$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa File: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (raw, json) Hash identifier: lMdg/MNFYujMSAEqrx4gbCtB/vdRZN9mK0Vg+Inow1s= Subject key identifier: 5B:3B:26:F8:41:F1:D6:A0:F6:E2:D9:2A:68:F5:A8:CE:BD:8B:28:36 Certificate issuer: /CN=30C39359651C33B59AC32BC46831980108960568 Certificate serial: 2847ACEBC37A4546365427F41659C4296CC982F1 Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa Signing time: Wed 15 Nov 2023 03:00:00 +0000 ROA not before: Wed 15 Nov 2023 02:55:00 +0000 ROA not after: Wed 13 Nov 2024 03:00:00 +0000 asID: 137297 IP address blocks: 2001:df3:d700::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:47:ac:eb:c3:7a:45:46:36:54:27:f4:16:59:c4:29:6c:c9:82:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C39359651C33B59AC32BC46831980108960568 Validity Not Before: Nov 15 02:55:00 2023 GMT Not After : Nov 13 03:00:00 2024 GMT Subject: CN=5B3B26F841F1D6A0F6E2D92A68F5A8CEBD8B2836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:3d:01:36:d9:ab:48:fb:7d:03:e8:bf:78: fb:f8:ea:81:81:9a:9e:4d:b4:09:7a:25:29:9b:8e: a3:9e:4e:a8:f7:63:63:4a:a7:f2:25:82:a7:6c:0b: b8:39:47:53:f0:b2:c5:b1:ac:c0:39:34:46:41:11: 5c:94:85:93:53:dd:84:16:5e:3e:d8:9f:0f:77:5e: 97:aa:02:11:22:5c:a7:09:da:14:58:3f:3f:e0:b2: 0b:32:88:7f:32:50:40:b8:c0:6e:53:5c:85:ba:88: b4:ef:9c:9c:cd:6b:a6:c4:a4:20:6e:76:cc:fd:7c: 26:93:fb:15:c2:c3:80:8d:be:96:59:12:7c:a5:cd: 13:d9:97:b1:71:5f:1a:18:b0:42:54:ee:c9:05:c2: b8:4d:8c:66:dd:16:40:0f:7b:4c:d1:89:7c:01:75: cd:8c:ae:9f:23:e9:01:33:e8:dd:9d:71:96:a7:16: 28:ef:90:59:bd:d8:7f:2f:d0:3c:63:f1:55:f8:2a: bf:9b:1d:cb:ce:39:a2:89:08:d1:f6:c8:07:af:2d: d7:ee:d9:b3:c5:91:f8:fd:de:32:58:8d:0b:2f:76: ba:fc:08:e4:b0:ce:83:a5:e2:7f:61:5c:79:d0:1c: 0c:40:84:21:62:e1:12:d3:d6:0e:68:00:a9:77:83: 20:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3B:26:F8:41:F1:D6:A0:F6:E2:D9:2A:68:F5:A8:CE:BD:8B:28:36 X509v3 Authority Key Identifier: keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:d700::/48 Signature Algorithm: sha256WithRSAEncryption 07:28:ca:5c:e8:f9:59:9a:a8:91:57:b3:a9:72:9b:4b:bf:4c: c8:15:86:bc:7f:21:2c:f3:ed:d8:2f:ca:c5:13:d1:ee:12:e1: 27:b4:0b:7e:7b:38:4b:c5:b4:3e:30:89:c8:38:19:62:06:42: a8:55:69:3b:b0:20:da:28:82:eb:09:bc:e6:e4:e4:98:7f:6d: 