$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa File: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (raw, json) Hash identifier: 4G3iqfCqEN+4SWMXOfThJ+Sel9W06PCHaPEEYt0CBWc= Subject key identifier: F5:4B:9D:A2:89:E7:F1:46:C9:72:75:78:AE:CC:DF:16:43:45:10:D9 Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 39E8DA8951FA4A59C8179E2A7159C346DC2C412A Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa Signing time: Mon 31 Jul 2023 00:03:03 +0000 ROA not before: Sun 30 Jul 2023 23:58:03 +0000 ROA not after: Mon 29 Jul 2024 00:03:03 +0000 asID: 131749 IP address blocks: 2402:be80:c000::/35 maxlen: 35 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Mar 2024 20:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e8:da:89:51:fa:4a:59:c8:17:9e:2a:71:59:c3:46:dc:2c:41:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Jul 30 23:58:03 2023 GMT Not After : Jul 29 00:03:03 2024 GMT Subject: CN=F54B9DA289E7F146C9727578AECCDF16434510D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:72:a3:9f:45:4b:5b:39:2a:8e:c6:d6:04:61: b2:9a:23:f0:05:53:7f:fb:78:ef:90:e8:be:6a:33: 1f:1d:b4:33:d8:1d:72:22:06:a6:c8:f6:04:f0:57: a5:ee:b6:c0:83:5a:53:72:26:b2:45:95:56:d9:1d: 89:96:18:c2:ee:12:fb:b5:9a:9f:5c:c8:86:76:95: 42:4a:71:ba:70:e5:f8:58:8f:6d:50:68:98:68:b4: ba:7e:e6:01:cf:cf:8d:e5:ea:b0:3b:76:1e:6d:ef: d1:fe:46:7f:28:6a:13:c8:87:92:3f:b6:5a:29:3f: 71:4d:30:52:d3:ef:71:6b:83:f1:52:67:b2:20:e6: ab:b7:ed:74:d8:55:41:93:11:45:d7:4b:7e:44:c9: a6:cf:8a:b1:c4:18:bd:6a:25:2e:96:80:6c:21:18: 1c:b7:17:57:bc:08:b6:c6:a2:93:a9:0b:20:be:f9: 69:6c:ff:d8:0f:99:7b:a0:38:d2:59:8e:30:c5:aa: 3d:4d:8c:0c:8e:41:b3:e0:aa:25:d7:74:85:b9:d9: 8c:48:c9:8f:55:00:9f:7a:ec:30:ad:7b:fe:f4:82: 49:9c:bf:ee:37:c8:b4:2f:c4:9c:aa:4c:93:70:82: 91:f8:bf:7b:70:5b:74:02:43:5f:2f:14:73:03:61: fb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4B:9D:A2:89:E7:F1:46:C9:72:75:78:AE:CC:DF:16:43:45:10:D9 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:c000::/35 Signature Algorithm: sha256WithRSAEncryption 0d:43:c0:11:b6:27:fc:0e:09:35:0d:ed:3f:71:0b:af:73:17: f5:15:9c:45:ce:3a:3b:16:41:2e:75:c0:6e:c3:dc:d9:c2:8f: db:1d:e7:1d:12:6b:27:fc:f4:2a:53:52:8e:76:24:c7:e0:26: 51:1e:31:b3:e8:5a:e6:39:cb:48:78:69:4a:2f:67:8a:38:3e: 6f:db:02:d9:eb:bd:da:ca:3a:69:23:88:8e:bd:39:d7:21:2d: a7:36:f7:b1:f2:32:32:ca:0a:42:4e:92:3b:79:5c:7e:b3:41: 7e:4a:c4:99:98:f8:8e:eb:c2:59:5f:d8:71:6e:50:48:36:59: ae:01:fd:34:e6:97:77:b2:e4:fe:07:d6:91:ae:d5:12:77:fb: 4c:1d:20:ab:c1:36:90:bc:dd:3b:db:36:28:e6:f3:b4:3a:ef: 7e:1c:2e:75:e7:87:85:4f:3c:d6:f7:69:c9:1b:d0:4d:00:38: 38:f1:7a:07:7a:e2:df:27:98:a9:72:63:3b:f1:4f:b8:15:9d: 33:48:33:1b:60:1f:b5:b2:b8:1c:70:c1:2d:7b:57:93:65:13: ef:09:40:d8:2e:c8:ac:f3:64:72:fc:c9:b7:00:5e:7d:70:bc: 75:b1:4c:6e:05:0b:49:eb:0b:8b:6b:f8:2a:04:4a:16:97:83: 95:dd:0a:3f -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUOejaiVH6SlnIF54qcVnDRtwsQSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yMzA3MzAyMzU4MDNaFw0yNDA3MjkwMDAzMDNaMDMxMTAvBgNV BAMTKEY1NEI5REEyODlFN0YxNDZDOTcyNzU3OEFFQ0NERjE2NDM0NTEwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwcqOfRUtbOSqOxtYEYbKaI/AF U3/7eO+Q6L5qMx8dtDPYHXIiBqbI9gTwV6XutsCDWlNyJrJFlVbZHYmWGMLuEvu1 mp9cyIZ2lUJKcbpw5fhYj21QaJhotLp+5gHPz43l6rA7dh5t79H+Rn8oahPIh5I/ tlopP3FNMFLT73Frg/FSZ7Ig5qu37XTYVUGTEUXXS35EyabPirHEGL1qJS6WgGwh GBy3F1e8CLbGopOpCyC++Wls/9gPmXugONJZjjDFqj1NjAyOQbPgqiXXdIW52YxI yY9VAJ967DCte/70gkmcv+43yLQvxJyqTJNwgpH4v3twW3QCQ18vFHMDYfufAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU9Uudoonn8UbJcnV4rszfFkNFENkwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhNjMzMDMwMzAz YTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk Ar6AwDANBgkqhkiG9w0BAQsFAAOCAQEADUPAEbYn/A4JNQ3tP3ELr3MX9RWcRc46 OxZBLnXAbsPc2cKP2x3nHRJrJ/z0KlNSjnYkx+AmUR4xs+ha5jnLSHhpSi9nijg+ b9sC2eu92so6aSOIjr051yEtpzb3sfIyMsoKQk6SO3lcfrNBfkrEmZj4juvCWV/Y cW5QSDZZrgH9NOaXd7Lk/gfWka7VEnf7TB0gq8E2kLzdO9s2KObztDrvfhwudeeH hU881vdpyRvQTQA4OPF6B3ri3yeYqXJjO/FPuBWdM0gzG2AftbK4HHDBLXtXk2UT 7wlA2C7IrPNkcvzJtwBefXC8dbFMbgULSesLi2v4KgRKFpeDld0KPw== -----END CERTIFICATE-----Generated at Wed Mar 27 18:48:29 2024 by rpki-client on console-fra.rpki-client.org