$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa File: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (raw, json) Hash identifier: vEA4pWJZcOTy0Ne56MZk6t2oWMjbzCkei5Y3lK0bhTk= Subject key identifier: CF:98:BC:41:33:6D:B2:4C:61:EE:A6:D9:20:68:B5:E9:23:8F:A4:54 Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Certificate serial: 37CBEA9DC2AE0FD69513B7B34AA0379414F24C8C Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa Signing time: Mon 31 Jul 2023 00:03:10 +0000 ROA not before: Sun 30 Jul 2023 23:58:10 +0000 ROA not after: Mon 29 Jul 2024 00:03:10 +0000 asID: 55688 IP address blocks: 2001:df4:3b00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 14:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:cb:ea:9d:c2:ae:0f:d6:95:13:b7:b3:4a:a0:37:94:14:f2:4c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Validity Not Before: Jul 30 23:58:10 2023 GMT Not After : Jul 29 00:03:10 2024 GMT Subject: CN=CF98BC41336DB24C61EEA6D92068B5E9238FA454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:df:f6:4f:63:ef:32:62:de:44:76:86:f1: ec:af:43:87:e2:ed:1b:4b:43:c3:90:43:32:0d:66: b5:09:63:3f:d9:a6:ff:b5:a3:3e:13:78:1b:53:23: aa:6f:22:64:3e:bd:b3:a7:aa:12:f8:ee:72:df:81: af:b1:bd:20:05:33:5a:02:71:97:9e:77:d1:3c:91: 11:77:4a:5c:c3:69:85:4b:3e:55:88:23:11:81:c3: 17:e2:84:5c:c7:d2:c7:0f:9b:ee:12:8a:ea:85:6b: c7:b7:6c:26:22:22:73:55:e5:a4:fc:0c:49:13:a6: 3c:30:dc:0c:41:7c:6d:7d:cb:0d:d8:78:78:37:eb: d1:4f:bd:fc:3d:ed:63:ec:3b:f3:37:a7:5e:9f:b9: 11:21:f3:13:aa:54:c1:90:f2:a6:ff:35:cd:da:eb: 84:34:3f:72:81:9b:ff:86:c4:cc:9b:1f:81:31:29: 3f:8b:5f:a0:af:db:65:d1:0f:de:8f:51:89:ee:c0: 4a:48:50:bb:6f:4e:1a:2f:20:c6:33:5a:d3:d9:bc: 6a:f7:c5:d1:21:a4:b6:7f:fc:6e:f1:cb:c5:45:8c: 43:4e:0f:15:59:b1:e0:82:96:76:ec:61:b1:c4:9f: 8b:ae:bb:fe:c4:e8:ca:cb:97:96:bf:dc:86:09:2f: 83:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:98:BC:41:33:6D:B2:4C:61:EE:A6:D9:20:68:B5:E9:23:8F:A4:54 X509v3 Authority Key Identifier: keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:3b00::/48 Signature Algorithm: sha256WithRSAEncryption 7f:cf:e0:4e:db:d7:33:55:50:9b:71:a1:52:bd:c4:99:f4:9f: 05:16:d7:43:db:f1:ea:40:ac:a1:28:1f:aa:c6:58:88:b6:85: 98:7a:0e:71:d9:09:78:a3:bf:d1:2c:20:0c:a9:4e:7a:0a:ee: b9:45:fd:20:41:df:d3:03:dc:60:02:66:0a:ba:1b:71:9f:47: 4c:51:cd:a9:7f:3a:36:26:d0:9f:d9:28:79:28:2e:a8:5c:94: 78:f7:34:1a:55:96:70:62:62:8b:f6:ae:f0:87:c4:41:a6:97: cf:cb:35:45:44:06:f8:17:87:c0:d8:d3:c2:99:b6:1c:49:ff: 19:ab:d1:eb:fe:40:fa:71:29:30:eb:85:aa:63:28:91:1f:dd: 07:8a:27:02:69:e1:de:d6:c5:ca:de:05:88:c7:7b:23:63:d6: 01:7b:88:c6:f5:9f:a3:96:f0:90:45:77:48:33:f5:92:2f:29: 59:46:04:66:b4:19:af:7b:ca:42:db:ae:8c:98:72:b3:e7:3e: 95:21:f8:db:13:c2:e1:23:95:2c:f9:0a:d2:e0:86:f4:dd:f7: 37:49:aa:ba:51:be:e0:be:d2:50:52:33:77:38:31:46:9b:dd: aa:b3:3f:82:74:cb:e2:44:cc:13:c9:c3:b1:b5:ee:ea:79:00: b4:3b:18:49 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUN8vqncKuD9aVE7ezSqA3lBTyTIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2 QUE5MDM1MzAeFw0yMzA3MzAyMzU4MTBaFw0yNDA3MjkwMDAzMTBaMDMxMTAvBgNV BAMTKENGOThCQzQxMzM2REIyNEM2MUVFQTZEOTIwNjhCNUU5MjM4RkE0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mt/2T2PvMmLeRHaG8eyvQ4fi 7RtLQ8OQQzINZrUJYz/Zpv+1oz4TeBtTI6pvImQ+vbOnqhL47nLfga+xvSAFM1oC cZeed9E8kRF3SlzDaYVLPlWIIxGBwxfihFzH0scPm+4SiuqFa8e3bCYiInNV5aT8 DEkTpjww3AxBfG19yw3YeHg369FPvfw97WPsO/M3p16fuREh8xOqVMGQ8qb/Nc3a 64Q0P3KBm/+GxMybH4ExKT+LX6Cv22XRD96PUYnuwEpIULtvThovIMYzWtPZvGr3 xdEhpLZ//G7xy8VFjENODxVZseCClnbsYbHEn4uuu/7E6MrLl5a/3IYJL4PvAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUz5i8QTNtskxh7qbZIGi16SOPpFQwHwYDVR0j BBgwFoAUrMPXmrG+9ivACVtvasPzRGqpA1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzU4YzgwZS1hMzI4LTRmOGMtYTAzZi05MWMzYzI2MjE0YTIvMC9BQ0MzRDc5QUIx QkVGNjJCQzAwOTVCNkY2QUMzRjM0NDZBQTkwMzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2QUE5 MDM1My5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3NThjODBlLWEzMjgtNGY4Yy1h MDNmLTkxYzNjMjYyMTRhMi8wLzMyMzAzMDMxM2E2NDY2MzQzYTMzNjIzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNTM2MzgzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfQ7 ADANBgkqhkiG9w0BAQsFAAOCAQEAf8/gTtvXM1VQm3GhUr3EmfSfBRbXQ9vx6kCs oSgfqsZYiLaFmHoOcdkJeKO/0SwgDKlOegruuUX9IEHf0wPcYAJmCrobcZ9HTFHN qX86NibQn9koeSguqFyUePc0GlWWcGJii/au8IfEQaaXz8s1RUQG+BeHwNjTwpm2 HEn/GavR6/5A+nEpMOuFqmMokR/dB4onAmnh3tbFyt4FiMd7I2PWAXuIxvWfo5bw kEV3SDP1ki8pWUYEZrQZr3vKQtuujJhys+c+lSH42xPC4SOVLPkK0uCG9N33N0mq ulG+4L7SUFIzdzgxRpvdqrM/gnTL4kTME8nDsbXu6nkAtDsYSQ== -----END CERTIFICATE-----Generated at Tue Apr 23 18:28:02 2024 by rpki-client on console-fra.rpki-client.org