7c:89:47:91:4b:41:f2:ea:2a:90:33:fb:55:e7:93:9f:ed:a0: 8c:b8:79:ee:80:81:2e:0d:de:a1:39:df:a6:02:99:d8:62:83: 4b:e5:53:d9:45:47:b1:1c:65:dd:10:65:a0:9e:72:7a:8e:90: fd:92:8e:e0:34:3b:70:03:54:0e:89:d0:7e:f5:1d:10:26:72: 58:44:f7:23:d1:dd:e1:cc:0d:0d:b2:75:08:02:47:d8:24:20: 8d:b4:0e:1a:84:da:83:c0:c6:52:f7:1a:ef:2b:f5:47:a5:98: f6:15:7c:71:03:2a:b3:66:0a:5b:0b:1d:e8:d6:c3:cf:fc:29: 23:e1:00:0d:49:07:d1:5c:ec:96:60:12:27:d6:47:ca:28:41: b1:4c:23:bf:42:82:98:a9:b4:a7:3f:2f:a9:50:1a:91:60:a5: 74:f4:3b:ea:ab:bb:06:c6:54:f0:a1:fd:f7:e0:e1:00:60:cf: f2:32:30:61 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKEes68N6RUY2VCf0FlnEKWzJgvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEw ODk2MDU2ODAeFw0yMzExMTUwMjU1MDBaFw0yNDExMTMwMzAwMDBaMDMxMTAvBgNV BAMTKDVCM0IyNkY4NDFGMUQ2QTBGNkUyRDkyQTY4RjVBOENFQkQ4QjI4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbaT0BNtmrSPt9A+i/ePv46oGB mp5NtAl6JSmbjqOeTqj3Y2NKp/IlgqdsC7g5R1PwssWxrMA5NEZBEVyUhZNT3YQW Xj7Ynw93XpeqAhEiXKcJ2hRYPz/gsgsyiH8yUEC4wG5TXIW6iLTvnJzNa6bEpCBu dsz9fCaT+xXCw4CNvpZZEnylzRPZl7FxXxoYsEJU7skFwrhNjGbdFkAPe0zRiXwB dc2Mrp8j6QEz6N2dcZanFijvkFm92H8v0Dxj8VX4Kr+bHcvOOaKJCNH2yAevLdfu 2bPFkfj93jJYjQsvdrr8COSwzoOl4n9hXHnQHAxAhCFi4RLT1g5oAKl3gyB3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWzsm+EHx1qD24tkqaPWozr2LKDYwHwYDVR0j BBgwFoAUMMOTWWUcM7WawyvEaDGYAQiWBWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTc5OTZmNS1hOTM0LTRiNDQtODU0Ny0xOWVjMzdjZjdjMTQvMC8zMEMzOTM1OTY1 MUMzM0I1OUFDMzJCQzQ2ODMxOTgwMTA4OTYwNTY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEwODk2 MDU2OC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1Nzk5NmY1LWE5MzQtNGI0NC04 NTQ3LTE5ZWMzN2NmN2MxNC8wLzMyMzAzMDMxM2E2NDY2MzMzYTY0MzczMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM3MzIzOTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 89cAMA0GCSqGSIb3DQEBCwUAA4IBAQAHKMpc6PlZmqiRV7OpcptLv0zIFYa8fyEs 8+3YL8rFE9HuEuEntAt+ezhLxbQ+MInIOBliBkKoVWk7sCDaKILrCbzm5OSYf218 iUeRS0Hy6iqQM/tV55Of7aCMuHnugIEuDd6hOd+mApnYYoNL5VPZRUexHGXdEGWg nnJ6jpD9ko7gNDtwA1QOidB+9R0QJnJYRPcj0d3hzA0NsnUIAkfYJCCNtA4ahNqD wMZS9xrvK/VHpZj2FXxxAyqzZgpbCx3o1sPP/Ckj4QANSQfRXOyWYBIn1kfKKEGx TCO/QoKYqbSnPy+pUBqRYKV09Dvqq7sGxlTwof334OEAYM/yMjBh -----END CERTIFICATE-----Generated at Mon May 6 03:46:58 2024 by rpki-client on console-ams.rpki-client.org