$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa File: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (raw, json) Hash identifier: z4Q4dl7t48OgN1G7b0dK+Cv4WmJTCPGpbITX/HLogDw= Subject key identifier: BC:CE:42:46:0A:9E:29:9E:F9:40:7A:83:A3:24:33:FC:85:6F:80:A9 Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Certificate serial: 7B92205166C629508105510D7D78AD9F010DAA33 Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa Signing time: Mon 31 Jul 2023 00:06:20 +0000 ROA not before: Mon 31 Jul 2023 00:01:20 +0000 ROA not after: Mon 29 Jul 2024 00:06:20 +0000 asID: 45305 IP address blocks: 2001:df0:a3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 02:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:92:20:51:66:c6:29:50:81:05:51:0d:7d:78:ad:9f:01:0d:aa:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Validity Not Before: Jul 31 00:01:20 2023 GMT Not After : Jul 29 00:06:20 2024 GMT Subject: CN=BCCE42460A9E299EF9407A83A32433FC856F80A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:2e:55:ee:6a:a1:21:c2:fc:4f:ca:b2:2a: 66:3f:39:98:02:19:b5:b2:d2:61:01:f3:d2:b2:14: 9b:b5:2f:16:0b:b4:f5:93:fd:35:99:ba:a7:21:4d: 6c:9a:ca:e8:bd:34:52:9c:c0:19:c3:73:53:03:a3: 8c:96:57:5b:33:0a:03:26:e7:c2:dd:1c:55:04:cd: 6e:4c:89:e4:80:b0:d7:9f:cf:3d:dd:c8:78:1a:a1: 9e:16:a3:90:6c:78:f6:fd:72:ca:ac:39:85:62:11: 4b:3b:7d:f1:8f:fa:8e:2f:89:65:53:bf:be:be:06: 84:ce:44:4a:3c:44:b8:b3:54:1c:8e:f6:cc:80:9c: 60:c2:88:f5:c5:65:22:d3:0a:17:7f:c9:c9:7f:e7: c7:b9:51:cf:4e:dd:6a:dc:41:46:ba:11:c6:a9:af: 66:3b:9b:43:42:8d:bd:94:49:2d:f5:c8:ab:e7:36: ed:d0:1e:47:b3:4e:db:23:c6:ae:d7:e1:ab:ed:ac: b1:bd:cb:b4:47:5c:84:b1:f3:89:21:6d:d9:27:39: 8d:91:92:61:a8:1b:38:a2:93:45:12:26:a4:c1:c0: 98:8f:1a:24:f6:34:8c:ea:50:93:a2:f6:84:4f:fb: 30:84:d6:7d:de:ba:12:8d:09:16:90:ac:e1:16:0c: 85:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CE:42:46:0A:9E:29:9E:F9:40:7A:83:A3:24:33:FC:85:6F:80:A9 X509v3 Authority Key Identifier: keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:a3::/48 Signature Algorithm: sha256WithRSAEncryption 6d:05:66:c6:53:df:dd:7d:d5:96:b1:ce:70:eb:9b:cf:c7:75: 49:db:31:5a:f5:ab:c4:5a:8a:ed:7d:ed:af:0e:e7:c1:cc:78: 13:17:c3:34:58:17:20:00:29:5e:3e:ee:11:33:55:00:22:e1: 99:23:f1:36:4a:5b:cd:8a:89:e9:81:a2:ff:56:f0:9d:db:08: 8f:8a:fa:d6:89:f6:33:7d:e9:65:43:17:e8:a0:aa:22:6b:80: 29:ef:65:dd:39:5c:b0:1c:e1:42:06:cd:d1:1f:75:a9:26:73: 99:1f:5c:19:e7:db:ae:31:c6:68:b6:b9:e2:4b:93:86:15:78: 74:93:ac:98:95:d5:03:1f:8f:2b:b2:e6:55:cf:b4:08:38:8e: 98:6d:cf:96:ff:d2:cd:1d:c4:3a:be:7d:58:93:79:43:58:64: b2:ef:9d:2b:48:5d:af:f4:b9:e1:19:9b:f0:1e:7c:48:a3:5c: ad:d7:50:3a:4b:3a:89:06:3a:3a:71:83:1f:fb:dc:ab:a5:28: d9:09:6c:e3:47:2d:90:c9:97:ad:d6:5e:fe:ed:e8:e7:3e:f7: 6e:6e:f7:0c:ab:55:82:b0:85:34:c4:c4:ff:e2:b5:c0:96:6d: c9:8c:8f:0c:84:db:9e:ac:c3:86:fb:1d:37:32:71:6c:2d:d9: 2e:82:38:49 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUe5IgUWbGKVCBBVENfXitnwENqjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2 MTQyRTVGRDAeFw0yMzA3MzEwMDAxMjBaFw0yNDA3MjkwMDA2MjBaMDMxMTAvBgNV BAMTKEJDQ0U0MjQ2MEE5RTI5OUVGOTQwN0E4M0EzMjQzM0ZDODU2RjgwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWC5V7mqhIcL8T8qyKmY/OZgC GbWy0mEB89KyFJu1LxYLtPWT/TWZuqchTWyayui9NFKcwBnDc1MDo4yWV1szCgMm 58LdHFUEzW5MieSAsNefzz3dyHgaoZ4Wo5BsePb9csqsOYViEUs7ffGP+o4viWVT v76+BoTOREo8RLizVByO9syAnGDCiPXFZSLTChd/ycl/58e5Uc9O3WrcQUa6Ecap r2Y7m0NCjb2USS31yKvnNu3QHkezTtsjxq7X4avtrLG9y7RHXISx84khbdknOY2R kmGoGziik0USJqTBwJiPGiT2NIzqUJOi9oRP+zCE1n3euhKNCRaQrOEWDIV5AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUvM5CRgqeKZ75QHqDoyQz/IVvgKkwHwYDVR0j BBgwFoAU0loEoOTlL/Qi2dj7hX0j3GFC5f0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDk1YzE5Yy0zMjYyLTQ4YzctYWYwMi0zN2E4MzVkMGE3NzkvMC9EMjVBMDRBMEU0 RTUyRkY0MjJEOUQ4RkI4NTdEMjNEQzYxNDJFNUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2MTQy RTVGRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOTVjMTljLTMyNjItNDhjNy1h ZjAyLTM3YTgzNWQwYTc3OS8wLzMyMzAzMDMxM2E2NDY2MzAzYTYxMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8ACjMA0G CSqGSIb3DQEBCwUAA4IBAQBtBWbGU9/dfdWWsc5w65vPx3VJ2zFa9avEWortfe2v DufBzHgTF8M0WBcgAClePu4RM1UAIuGZI/E2SlvNionpgaL/VvCd2wiPivrWifYz fellQxfooKoia4Ap72XdOVywHOFCBs3RH3WpJnOZH1wZ59uuMcZotrniS5OGFXh0 k6yYldUDH48rsuZVz7QIOI6Ybc+W/9LNHcQ6vn1Yk3lDWGSy750rSF2v9LnhGZvw HnxIo1yt11A6SzqJBjo6cYMf+9yrpSjZCWzjRy2QyZet1l7+7ejnPvdubvcMq1WC sIU0xMT/4rXAlm3JjI8MhNuerMOG+x03MnFsLdkugjhJ -----END CERTIFICATE-----Generated at Tue Apr 23 18:35:53 2024 by rpki-client on console-ams.rpki-client.org