$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa File: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (raw, json) Hash identifier: eF3Q+UFp3ge/0bEgWaXKoWsbcdlGxAcxDG/grOV2AMY= Subject key identifier: B5:34:CB:41:69:15:BE:15:2A:77:D0:03:4B:DA:D0:AF:7F:A9:9E:1B Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 752072279E25C564A31DA8A343C572952BFC2214 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa Signing time: Sun 28 Jan 2024 14:00:00 +0000 ROA not before: Sun 28 Jan 2024 13:55:00 +0000 ROA not after: Sun 26 Jan 2025 14:00:00 +0000 asID: 131749 IP address blocks: 2402:be80:d9ab::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:20:72:27:9e:25:c5:64:a3:1d:a8:a3:43:c5:72:95:2b:fc:22:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Jan 28 13:55:00 2024 GMT Not After : Jan 26 14:00:00 2025 GMT Subject: CN=B534CB416915BE152A77D0034BDAD0AF7FA99E1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:1d:a7:72:6c:06:49:d6:3e:4c:49:8e:03: 58:d0:57:e4:18:8b:c8:a9:f1:ec:72:44:19:50:a6: cd:1b:2c:e8:7d:a7:e4:c5:e3:c5:0b:d6:e4:ec:fb: a6:2d:cc:a2:57:d7:e2:e6:84:72:29:e9:01:ac:c6: c9:15:c8:5f:e4:94:e3:7d:53:00:87:e1:35:09:ad: 3f:63:72:d3:29:21:6f:28:d4:0d:31:6f:de:31:92: 87:f0:74:cd:cb:d5:50:83:4a:6d:dc:c1:93:64:0a: 77:e8:a2:88:fa:b8:30:65:ea:1e:c1:a5:27:32:a9: 4c:41:d3:e6:f1:53:43:0d:cd:cf:bd:10:5f:03:19: 8d:1a:60:db:8b:1b:48:6d:04:82:1d:ca:d3:13:a1: 81:5a:7c:e0:69:91:e5:9e:1b:96:91:fd:3e:2b:20: c8:9d:70:a8:93:c5:ce:46:64:21:bb:09:d7:68:d2: 9b:1f:2c:09:6a:fe:ed:19:db:95:b1:f1:88:da:18: bc:f2:2a:b6:ae:74:8e:b3:98:63:21:bd:22:ff:d4: bf:f1:b1:8b:c8:28:cd:45:33:68:aa:91:77:b0:8b: 55:1f:5e:45:7d:2f:b9:ae:45:b2:48:26:e0:86:81: fa:d3:23:0a:df:cf:d8:be:19:47:96:0d:84:9c:0b: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:34:CB:41:69:15:BE:15:2A:77:D0:03:4B:DA:D0:AF:7F:A9:9E:1B X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:d9ab::/48 Signature Algorithm: sha256WithRSAEncryption 4e:84:a5:98:f2:ff:e4:3c:f0:52:f5:e3:99:25:83:65:16:96: c2:50:74:b8:df:93:3c:4d:76:cb:e4:1c:62:2f:aa:a2:88:26: 29:6c:5d:44:58:5d:0d:f0:16:04:bf:64:de:b1:fa:f5:c7:74: 74:59:4b:69:57:68:96:4d:15:3e:ea:88:fd:30:19:0f:42:e5: 98:c6:74:2f:f9:a7:f9:f4:85:e1:68:06:94:7c:c8:5f:a5:ad: 5a:af:04:2c:90:6e:06:52:6c:cd:ea:91:69:32:01:1c:45:70: 0f:82:e4:a2:71:d9:ae:c7:7e:85:ca:14:3b:72:18:8d:15:fc: bd:bb:a8:ea:3c:6c:da:86:9d:6b:27:17:1c:0e:1a:1d:6a:11: 9d:bc:30:85:50:74:66:ea:5a:c7:3f:0a:95:fc:5b:85:2b:80: 40:26:63:10:18:03:73:57:40:77:06:42:1e:8d:55:12:15:2c: 5a:fb:35:3c:01:ab:fc:52:af:6c:12:0e:a2:a7:8f:f5:59:89: f6:66:45:82:2d:7a:af:b1:ec:bc:54:64:39:6f:6e:b2:b7:9b: ef:df:d6:d0:30:61:6f:5a:3f:fe:9b:bd:cb:32:97:5a:e2:9e: 59:e4:17:b8:fa:6c:4f:b6:a7:3b:e1:e2:17:d9:d0:fe:0a:4d: 07:d4:d9:42 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUdSByJ54lxWSjHaijQ8VylSv8IhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNDAxMjgxMzU1MDBaFw0yNTAxMjYxNDAwMDBaMDMxMTAvBgNV BAMTKEI1MzRDQjQxNjkxNUJFMTUyQTc3RDAwMzRCREFEMEFGN0ZBOTlFMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jh2ncmwGSdY+TEmOA1jQV+QY i8ip8exyRBlQps0bLOh9p+TF48UL1uTs+6YtzKJX1+LmhHIp6QGsxskVyF/klON9 UwCH4TUJrT9jctMpIW8o1A0xb94xkofwdM3L1VCDSm3cwZNkCnfoooj6uDBl6h7B pScyqUxB0+bxU0MNzc+9EF8DGY0aYNuLG0htBIIdytMToYFafOBpkeWeG5aR/T4r IMidcKiTxc5GZCG7Cddo0psfLAlq/u0Z25Wx8YjaGLzyKraudI6zmGMhvSL/1L/x sYvIKM1FM2iqkXewi1UfXkV9L7muRbJIJuCGgfrTIwrfz9i+GUeWDYScC4WfAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUtTTLQWkVvhUqd9ADS9rQr3+pnhswHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhNjQzOTYxNjIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk Ar6A2aswDQYJKoZIhvcNAQELBQADggEBAE6EpZjy/+Q88FL145klg2UWlsJQdLjf kzxNdsvkHGIvqqKIJilsXURYXQ3wFgS/ZN6x+vXHdHRZS2lXaJZNFT7qiP0wGQ9C 5ZjGdC/5p/n0heFoBpR8yF+lrVqvBCyQbgZSbM3qkWkyARxFcA+C5KJx2a7HfoXK FDtyGI0V/L27qOo8bNqGnWsnFxwOGh1qEZ28MIVQdGbqWsc/CpX8W4UrgEAmYxAY A3NXQHcGQh6NVRIVLFr7NTwBq/xSr2wSDqKnj/VZifZmRYIteq+x7LxUZDlvbrK3 m+/f1tAwYW9aP/6bvcsyl1rinlnkF7j6bE+2pzvh4hfZ0P4KTQfU2UI= -----END CERTIFICATE-----Generated at Fri Apr 19 13:15:05 2024 by rpki-client on console-ams.rpki-client.org