$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: 3qRmPlR/FnWGuKcwPRRezRITCmfZ+nD7X+NLKnwnpu4= Subject key identifier: 0C:56:90:F4:50:8E:C8:F5:D3:BC:4E:56:5D:31:23:D0:89:AA:93:10 Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 598C1D19FDF4CB431F91B5647026F4FAC61E5C3B Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 31 Jul 2023 00:07:18 +0000 ROA not before: Mon 31 Jul 2023 00:02:18 +0000 ROA not after: Mon 29 Jul 2024 00:07:18 +0000 asID: 136088 IP address blocks: 2400:d940:300::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 05:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:8c:1d:19:fd:f4:cb:43:1f:91:b5:64:70:26:f4:fa:c6:1e:5c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jul 31 00:02:18 2023 GMT Not After : Jul 29 00:07:18 2024 GMT Subject: CN=0C5690F4508EC8F5D3BC4E565D3123D089AA9310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8c:e1:9c:41:1d:53:ee:57:1f:43:1c:61:44: 58:77:1a:fc:56:86:70:b2:91:7d:c8:ad:4c:00:2a: df:15:bd:6a:c4:51:08:62:96:bf:9f:63:27:f1:fc: bc:53:cd:54:f6:c8:3d:2a:a9:26:6d:d1:86:dd:53: df:51:48:30:a2:77:9b:cb:02:63:26:c6:8d:b4:55: fa:c8:d0:ae:34:02:78:6e:2a:dc:cb:86:e8:c8:69: 2d:a8:60:9b:af:8b:aa:69:a4:4e:11:47:ed:65:3a: eb:74:94:82:2f:c3:d5:a1:02:9f:e1:6a:a1:b6:1b: dc:3b:d4:6d:01:10:59:e2:96:4d:7b:16:58:cf:b8: ad:e6:b6:d7:7a:a7:87:99:2a:49:b7:6a:ba:89:79: ca:1f:19:93:7c:79:f7:07:b6:b4:97:0f:55:07:81: 3f:72:41:f7:71:e9:46:82:f3:dd:86:67:55:4c:53: 81:fc:6a:09:5e:51:07:80:34:18:ff:cd:ca:fc:1c: ee:83:3d:31:3a:27:bb:68:ad:e1:91:78:e1:0f:7d: 00:bf:fe:83:4f:b9:35:dd:08:ed:d9:c7:1b:e7:a4: 25:27:eb:2d:b0:99:cc:bd:09:8e:87:14:15:e1:4c: 24:5d:8e:08:c8:a1:5d:5b:1d:53:cb:cc:ae:cb:89: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:56:90:F4:50:8E:C8:F5:D3:BC:4E:56:5D:31:23:D0:89:AA:93:10 X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:300::/48 Signature Algorithm: sha256WithRSAEncryption 1d:91:65:ff:a0:c1:1f:9c:99:54:e0:7d:a2:87:c8:80:0f:02: 9e:eb:46:bd:2b:12:41:ec:b9:94:fc:17:b8:c1:e1:73:f3:24: 69:10:f9:5f:52:a7:a6:5d:c4:42:51:ec:67:82:f8:d7:f4:cf: c6:2f:9d:ef:4a:5e:59:c9:9c:ab:96:b0:14:49:31:d6:23:87: 36:b4:9b:7e:36:c4:51:6a:83:5f:39:4b:e3:13:06:c2:26:7c: a2:26:0e:86:46:72:bb:f2:5f:b0:04:96:50:50:e2:eb:f0:ad: 0c:cc:13:41:84:7d:5e:7d:f0:69:92:97:c2:98:33:cf:09:8d: 82:69:95:6c:cb:65:b9:15:18:8b:84:58:f5:70:96:2b:da:95: 75:7c:d5:13:d7:6b:e2:98:9e:7d:a8:71:54:48:0d:97:08:19: 5c:4e:4e:0b:03:eb:db:d8:f9:53:f2:67:19:93:e9:38:24:17: f7:20:6b:2a:39:69:95:6d:cc:cb:a2:ee:2e:f7:f4:b8:9d:ca: 5f:41:6a:59:df:02:10:3c:ba:49:8a:c7:07:39:07:18:1e:44: b5:dd:99:42:47:67:a8:39:43:2a:d6:81:0d:a4:e1:5e:64:40: 04:32:39:2e:3e:cb:44:89:a3:89:8b:49:82:7f:2e:fe:cc:40: 4c:11:5b:5b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWYwdGf30y0MfkbVkcCb0+sYeXDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yMzA3MzEwMDAyMThaFw0yNDA3MjkwMDA3MThaMDMxMTAvBgNV BAMTKDBDNTY5MEY0NTA4RUM4RjVEM0JDNEU1NjVEMzEyM0QwODlBQTkzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDajOGcQR1T7lcfQxxhRFh3GvxW hnCykX3IrUwAKt8VvWrEUQhilr+fYyfx/LxTzVT2yD0qqSZt0YbdU99RSDCid5vL AmMmxo20VfrI0K40AnhuKtzLhujIaS2oYJuvi6pppE4RR+1lOut0lIIvw9WhAp/h aqG2G9w71G0BEFnilk17FljPuK3mttd6p4eZKkm3arqJecofGZN8efcHtrSXD1UH gT9yQfdx6UaC892GZ1VMU4H8agleUQeANBj/zcr8HO6DPTE6J7toreGReOEPfQC/ /oNPuTXdCO3ZxxvnpCUn6y2wmcy9CY6HFBXhTCRdjgjIoV1bHVPLzK7LiV7rAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUDFaQ9FCOyPXTvE5WXTEj0ImqkxAwHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzMzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAMAMA0GCSqGSIb3DQEBCwUAA4IBAQAdkWX/oMEfnJlU4H2ih8iADwKe60a9KxJB 7LmU/Be4weFz8yRpEPlfUqemXcRCUexngvjX9M/GL53vSl5ZyZyrlrAUSTHWI4c2 tJt+NsRRaoNfOUvjEwbCJnyiJg6GRnK78l+wBJZQUOLr8K0MzBNBhH1effBpkpfC mDPPCY2CaZVsy2W5FRiLhFj1cJYr2pV1fNUT12vimJ59qHFUSA2XCBlcTk4LA+vb 2PlT8mcZk+k4JBf3IGsqOWmVbczLou4u9/S4ncpfQWpZ3wIQPLpJiscHOQcYHkS1 3ZlCR2eoOUMq1oENpOFeZEAEMjkuPstEiaOJi0mCfy7+zEBMEVtb -----END CERTIFICATE-----Generated at Wed Apr 17 22:58:34 2024 by rpki-client on console-ams.rpki-client.org