$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa File: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (raw, json) Hash identifier: 9SWryQUd+CXURlcPfpJgiq1udHQeR6SjabwY5Ouon5s= Subject key identifier: 56:0D:05:DA:A5:FF:13:E0:79:E4:40:CA:D1:6E:FD:B3:63:69:44:BE Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 74D0F68135BC167D6E8011105514FFA280F66417 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa Signing time: Mon 31 Jul 2023 00:03:04 +0000 ROA not before: Sun 30 Jul 2023 23:58:04 +0000 ROA not after: Mon 29 Jul 2024 00:03:04 +0000 asID: 131749 IP address blocks: 2402:be80:4000::/35 maxlen: 35 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d0:f6:81:35:bc:16:7d:6e:80:11:10:55:14:ff:a2:80:f6:64:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Jul 30 23:58:04 2023 GMT Not After : Jul 29 00:03:04 2024 GMT Subject: CN=560D05DAA5FF13E079E440CAD16EFDB3636944BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:28:18:56:82:90:93:c5:9c:15:a3:ca:a1:26: b4:f0:80:16:10:86:6c:bc:73:01:a3:54:af:e1:0e: eb:25:65:9a:eb:03:18:6f:4f:18:1c:34:1a:f3:66: 54:0e:52:5f:f0:fb:8c:81:68:b8:e3:ff:77:bc:0f: 87:35:fb:f8:d9:b8:a2:f6:85:6f:2f:b1:2f:19:4f: 11:fd:b4:86:6f:12:0a:8a:6f:92:37:5f:3a:61:e9: 07:35:ab:74:6b:d2:af:cb:c8:1b:ad:e3:3a:05:30: c3:e7:3f:88:27:a8:a8:39:07:41:9e:36:fc:2f:6a: ce:59:95:de:6f:89:c8:58:38:df:23:e3:94:66:8a: 8a:96:0e:ac:0a:2f:08:a3:20:50:e5:4b:46:37:65: 90:80:81:54:27:40:8a:ae:f2:49:79:01:b3:87:93: de:f9:ea:9d:1f:ed:07:3c:5e:93:3b:5c:a0:79:c6: ce:e3:ea:7c:6b:ea:06:81:99:b1:fb:3e:8c:99:9a: 23:a8:9a:71:c8:e5:1a:42:59:f0:14:4b:0f:90:ae: c4:f9:98:e8:e5:03:c0:2b:2c:2a:f6:a8:be:66:18: 87:f9:b2:fb:2e:db:0e:ad:82:52:d3:59:02:ea:cd: e8:1c:30:8a:02:5d:01:1b:73:74:3f:50:5d:b7:aa: 5d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0D:05:DA:A5:FF:13:E0:79:E4:40:CA:D1:6E:FD:B3:63:69:44:BE X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:4000::/35 Signature Algorithm: sha256WithRSAEncryption 0c:9b:8d:01:32:c7:8d:b0:4d:d6:0f:38:c1:57:53:9b:75:03: 9a:f1:20:73:9b:32:e0:37:0e:33:b4:a5:2c:55:6a:b6:d9:c2: 74:7b:da:1c:b9:da:76:2a:91:eb:c6:34:d5:0e:31:9d:bf:19: 1b:a0:ad:96:92:95:a3:eb:3c:15:9a:96:1b:4f:c2:c7:bd:ed: 9a:c2:90:fc:d7:fe:e5:3a:6f:98:0d:54:fd:69:59:85:b1:70: 67:fe:1a:ae:f4:3c:16:0b:9e:a4:e3:02:c8:64:d7:c1:76:76: d6:29:1e:5f:bf:5b:5a:8b:60:17:eb:c8:b5:68:ba:28:36:04: 43:59:89:61:84:ae:05:f6:15:70:5d:b6:53:21:a3:2a:f8:1e: f4:a6:e6:38:6e:88:da:01:53:75:40:36:05:90:2c:9b:a0:6a: db:36:3d:2e:5f:1e:84:7f:db:49:5b:ea:6b:52:b3:8a:d6:13: f8:50:cf:8b:f3:72:6e:17:e0:6f:7c:ab:c9:47:31:f0:a5:f7: 91:38:b4:9a:c5:3d:f8:f9:ee:37:cd:1c:f4:5d:17:c1:fe:b8: ea:6a:a5:50:00:53:60:f0:9d:15:24:68:ab:dc:bd:d1:a5:0b: 40:3b:42:9d:23:f3:93:53:5b:91:46:f5:8d:ef:83:6b:84:46: de:4a:6d:ab -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUdND2gTW8Fn1ugBEQVRT/ooD2ZBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yMzA3MzAyMzU4MDRaFw0yNDA3MjkwMDAzMDRaMDMxMTAvBgNV BAMTKDU2MEQwNURBQTVGRjEzRTA3OUU0NDBDQUQxNkVGREIzNjM2OTQ0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0KBhWgpCTxZwVo8qhJrTwgBYQ hmy8cwGjVK/hDuslZZrrAxhvTxgcNBrzZlQOUl/w+4yBaLjj/3e8D4c1+/jZuKL2 hW8vsS8ZTxH9tIZvEgqKb5I3Xzph6Qc1q3Rr0q/LyBut4zoFMMPnP4gnqKg5B0Ge Nvwvas5Zld5vichYON8j45RmioqWDqwKLwijIFDlS0Y3ZZCAgVQnQIqu8kl5AbOH k9756p0f7Qc8XpM7XKB5xs7j6nxr6gaBmbH7PoyZmiOomnHI5RpCWfAUSw+QrsT5 mOjlA8ArLCr2qL5mGIf5svsu2w6tglLTWQLqzegcMIoCXQEbc3Q/UF23ql2nAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUVg0F2qX/E+B55EDK0W79s2NpRL4wHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhMzQzMDMwMzAz YTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk Ar6AQDANBgkqhkiG9w0BAQsFAAOCAQEADJuNATLHjbBN1g84wVdTm3UDmvEgc5sy 4DcOM7SlLFVqttnCdHvaHLnadiqR68Y01Q4xnb8ZG6CtlpKVo+s8FZqWG0/Cx73t msKQ/Nf+5TpvmA1U/WlZhbFwZ/4arvQ8FguepOMCyGTXwXZ21ikeX79bWotgF+vI tWi6KDYEQ1mJYYSuBfYVcF22UyGjKvge9KbmOG6I2gFTdUA2BZAsm6Bq2zY9Ll8e hH/bSVvqa1KzitYT+FDPi/Nybhfgb3yryUcx8KX3kTi0msU9+PnuN80c9F0Xwf64 6mqlUABTYPCdFSRoq9y90aULQDtCnSPzk1NbkUb1je+Da4RG3kptqw== -----END CERTIFICATE-----Generated at Fri Apr 19 13:15:05 2024 by rpki-client on console-ams.rpki-client.org