$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: XajAdh0NP0wtiEj6pNSRIBGXFhMt44jIjkllcbDnrZQ= Subject key identifier: 87:17:17:37:2C:BB:EB:57:5E:CB:41:E0:16:B4:53:0F:7C:27:95:EA Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 3CF56C14FE201D4890AAB80A966D2304A0E2D338 Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 31 Jul 2023 00:07:15 +0000 ROA not before: Mon 31 Jul 2023 00:02:15 +0000 ROA not after: Mon 29 Jul 2024 00:07:15 +0000 asID: 136088 IP address blocks: 2400:d940:800::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f5:6c:14:fe:20:1d:48:90:aa:b8:0a:96:6d:23:04:a0:e2:d3:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jul 31 00:02:15 2023 GMT Not After : Jul 29 00:07:15 2024 GMT Subject: CN=871717372CBBEB575ECB41E016B4530F7C2795EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:54:44:ad:53:64:57:0a:61:19:14:0c:cb: b3:0f:31:c9:06:77:8b:29:55:19:88:e5:77:ac:50: a0:b3:ea:ec:23:4f:ab:66:09:01:f1:14:f4:e4:53: 30:dc:d9:ef:91:d7:be:cf:2a:8c:25:e6:58:e0:0a: 84:95:21:19:56:86:60:c8:1c:5f:bf:be:aa:1e:c9: 14:62:38:7c:44:f2:d9:3e:24:5a:29:1a:90:e4:8a: f0:c0:18:f4:81:ff:94:d8:23:1a:4f:e4:4a:4c:67: b8:b9:3c:1b:13:45:b8:e7:53:1b:06:01:cd:43:eb: 2b:1a:dd:04:36:93:d4:19:c3:dc:95:95:b4:f0:aa: 64:f6:7e:d8:bf:e9:61:2a:fa:55:3b:65:96:fb:eb: 22:b1:72:c8:85:be:ea:1e:c8:5f:9f:11:b7:8f:b3: 6f:8d:19:d7:2c:d1:e1:58:03:34:69:a8:97:da:99: 0a:ef:b0:38:3d:03:2d:57:9a:2d:56:95:1f:9f:90: 64:24:d6:f5:38:e5:a4:fd:4d:51:76:ad:4f:01:45: 55:b1:80:5d:39:39:92:10:31:32:3f:f0:d1:29:24: e4:b7:ba:13:63:63:13:6a:7c:29:aa:1f:9f:c8:93: be:19:ee:c2:ed:5c:49:f1:38:cd:35:e1:50:24:9d: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:17:17:37:2C:BB:EB:57:5E:CB:41:E0:16:B4:53:0F:7C:27:95:EA X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:800::/48 Signature Algorithm: sha256WithRSAEncryption 59:a7:a5:a1:ef:86:2d:0c:6b:c5:8e:a3:10:73:d9:a7:67:6e: 15:eb:b4:6a:ff:2c:e0:f0:82:18:02:51:22:7a:63:34:79:bf: c7:66:a5:b9:d5:f0:e1:35:62:28:66:78:a1:fb:99:e4:f7:9b: cb:2e:4a:94:21:2a:fa:18:7c:d1:71:a7:34:03:f7:b3:48:45: 67:b9:c5:e9:0a:a5:aa:8e:f3:87:43:f7:6c:62:86:82:27:b5: 7f:93:0c:84:f8:e1:ef:49:58:12:3e:44:4c:d0:ae:3a:ae:66: 60:46:02:99:b9:75:2a:b0:6a:f2:be:2c:51:dc:dc:45:ec:f1: 3a:fa:e7:3b:5f:12:51:40:24:64:1a:a3:34:68:f0:41:f4:fb: 63:52:81:47:b3:f4:75:c5:9e:31:22:b3:97:2c:65:24:3e:f2: f8:40:8a:74:16:39:f9:f7:8c:b4:8c:2e:70:df:6c:24:4f:df: 9c:0e:5c:11:25:ec:27:d3:cf:dd:2b:38:bb:9d:a2:27:4d:22: 1e:5d:45:78:d7:1e:a1:41:07:74:fc:2d:5d:0d:d1:c1:ef:10: df:1b:d3:12:f1:50:a1:be:37:a0:18:b5:ab:be:21:ec:eb:ac: 7f:e2:05:1c:10:eb:42:74:fa:da:aa:fc:17:58:dc:d1:d7:ab: c8:e7:64:59 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPPVsFP4gHUiQqrgKlm0jBKDi0zgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yMzA3MzEwMDAyMTVaFw0yNDA3MjkwMDA3MTVaMDMxMTAvBgNV BAMTKDg3MTcxNzM3MkNCQkVCNTc1RUNCNDFFMDE2QjQ1MzBGN0MyNzk1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIH1RErVNkVwphGRQMy7MPMckG d4spVRmI5XesUKCz6uwjT6tmCQHxFPTkUzDc2e+R177PKowl5ljgCoSVIRlWhmDI HF+/vqoeyRRiOHxE8tk+JFopGpDkivDAGPSB/5TYIxpP5EpMZ7i5PBsTRbjnUxsG Ac1D6ysa3QQ2k9QZw9yVlbTwqmT2fti/6WEq+lU7ZZb76yKxcsiFvuoeyF+fEbeP s2+NGdcs0eFYAzRpqJfamQrvsDg9Ay1Xmi1WlR+fkGQk1vU45aT9TVF2rU8BRVWx gF05OZIQMTI/8NEpJOS3uhNjYxNqfCmqH5/Ik74Z7sLtXEnxOM014VAknS3PAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhxcXNyy761dey0HgFrRTD3wnleowHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzgzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAgAMA0GCSqGSIb3DQEBCwUAA4IBAQBZp6Wh74YtDGvFjqMQc9mnZ24V67Rq/yzg 8IIYAlEiemM0eb/HZqW51fDhNWIoZnih+5nk95vLLkqUISr6GHzRcac0A/ezSEVn ucXpCqWqjvOHQ/dsYoaCJ7V/kwyE+OHvSVgSPkRM0K46rmZgRgKZuXUqsGryvixR 3NxF7PE6+uc7XxJRQCRkGqM0aPBB9PtjUoFHs/R1xZ4xIrOXLGUkPvL4QIp0Fjn5 94y0jC5w32wkT9+cDlwRJewn08/dKzi7naInTSIeXUV41x6hQQd0/C1dDdHB7xDf G9MS8VChvjegGLWrviHs66x/4gUcEOtCdPraqvwXWNzR16vI52RZ -----END CERTIFICATE-----Generated at Wed Apr 24 21:17:04 2024 by rpki-client on console-ams.rpki-client.org