$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3332203d3e20313431303733.roa File: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (raw, json) Hash identifier: qlalw0TKUEkhAOIlr5yuFJmB2Ev+HKMNrhiNPtAu/8I= Subject key identifier: 8B:3E:1F:70:CD:91:A4:06:97:A9:D1:5F:20:BC:86:DC:DA:E2:ED:41 Certificate issuer: /CN=2D18956397FA6055A44153CABF07303FD6E55E44 Certificate serial: 32DFDC04F7B3239763CAA6B2111D2B308CE57C15 Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3332203d3e20313431303733.roa Signing time: Tue 29 Aug 2023 03:44:30 +0000 ROA not before: Tue 29 Aug 2023 03:39:30 +0000 ROA not after: Tue 27 Aug 2024 03:44:30 +0000 asID: 141073 IP address blocks: 2406:7740::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:df:dc:04:f7:b3:23:97:63:ca:a6:b2:11:1d:2b:30:8c:e5:7c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44 Validity Not Before: Aug 29 03:39:30 2023 GMT Not After : Aug 27 03:44:30 2024 GMT Subject: CN=8B3E1F70CD91A40697A9D15F20BC86DCDAE2ED41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:44:22:91:ad:e8:72:3a:b6:b1:b8:f8:55: 65:35:ec:76:b4:b3:81:1f:0c:c4:c4:52:82:0c:94: 7e:f4:63:fd:0d:5f:99:a7:bb:8d:c3:73:2b:df:32: 80:12:03:37:28:de:31:2c:7b:e5:ac:58:35:d8:0a: 76:09:0a:40:21:64:bb:d6:7c:fe:1f:de:37:1d:38: 27:cc:e0:38:21:e5:3a:cd:f6:bd:cf:6e:57:fc:af: a5:67:57:dd:cc:84:39:ca:f3:ec:93:bb:b7:e2:cd: f2:d3:5d:69:ad:e7:cc:86:31:26:59:a2:29:89:05: 81:23:00:e9:c0:b5:bc:63:7a:bd:69:bc:cf:ba:5b: 85:33:75:3c:f6:c6:85:bd:7d:a7:b7:1c:7f:e9:45: 03:7d:b2:89:a2:e3:ce:78:e5:ba:c8:0f:c9:ca:1a: 29:66:e7:d9:c3:93:85:38:10:52:4b:87:90:2e:e9: a1:2e:36:2d:e6:84:b9:a4:73:e6:c7:fe:bb:31:d2: 24:dc:9e:80:89:69:e5:e9:02:88:06:4a:21:12:3a: 09:73:fb:74:32:2b:cf:79:aa:c9:50:9a:e0:91:ce: 17:03:43:30:59:03:f7:6b:bb:46:1e:48:58:2c:e5: 4c:83:fd:00:31:ac:bc:60:f9:b4:77:19:12:ab:0e: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3E:1F:70:CD:91:A4:06:97:A9:D1:5F:20:BC:86:DC:DA:E2:ED:41 X509v3 Authority Key Identifier: keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3332203d3e20313431303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:7740::/32 Signature Algorithm: sha256WithRSAEncryption 40:59:61:d1:f3:8f:6f:89:7f:1f:1f:7c:56:4a:28:df:67:4c: 2f:b4:15:ab:d8:27:08:7e:97:66:49:a9:6e:b1:9e:67:1c:7b: ce:57:73:d8:d1:a6:7b:1d:af:8b:40:f0:4e:f1:63:89:09:54: 75:fb:36:d7:42:ba:12:a2:d7:51:c7:e2:12:5b:af:f2:5f:4b: 03:8f:11:37:12:96:40:ed:71:b8:de:7a:ed:ae:c0:79:8d:e0: 05:8c:09:e0:28:2b:0d:c3:e7:6f:a6:5b:62:83:6c:1d:e2:4a: 73:20:c7:43:1c:12:16:19:78:e9:2c:c0:4e:26:52:39:95:10: bd:bb:e6:bb:c3:0f:b2:1d:6d:f1:6e:4b:0c:c9:3a:a3:bd:2f: ba:4d:6b:3f:75:7a:03:8a:2c:83:02:02:8a:4d:ad:1c:74:df: 0c:b2:74:09:78:7e:5b:f5:ae:23:0f:3b:35:20:77:b0:90:9a: 01:39:66:b9:1a:ed:13:4c:8d:1c:83:31:73:e7:0f:7e:c7:4f: 03:01:15:6f:0f:ed:ee:1a:9e:0f:4b:40:8d:c7:09:50:5a:d0: f7:2a:6b:8d:88:83:05:7d:01:80:78:88:41:c2:93:e7:18:65: 10:81:fd:ff:4f:c1:30:d5:b8:ef:61:14:f9:eb:bc:4e:91:cb: 31:9e:47:0c -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUMt/cBPezI5djyqayER0rMIzlfBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZE NkU1NUU0NDAeFw0yMzA4MjkwMzM5MzBaFw0yNDA4MjcwMzQ0MzBaMDMxMTAvBgNV BAMTKDhCM0UxRjcwQ0Q5MUE0MDY5N0E5RDE1RjIwQkM4NkRDREFFMkVENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YUQika3ocjq2sbj4VWU17Ha0 s4EfDMTEUoIMlH70Y/0NX5mnu43DcyvfMoASAzco3jEse+WsWDXYCnYJCkAhZLvW fP4f3jcdOCfM4Dgh5TrN9r3Pblf8r6VnV93MhDnK8+yTu7fizfLTXWmt58yGMSZZ oimJBYEjAOnAtbxjer1pvM+6W4UzdTz2xoW9fae3HH/pRQN9somi48545brID8nK Gilm59nDk4U4EFJLh5Au6aEuNi3mhLmkc+bH/rsx0iTcnoCJaeXpAogGSiESOglz +3QyK895qslQmuCRzhcDQzBZA/dru0YeSFgs5UyD/QAxrLxg+bR3GRKrDpO7AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUiz4fcM2RpAaXqdFfILyG3Nri7UEwHwYDVR0j BBgwFoAULRiVY5f6YFWkQVPKvwcwP9blXkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODU4Zjg1Yy1hNDU4LTRhNTgtYmJkZS00YmZiMzQzZGM0YjAvMC8yRDE4OTU2Mzk3 RkE2MDU1QTQ0MTUzQ0FCRjA3MzAzRkQ2RTU1RTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZENkU1 NUU0NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NThmODVjLWE0NTgtNGE1OC1i YmRlLTRiZmIzNDNkYzRiMC8wLzMyMzQzMDM2M2EzNzM3MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGd0AwDQYJKoZI hvcNAQELBQADggEBAEBZYdHzj2+Jfx8ffFZKKN9nTC+0FavYJwh+l2ZJqW6xnmcc e85Xc9jRpnsdr4tA8E7xY4kJVHX7NtdCuhKi11HH4hJbr/JfSwOPETcSlkDtcbje eu2uwHmN4AWMCeAoKw3D52+mW2KDbB3iSnMgx0McEhYZeOkswE4mUjmVEL275rvD D7IdbfFuSwzJOqO9L7pNaz91egOKLIMCAopNrRx03wyydAl4flv1riMPOzUgd7CQ mgE5Zrka7RNMjRyDMXPnD37HTwMBFW8P7e4ang9LQI3HCVBa0Pcqa42IgwV9AYB4 iEHCk+cYZRCB/f9PwTDVuO9hFPnrvE6RyzGeRww= -----END CERTIFICATE-----Generated at Mon May 6 08:03:47 2024 by rpki-client on console-ams.rpki-client.org