$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa File: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (raw, json) Hash identifier: MDwoleiTA2jdD+y/VY0jacPWG8rB0y82arQs3fIvfxk= Subject key identifier: 9B:BD:5C:09:AE:AC:99:28:56:FC:E4:E1:69:1F:3E:D9:43:ED:37:B1 Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143 Certificate serial: 18B10D5B0885917AEFB029A547817503C8AADBD0 Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa Signing time: Wed 30 Oct 2024 07:42:02 +0000 ROA not before: Wed 30 Oct 2024 07:37:02 +0000 ROA not after: Wed 29 Oct 2025 07:42:02 +0000 asID: 141113 IP address blocks: 2001:df5:1780::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b1:0d:5b:08:85:91:7a:ef:b0:29:a5:47:81:75:03:c8:aa:db:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143 Validity Not Before: Oct 30 07:37:02 2024 GMT Not After : Oct 29 07:42:02 2025 GMT Subject: CN=9BBD5C09AEAC992856FCE4E1691F3ED943ED37B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:24:cb:ce:9e:81:23:05:f8:6d:3d:93:0e: 19:1e:6f:e5:e4:ae:2d:0e:5d:92:b9:8c:f9:52:2f: 2a:aa:8d:c5:3d:c9:ae:40:2e:b4:5e:9b:7c:1d:a1: ab:1c:d9:dc:97:ca:95:9d:00:02:0a:29:e2:a3:68: 16:7a:17:3e:e2:fd:5d:4e:34:da:a5:69:65:aa:ab: 3c:b9:4c:56:16:2c:66:c5:2f:e5:84:98:b1:86:35: 03:f6:39:e2:48:da:f7:de:fd:9f:c7:8c:ff:46:47: ff:d9:25:d2:60:33:b5:f7:cd:da:a8:e4:b2:0f:ba: a6:2e:74:79:d8:49:5a:db:ab:cb:f0:fd:f7:a9:58: 4e:eb:a0:37:10:5c:a2:22:cb:fc:c9:e6:1c:e0:40: 3e:64:b2:31:0d:56:03:f1:dc:47:06:6c:bd:8f:b1: 6f:0c:61:a2:75:99:8a:95:a3:a9:ff:98:fb:dd:63: da:b6:83:b4:cd:66:2e:e9:52:7e:9f:15:39:d9:d2: 7c:b6:64:97:37:31:60:c6:7e:38:b4:3d:1c:4b:43: 41:04:76:54:91:da:98:5d:e3:11:ee:64:b8:9b:7c: 36:b8:1d:c7:2b:cd:2e:9f:4b:d9:ba:14:40:d0:61: 8a:38:23:3d:cc:c0:cb:a3:67:af:71:b1:c5:6e:bb: 4b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BD:5C:09:AE:AC:99:28:56:FC:E4:E1:69:1F:3E:D9:43:ED:37:B1 X509v3 Authority Key Identifier: keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:1780::/48 Signature Algorithm: sha256WithRSAEncryption 39:6c:33:16:18:9c:bc:2a:94:2f:99:af:67:e5:2b:57:10:2c: 11:64:f7:c1:20:a6:60:b8:02:57:89:3f:ad:f6:78:1f:8e:dd: 0d:36:56:88:b8:65:51:11:93:5c:a2:3f:7c:6b:f1:c2:b8:aa: 08:ee:80:9d:c4:fe:c1:0d:ed:16:d1:ce:96:52:76:7c:1a:b4: fd:5b:28:40:65:ac:f0:80:1f:29:2d:f4:b3:f9:1e:7a:44:72: 8b:1d:74:47:e2:c4:ed:60:97:44:10:03:aa:a3:5c:58:1d:3f: 54:6d:99:75:11:4f:c7:b1:c1:69:b7:c0:eb:52:a6:57:a0:e7: 77:d4:4a:02:68:ee:c3:22:7f:84:7c:ae:a5:6d:b8:4b:58:3b: d0:e5:9c:13:ec:08:fb:7e:8e:80:8f:47:40:a2:99:9a:e3:e8: 62:d6:11:52:62:27:39:3a:5d:81:61:2d:e4:c7:2d:64:6d:ec: 63:42:7c:11:5d:f6:64:06:f5:0b:cb:6d:39:87:76:0d:25:a7: 5d:95:dc:81:6e:73:33:89:0a:cd:98:5f:51:1c:34:95:8c:b6: 40:f5:07:04:6e:6d:06:45:c1:4e:51:d2:f1:33:2d:e3:9b:72: 70:5d:3b:90:71:b2:88:e0:56:7e:63:79:52:2f:b2:d9:f0:47: 29:96:0e:5e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGLENWwiFkXrvsCmlR4F1A8iq29AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0 MzMxOTE0MzAeFw0yNDEwMzAwNzM3MDJaFw0yNTEwMjkwNzQyMDJaMDMxMTAvBgNV BAMTKDlCQkQ1QzA5QUVBQzk5Mjg1NkZDRTRFMTY5MUYzRUQ5NDNFRDM3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMUiTLzp6BIwX4bT2TDhkeb+Xk ri0OXZK5jPlSLyqqjcU9ya5ALrRem3wdoasc2dyXypWdAAIKKeKjaBZ6Fz7i/V1O NNqlaWWqqzy5TFYWLGbFL+WEmLGGNQP2OeJI2vfe/Z/HjP9GR//ZJdJgM7X3zdqo 5LIPuqYudHnYSVrbq8vw/fepWE7roDcQXKIiy/zJ5hzgQD5ksjENVgPx3EcGbL2P sW8MYaJ1mYqVo6n/mPvdY9q2g7TNZi7pUn6fFTnZ0ny2ZJc3MWDGfji0PRxLQ0EE dlSR2phd4xHuZLibfDa4HccrzS6fS9m6FEDQYYo4Iz3MwMujZ69xscVuu0s5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUm71cCa6smShW/OThaR8+2UPtN7EwHwYDVR0j BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx OTE0My5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmY2Y3YzllLWY4YzMtNDAxNS04 ODFiLWEyYzIxODE5ZDZiOS8wLzMyMzAzMDMxM2E2NDY2MzUzYTMxMzczODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzEzMTMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9ReAMA0GCSqGSIb3DQEBCwUAA4IBAQA5bDMWGJy8KpQvma9n5StXECwRZPfBIKZg uAJXiT+t9ngfjt0NNlaIuGVREZNcoj98a/HCuKoI7oCdxP7BDe0W0c6WUnZ8GrT9 WyhAZazwgB8pLfSz+R56RHKLHXRH4sTtYJdEEAOqo1xYHT9UbZl1EU/HscFpt8Dr UqZXoOd31EoCaO7DIn+EfK6lbbhLWDvQ5ZwT7Aj7fo6Aj0dAopma4+hi1hFSYic5 Ol2BYS3kxy1kbexjQnwRXfZkBvULy205h3YNJaddldyBbnMziQrNmF9RHDSVjLZA 9QcEbm0GRcFOUdLxMy3jm3JwXTuQcbKI4FZ+Y3lSL7LZ8Ecplg5e -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org