$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: SKYWW20Abnx/5lU9O9LX85BE1/cgHI8xjyGVtNWFFEk= Subject key identifier: B9:26:F2:57:DD:C2:87:B5:32:09:57:EE:AB:D9:8A:09:E2:B2:7A:12 Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 2FBDEFC0D92F86A32CF2CE0B7D64E98352753C5B Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 01 Jul 2024 01:04:19 +0000 ROA not before: Mon 01 Jul 2024 00:59:19 +0000 ROA not after: Mon 30 Jun 2025 01:04:19 +0000 asID: 136088 IP address blocks: 2400:d940:10::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 08:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:bd:ef:c0:d9:2f:86:a3:2c:f2:ce:0b:7d:64:e9:83:52:75:3c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jul 1 00:59:19 2024 GMT Not After : Jun 30 01:04:19 2025 GMT Subject: CN=B926F257DDC287B5320957EEABD98A09E2B27A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:4b:c2:26:b5:77:91:ae:aa:7f:ef:fd:fc: f5:9c:52:09:89:d1:b3:6e:4d:d8:d2:6a:a1:f4:b9: 06:d9:d3:a3:49:a0:20:3d:3a:2d:f7:91:d5:3d:c8: 56:d5:7e:b5:42:ad:e0:1a:cc:42:03:44:98:e1:28: dd:0c:6a:c1:8d:07:27:b0:ef:7f:84:fe:7b:ee:1d: f1:ba:bb:b9:56:22:82:f7:03:a4:ba:8c:f3:3f:f1: d9:31:85:f4:68:44:e8:d9:8e:02:0a:87:30:6a:c7: 50:4a:c4:2f:e4:0b:e4:91:a5:69:91:05:a8:0c:5b: 11:68:de:71:0f:aa:8b:0d:10:a5:23:91:2e:19:28: 3e:17:e7:31:68:e0:74:2f:dc:28:cb:f3:25:49:c4: 8b:91:dc:94:f8:4e:44:0a:ed:95:ac:01:cf:11:e0: 6b:c5:39:56:98:0d:90:f3:b9:91:d6:a4:09:3e:35: bc:2c:c9:f5:88:00:4b:78:1e:35:7b:23:22:49:4b: 9b:d7:18:47:cc:19:a3:8d:f1:f9:d3:17:3a:33:8a: 02:58:f0:72:35:d3:66:ae:c5:a7:77:bd:a3:18:21: 9c:73:1d:e1:a9:89:72:5b:15:21:0f:89:89:80:d0: 23:04:37:91:3b:ef:dd:12:8b:16:c5:a0:a0:9e:d8: 2b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:26:F2:57:DD:C2:87:B5:32:09:57:EE:AB:D9:8A:09:E2:B2:7A:12 X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:10::/48 Signature Algorithm: sha256WithRSAEncryption a5:57:cd:f3:ec:12:4c:f6:59:73:d4:02:03:b1:0d:ce:ad:39: 17:05:c6:aa:cc:70:4e:82:16:e3:b5:c6:4a:1f:04:dd:91:c9: a1:e0:72:31:fa:0a:70:b5:7f:55:55:0f:92:d6:20:12:44:48: 5a:80:38:7c:a7:08:20:94:53:70:9b:98:3d:94:dc:1f:b5:9d: 80:41:ad:c9:f5:bb:95:03:4a:af:6d:04:bd:9c:e5:05:b6:70: 07:f5:c6:6e:7b:54:58:a0:9b:74:55:3c:cf:18:67:cd:6d:4b: 90:52:d1:11:d0:c1:16:09:85:e9:33:d4:36:6b:39:b5:62:ce: a8:ce:02:a4:e1:2c:8c:b7:63:fc:d0:90:55:3e:03:ce:8d:68: 60:77:69:fb:84:f4:47:8e:09:af:4d:1f:fa:66:55:17:66:26: a1:1a:ba:3f:53:ed:10:ea:89:a2:01:ba:fa:a1:9e:99:f7:72: a4:da:78:c4:32:8c:84:44:51:d3:0c:8d:ae:f9:7e:54:00:1a: f9:0e:54:7a:4a:30:23:f1:af:3e:1b:a9:10:1b:5d:db:ac:7a: 4b:1c:64:55:84:8c:22:57:bc:89:f7:e7:c5:79:c0:7b:e7:80: 3e:c9:a8:72:7e:93:76:37:38:d0:39:f7:c5:90:a0:e4:22:bc: ec:f7:c6:4f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUL73vwNkvhqMs8s4LfWTpg1J1PFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNDA3MDEwMDU5MTlaFw0yNTA2MzAwMTA0MTlaMDMxMTAvBgNV BAMTKEI5MjZGMjU3RERDMjg3QjUzMjA5NTdFRUFCRDk4QTA5RTJCMjdBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQkvCJrV3ka6qf+/9/PWcUgmJ 0bNuTdjSaqH0uQbZ06NJoCA9Oi33kdU9yFbVfrVCreAazEIDRJjhKN0MasGNByew 73+E/nvuHfG6u7lWIoL3A6S6jPM/8dkxhfRoROjZjgIKhzBqx1BKxC/kC+SRpWmR BagMWxFo3nEPqosNEKUjkS4ZKD4X5zFo4HQv3CjL8yVJxIuR3JT4TkQK7ZWsAc8R 4GvFOVaYDZDzuZHWpAk+NbwsyfWIAEt4HjV7IyJJS5vXGEfMGaON8fnTFzozigJY 8HI102auxad3vaMYIZxzHeGpiXJbFSEPiYmA0CMEN5E7790SixbFoKCe2Cu7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUuSbyV93Ch7UyCVfuq9mKCeKyehIwHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzEzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNjMwMzgzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA2UAA EDANBgkqhkiG9w0BAQsFAAOCAQEApVfN8+wSTPZZc9QCA7ENzq05FwXGqsxwToIW 47XGSh8E3ZHJoeByMfoKcLV/VVUPktYgEkRIWoA4fKcIIJRTcJuYPZTcH7WdgEGt yfW7lQNKr20EvZzlBbZwB/XGbntUWKCbdFU8zxhnzW1LkFLREdDBFgmF6TPUNms5 tWLOqM4CpOEsjLdj/NCQVT4Dzo1oYHdp+4T0R44Jr00f+mZVF2YmoRq6P1PtEOqJ ogG6+qGemfdypNp4xDKMhERR0wyNrvl+VAAa+Q5UekowI/GvPhupEBtd26x6Sxxk VYSMIle8iffnxXnAe+eAPsmocn6Tdjc40Dn3xZCg5CK87PfGTw== -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org