$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: bEAB+CErGsTUCNuZ5dph2YraaUfmMaM9ov2sSa/1/4M= Subject key identifier: B6:E3:AB:80:A5:DF:A8:5B:60:5F:C6:01:94:1F:32:BE:55:57:48:7E Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 19ECD20D3344FA67981E8628E86AEF7145A4FF15 Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 31 Jul 2023 00:07:16 +0000 ROA not before: Mon 31 Jul 2023 00:02:16 +0000 ROA not after: Mon 29 Jul 2024 00:07:16 +0000 asID: 136088 IP address blocks: 2400:d940:700::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 05:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ec:d2:0d:33:44:fa:67:98:1e:86:28:e8:6a:ef:71:45:a4:ff:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jul 31 00:02:16 2023 GMT Not After : Jul 29 00:07:16 2024 GMT Subject: CN=B6E3AB80A5DFA85B605FC601941F32BE5557487E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:dd:c7:38:e0:d1:21:93:11:2f:0e:0f:87: 22:f5:88:52:f4:2f:71:71:ad:76:a4:0f:64:66:a3: c5:c1:d7:5e:01:00:ca:4e:82:cf:8d:58:5e:38:54: 26:49:d8:ba:9f:b3:c7:ae:b4:ea:5b:7b:0d:e2:c1: 89:60:24:71:fb:96:17:08:45:ec:49:93:73:d8:0e: d0:eb:f1:9b:9c:d1:0a:b9:d9:cf:08:52:fc:e5:ca: 8f:3a:ec:be:bf:80:48:3c:b5:64:08:21:db:b9:27: d2:46:49:42:da:5d:4c:32:7e:c7:47:3f:6b:5a:48: 3e:1e:3f:c2:97:ba:33:4e:f5:b2:3b:5d:5f:b9:bc: 1e:29:40:02:b3:be:88:9b:87:bf:98:11:b4:d0:32: fa:27:8d:9a:2f:b3:31:13:cb:3f:54:54:4f:7a:d5: 8a:fb:9c:c1:c9:bf:a5:76:ce:c8:cf:5b:ff:a9:19: 77:c1:88:09:c2:a3:f1:74:74:d1:5e:c3:98:21:7b: e8:0c:f7:57:27:fe:da:46:ae:f2:6c:ac:cf:9c:7a: 30:19:5b:e1:eb:3c:f3:42:e6:c1:c1:37:3a:c5:00: 54:da:e2:98:23:61:a9:41:f8:45:b9:d2:f5:7d:70: 92:64:ba:17:bb:46:6a:4d:96:6b:c7:54:8d:2c:3c: 7c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E3:AB:80:A5:DF:A8:5B:60:5F:C6:01:94:1F:32:BE:55:57:48:7E X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:700::/48 Signature Algorithm: sha256WithRSAEncryption 92:49:66:93:76:5a:61:72:f3:de:23:93:1c:4d:fa:58:8d:4b: 5d:2f:8f:97:0e:f0:e7:c0:51:87:13:9a:2a:64:61:4c:0d:c3: 1f:a8:82:0b:14:01:27:7f:a2:99:82:7c:72:5c:72:33:9c:b7: 07:ae:7f:1c:e0:ca:12:11:37:ab:21:ea:91:85:f1:f2:7a:ae: 7f:ab:01:4f:95:f4:b3:39:16:65:42:fe:96:26:f8:e6:ea:a3: c5:f2:f7:dc:29:52:5b:b8:9f:e4:c0:f7:09:65:11:99:0c:b8: 88:b2:ba:7a:61:e6:d8:c8:2c:2e:2d:1a:c3:fe:d2:aa:c4:1c: 04:75:62:bf:bc:22:77:64:4b:d4:e5:bf:85:8a:56:21:04:0a: 7a:2a:8f:e2:4e:85:20:e1:0d:ba:f2:14:f1:53:ec:ec:10:94: 0a:d4:d5:75:a0:66:ce:3b:ff:46:72:9f:c1:07:dc:73:00:f4: 85:c3:ed:ad:a8:34:cc:b2:51:8a:70:88:64:68:31:aa:cc:76: 2f:33:87:15:55:f4:fe:d4:45:cf:25:ed:f3:05:fe:7a:44:6c: 6e:ef:02:9e:77:89:d1:d6:dc:a7:2a:0b:24:a6:20:ff:b0:2d: ad:6c:a7:c9:ba:5f:1e:bb:58:6a:83:f9:5c:bc:f5:6f:4e:9d: 69:82:7c:0d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGezSDTNE+meYHoYo6GrvcUWk/xUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yMzA3MzEwMDAyMTZaFw0yNDA3MjkwMDA3MTZaMDMxMTAvBgNV BAMTKEI2RTNBQjgwQTVERkE4NUI2MDVGQzYwMTk0MUYzMkJFNTU1NzQ4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ft3HOODRIZMRLw4PhyL1iFL0 L3FxrXakD2Rmo8XB114BAMpOgs+NWF44VCZJ2Lqfs8eutOpbew3iwYlgJHH7lhcI RexJk3PYDtDr8Zuc0Qq52c8IUvzlyo867L6/gEg8tWQIIdu5J9JGSULaXUwyfsdH P2taSD4eP8KXujNO9bI7XV+5vB4pQAKzvoibh7+YEbTQMvonjZovszETyz9UVE96 1Yr7nMHJv6V2zsjPW/+pGXfBiAnCo/F0dNFew5ghe+gM91cn/tpGrvJsrM+cejAZ W+HrPPNC5sHBNzrFAFTa4pgjYalB+EW50vV9cJJkuhe7RmpNlmvHVI0sPHzNAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUtuOrgKXfqFtgX8YBlB8yvlVXSH4wHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzczMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAcAMA0GCSqGSIb3DQEBCwUAA4IBAQCSSWaTdlphcvPeI5McTfpYjUtdL4+XDvDn wFGHE5oqZGFMDcMfqIILFAEnf6KZgnxyXHIznLcHrn8c4MoSETerIeqRhfHyeq5/ qwFPlfSzORZlQv6WJvjm6qPF8vfcKVJbuJ/kwPcJZRGZDLiIsrp6YebYyCwuLRrD /tKqxBwEdWK/vCJ3ZEvU5b+FilYhBAp6Ko/iToUg4Q268hTxU+zsEJQK1NV1oGbO O/9Gcp/BB9xzAPSFw+2tqDTMslGKcIhkaDGqzHYvM4cVVfT+1EXPJe3zBf56RGxu 7wKed4nR1tynKgskpiD/sC2tbKfJul8eu1hqg/lcvPVvTp1pgnwN -----END CERTIFICATE-----Generated at Wed Apr 17 22:58:34 2024 by rpki-client on console-ams.rpki-client.org