$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: ZGUgYTk8QiqAbfih+QUUlVLr0b++PfvjTFFtUd4YvL0= Subject key identifier: 64:DC:8E:ED:F6:6A:50:A5:9B:3C:24:C8:E9:CE:78:F1:1B:67:18:6A Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 41187975AFD34F9E7EEA3CF945F867DB86F0C3D5 Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 01 Jul 2024 01:04:18 +0000 ROA not before: Mon 01 Jul 2024 00:59:18 +0000 ROA not after: Mon 30 Jun 2025 01:04:18 +0000 asID: 136088 IP address blocks: 2400:d940:40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 08:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:18:79:75:af:d3:4f:9e:7e:ea:3c:f9:45:f8:67:db:86:f0:c3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jul 1 00:59:18 2024 GMT Not After : Jun 30 01:04:18 2025 GMT Subject: CN=64DC8EEDF66A50A59B3C24C8E9CE78F11B67186A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:d2:38:12:e0:21:ac:98:cd:67:8b:84:bb: 69:b1:ca:36:69:d9:bf:ed:39:25:c4:5a:e2:d6:e0: 35:6a:0e:9a:fb:8b:41:58:a1:d8:5e:c3:12:e5:5d: 46:96:62:42:a1:62:be:f4:57:bd:9f:49:7e:ff:d0: 2a:a3:0b:fb:b4:75:63:d1:38:7a:a3:1a:d6:0e:08: f5:ab:e0:81:19:6a:b9:8a:f4:87:bd:bc:ac:b1:d4: 49:9e:73:42:54:c0:90:6d:16:69:73:08:5c:0c:fe: b2:ec:04:de:72:0d:3e:75:e9:a7:ce:31:02:d0:97: 98:8c:69:d6:33:30:1a:8e:da:fa:8c:62:5a:ae:a9: 16:ed:7f:08:18:05:a3:61:83:20:57:dd:85:1f:b4: 4b:35:47:8e:df:6a:9c:ec:29:18:f2:7b:ae:34:f4: 1c:e6:dd:97:fe:4e:fc:94:17:ae:c5:e8:22:24:61: 11:53:04:68:48:c2:b8:bb:ad:09:86:04:d8:49:0b: 15:df:cd:f3:c4:ef:07:fd:36:a6:62:01:2f:c6:40: 9d:84:7d:4c:52:2c:85:89:cb:53:62:7e:3f:bf:5b: 7f:ce:7a:4b:02:f6:1d:ba:22:55:1f:4b:6a:06:de: 90:75:8d:97:a0:05:b7:18:d9:25:43:33:d0:ec:c9: 0a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DC:8E:ED:F6:6A:50:A5:9B:3C:24:C8:E9:CE:78:F1:1B:67:18:6A X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:40::/48 Signature Algorithm: sha256WithRSAEncryption 0f:61:79:03:91:4d:ea:9e:0a:cd:c9:dd:b6:af:3d:12:e7:f2: 31:42:18:f8:ce:f6:b6:97:67:6d:29:d0:fe:07:cb:d6:7b:62: 25:fa:d2:fe:1a:89:e4:b1:e8:4e:03:9a:3b:fc:00:1e:d7:ee: dd:c0:d7:38:dc:e2:e0:08:0d:8c:a6:6f:e6:40:e1:6e:64:c4: 7e:cf:0f:84:a8:58:14:8d:f7:71:41:7a:7e:fc:00:2c:2e:3e: 73:f8:35:3b:7f:66:7c:13:31:e0:b4:0d:2d:5b:bb:56:97:ea: 30:3e:cc:06:74:64:a9:07:f8:45:6b:bf:50:88:fc:3a:24:91: 6a:1a:ff:a5:f6:e6:f7:bd:5e:8a:30:76:95:a9:30:10:e0:9d: 3d:a3:5f:30:ce:8a:7b:6a:90:d7:83:ef:b4:05:16:43:29:b7: cf:6d:5a:0e:da:fa:1c:21:41:2c:22:37:57:16:0f:e2:01:18: 9c:68:9c:13:d9:42:07:ed:99:9f:85:b5:d1:0c:de:59:e2:dc: b6:62:d5:d7:05:bd:60:d7:96:ad:b6:49:a5:74:80:8b:c4:5d: f5:62:4c:21:df:ff:e7:87:50:52:10:02:14:3c:a5:55:44:ca: 52:1b:47:0d:26:b8:e3:c9:12:37:82:c1:c9:03:a3:cb:da:d9: c4:3c:38:06 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUQRh5da/TT55+6jz5Rfhn24bww9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNDA3MDEwMDU5MThaFw0yNTA2MzAwMTA0MThaMDMxMTAvBgNV BAMTKDY0REM4RUVERjY2QTUwQTU5QjNDMjRDOEU5Q0U3OEYxMUI2NzE4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbdI4EuAhrJjNZ4uEu2mxyjZp 2b/tOSXEWuLW4DVqDpr7i0FYodhewxLlXUaWYkKhYr70V72fSX7/0CqjC/u0dWPR OHqjGtYOCPWr4IEZarmK9Ie9vKyx1Emec0JUwJBtFmlzCFwM/rLsBN5yDT516afO MQLQl5iMadYzMBqO2vqMYlquqRbtfwgYBaNhgyBX3YUftEs1R47fapzsKRjye640 9Bzm3Zf+TvyUF67F6CIkYRFTBGhIwri7rQmGBNhJCxXfzfPE7wf9NqZiAS/GQJ2E fUxSLIWJy1Nifj+/W3/OeksC9h26IlUfS2oG3pB1jZegBbcY2SVDM9DsyQpZAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUZNyO7fZqUKWbPCTI6c548RtnGGowHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzQzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNjMwMzgzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA2UAA QDANBgkqhkiG9w0BAQsFAAOCAQEAD2F5A5FN6p4Kzcndtq89EufyMUIY+M72tpdn bSnQ/gfL1ntiJfrS/hqJ5LHoTgOaO/wAHtfu3cDXONzi4AgNjKZv5kDhbmTEfs8P hKhYFI33cUF6fvwALC4+c/g1O39mfBMx4LQNLVu7VpfqMD7MBnRkqQf4RWu/UIj8 OiSRahr/pfbm971eijB2lakwEOCdPaNfMM6Ke2qQ14PvtAUWQym3z21aDtr6HCFB LCI3VxYP4gEYnGicE9lCB+2Zn4W10QzeWeLctmLV1wW9YNeWrbZJpXSAi8Rd9WJM Id//54dQUhACFDylVUTKUhtHDSa448kSN4LByQOjy9rZxDw4Bg== -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org