$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: hpl84yrty/TkWgCR5tMpUtnm3W3TF/Fq687Q+Fh02NM= Subject key identifier: 64:35:5B:6D:22:1E:FE:41:43:5F:FF:70:DD:A7:BA:0C:67:29:80:DE Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 36B11CC2A8D79237392909E1B25A5FBE1E88EE8A Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 01 Jul 2024 01:04:18 +0000 ROA not before: Mon 01 Jul 2024 00:59:18 +0000 ROA not after: Mon 30 Jun 2025 01:04:18 +0000 asID: 136088 IP address blocks: 2400:d940:400::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b1:1c:c2:a8:d7:92:37:39:29:09:e1:b2:5a:5f:be:1e:88:ee:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jul 1 00:59:18 2024 GMT Not After : Jun 30 01:04:18 2025 GMT Subject: CN=64355B6D221EFE41435FFF70DDA7BA0C672980DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:e6:45:4f:6a:14:17:54:c2:1b:39:1b:ca: ad:03:7b:c4:b3:de:94:6b:87:22:bd:c0:b2:20:2e: 7e:e3:7f:d6:4b:e4:80:79:4f:e5:00:33:70:4e:85: df:14:03:87:64:e5:52:37:93:46:10:6f:30:f7:45: 1d:2e:d7:50:50:a7:8f:f3:79:c5:af:02:23:62:b0: 3d:52:79:c7:37:bb:92:14:e7:a1:db:31:d7:5f:8e: b6:17:84:2f:fe:96:a5:2d:fe:8b:75:1e:c6:8c:77: de:44:56:65:4c:30:51:26:32:5c:4a:ec:f9:95:56: 43:9e:aa:90:97:07:59:5c:44:46:8b:ab:df:ff:15: 4c:02:71:26:0a:1b:db:58:70:65:44:24:b5:d2:2b: 0d:5d:44:3c:2c:27:94:5a:fa:1f:c9:d0:eb:db:76: 8a:53:a4:52:50:ae:34:55:68:c8:88:cb:dd:dc:c3: 33:f1:46:ea:bb:b9:1a:dd:76:1d:2b:ad:e9:a1:f8: b4:e3:4f:b7:8e:f9:a4:45:dc:3e:1e:12:98:1b:71: 75:71:14:3e:a6:07:ea:d7:9f:71:9a:c1:af:b3:c0: a8:76:6d:8c:9d:c4:2b:d5:19:a4:c8:17:6c:66:73: 65:2e:44:9f:3e:ee:69:c8:35:7c:ef:32:3d:c7:1a: 64:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:35:5B:6D:22:1E:FE:41:43:5F:FF:70:DD:A7:BA:0C:67:29:80:DE X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:400::/48 Signature Algorithm: sha256WithRSAEncryption 12:e0:49:cc:b9:0b:b4:c1:cb:ad:bc:87:04:94:e8:c5:5e:7f: 6e:51:af:50:54:c9:cc:e0:1d:35:21:81:b5:ed:79:ee:f3:f2: f5:90:12:e3:0e:01:d8:bd:55:1d:29:df:8c:92:81:29:36:5a: ea:a6:30:b2:ac:f7:2d:0f:4e:cc:09:d6:de:75:53:9d:d3:07: fc:ba:67:be:78:65:4c:ce:26:e6:bd:bf:fe:46:6e:ba:af:00: df:0f:ab:76:18:af:b8:f2:af:a0:59:4a:23:ce:70:64:50:14: 5b:2b:a7:6b:b0:ac:fd:59:42:4c:96:87:31:9f:bf:fa:a8:eb: a8:e6:61:eb:78:92:c3:c6:7c:42:e4:01:1b:c2:3e:85:b6:be: a2:2e:5b:17:fd:84:be:7e:6c:6c:72:b8:88:05:a2:86:ca:8b: ca:06:32:9b:e4:c1:61:f5:6b:bc:d7:f5:4e:0a:c0:5e:e3:00: 3b:74:8f:c0:9e:2d:14:38:f4:9e:52:53:69:37:7c:e4:36:85: 99:95:5d:5d:d9:fa:af:05:35:07:03:85:a8:b8:1e:1a:38:8c: 6f:22:38:41:66:6e:5f:b5:36:30:36:72:88:ca:21:98:9d:f3: 6d:16:19:a9:26:76:08:0b:a5:bc:5b:ba:42:22:b9:ec:24:cf: 77:86:38:4e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNrEcwqjXkjc5KQnhslpfvh6I7oowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNDA3MDEwMDU5MThaFw0yNTA2MzAwMTA0MThaMDMxMTAvBgNV BAMTKDY0MzU1QjZEMjIxRUZFNDE0MzVGRkY3MEREQTdCQTBDNjcyOTgwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMguZFT2oUF1TCGzkbyq0De8Sz 3pRrhyK9wLIgLn7jf9ZL5IB5T+UAM3BOhd8UA4dk5VI3k0YQbzD3RR0u11BQp4/z ecWvAiNisD1Secc3u5IU56HbMddfjrYXhC/+lqUt/ot1HsaMd95EVmVMMFEmMlxK 7PmVVkOeqpCXB1lcREaLq9//FUwCcSYKG9tYcGVEJLXSKw1dRDwsJ5Ra+h/J0Ovb dopTpFJQrjRVaMiIy93cwzPxRuq7uRrddh0rremh+LTjT7eO+aRF3D4eEpgbcXVx FD6mB+rXn3Gawa+zwKh2bYydxCvVGaTIF2xmc2UuRJ8+7mnINXzvMj3HGmRrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUZDVbbSIe/kFDX/9w3ae6DGcpgN4wHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzQzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAQAMA0GCSqGSIb3DQEBCwUAA4IBAQAS4EnMuQu0wcutvIcElOjFXn9uUa9QVMnM 4B01IYG17Xnu8/L1kBLjDgHYvVUdKd+MkoEpNlrqpjCyrPctD07MCdbedVOd0wf8 ume+eGVMzibmvb/+Rm66rwDfD6t2GK+48q+gWUojznBkUBRbK6drsKz9WUJMlocx n7/6qOuo5mHreJLDxnxC5AEbwj6Ftr6iLlsX/YS+fmxscriIBaKGyovKBjKb5MFh 9Wu81/VOCsBe4wA7dI/Ani0UOPSeUlNpN3zkNoWZlV1d2fqvBTUHA4WouB4aOIxv IjhBZm5ftTYwNnKIyiGYnfNtFhmpJnYIC6W8W7pCIrnsJM93hjhO -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org