$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa File: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (raw, json) Hash identifier: Cii8WQtlAmw6mi2OXGfCCktkOny8bdFPxl4Ma82SMQE= Subject key identifier: 74:32:9A:91:50:40:72:E2:FF:03:C3:06:49:F9:27:45:62:2D:03:15 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 496D261B033B51CC1C8C88F67FE3E74E987B5C60 Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa Signing time: Mon 31 Jul 2023 00:08:20 +0000 ROA not before: Mon 31 Jul 2023 00:03:20 +0000 ROA not after: Mon 29 Jul 2024 00:08:20 +0000 asID: 139986 IP address blocks: 2001:df2:c780::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 00:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6d:26:1b:03:3b:51:cc:1c:8c:88:f6:7f:e3:e7:4e:98:7b:5c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Jul 31 00:03:20 2023 GMT Not After : Jul 29 00:08:20 2024 GMT Subject: CN=74329A91504072E2FF03C30649F92745622D0315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:4d:fb:07:aa:32:7f:2e:9b:19:3d:e1:78: e9:62:a6:e8:a6:7b:b0:c1:18:01:d4:ed:46:85:0f: 9a:a4:b6:3d:c8:a7:5f:6e:8c:73:5b:52:a4:52:7c: 25:e8:60:df:45:ba:97:68:cd:fe:55:3a:e1:0b:a6: c0:a1:06:11:e8:1d:88:3d:a9:da:ef:b0:65:e4:45: 86:8a:3d:0c:4f:0e:1b:90:cf:5d:57:b9:ea:46:5e: f8:db:75:35:84:60:32:36:ba:d0:e7:57:c3:18:23: 1f:e8:d7:b9:a5:98:fc:70:18:ad:36:a0:f3:fa:c6: 9d:c2:18:10:56:75:b5:4b:43:f8:41:00:a1:6f:7f: 02:c4:23:5e:0d:fa:2b:0c:54:f5:16:f6:bc:48:11: ca:24:65:41:22:de:a3:fb:21:de:b1:4f:ab:87:5b: 91:29:e0:55:7c:65:b2:97:ff:87:09:fa:49:ad:59: a3:15:e4:6d:c1:16:bf:8a:f4:3b:d5:f7:55:fd:d0: d6:cc:fb:dd:9c:63:1c:94:ed:a2:55:22:97:f0:8f: a9:e6:9c:fb:13:45:d7:00:d3:64:3c:f6:9b:79:53: e6:76:1d:c7:fe:6f:a3:59:cd:85:7e:3b:cd:94:33: f8:e0:48:95:4f:55:aa:17:69:2b:4e:12:09:f9:e4: eb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:32:9A:91:50:40:72:E2:FF:03:C3:06:49:F9:27:45:62:2D:03:15 X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:c780::/48 Signature Algorithm: sha256WithRSAEncryption 96:9d:57:5a:e3:33:a8:1a:0a:00:b9:ff:6d:e7:2c:9b:47:16: d7:20:27:64:01:e4:27:13:88:63:54:05:8c:f1:65:29:c0:fe: 52:b7:c1:ab:f5:c3:82:f1:b4:b1:fb:cf:8f:4c:2c:15:89:f2: 72:ac:6f:92:fa:4d:da:20:e6:88:bf:46:af:4b:53:e7:ea:52: d2:73:e8:06:55:cf:fa:89:62:f3:c6:67:03:f8:45:45:50:46: cd:b8:55:16:9e:18:ce:22:b0:d4:86:25:92:00:51:7b:b9:82: 0e:b2:ea:76:6f:bc:b0:37:ae:8f:6d:1d:de:5f:c3:91:4b:0e: ec:57:9f:4e:06:90:5b:dd:c6:a5:aa:22:c1:64:9b:bc:e5:24: 63:25:ca:5a:84:2f:d2:3a:16:44:6d:d2:c6:99:54:ad:e8:44: 3b:11:db:82:8c:a9:d0:57:04:0b:78:33:6a:c1:23:b6:bd:2d: 16:3f:96:88:4c:b2:60:dc:40:3f:a5:e4:38:db:39:34:2e:ba: 69:e4:ba:74:d4:ab:ef:0e:f3:41:59:90:f6:b9:23:65:e9:84: bf:24:d9:e3:7d:58:64:f1:07:37:07:55:cb:ff:f0:82:59:5e: 61:aa:27:9a:0c:99:ec:6b:b3:16:e8:da:b5:ab:59:c2:2f:33: 68:4f:13:87 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSW0mGwM7UcwcjIj2f+PnTph7XGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yMzA3MzEwMDAzMjBaFw0yNDA3MjkwMDA4MjBaMDMxMTAvBgNV BAMTKDc0MzI5QTkxNTA0MDcyRTJGRjAzQzMwNjQ5RjkyNzQ1NjIyRDAzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHk37B6oyfy6bGT3heOlipuim e7DBGAHU7UaFD5qktj3Ip19ujHNbUqRSfCXoYN9Fupdozf5VOuELpsChBhHoHYg9 qdrvsGXkRYaKPQxPDhuQz11XuepGXvjbdTWEYDI2utDnV8MYIx/o17mlmPxwGK02 oPP6xp3CGBBWdbVLQ/hBAKFvfwLEI14N+isMVPUW9rxIEcokZUEi3qP7Id6xT6uH W5Ep4FV8ZbKX/4cJ+kmtWaMV5G3BFr+K9DvV91X90NbM+92cYxyU7aJVIpfwj6nm nPsTRdcA02Q89pt5U+Z2Hcf+b6NZzYV+O82UM/jgSJVPVaoXaStOEgn55Os5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUdDKakVBAcuL/A8MGSfknRWItAxUwHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0MGU5YzlmLWQ2MDctNDQ5Ny1h ZjI4LTRkMmI5MDkyZDVhNi8wLzMyMzAzMDMxM2E2NDY2MzIzYTYzMzczODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzODM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8seAMA0GCSqGSIb3DQEBCwUAA4IBAQCWnVda4zOoGgoAuf9t5yybRxbXICdkAeQn E4hjVAWM8WUpwP5St8Gr9cOC8bSx+8+PTCwVifJyrG+S+k3aIOaIv0avS1Pn6lLS c+gGVc/6iWLzxmcD+EVFUEbNuFUWnhjOIrDUhiWSAFF7uYIOsup2b7ywN66PbR3e X8ORSw7sV59OBpBb3calqiLBZJu85SRjJcpahC/SOhZEbdLGmVSt6EQ7EduCjKnQ VwQLeDNqwSO2vS0WP5aITLJg3EA/peQ42zk0Lrpp5Lp01KvvDvNBWZD2uSNl6YS/ JNnjfVhk8Qc3B1XL//CCWV5hqieaDJnsa7MW6Nq1q1nCLzNoTxOH -----END CERTIFICATE-----Generated at Fri Apr 19 02:00:59 2024 by rpki-client on console-fra.rpki-client.org