$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa File: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (raw, json) Hash identifier: qJDqaZW0vE3bv1Adkjpvd0ZsZoczhdAe78FZKRPFQPA= Subject key identifier: 43:B2:DC:54:27:FC:08:38:E5:0D:3B:7F:2A:1C:D0:2C:27:17:D4:4D Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 23746F49E7EF7829786D9F8F94935DE8570C8C96 Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa Signing time: Wed 18 Oct 2023 05:01:15 +0000 ROA not before: Wed 18 Oct 2023 04:56:15 +0000 ROA not after: Wed 16 Oct 2024 05:01:15 +0000 asID: 135457 IP address blocks: 2001:df2:be00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 04:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:74:6f:49:e7:ef:78:29:78:6d:9f:8f:94:93:5d:e8:57:0c:8c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: Oct 18 04:56:15 2023 GMT Not After : Oct 16 05:01:15 2024 GMT Subject: CN=43B2DC5427FC0838E50D3B7F2A1CD02C2717D44D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:f4:95:3a:6f:7e:da:4d:ed:b4:e6:06:ad: b7:bd:d3:85:58:0a:22:35:52:40:de:e0:95:95:b8: 0f:40:9a:32:04:ad:04:0c:6e:5e:a5:b6:c9:e9:96: fa:47:9f:18:78:29:6b:da:b0:f0:ff:bf:ba:11:bd: 71:21:2b:ce:39:08:42:1d:94:85:fa:f1:19:ce:5f: 6f:dd:6b:64:77:7c:61:68:27:bc:6d:68:85:a4:5e: dd:cc:76:db:f0:fa:af:35:fe:6f:20:7c:2f:ac:4c: e5:f3:b4:5f:1e:b9:1b:6d:aa:78:89:9f:63:50:13: 76:2a:a3:ec:94:b5:d4:3e:6f:c4:9f:33:e8:14:fa: e1:5c:70:17:53:57:77:38:86:a9:d4:4a:cc:c1:e7: 35:eb:58:b4:51:cc:5f:0f:83:d4:21:7d:14:1b:41: 9d:dd:29:a0:b8:dd:a1:37:06:86:fc:ce:6c:d0:cc: 17:29:14:74:e7:31:97:11:a4:a1:93:fc:71:cc:f1: ca:2c:5a:4c:fd:11:b9:7b:c4:bc:72:ae:a7:73:14: 4c:60:6e:bf:e7:f2:07:43:f5:60:5e:c6:50:41:09: c0:f5:34:57:75:5d:e9:ad:99:3c:45:62:77:8c:6d: 97:00:fd:cb:32:79:09:e2:8e:94:04:cc:6f:46:9f: fe:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B2:DC:54:27:FC:08:38:E5:0D:3B:7F:2A:1C:D0:2C:27:17:D4:4D X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:be00::/48 Signature Algorithm: sha256WithRSAEncryption 6a:a3:4e:24:29:37:dc:5c:2b:86:67:05:2c:1b:c0:53:f3:d8: 5c:e2:c5:e4:30:97:04:c1:d7:a8:df:04:2d:7b:d9:19:ff:ed: 70:5f:69:6b:81:bb:8a:6e:dd:b7:97:0e:12:48:ee:55:31:a2: 2e:4f:53:ba:c8:17:55:c6:a0:7c:9e:8a:0f:17:eb:a8:8a:32: c1:8c:e2:9f:c2:a2:95:b0:6e:0c:56:17:fb:b8:61:5f:a3:7e: a3:8b:0d:a6:46:0c:86:19:6b:27:06:72:1d:a7:05:f9:32:5b: 6a:c4:06:17:78:40:4e:ab:87:8a:b2:57:bc:2c:15:80:b1:03: 8f:2c:1d:ab:a3:c0:7f:78:03:4d:f4:86:91:52:dd:97:35:6f: f5:02:03:5c:dd:41:80:6c:99:f3:d1:06:03:df:9c:54:54:a9: af:d2:c7:59:39:b7:df:66:36:6a:e7:2b:59:ff:8e:47:fd:a2: 9a:d6:e5:91:12:68:39:95:65:7d:ef:5b:8e:e7:97:a4:00:9c: 4b:1f:ed:ab:7c:5d:a4:a3:5f:c3:8f:9a:db:1c:b0:b6:d5:b8: da:b0:1c:35:d2:b4:97:a9:9e:06:a3:6d:39:84:6d:a1:42:3e: f2:8a:fd:c7:4d:c0:ec:4c:76:6c:b4:da:63:25:ac:4a:d9:29: 62:7f:42:f9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUI3RvSefveCl4bZ+PlJNd6FcMjJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yMzEwMTgwNDU2MTVaFw0yNDEwMTYwNTAxMTVaMDMxMTAvBgNV BAMTKDQzQjJEQzU0MjdGQzA4MzhFNTBEM0I3RjJBMUNEMDJDMjcxN0Q0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24fSVOm9+2k3ttOYGrbe904VY CiI1UkDe4JWVuA9AmjIErQQMbl6ltsnplvpHnxh4KWvasPD/v7oRvXEhK845CEId lIX68RnOX2/da2R3fGFoJ7xtaIWkXt3Mdtvw+q81/m8gfC+sTOXztF8euRttqniJ n2NQE3Yqo+yUtdQ+b8SfM+gU+uFccBdTV3c4hqnUSszB5zXrWLRRzF8Pg9QhfRQb QZ3dKaC43aE3Bob8zmzQzBcpFHTnMZcRpKGT/HHM8cosWkz9Ebl7xLxyrqdzFExg br/n8gdD9WBexlBBCcD1NFd1XemtmTxFYneMbZcA/csyeQnijpQEzG9Gn/4nAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUQ7LcVCf8CDjlDTt/KhzQLCcX1E0wHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyNzgwZjg1LWVmMmYtNGNmOC1h NGI4LTUyMjVjNDViOTZhMS8wLzMyMzAzMDMxM2E2NDY2MzIzYTYyNjUzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM1MzQzNTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8r4AMA0GCSqGSIb3DQEBCwUAA4IBAQBqo04kKTfcXCuGZwUsG8BT89hc4sXkMJcE wdeo3wQte9kZ/+1wX2lrgbuKbt23lw4SSO5VMaIuT1O6yBdVxqB8nooPF+uoijLB jOKfwqKVsG4MVhf7uGFfo36jiw2mRgyGGWsnBnIdpwX5MltqxAYXeEBOq4eKsle8 LBWAsQOPLB2ro8B/eANN9IaRUt2XNW/1AgNc3UGAbJnz0QYD35xUVKmv0sdZObff ZjZq5ytZ/45H/aKa1uWREmg5lWV971uO55ekAJxLH+2rfF2ko1/Dj5rbHLC21bja sBw10rSXqZ4Go205hG2hQj7yiv3HTcDsTHZstNpjJaxK2Slif0L5 -----END CERTIFICATE-----Generated at Thu May 16 00:08:52 2024 by rpki-client on console-ams.rpki-client.org