$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa File: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (raw, json) Hash identifier: Skxlr62Ryw9sa+TLrHI+ISbrFb9KuQKTHXm2jTIYEhY= Subject key identifier: E4:5A:93:B1:07:C0:82:0E:A9:2D:07:35:46:92:AB:03:3D:8B:DE:93 Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 2CE14D486A4012BFA8DD71ECBACEBA10D2411229 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa Signing time: Thu 26 Oct 2023 06:01:13 +0000 ROA not before: Thu 26 Oct 2023 05:56:13 +0000 ROA not after: Thu 24 Oct 2024 06:01:13 +0000 asID: 131755 IP address blocks: 2001:df6:1800::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e1:4d:48:6a:40:12:bf:a8:dd:71:ec:ba:ce:ba:10:d2:41:12:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Oct 26 05:56:13 2023 GMT Not After : Oct 24 06:01:13 2024 GMT Subject: CN=E45A93B107C0820EA92D07354692AB033D8BDE93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d8:81:ee:71:c1:01:10:02:e3:e8:0f:f6:33: b3:a4:a1:2a:61:79:9a:29:f7:06:c9:b0:80:fd:d8: 4c:77:1f:fb:0a:75:7d:03:b5:37:87:14:f1:7e:19: 2f:90:67:48:a9:ba:ad:f9:49:73:d1:b5:a4:07:86: e2:db:3e:7f:38:98:57:64:70:02:51:21:80:0d:f8: 9d:dc:b1:18:e3:81:aa:be:84:e5:f6:90:7c:dc:c5: f5:0f:de:76:e5:5e:9c:d2:db:9e:f7:e7:48:e4:e1: bb:73:5b:cc:74:0d:80:0b:69:52:27:e6:f3:0a:8b: b0:b5:fe:18:db:19:db:f8:17:f3:27:f8:70:f4:2c: 1e:9f:e8:7a:e6:05:bc:74:4c:7a:32:09:70:d1:b3: a7:94:08:ba:f5:e4:2b:81:8c:af:7d:af:ed:89:93: 57:ed:b1:2d:78:b0:5d:47:61:0b:5e:d3:7a:d2:8a: 76:15:23:61:ae:21:a8:38:8d:49:37:43:ac:9d:f4: 9a:a0:0e:8c:09:31:6b:db:d2:59:56:51:d3:c7:a1: ab:dd:1d:dc:4d:40:b5:71:4d:7b:e6:4b:e1:a8:de: 60:62:16:ac:7c:8a:ce:c9:22:06:26:c4:1c:dd:e9: 55:3c:ff:59:e4:4b:95:6c:f4:3d:d6:de:2b:9a:b6: 8a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5A:93:B1:07:C0:82:0E:A9:2D:07:35:46:92:AB:03:3D:8B:DE:93 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:1800::/48 Signature Algorithm: sha256WithRSAEncryption 57:03:a4:8f:fe:09:df:4d:3a:20:27:86:b9:29:50:43:42:94: 70:c7:3e:82:44:84:7e:53:be:86:6b:b4:64:00:e0:9b:e1:e7: 0e:a4:4d:ee:ac:8d:30:5f:c0:bd:09:9e:e9:8c:f0:ab:e6:1d: cd:86:27:57:18:a3:d3:f6:cc:a6:01:61:04:cf:f3:31:08:f9: 69:70:4b:9d:ea:74:8d:f7:17:4d:52:e2:59:0f:2e:79:ab:3d: 54:f1:23:2c:70:72:06:2c:5a:2a:0b:10:99:77:68:ea:54:d3: 5a:dc:76:b4:6c:34:ae:b2:c0:8a:88:e4:fb:f4:52:20:0f:45: 19:04:6b:75:50:42:57:a1:d5:8d:de:23:41:f2:7e:e4:92:bd: 53:32:f2:f4:e0:32:44:98:1e:94:0d:b4:24:6e:23:ea:90:03: e3:50:2a:42:fc:91:98:97:93:bd:ca:01:13:38:b7:87:7e:e8: 67:40:ec:da:ea:63:d4:0f:34:02:35:f1:7e:c5:f0:6b:83:b4: 31:97:b8:5c:ed:de:83:74:0f:94:88:dc:3c:9f:4f:f0:64:f6: 39:75:e9:32:39:25:c9:f8:58:a8:25:02:91:42:82:36:0b:d6: 52:d8:b4:c7:d7:5c:b4:f8:a0:c9:2f:7d:da:99:e4:db:f0:5f: 0c:40:ed:ba -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIULOFNSGpAEr+o3XHsus66ENJBEikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yMzEwMjYwNTU2MTNaFw0yNDEwMjQwNjAxMTNaMDMxMTAvBgNV BAMTKEU0NUE5M0IxMDdDMDgyMEVBOTJEMDczNTQ2OTJBQjAzM0Q4QkRFOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2IHuccEBEALj6A/2M7OkoSph eZop9wbJsID92Ex3H/sKdX0DtTeHFPF+GS+QZ0ipuq35SXPRtaQHhuLbPn84mFdk cAJRIYAN+J3csRjjgaq+hOX2kHzcxfUP3nblXpzS257350jk4btzW8x0DYALaVIn 5vMKi7C1/hjbGdv4F/Mn+HD0LB6f6HrmBbx0THoyCXDRs6eUCLr15CuBjK99r+2J k1ftsS14sF1HYQte03rSinYVI2GuIag4jUk3Q6yd9JqgDowJMWvb0llWUdPHoavd HdxNQLVxTXvmS+Go3mBiFqx8is7JIgYmxBzd6VU8/1nkS5Vs9D3W3iuatorlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU5FqTsQfAgg6pLQc1RpKrAz2L3pMwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhOGYwNDM1LTRkMzgtNDdlZi04 NTBmLTUxYmE0NjE3ZmIzZC8wLzMyMzAzMDMxM2E2NDY2MzYzYTMxMzgzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMxMzczNTM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9hgAMA0GCSqGSIb3DQEBCwUAA4IBAQBXA6SP/gnfTTogJ4a5KVBDQpRwxz6CRIR+ U76Ga7RkAOCb4ecOpE3urI0wX8C9CZ7pjPCr5h3NhidXGKPT9symAWEEz/MxCPlp cEud6nSN9xdNUuJZDy55qz1U8SMscHIGLFoqCxCZd2jqVNNa3Ha0bDSussCKiOT7 9FIgD0UZBGt1UEJXodWN3iNB8n7kkr1TMvL04DJEmB6UDbQkbiPqkAPjUCpC/JGY l5O9ygETOLeHfuhnQOza6mPUDzQCNfF+xfBrg7Qxl7hc7d6DdA+UiNw8n0/wZPY5 dekyOSXJ+FioJQKRQoI2C9ZS2LTH11y0+KDJL33ameTb8F8MQO26 -----END CERTIFICATE-----Generated at Sun May 5 01:19:53 2024 by rpki-client on console-fra.rpki-client.org