$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: UqJzaGDMj/9QRl/If/AmwnrU4C8Nroi8tU3YpQHjbvc= Subject key identifier: 4A:D7:E6:19:2C:81:DE:C9:63:FA:DD:44:35:D2:86:BE:81:2A:53:99 Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 115AF6FBD92B6ED7585DD65DFE52B2064EE1A805 Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 31 Jul 2023 00:07:16 +0000 ROA not before: Mon 31 Jul 2023 00:02:16 +0000 ROA not after: Mon 29 Jul 2024 00:07:16 +0000 asID: 136088 IP address blocks: 2400:d940:900::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5a:f6:fb:d9:2b:6e:d7:58:5d:d6:5d:fe:52:b2:06:4e:e1:a8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jul 31 00:02:16 2023 GMT Not After : Jul 29 00:07:16 2024 GMT Subject: CN=4AD7E6192C81DEC963FADD4435D286BE812A5399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9c:64:ae:d4:4c:e4:d7:97:78:3f:eb:fc:f0: 29:89:88:b3:23:23:8d:b3:2e:8a:33:99:5f:55:c3: 74:81:0f:1a:d8:66:a1:60:56:60:60:a4:12:72:55: 47:53:bc:4a:37:44:ab:2e:0f:78:6e:fc:1b:60:3a: ed:d0:6d:93:ff:ed:a0:ba:ab:cf:e1:bd:22:4f:fe: 5f:bb:af:8c:27:39:29:12:6a:72:36:be:75:67:88: c9:c7:0c:dd:6d:18:d8:9e:9a:2c:5a:fc:d7:0f:34: ee:5e:81:af:84:b7:b0:1e:f6:2a:41:d2:5b:bf:14: 80:54:11:97:4d:91:de:40:18:1c:44:40:18:89:9d: aa:da:9d:f3:6e:d3:9b:be:c2:fa:8b:c9:c8:a8:79: 0c:d3:a9:c3:81:53:20:53:37:58:b3:71:24:80:17: 32:2a:75:0e:93:d4:7a:dd:19:9b:c9:25:05:84:a1: 53:a1:94:f2:69:ad:b2:f7:c3:95:b6:23:5b:b1:c8: 94:62:18:7d:c9:79:ec:dc:b5:2e:31:b5:6d:02:c5: d4:5c:cb:1b:a7:df:bb:5a:aa:67:45:d7:3f:30:1e: 82:a2:04:13:4a:46:70:b0:2c:d7:7f:4c:ee:e8:ae: 4e:47:ac:f9:b0:5a:cc:49:47:63:52:c6:ae:2f:61: 9f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D7:E6:19:2C:81:DE:C9:63:FA:DD:44:35:D2:86:BE:81:2A:53:99 X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:900::/48 Signature Algorithm: sha256WithRSAEncryption 67:46:be:4f:1b:8f:95:65:b3:cb:ab:f7:9e:f9:ea:57:ab:18: b1:dc:6f:36:a4:c7:14:30:f7:8d:2d:b9:08:6c:d5:b1:c1:47: fa:fe:6b:7a:a5:70:59:5c:5f:70:c8:e4:e3:3d:d5:ed:14:6d: 16:44:5a:d4:bb:59:b7:5d:52:21:ec:21:b3:97:f1:24:84:5d: 49:5d:a4:b3:71:fd:2c:21:96:58:4c:89:bf:8f:c6:b2:b0:6b: af:53:2b:4e:87:bd:8f:9a:e6:c3:3e:43:31:d7:6a:47:9b:bc: 8f:9e:52:92:10:ce:3e:a4:d8:c4:2f:0e:bc:eb:83:69:fa:ab: 86:6b:82:55:54:3a:a1:5f:d3:14:5e:26:4b:c4:1b:07:51:07: 91:1d:66:1e:a9:35:75:8c:f5:78:fc:0c:4f:ea:fc:ef:e6:df: 61:7b:ae:06:a4:f6:6c:77:5d:65:45:a4:2d:4c:49:ea:0f:e8: a7:93:d4:1b:ed:5b:6d:d1:83:8a:b4:b4:f9:42:54:d1:fa:ff: f1:5b:01:5a:75:fe:eb:e9:ad:cf:10:4f:fb:0f:40:86:8e:40: 32:1c:b0:78:26:4c:20:79:2d:25:44:6d:1a:d9:ec:ae:4a:d4: 6c:c6:16:75:46:07:d5:a7:e0:6a:f3:a7:8b:b0:db:12:12:e3: 0c:a9:8b:1d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEVr2+9krbtdYXdZd/lKyBk7hqAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yMzA3MzEwMDAyMTZaFw0yNDA3MjkwMDA3MTZaMDMxMTAvBgNV BAMTKDRBRDdFNjE5MkM4MURFQzk2M0ZBREQ0NDM1RDI4NkJFODEyQTUzOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDanGSu1Ezk15d4P+v88CmJiLMj I42zLoozmV9Vw3SBDxrYZqFgVmBgpBJyVUdTvEo3RKsuD3hu/BtgOu3QbZP/7aC6 q8/hvSJP/l+7r4wnOSkSanI2vnVniMnHDN1tGNiemixa/NcPNO5ega+Et7Ae9ipB 0lu/FIBUEZdNkd5AGBxEQBiJnaranfNu05u+wvqLycioeQzTqcOBUyBTN1izcSSA FzIqdQ6T1HrdGZvJJQWEoVOhlPJprbL3w5W2I1uxyJRiGH3JeezctS4xtW0CxdRc yxun37taqmdF1z8wHoKiBBNKRnCwLNd/TO7ork5HrPmwWsxJR2NSxq4vYZ8FAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUStfmGSyB3slj+t1ENdKGvoEqU5kwHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzkzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAkAMA0GCSqGSIb3DQEBCwUAA4IBAQBnRr5PG4+VZbPLq/ee+epXqxix3G82pMcU MPeNLbkIbNWxwUf6/mt6pXBZXF9wyOTjPdXtFG0WRFrUu1m3XVIh7CGzl/EkhF1J XaSzcf0sIZZYTIm/j8aysGuvUytOh72PmubDPkMx12pHm7yPnlKSEM4+pNjELw68 64Np+quGa4JVVDqhX9MUXiZLxBsHUQeRHWYeqTV1jPV4/AxP6vzv5t9he64GpPZs d11lRaQtTEnqD+ink9Qb7Vtt0YOKtLT5QlTR+v/xWwFadf7r6a3PEE/7D0CGjkAy HLB4JkwgeS0lRG0a2eyuStRsxhZ1RgfVp+Bq86eLsNsSEuMMqYsd -----END CERTIFICATE-----Generated at Wed Apr 24 21:17:04 2024 by rpki-client on console-ams.rpki-client.org