:77:3b:f1:58: 75:ae:76:b6:b2:84:bf:52:02:3b:cd:89:c3:bc:db: 75:74:72:54:e3:c6:4d:e0:36:98:e6:89:5f:14:ed: c0:25:7b:fa:33:a0:53:3c:42:0e:3e:3a:df:e8:c0: e7:2d:56:49:c6:d5:7a:b6:73:8e:ba:ef:9f:3a:5a: 76:c3:a2:d4:7a:12:1a:c2:10:55:81:3e:be:cb:95: a1:13:1b:d6:3d:08:e9:d0:19:c9:66:36:4f:89:99: ca:e6:33:0e:de:93:d4:43:42:07:88:e0:4b:98:32: 2e:98:82:4d:b1:ca:9c:bb:6e:06:f1:3f:e1:b7:26: 8a:e8:b0:f2:32:c7:44:76:10:e6:66:76:2c:30:40: 1e:e3:6f:3b:99:16:82:36:fa:41:b7:d7:49:eb:38: e0:e8:e6:d9:e1:40:32:0c:02:ec:d4:c0:03:5c:6f: 87:b2:80:00:88:d0:9b:c1:31:d9:99:ab:fb:a7:13: 86:72:1b:ff:74:21:5c:52:b1:c4:3a:fd:8f:71:2b: 3d:c0:72:f1:54:c1:20:ea:36:78:8f:d0:d7:55:52: 40:7e:c5:dd:96:88:e0:6a:66:d9:b2:ec:4b:cb:7e: 59:08:1f:a3:96:30:86:14:e2:28:08:48:4a:8e:cd: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:16:6E:08:3B:02:CA:C9:C2:4C:44:0F:77:D2:C3:8B:BF:A0:E6:09 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:4000::/34 Signature Algorithm: sha256WithRSAEncryption 46:d9:e8:a5:2e:ed:53:33:b9:6c:f2:71:02:cf:d4:76:0d:f5: d5:26:f3:88:7e:7c:84:8a:83:74:81:24:9a:1e:1b:f5:27:dc: b9:de:88:1e:9a:19:9e:92:e3:d6:8c:c0:5e:d6:4c:c0:0c:25: 38:98:07:72:8f:71:73:52:8a:05:32:f7:29:a6:db:ba:66:b8: 5a:30:00:b5:cf:a9:cb:7a:6f:56:15:4f:a6:1d:36:4a:fe:55: ba:cb:97:5a:df:18:b9:0c:bf:42:95:9f:2b:5f:bc:47:45:65: 0e:e7:75:96:95:c6:93:e9:32:9d:3a:3b:5b:fc:0c:e4:ac:1b: af:27:d6:15:6c:f4:8a:e6:c5:2e:94:64:29:05:b7:d0:8b:01: ff:e9:81:0c:ac:97:e2:b0:99:6f:1e:57:12:31:64:90:70:de: f4:b4:ec:7f:b8:bd:36:fc:1a:92:51:92:fc:c9:8b:7e:4b:ee: d0:af:b9:16:d1:59:7e:91:74:2a:c3:7d:03:14:9e:5c:35:d8: 5c:1b:01:5d:50:69:6d:84:ff:93:0a:50:11:a8:3b:37:4d:af: 0e:5a:9c:2e:b2:f9:03:9f:4b:6c:70:fc:b2:05:ef:c0:e1:d9: 8e:62:d8:7b:17:8b:fc:f3:a3:e9:9e:d6:89:19:3c:e4:6b:34: 4f:0c:74:b1 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUF7z6hIA7Uy5czEov4hoceSgBjncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yMzA5MjAwMTU1MDBaFw0yNDA5MTgwMjAwMDBaMDMxMTAvBgNV BAMTKDIxMTY2RTA4M0IwMkNBQzlDMjRDNDQwRjc3RDJDMzhCQkZBMEU2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjf5Iyn/X5q7SIdzvxWHWudray hL9SAjvNicO823V0clTjxk3gNpjmiV8U7cAle/ozoFM8Qg4+Ot/owOctVknG1Xq2 c4667586WnbDotR6EhrCEFWBPr7LlaETG9Y9COnQGclmNk+JmcrmMw7ek9RDQgeI 4EuYMi6Ygk2xypy7bgbxP+G3JorosPIyx0R2EOZmdiwwQB7jbzuZFoI2+kG310nr OODo5tnhQDIMAuzUwANcb4eygACI0JvBMdmZq/unE4ZyG/90IVxSscQ6/Y9xKz3A cvFUwSDqNniP0NdVUkB+xd2WiOBqZtmy7EvLflkIH6OWMIYU4igISEqOzXu5AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUIRZuCDsCysnCTEQPd9LDi7+g5gkwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhMzQzMDMwMzAz YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYk Ar6AQDANBgkqhkiG9w0BAQsFAAOCAQEARtnopS7tUzO5bPJxAs/Udg311SbziH58 hIqDdIEkmh4b9Sfcud6IHpoZnpLj1ozAXtZMwAwlOJgHco9xc1KKBTL3Kabbuma4 WjAAtc+py3pvVhVPph02Sv5VusuXWt8YuQy/QpWfK1+8R0VlDud1lpXGk+kynTo7 W/wM5KwbryfWFWz0iubFLpRkKQW30IsB/+mBDKyX4rCZbx5XEjFkkHDe9LTsf7i9 NvwaklGS/MmLfkvu0K+5FtFZfpF0KsN9AxSeXDXYXBsBXVBpbYT/kwpQEag7N02v DlqcLrL5A59LbHD8sgXvwOHZjmLYexeL/POj6Z7WiRk85Gs0Twx0sQ== -----END CERTIFICATE-----Generated at Fri Apr 19 13:15:05 2024 by rpki-client on console-ams.rpki-client.org