$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa File: 323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa (raw, json) Hash identifier: pQCtNd2+RXtFnrSf+6sVuQqtxv0QiGcHuuERYnQ23YQ= Subject key identifier: 59:A5:7A:F0:A6:75:66:97:CE:54:00:87:E5:71:0C:A8:A2:22:F0:69 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 110CC18E196CF065AAA8A9D3C00204A806057F01 Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa Signing time: Mon 19 Aug 2024 20:38:35 +0000 ROA not before: Mon 19 Aug 2024 20:33:35 +0000 ROA not after: Mon 18 Aug 2025 20:38:35 +0000 asID: 152821 IP address blocks: 2001:df3:e5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0c:c1:8e:19:6c:f0:65:aa:a8:a9:d3:c0:02:04:a8:06:05:7f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Aug 19 20:33:35 2024 GMT Not After : Aug 18 20:38:35 2025 GMT Subject: CN=59A57AF0A6756697CE540087E5710CA8A222F069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:ca:b5:b0:5b:f6:a9:4c:1d:99:fa:9a:04: 88:04:3f:e8:1c:05:15:da:29:2d:e8:4d:3f:d3:60: 28:7b:ea:b6:64:7e:ef:8d:5b:c3:ca:df:a1:cf:ae: 0d:10:b9:6f:ef:8f:21:d2:cd:b6:7e:d8:f9:c9:9a: f9:5f:f6:c6:b1:10:ed:1d:57:ac:fb:5d:42:d9:f1: 48:11:c2:7c:2c:ea:74:e3:e0:87:e8:b6:ec:8d:7d: ba:74:4f:9b:c7:9f:5a:34:36:da:22:14:36:52:f6: 56:ad:47:be:e7:e8:d8:b6:0e:d3:77:d7:d8:b8:6f: 22:73:80:33:3d:d7:de:09:5a:9d:6c:47:66:f8:c0: d1:74:88:82:64:33:78:9d:0d:df:42:58:e4:91:a9: ba:6b:42:66:1e:62:b4:77:06:55:bc:66:51:66:53: 08:59:0c:b1:61:4b:a4:20:17:15:06:7c:68:60:fd: cc:1c:d4:20:31:f4:b1:b8:c0:40:98:2d:a7:45:7b: 3c:52:ca:2b:59:ad:73:41:6a:d6:cc:04:69:57:d1: 87:f7:6e:24:d1:11:c6:6a:d5:71:f0:57:81:e3:e4: dd:04:77:ca:a7:10:60:d8:af:ae:71:9b:da:c7:78: ed:c3:5f:16:0a:fc:ac:52:fb:1e:a0:b1:7b:7e:ed: 3b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A5:7A:F0:A6:75:66:97:CE:54:00:87:E5:71:0C:A8:A2:22:F0:69 X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:e5c0::/48 Signature Algorithm: sha256WithRSAEncryption 48:5a:cf:2c:1a:a8:0a:50:a9:67:c6:94:67:78:7c:88:84:ae: b8:b3:3e:56:08:6c:23:1c:2c:a2:29:2d:cc:84:e6:dc:e8:8d: ef:b4:1b:a1:74:1b:5a:1b:d7:5a:c7:ac:1f:e7:9d:38:99:01: 6b:57:33:49:ad:af:a9:5c:9d:97:17:f3:36:5e:57:c5:8f:4b: 41:00:2f:a0:4d:69:7d:ea:e0:f5:e2:23:d5:17:7e:ad:a0:48: 94:98:cd:28:bc:5e:cf:56:ab:7c:f5:d5:ca:40:38:c3:36:d0: 0d:c5:0e:22:9a:e0:17:ec:d0:6b:83:52:5a:b0:61:60:35:32: ef:2b:b3:ed:e9:e8:2b:df:e5:75:96:02:0b:fd:11:1d:69:97: 6c:1f:b9:1e:b4:3d:a1:5c:5a:f8:a1:15:7b:45:50:71:70:3f: 81:e6:45:ff:83:41:7f:3a:19:e1:ee:10:9e:a3:99:25:d5:50: e5:77:1f:3c:0b:a1:91:30:4d:4f:f7:72:b7:37:78:14:e3:08: ab:7a:2d:2b:d4:21:b9:1a:07:25:2d:fa:a9:8d:a8:7d:d8:f5: 65:ba:b1:e6:6b:89:b7:bd:59:3a:e6:3a:e2:fd:1d:df:66:b5: b6:23:b5:db:e5:96:7f:f0:c7:56:26:af:3e:d9:d6:89:4b:3c: 39:90:7d:7d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEQzBjhls8GWqqKnTwAIEqAYFfwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNDA4MTkyMDMzMzVaFw0yNTA4MTgyMDM4MzVaMDMxMTAvBgNV BAMTKDU5QTU3QUYwQTY3NTY2OTdDRTU0MDA4N0U1NzEwQ0E4QTIyMkYwNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBhMq1sFv2qUwdmfqaBIgEP+gc BRXaKS3oTT/TYCh76rZkfu+NW8PK36HPrg0QuW/vjyHSzbZ+2PnJmvlf9saxEO0d V6z7XULZ8UgRwnws6nTj4IfotuyNfbp0T5vHn1o0NtoiFDZS9latR77n6Ni2DtN3 19i4byJzgDM9194JWp1sR2b4wNF0iIJkM3idDd9CWOSRqbprQmYeYrR3BlW8ZlFm UwhZDLFhS6QgFxUGfGhg/cwc1CAx9LG4wECYLadFezxSyitZrXNBatbMBGlX0Yf3 biTREcZq1XHwV4Hj5N0Ed8qnEGDYr65xm9rHeO3DXxYK/KxS+x6gsXt+7TvLAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWaV68KZ1ZpfOVACH5XEMqKIi8GkwHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlYzY3N2ZkLWQ1NjktNGNjNS1h NTYzLTliMGYyNDhiMWFmMS8xLzMyMzAzMDMxM2E2NDY2MzMzYTY1MzU2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzgzMjMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8+XAMA0GCSqGSIb3DQEBCwUAA4IBAQBIWs8sGqgKUKlnxpRneHyIhK64sz5WCGwj HCyiKS3MhObc6I3vtBuhdBtaG9dax6wf5504mQFrVzNJra+pXJ2XF/M2XlfFj0tB AC+gTWl96uD14iPVF36toEiUmM0ovF7PVqt89dXKQDjDNtANxQ4imuAX7NBrg1Ja sGFgNTLvK7Pt6egr3+V1lgIL/REdaZdsH7ketD2hXFr4oRV7RVBxcD+B5kX/g0F/ Ohnh7hCeo5kl1VDldx88C6GRME1P93K3N3gU4wirei0r1CG5GgclLfqpjah92PVl urHma4m3vVk65jri/R3fZrW2I7Xb5ZZ/8MdWJq8+2daJSzw5kH19 -----END CERTIFICATE-----Generated at Mon Nov 25 07:13:30 2024 by rpki-client on console-fra.rpki-client.org