$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa File: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (raw, json) Hash identifier: Iok7hRcXztwp7EYcC+amZvIxSAW4YSXF50wFcAjVtJU= Subject key identifier: 00:2E:48:6B:00:48:59:4C:12:6B:1A:04:23:3E:8A:D3:DF:09:7D:CC Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 76D4BC0D43847AA78854DD36345B3501778B03E8 Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa Signing time: Mon 31 Jul 2023 00:09:31 +0000 ROA not before: Mon 31 Jul 2023 00:04:31 +0000 ROA not after: Mon 29 Jul 2024 00:09:31 +0000 asID: 58477 IP address blocks: 2001:df0:273::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 12:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d4:bc:0d:43:84:7a:a7:88:54:dd:36:34:5b:35:01:77:8b:03:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Jul 31 00:04:31 2023 GMT Not After : Jul 29 00:09:31 2024 GMT Subject: CN=002E486B0048594C126B1A04233E8AD3DF097DCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5a:3c:f9:29:8f:c0:6b:51:bd:5a:35:e6:16: 30:ab:f7:e6:e7:30:de:44:52:51:31:c9:57:32:a0: d8:77:65:ee:49:31:23:17:99:c1:ed:3e:3e:83:da: 64:4e:9b:eb:58:b8:ad:cc:9a:45:37:bc:a9:43:99: 97:f2:85:3c:f4:11:44:5f:24:33:6d:7b:2c:5e:db: 42:30:d4:75:c8:ea:c3:2b:0e:16:14:d4:97:7e:d0: 01:62:69:47:70:43:46:bf:2e:9b:0e:cd:ee:03:49: 48:ab:e9:05:a4:cc:c8:7c:2f:54:33:77:d2:44:f2: 28:6d:71:76:9f:6a:9f:aa:55:b3:a9:4c:c0:5e:c0: d3:98:29:1d:a0:cf:45:30:6b:ca:d7:28:10:50:81: d0:47:7c:2b:20:98:bc:da:6b:21:9d:e3:8a:55:6e: 45:50:8c:ce:2c:e0:73:d0:24:a5:98:b5:3d:21:8e: c4:5c:da:ef:cf:52:bb:35:64:06:8e:00:62:a3:32: 22:3c:45:0a:e6:b2:68:cf:23:22:33:a4:06:a5:10: 8c:21:8d:72:db:7a:95:7d:d5:f4:58:69:f9:14:d9: 62:4d:cc:86:57:eb:c3:d3:b6:05:9a:88:69:2a:93: dd:56:62:9e:81:fc:6e:4a:0a:3c:ad:e5:54:07:51: d5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2E:48:6B:00:48:59:4C:12:6B:1A:04:23:3E:8A:D3:DF:09:7D:CC X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:273::/48 Signature Algorithm: sha256WithRSAEncryption 88:22:1e:14:b0:f4:e6:95:25:b3:9f:9f:16:8f:4d:5f:2f:ad: 85:4e:1a:32:48:63:94:db:0b:24:31:28:bd:79:bc:85:fe:f9: 99:35:fe:5a:f6:96:34:c3:51:e2:1b:80:10:e2:8e:a7:b2:7b: c4:7c:8a:ce:f4:92:ab:42:50:0c:a6:20:bd:24:82:bb:6a:0d: f3:8b:69:19:8e:fd:dd:b5:00:74:46:4e:c7:eb:91:cd:1a:b9: b9:8e:50:67:92:3c:c1:36:85:fb:b1:63:f5:1b:92:f0:49:96: 9c:d5:9b:21:fc:34:c6:4b:4b:65:c7:3a:7f:1a:78:9c:d9:d3: ce:8a:19:77:2f:76:7a:80:95:66:55:c2:ee:22:c9:98:41:42: b5:53:c9:f1:74:75:69:ff:40:90:70:5e:4f:3d:b5:c4:8b:ca: 0d:57:52:4f:e2:32:39:9e:1f:e5:80:bf:fc:81:27:d6:c6:ed: 98:89:2b:41:1f:53:86:35:31:b1:32:d2:9b:ea:2c:04:88:54: c7:cc:61:8a:b4:07:e7:d2:6e:ab:79:e3:e1:bd:d4:1d:e1:5c: b6:20:0f:35:f9:52:af:3a:30:c7:36:0f:fc:7e:a4:77:8c:63: 80:f8:d8:fa:33:4e:29:fe:d3:82:cc:be:2b:58:d7:70:44:3f: a8:9b:63:d3 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUdtS8DUOEeqeIVN02NFs1AXeLA+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yMzA3MzEwMDA0MzFaFw0yNDA3MjkwMDA5MzFaMDMxMTAvBgNV BAMTKDAwMkU0ODZCMDA0ODU5NEMxMjZCMUEwNDIzM0U4QUQzREYwOTdEQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWjz5KY/Aa1G9WjXmFjCr9+bn MN5EUlExyVcyoNh3Ze5JMSMXmcHtPj6D2mROm+tYuK3MmkU3vKlDmZfyhTz0EURf JDNteyxe20Iw1HXI6sMrDhYU1Jd+0AFiaUdwQ0a/LpsOze4DSUir6QWkzMh8L1Qz d9JE8ihtcXafap+qVbOpTMBewNOYKR2gz0Uwa8rXKBBQgdBHfCsgmLzaayGd44pV bkVQjM4s4HPQJKWYtT0hjsRc2u/PUrs1ZAaOAGKjMiI8RQrmsmjPIyIzpAalEIwh jXLbepV91fRYafkU2WJNzIZX68PTtgWaiGkqk91WYp6B/G5KCjyt5VQHUdWjAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUAC5IawBIWUwSaxoEIz6K098JfcwwHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzZhYTAzLTFiNGQtNDM4ZS1h OWYzLWVmZWFhZTZiMDkyMS8wLzMyMzAzMDMxM2E2NDY2MzAzYTMyMzczMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3wAnMw DQYJKoZIhvcNAQELBQADggEBAIgiHhSw9OaVJbOfnxaPTV8vrYVOGjJIY5TbCyQx KL15vIX++Zk1/lr2ljTDUeIbgBDijqeye8R8is70kqtCUAymIL0kgrtqDfOLaRmO /d21AHRGTsfrkc0aubmOUGeSPME2hfuxY/UbkvBJlpzVmyH8NMZLS2XHOn8aeJzZ 086KGXcvdnqAlWZVwu4iyZhBQrVTyfF0dWn/QJBwXk89tcSLyg1XUk/iMjmeH+WA v/yBJ9bG7ZiJK0EfU4Y1MbEy0pvqLASIVMfMYYq0B+fSbqt54+G91B3hXLYgDzX5 Uq86MMc2D/x+pHeMY4D42PozTin+04LMvitY13BEP6ibY9M= -----END CERTIFICATE-----Generated at Fri Apr 19 06:15:07 2024 by rpki-client on console-ams.rpki-client.org