$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa File: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (raw, json) Hash identifier: YzYTXtZ1btRkdvh/XwpJ+AUIwj2v7beEUsuLvSxNdOw= Subject key identifier: 59:12:FA:62:FE:5D:2B:FA:79:47:1F:10:DC:99:B6:F0:0A:75:81:9F Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 41768859C4EED5E5A728702FB542B019837D6FF5 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa Signing time: Wed 15 May 2024 10:01:36 +0000 ROA not before: Wed 15 May 2024 09:56:36 +0000 ROA not after: Wed 14 May 2025 10:01:36 +0000 asID: 136131 IP address blocks: 2401:8440:311::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:76:88:59:c4:ee:d5:e5:a7:28:70:2f:b5:42:b0:19:83:7d:6f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: May 15 09:56:36 2024 GMT Not After : May 14 10:01:36 2025 GMT Subject: CN=5912FA62FE5D2BFA79471F10DC99B6F00A75819F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:1a:dc:25:49:7b:5b:1c:a7:f6:85:ad:39: ca:e1:df:d5:fd:f9:ed:e0:9b:61:a5:04:87:bd:17: 56:c7:a9:30:57:f2:72:e7:c5:cd:c1:4a:62:5f:7d: 49:bc:5c:bf:05:c3:ad:08:05:17:63:7a:a7:0e:7d: f9:d1:a2:a9:6b:39:c0:fb:74:e8:40:db:81:1e:7b: 75:91:ec:ed:f6:86:2a:f8:d5:6d:b8:44:a9:e3:87: bd:e3:4e:5e:66:ff:c1:9b:7d:b5:8b:b2:c8:f8:ce: 57:fa:ab:09:c9:69:35:fc:cb:34:74:c1:43:42:5b: 7d:a0:8c:79:be:6e:79:87:af:89:08:3b:30:a2:4f: c9:42:1d:ba:0a:ec:c5:c8:c8:ba:4c:5c:a1:39:52: 57:3d:af:4b:34:79:5c:3a:19:7b:4f:52:00:c1:1e: 35:0c:35:e8:4f:22:bf:70:e7:5e:09:62:dc:5b:52: 3d:6d:d0:18:0c:67:57:0d:f0:3e:47:3b:15:fc:2e: a6:37:2b:50:6e:3e:1c:15:8d:4d:8a:65:fa:5d:80: e5:7b:e3:7a:6b:ef:17:50:66:d3:2c:ca:b3:75:2d: 8f:14:30:39:a5:46:97:bb:e8:70:53:4c:36:f3:a7: b1:44:91:6a:e1:36:55:4f:ca:d0:90:7e:1d:64:e9: e9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:12:FA:62:FE:5D:2B:FA:79:47:1F:10:DC:99:B6:F0:0A:75:81:9F X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8440:311::/48 Signature Algorithm: sha256WithRSAEncryption 3d:91:3b:e6:55:fc:69:b9:36:e3:52:ec:b2:a9:4d:59:d1:00: ee:bd:a3:ff:c0:4b:78:ed:3a:c6:8c:a0:48:23:31:82:1c:a3: e4:42:37:c4:81:98:50:4a:c0:d0:7c:6e:7b:c2:03:f3:df:35: 80:0c:32:bb:6e:77:42:77:b2:d0:66:6c:96:d6:59:e1:41:7e: bc:c7:1a:54:73:2d:af:b4:16:81:d9:b6:4f:61:e9:5f:d7:53: fd:0b:10:51:08:db:18:88:04:fd:0d:89:e9:b5:b4:9e:97:88: 34:89:7f:da:f6:f2:d6:5a:e2:df:f0:4a:47:e2:34:88:c1:07: 4d:73:a1:33:0d:a5:e7:89:88:04:85:73:07:03:94:13:c6:63: 31:aa:38:e4:cb:34:b2:47:0b:75:6e:bf:ab:38:42:81:a1:d1: 6d:70:a6:d0:1d:1a:95:25:96:e1:fe:b4:7a:e0:85:dc:34:11: d4:5a:c6:06:ed:be:53:4e:b2:51:5d:48:44:f0:0c:4b:80:49: 04:be:c9:fc:40:76:7a:af:34:d0:10:53:70:a3:eb:41:f0:df: dc:2a:09:12:ea:9f:c6:e6:f8:d1:f6:d6:6b:95:70:ee:9b:36: a6:00:98:61:2b:f0:9c:16:92:ce:a6:fe:f0:d9:32:c8:df:97: bf:08:52:92 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQXaIWcTu1eWnKHAvtUKwGYN9b/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNDA1MTUwOTU2MzZaFw0yNTA1MTQxMDAxMzZaMDMxMTAvBgNV BAMTKDU5MTJGQTYyRkU1RDJCRkE3OTQ3MUYxMERDOTlCNkYwMEE3NTgxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBRrcJUl7Wxyn9oWtOcrh39X9 +e3gm2GlBIe9F1bHqTBX8nLnxc3BSmJffUm8XL8Fw60IBRdjeqcOffnRoqlrOcD7 dOhA24Eee3WR7O32hir41W24RKnjh73jTl5m/8GbfbWLssj4zlf6qwnJaTX8yzR0 wUNCW32gjHm+bnmHr4kIOzCiT8lCHboK7MXIyLpMXKE5Ulc9r0s0eVw6GXtPUgDB HjUMNehPIr9w514JYtxbUj1t0BgMZ1cN8D5HOxX8LqY3K1BuPhwVjU2KZfpdgOV7 43pr7xdQZtMsyrN1LY8UMDmlRpe76HBTTDbzp7FEkWrhNlVPytCQfh1k6ek5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWRL6Yv5dK/p5Rx8Q3Jm28Ap1gZ8wHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdlLWVhZGUtNDMxOC1h YjIwLThjN2YyZDViZTY5Zi8wLzMyMzQzMDMxM2EzODM0MzQzMDNhMzMzMTMxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzEzMzMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAGE QAMRMA0GCSqGSIb3DQEBCwUAA4IBAQA9kTvmVfxpuTbjUuyyqU1Z0QDuvaP/wEt4 7TrGjKBIIzGCHKPkQjfEgZhQSsDQfG57wgPz3zWADDK7bndCd7LQZmyW1lnhQX68 xxpUcy2vtBaB2bZPYelf11P9CxBRCNsYiAT9DYnptbSel4g0iX/a9vLWWuLf8EpH 4jSIwQdNc6EzDaXniYgEhXMHA5QTxmMxqjjkyzSyRwt1br+rOEKBodFtcKbQHRqV JZbh/rR64IXcNBHUWsYG7b5TTrJRXUhE8AxLgEkEvsn8QHZ6rzTQEFNwo+tB8N/c KgkS6p/G5vjR9tZrlXDumzamAJhhK/CcFpLOpv7w2TLI35e/CFKS -----END CERTIFICATE-----Generated at Sun Jun 2 18:43:43 2024 by rpki-client on console-ams.rpki-client.org