$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/323030313a6466303a613930303a3a2f34382d3438203d3e203435373031.roa File: 323030313a6466303a613930303a3a2f34382d3438203d3e203435373031.roa (raw, json) Hash identifier: bOnNASAxU7FvIcmDh0D0xKu1370xmQnojFY5i6CmnOM= Subject key identifier: 79:AD:44:87:C8:8D:B2:4E:E6:9A:B2:71:28:E7:1C:4F:EB:51:AD:02 Certificate issuer: /CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E Certificate serial: 1DB9E8A3C2247C06D944CF5AB91226980472ADF3 Authority key identifier: FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/323030313a6466303a613930303a3a2f34382d3438203d3e203435373031.roa Signing time: Thu 16 Nov 2023 06:00:01 +0000 ROA not before: Thu 16 Nov 2023 05:55:01 +0000 ROA not after: Thu 14 Nov 2024 06:00:01 +0000 asID: 45701 IP address blocks: 2001:df0:a900::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b9:e8:a3:c2:24:7c:06:d9:44:cf:5a:b9:12:26:98:04:72:ad:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E Validity Not Before: Nov 16 05:55:01 2023 GMT Not After : Nov 14 06:00:01 2024 GMT Subject: CN=79AD4487C88DB24EE69AB27128E71C4FEB51AD02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:1b:20:fc:76:ee:8a:ad:87:1c:59:79:9a: 8f:de:57:35:f0:6a:72:4f:a8:5b:d0:a4:c6:b2:f5: 97:08:1b:22:51:39:d2:5f:f4:2e:39:63:3a:2e:9e: cd:ee:85:d1:db:b8:de:4b:0b:4b:b0:45:6a:24:bb: 9b:78:4d:b5:68:bd:1f:c1:0a:44:06:0c:84:ed:89: c0:dd:88:48:3c:42:e2:70:6a:55:12:34:a5:6c:5e: 3b:b2:09:bd:ed:ac:86:72:6b:15:56:80:7c:1a:0d: d7:c9:33:f4:75:18:dc:6f:a1:10:13:6d:40:27:12: 1b:1a:65:1a:c8:21:b1:26:7a:4f:37:31:3a:d4:46: fc:a7:ba:d4:05:ab:b1:31:bb:13:92:c4:d2:0f:5a: 0a:90:68:b9:84:09:f8:78:31:14:3f:aa:cd:f7:3c: 72:64:8c:f2:98:22:28:da:ae:4d:b2:05:c9:0d:c1: 3f:b0:d4:80:b4:91:26:ec:81:be:ef:8c:ac:42:d6: 19:a9:65:8a:2d:98:aa:53:a6:87:ab:c1:d5:fc:e7: 37:52:50:64:eb:9d:e2:c3:9b:7d:e9:35:af:af:19: 27:c6:36:cf:ed:1d:8f:89:e1:86:a2:66:a9:c1:79: 86:41:69:26:da:9d:1e:1b:69:1f:4e:ba:f9:6e:65: 16:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AD:44:87:C8:8D:B2:4E:E6:9A:B2:71:28:E7:1C:4F:EB:51:AD:02 X509v3 Authority Key Identifier: keyid:FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/323030313a6466303a613930303a3a2f34382d3438203d3e203435373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:a900::/48 Signature Algorithm: sha256WithRSAEncryption 3e:90:91:7e:b6:5e:c7:cc:dd:f2:e7:29:77:81:94:c0:08:45: 39:8e:8b:6d:5c:00:af:dd:cf:8b:a8:9c:22:64:c1:56:89:0e: 8e:c7:05:99:a3:bf:7f:15:df:94:5c:89:59:78:74:d2:a0:de: 