$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/323430323a316134303a3a2f33322d3332203d3e20313336383639.roa File: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (raw, json) Hash identifier: jUVhtpkT7YN8oJpSnqj38meGYyeU2msEkWXrv/huius= Subject key identifier: 5F:E5:13:62:11:E4:B3:D3:BE:5C:26:49:19:40:66:10:2A:EA:FE:DA Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 2AD78724902F3814C6FA0CB69960A12CAAE18D66 Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/323430323a316134303a3a2f33322d3332203d3e20313336383639.roa Signing time: Mon 31 Jul 2023 00:08:12 +0000 ROA not before: Mon 31 Jul 2023 00:03:12 +0000 ROA not after: Mon 29 Jul 2024 00:08:12 +0000 asID: 136869 IP address blocks: 2402:1a40::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d7:87:24:90:2f:38:14:c6:fa:0c:b6:99:60:a1:2c:aa:e1:8d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Jul 31 00:03:12 2023 GMT Not After : Jul 29 00:08:12 2024 GMT Subject: CN=5FE5136211E4B3D3BE5C2649194066102AEAFEDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:26:b0:60:9f:d0:53:97:87:3e:3e:ea:db: 53:e6:00:c0:18:db:2f:9e:9d:1c:fa:98:35:c3:03: af:9e:67:5b:02:b4:2b:da:90:d6:43:d5:67:04:63: e0:6a:c3:b7:5e:9b:c0:5f:77:88:14:75:5e:cf:7c: a3:54:b9:17:64:84:42:e2:b2:5d:16:eb:be:9b:bf: 4c:fe:a1:e3:0c:c8:1e:46:50:f8:f4:7a:52:d4:15: e0:3a:af:2e:cf:b9:01:ca:92:2a:3a:20:b3:09:43: 68:1a:e4:08:69:f7:f0:f0:82:06:f2:e6:62:b7:17: ea:df:38:72:ac:7f:f2:0b:f8:49:30:8e:98:2a:47: 55:c5:19:d6:85:fc:4a:02:80:8c:dc:9c:33:22:8a: b8:63:9a:0d:92:fa:12:de:45:19:b6:04:0e:23:07: 47:4f:76:ce:d4:15:47:da:5b:b2:e5:35:aa:e2:f8: 9c:f0:6e:3a:09:b5:f3:d6:7e:07:6b:38:86:d9:6e: 44:be:23:6f:75:01:63:d4:b7:6e:e2:67:69:de:25: d5:46:10:bc:bd:09:be:cf:b3:59:e1:ec:56:32:79: 62:93:a9:cf:df:da:a3:26:3a:03:b9:ec:8f:d7:9b: 20:bc:eb:38:8d:61:54:50:3c:9a:bb:06:07:05:9a: 32:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E5:13:62:11:E4:B3:D3:BE:5C:26:49:19:40:66:10:2A:EA:FE:DA X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/323430323a316134303a3a2f33322d3332203d3e20313336383639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:1a40::/32 Signature Algorithm: sha256WithRSAEncryption 2e:31:4e:19:55:ca:42:04:6e:96:a0:a5:43:0a:fb:73:61:d7: 02:f3:5e:48:42:04:3b:39:d2:98:37:19:87:8e:6e:5d:4d:47: bf:2d:7d:57:94:51:08:d9:65:4a:cb:ab:9d:6b:f5:eb:37:20: 35:18:c0:7b:5f:54:9b:2e:e2:35:0f:ee:ae:91:a4:44:05:53: 76:f4:08:cf:23:4d:10:ba:2a:d6:7c:a3:ec:5e:a2:de:a5:62: 3c:7e:c5:0b:dc:49:5d:5d:46:c0:82:1b:a2:7b:08:b2:a0:cc: cd:e5:9a:9c:08:0a:2b:0d:c5:3e:f1:ed:ac:c1:1c:61:e0:aa: a2:9a:bc:14:12:1a:e7:9e:0c:7b:85:87:69:73:03:27:eb:00: ee:1a:c0:34:e0:37:3b:0f:68:1f:f2:eb:3c:6a:9d:b1:a5:1e: 34:38:6c:f5:a7:36:be:92:5b:4c:19:d7:53:95:ac:8e:3e:64: 13:cc:8b:80:a0:c5:86:47:b0:01:0e:ff:8f:5c:29:a2:0c:db: 35:01:a2:8a:bd:95:a5:b6:19:9b:f3:f4:52:c3:50:a2:f7:dd: 87:8c:ef:fd:b8:55:37:fd:19:5b:c7:1f:f2:2a:df:9b:dc:d7: 3c:51:1a:d0:d9:9d:30:85:80:35:e6:5d:1a:2a:bb:32:87:a9: 38:a0:0c:1d -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUKteHJJAvOBTG+gy2mWChLKrhjWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yMzA3MzEwMDAzMTJaFw0yNDA3MjkwMDA4MTJaMDMxMTAvBgNV BAMTKDVGRTUxMzYyMTFFNEIzRDNCRTVDMjY0OTE5NDA2NjEwMkFFQUZFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0eyawYJ/QU5eHPj7q21PmAMAY 2y+enRz6mDXDA6+eZ1sCtCvakNZD1WcEY+Bqw7dem8Bfd4gUdV7PfKNUuRdkhELi sl0W676bv0z+oeMMyB5GUPj0elLUFeA6ry7PuQHKkio6ILMJQ2ga5Ahp9/Dwggby 5mK3F+rfOHKsf/IL+EkwjpgqR1XFGdaF/EoCgIzcnDMiirhjmg2S+hLeRRm2BA4j B0dPds7UFUfaW7LlNari+JzwbjoJtfPWfgdrOIbZbkS+I291AWPUt27iZ2neJdVG ELy9Cb7Ps1nh7FYyeWKTqc/f2qMmOgO57I/XmyC86ziNYVRQPJq7BgcFmjLNAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUX+UTYhHks9O+XCZJGUBmECrq/towHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyMzFlNmIxLTE4NDEtNDc2ZC1i NDZiLWI0NGI5Y2I5NjhiMC8wLzMyMzQzMDMyM2EzMTYxMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNjM4MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCGkAwDQYJKoZI hvcNAQELBQADggEBAC4xThlVykIEbpagpUMK+3Nh1wLzXkhCBDs50pg3GYeObl1N R78tfVeUUQjZZUrLq51r9es3IDUYwHtfVJsu4jUP7q6RpEQFU3b0CM8jTRC6KtZ8 o+xeot6lYjx+xQvcSV1dRsCCG6J7CLKgzM3lmpwICisNxT7x7azBHGHgqqKavBQS GueeDHuFh2lzAyfrAO4awDTgNzsPaB/y6zxqnbGlHjQ4bPWnNr6SW0wZ11OVrI4+ ZBPMi4CgxYZHsAEO/49cKaIM2zUBooq9laW2GZvz9FLDUKL33YeM7/24VTf9GVvH H/Iq35vc1zxRGtDZnTCFgDXmXRoquzKHqTigDB0= -----END CERTIFICATE-----Generated at Sat Jun 1 11:46:17 2024 by rpki-client on console-ams.rpki-client.org