$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: 0XKgv2rdZk74yjyQRGVUzMuceMYlUpbj5+T34egz0mk= Subject key identifier: 06:A9:41:90:0A:17:0C:78:B1:E7:3F:D6:95:C7:75:47:FD:D6:5F:07 Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 5AC112BBEF09BEEF4DAB9552C4E2E00375382C3B Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 31 Jul 2023 00:07:18 +0000 ROA not before: Mon 31 Jul 2023 00:02:18 +0000 ROA not after: Mon 29 Jul 2024 00:07:18 +0000 asID: 136088 IP address blocks: 2400:d940:500::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 20:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c1:12:bb:ef:09:be:ef:4d:ab:95:52:c4:e2:e0:03:75:38:2c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jul 31 00:02:18 2023 GMT Not After : Jul 29 00:07:18 2024 GMT Subject: CN=06A941900A170C78B1E73FD695C77547FDD65F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:36:e5:61:9d:8c:ed:34:d4:d9:27:e3:a0: c6:4d:62:14:ac:f1:82:e9:5b:4d:96:a4:a6:71:f3: 9d:a7:c1:d2:7e:8b:98:c1:46:7e:b6:f9:7d:d5:ec: 24:bf:52:d9:d0:54:66:30:7c:6d:b5:d6:40:e2:c2: 5f:b3:14:2f:b6:f2:f2:49:73:2c:a8:2f:69:c3:f9: 63:d3:0a:f6:0c:30:5a:48:61:b7:73:81:18:f0:ef: c4:ad:0f:f9:b5:7d:c2:18:ab:71:2b:f0:97:79:35: 86:3c:0c:80:3c:c2:86:04:55:2c:6e:f4:cb:0b:93: 00:b2:05:39:5e:08:c2:ec:c9:e5:c7:7b:f7:2e:fa: 8f:16:71:4e:4b:6d:92:ac:19:66:f8:74:c7:58:a6: 7b:7f:3e:81:ef:3c:fa:93:19:2b:c6:8c:1c:d5:71: 3d:21:26:61:71:66:5b:1e:a3:44:72:81:13:2b:23: 35:b3:35:ff:b9:ce:b1:9e:51:08:92:83:fe:f9:5f: 78:12:5e:08:ad:18:5b:8b:be:c5:8c:75:be:83:92: 28:dc:81:82:d0:99:b4:c2:a9:17:51:90:22:b1:00: 7e:b7:eb:dc:23:50:47:d9:e4:b8:b1:1d:48:22:56: b9:4d:a6:98:05:2f:0a:7a:ed:4f:c3:b4:69:54:93: 1a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A9:41:90:0A:17:0C:78:B1:E7:3F:D6:95:C7:75:47:FD:D6:5F:07 X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:500::/48 Signature Algorithm: sha256WithRSAEncryption 7e:c4:57:fd:15:44:29:30:05:16:2b:ea:64:0b:9e:65:49:89: fa:b7:65:60:78:84:9a:3b:63:42:aa:63:2f:7e:69:49:5d:ec: 18:1a:6d:d1:9f:e4:61:f5:aa:98:53:4c:c7:12:6f:21:87:eb: f1:6c:21:63:35:44:11:bc:b0:54:90:ce:52:15:46:bf:67:8d: ec:dd:cb:9b:0c:16:54:36:28:38:1d:49:fb:01:c7:e7:ab:c7: dd:fc:2c:e1:3c:66:0f:8b:33:7a:16:00:ac:c9:f7:83:e2:70: 91:c8:cb:b0:e2:6f:e9:e9:60:df:fe:de:46:ec:f2:df:06:3f: 4f:b1:f1:6f:bc:d1:d7:a5:12:f1:ee:5b:b8:22:05:ff:5a:8f: 21:d1:70:2f:0b:aa:a7:ce:3d:9e:78:8c:07:b8:e0:ca:40:11: c8:2d:5a:6e:f9:f3:e8:b4:2f:60:fa:d2:e9:60:8d:69:e8:9c: 29:14:c7:0b:9e:25:a1:2f:e7:0e:21:2d:8a:4c:41:1b:db:90: 5c:f8:b2:9e:cb:82:9b:ef:be:42:a4:ac:c1:01:73:de:9a:5e: 57:63:fd:0b:cc:99:da:af:26:38:7a:50:da:c4:f1:1b:49:73: 80:67:28:74:0a:75:88:5f:66:3c:d8:43:bb:6c:21:a6:61:70: 9f:df:0d:54 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWsESu+8Jvu9Nq5VSxOLgA3U4LDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yMzA3MzEwMDAyMThaFw0yNDA3MjkwMDA3MThaMDMxMTAvBgNV BAMTKDA2QTk0MTkwMEExNzBDNzhCMUU3M0ZENjk1Qzc3NTQ3RkRENjVGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwczblYZ2M7TTU2SfjoMZNYhSs 8YLpW02WpKZx852nwdJ+i5jBRn62+X3V7CS/UtnQVGYwfG211kDiwl+zFC+28vJJ cyyoL2nD+WPTCvYMMFpIYbdzgRjw78StD/m1fcIYq3Er8Jd5NYY8DIA8woYEVSxu 9MsLkwCyBTleCMLsyeXHe/cu+o8WcU5LbZKsGWb4dMdYpnt/PoHvPPqTGSvGjBzV cT0hJmFxZlseo0RygRMrIzWzNf+5zrGeUQiSg/75X3gSXgitGFuLvsWMdb6Dkijc gYLQmbTCqRdRkCKxAH6369wjUEfZ5LixHUgiVrlNppgFLwp67U/DtGlUkxpRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUBqlBkAoXDHix5z/Wlcd1R/3WXwcwHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzUzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+xFf9FUQpMAUWK+pkC55lSYn6t2VgeISa O2NCqmMvfmlJXewYGm3Rn+Rh9aqYU0zHEm8hh+vxbCFjNUQRvLBUkM5SFUa/Z43s 3cubDBZUNig4HUn7Acfnq8fd/CzhPGYPizN6FgCsyfeD4nCRyMuw4m/p6WDf/t5G 7PLfBj9PsfFvvNHXpRLx7lu4IgX/Wo8h0XAvC6qnzj2eeIwHuODKQBHILVpu+fPo tC9g+tLpYI1p6JwpFMcLniWhL+cOIS2KTEEb25Bc+LKey4Kb775CpKzBAXPeml5X Y/0LzJnaryY4elDaxPEbSXOAZyh0CnWIX2Y82EO7bCGmYXCf3w1U -----END CERTIFICATE-----Generated at Tue Apr 23 18:36:08 2024 by rpki-client on console-ams.rpki-client.org