$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: lEo4rhbdu+7IvYqGcxMrBvgcrxGUdBW821pk/dWFkU4= Subject key identifier: DD:B0:22:A5:52:E1:AD:D6:5D:19:98:BD:D1:01:4F:AA:6F:26:EE:6B Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 19E3412DA9B8498F51B342567A574DD16D638B46 Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 01 Jul 2024 01:04:19 +0000 ROA not before: Mon 01 Jul 2024 00:59:19 +0000 ROA not after: Mon 30 Jun 2025 01:04:19 +0000 asID: 136088 IP address blocks: 2400:d940:600::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 08:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e3:41:2d:a9:b8:49:8f:51:b3:42:56:7a:57:4d:d1:6d:63:8b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jul 1 00:59:19 2024 GMT Not After : Jun 30 01:04:19 2025 GMT Subject: CN=DDB022A552E1ADD65D1998BDD1014FAA6F26EE6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5d:d6:fa:f9:c2:22:71:59:59:89:35:9a:39: 60:b9:16:7a:7f:99:97:52:07:25:aa:45:2a:99:d5: a5:3a:7c:0f:d5:4f:30:48:be:16:38:c4:a8:f3:4d: 29:2e:92:d1:29:19:0c:ed:50:a5:2d:bc:c1:4e:54: 1d:ab:f5:5c:70:1a:56:99:8d:ca:51:9d:d9:ba:6c: d0:d9:ee:dd:d7:e8:0f:2b:a4:40:8b:61:9e:4a:a6: 30:ab:70:e7:20:37:f2:ea:ac:5d:c4:8b:8a:a0:16: b1:66:5e:79:b0:76:82:ad:b0:bd:81:50:0b:f1:38: 74:9c:63:3e:2a:c7:1a:c5:52:21:b7:bc:48:b0:31: fe:98:c0:55:20:64:93:4d:21:a2:e6:a8:a6:3a:f4: d6:39:74:7d:a7:0e:30:f0:f8:36:60:2b:10:93:d8: 4a:31:f4:cf:cf:12:44:51:e1:9c:c9:2b:84:91:fe: d1:e7:05:4b:4e:8b:5e:9f:1f:a7:d7:2f:dd:c8:25: e8:86:55:09:27:d2:ba:59:97:fa:7e:c6:6f:09:2d: 56:23:5f:8f:39:24:ce:9c:3f:d6:1f:a4:61:bf:d3: 1b:a5:38:41:33:5c:27:cc:80:bf:49:d8:52:e6:5d: dd:22:1e:76:45:c7:c5:7a:c2:48:5f:6d:53:08:fb: b3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B0:22:A5:52:E1:AD:D6:5D:19:98:BD:D1:01:4F:AA:6F:26:EE:6B X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:600::/48 Signature Algorithm: sha256WithRSAEncryption 5f:fb:d0:7c:0b:02:f2:58:d6:25:c9:26:5b:b0:6a:a1:3f:10: 95:d3:4b:60:60:65:d5:e9:c2:8d:43:4c:4a:b6:86:58:b1:a0: bb:99:9c:c8:97:27:b0:b2:3a:fb:11:72:ae:f4:05:ee:34:d5: 04:eb:3e:99:a2:4b:fe:4c:8d:4a:de:94:af:94:71:41:af:c5: ba:ee:d4:42:a3:e4:1d:b2:31:60:9b:3f:4b:23:5b:e4:89:bd: 7a:25:d7:b6:5f:a0:18:26:0c:69:9c:be:69:ce:66:ba:8e:06: bd:72:3b:51:52:d8:6c:f6:b5:95:ec:b3:e2:65:7b:03:e5:82: 5e:f8:ba:46:36:e6:1a:6f:a1:d0:e9:31:89:77:86:d7:b3:99: a0:b5:32:f2:d6:2e:3c:36:af:38:74:cf:af:4b:1c:4c:a1:48: 53:bb:ab:c3:07:68:8c:e8:39:4d:f8:a5:08:95:4b:0a:d3:67: f3:1b:08:50:87:1d:37:49:58:43:d5:dd:0c:99:b5:bf:4b:8c: 42:7c:88:24:43:df:95:9b:5c:6e:a3:66:3d:4b:78:76:10:c6: e9:8d:6c:d1:c3:f6:16:74:07:2b:c2:05:55:b7:6d:19:fe:00: a5:44:88:2e:81:13:95:c4:89:c6:e9:e9:d3:d6:23:3e:2f:47: 6e:bb:2a:25 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGeNBLam4SY9Rs0JWeldN0W1ji0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNDA3MDEwMDU5MTlaFw0yNTA2MzAwMTA0MTlaMDMxMTAvBgNV BAMTKEREQjAyMkE1NTJFMUFERDY1RDE5OThCREQxMDE0RkFBNkYyNkVFNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSXdb6+cIicVlZiTWaOWC5Fnp/ mZdSByWqRSqZ1aU6fA/VTzBIvhY4xKjzTSkuktEpGQztUKUtvMFOVB2r9VxwGlaZ jcpRndm6bNDZ7t3X6A8rpECLYZ5KpjCrcOcgN/LqrF3Ei4qgFrFmXnmwdoKtsL2B UAvxOHScYz4qxxrFUiG3vEiwMf6YwFUgZJNNIaLmqKY69NY5dH2nDjDw+DZgKxCT 2Eox9M/PEkRR4ZzJK4SR/tHnBUtOi16fH6fXL93IJeiGVQkn0rpZl/p+xm8JLVYj X485JM6cP9YfpGG/0xulOEEzXCfMgL9J2FLmXd0iHnZFx8V6wkhfbVMI+7OxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU3bAipVLhrdZdGZi90QFPqm8m7mswHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzYzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAYAMA0GCSqGSIb3DQEBCwUAA4IBAQBf+9B8CwLyWNYlySZbsGqhPxCV00tgYGXV 6cKNQ0xKtoZYsaC7mZzIlyewsjr7EXKu9AXuNNUE6z6Zokv+TI1K3pSvlHFBr8W6 7tRCo+QdsjFgmz9LI1vkib16Jde2X6AYJgxpnL5pzma6jga9cjtRUths9rWV7LPi ZXsD5YJe+LpGNuYab6HQ6TGJd4bXs5mgtTLy1i48Nq84dM+vSxxMoUhTu6vDB2iM 6DlN+KUIlUsK02fzGwhQhx03SVhD1d0MmbW/S4xCfIgkQ9+Vm1xuo2Y9S3h2EMbp jWzRw/YWdAcrwgVVt20Z/gClRIgugROVxInG6enT1iM+L0duuyol -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org