2e:6a:30:f0:f5:6d:27:d3:05:97:09:53:00:4e:13:ab:20:46: 7c:65:1b:b7:dc:8f:21:31:15:9f:4b:fa:14:ca:68:67:3b:7f: bf:91:17:54:18:38:3a:f8:ad:58:8a:43:5e:c9:ef:4a:fe:89: e8:bc:f7:4e:8f:9d:49:f0:74:8e:2c:c5:0e:6a:d1:8c:8f:ee: 69:4c:01:3e:ea:81:6f:cb:dd:3e:c4:f9:86:35:1c:57:fc:c4: 99:c6:30:b8:71:76:fe:07:88:bd:c6:1d:43:a1:35:06:95:3b: a4:ef:82:4a:c3:31:c6:78:0d:92:e7:49:b0:6b:21:c5:f1:62: 2a:73:26:a3:e2:54:60:b5:28:7d:f1:72:5d:f5:63:bb:51:92: 2c:1c:36:6f:90:2a:41:88:8a:50:fa:53:ad:50:16:06:05:f8: 75:50:0a:3d:ba:79:af:1e:eb:01:a5:17:ac:78:a3:0b:f5:62: 54:e4:2b:3c:42:ed:36:dd:6e:f9:65:ed:20:98:28:0c:14:30: a3:a7:10:67 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUHbnoo8IkfAbZRM9auRImmARyrfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI4OEE4ODUyNTE2REJDRUFDNDI5QzVCNkY5QjdGOThG QUEwMTQwRTAeFw0yMzExMTYwNTU1MDFaFw0yNDExMTQwNjAwMDFaMDMxMTAvBgNV BAMTKDc5QUQ0NDg3Qzg4REIyNEVFNjlBQjI3MTI4RTcxQzRGRUI1MUFEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJRsg/Hbuiq2HHFl5mo/eVzXw anJPqFvQpMay9ZcIGyJROdJf9C45Yzouns3uhdHbuN5LC0uwRWoku5t4TbVovR/B CkQGDITticDdiEg8QuJwalUSNKVsXjuyCb3trIZyaxVWgHwaDdfJM/R1GNxvoRAT bUAnEhsaZRrIIbEmek83MTrURvynutQFq7ExuxOSxNIPWgqQaLmECfh4MRQ/qs33 PHJkjPKYIijark2yBckNwT+w1IC0kSbsgb7vjKxC1hmpZYotmKpTpoerwdX85zdS UGTrneLDm33pNa+vGSfGNs/tHY+J4YaiZqnBeYZBaSbanR4baR9OuvluZRYdAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUea1Eh8iNsk7mmrJxKOccT+tRrQIwHwYDVR0j BBgwFoAU+4iohSUW286sQpxbb5t/mPqgFA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIxY2RkNS0yYjNkLTQ2MWEtOWE3Mi0wMDMxZjBiZmI0NWQvMC9GQjg4QTg4NTI1 MTZEQkNFQUM0MjlDNUI2RjlCN0Y5OEZBQTAxNDBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkI4OEE4ODUyNTE2REJDRUFDNDI5QzVCNkY5QjdGOThGQUEw MTQwRS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YxYjFjZGQ1LTJiM2QtNDYxYS05 YTcyLTAwMzFmMGJmYjQ1ZC8wLzMyMzAzMDMxM2E2NDY2MzAzYTYxMzkzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzQzNTM3MzAzMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfCp ADANBgkqhkiG9w0BAQsFAAOCAQEAPpCRfrZex8zd8ucpd4GUwAhFOY6LbVwAr93P i6icImTBVokOjscFmaO/fxXflFyJWXh00qDeLmow8PVtJ9MFlwlTAE4TqyBGfGUb t9yPITEVn0v6FMpoZzt/v5EXVBg4OvitWIpDXsnvSv6J6Lz3To+dSfB0jizFDmrR jI/uaUwBPuqBb8vdPsT5hjUcV/zEmcYwuHF2/geIvcYdQ6E1BpU7pO+CSsMxxngN kudJsGshxfFiKnMmo+JUYLUoffFyXfVju1GSLBw2b5AqQYiKUPpTrVAWBgX4dVAK Pbp5rx7rAaUXrHijC/ViVOQrPELtNt1u+WXtIJgoDBQwo6cQZw== -----END CERTIFICATE-----Generated at Sat Apr 27 21:40:25 2024 by rpki-client on console-ams.rpki-client.org