$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa File: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (raw, json) Hash identifier: JfUP4DY2OySOqiZg8NfjMlof+FxgtDOlpZm2V8KRewI= Subject key identifier: 8A:91:03:57:DA:9C:7B:19:BB:9C:F5:0D:48:FB:4C:16:71:FB:6B:6D Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 2AC7CF9B1F4AA616D55582FA0308944F4B7E1284 Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa Signing time: Mon 01 Jul 2024 01:02:40 +0000 ROA not before: Mon 01 Jul 2024 00:57:40 +0000 ROA not after: Mon 30 Jun 2025 01:02:40 +0000 asID: 58499 IP address blocks: 2001:df0:c80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 06:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c7:cf:9b:1f:4a:a6:16:d5:55:82:fa:03:08:94:4f:4b:7e:12:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: Jul 1 00:57:40 2024 GMT Not After : Jun 30 01:02:40 2025 GMT Subject: CN=8A910357DA9C7B19BB9CF50D48FB4C1671FB6B6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:1d:6c:b2:b1:30:de:28:34:5a:18:45:26: 86:ac:e8:8c:bc:35:ad:ac:61:0f:76:b5:b5:eb:8a: 58:a8:59:22:8c:11:ad:46:c9:51:cb:a9:1c:4b:22: 27:6d:2e:3a:78:27:de:f9:c3:2a:53:21:57:cb:6c: af:a3:12:89:6f:ba:f9:81:c7:6f:ae:7d:c0:49:74: 9b:01:4a:77:75:9c:5c:7c:af:54:12:f6:28:ae:d3: 83:5b:1f:3b:38:7b:50:bb:5f:84:bb:aa:ca:11:b5: 1f:7e:4e:4b:f5:ca:e2:cd:e3:c7:9b:68:89:72:35: bc:79:07:2c:ad:70:67:af:67:16:23:41:dd:58:39: eb:b2:f9:d4:c2:db:77:81:ef:ea:1c:be:18:8d:b8: 55:87:aa:4c:8b:7d:4a:89:01:0e:24:5e:cb:62:4c: 44:a4:b5:6c:6b:ec:09:84:e2:dc:1e:c4:a4:f9:cf: d8:12:74:05:40:e0:41:b2:53:32:d0:94:fb:47:c2: 51:40:18:de:06:98:c1:94:30:2e:9c:03:97:a6:35: 9d:51:a2:f8:16:89:66:60:0c:0d:1a:06:f3:73:82: e9:68:67:0e:cd:b0:21:93:b0:84:9e:d0:db:73:7a: 12:58:b9:f4:76:97:d3:67:6a:22:37:5c:c5:b3:66: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:91:03:57:DA:9C:7B:19:BB:9C:F5:0D:48:FB:4C:16:71:FB:6B:6D X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:c80::/48 Signature Algorithm: sha256WithRSAEncryption 9c:03:e2:44:d2:33:64:b8:0e:2f:a0:a6:94:d8:88:01:70:5d: ee:c6:56:fc:14:9c:8f:8e:78:12:e3:05:16:5e:ce:28:e9:0d: ea:1e:d4:3d:3e:9b:25:1b:f1:54:e2:7e:1c:b2:d5:ab:ce:a2: e6:3f:7b:6a:ed:c5:b6:f3:e6:ba:87:55:62:43:62:ef:b6:08: 67:c6:55:c2:80:c6:3c:0f:b6:94:ca:12:49:c8:33:1f:f7:82: 80:55:23:0b:38:81:9f:c2:5b:e9:46:c6:9d:b5:2f:11:78:3e: 3b:8e:93:f9:65:4a:31:08:a8:02:a7:e3:e4:2c:54:9e:82:01: 8a:e6:be:be:32:5f:15:b2:d5:35:2f:59:d3:c8:a3:7b:47:08: 36:e2:91:6c:69:5b:06:a9:74:7f:0f:8f:49:4a:19:89:57:ef: a7:8f:a2:1d:24:ee:5f:89:f8:01:78:c2:d5:2b:d4:c0:6e:71: a6:02:98:56:9d:a9:84:bc:e8:e8:b3:54:c9:8c:9b:75:0a:4b: d0:ce:3d:1d:6a:06:53:86:1f:da:ff:81:2b:44:96:f1:86:9c: 3c:bb:83:a2:81:12:3e:87:39:b0:7d:2d:92:55:3d:a7:f5:6d: 94:00:c0:9f:2b:5c:a9:a7:bb:d9:d4:af:d9:82:20:af:1a:27: db:f9:71:2f -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUKsfPmx9KphbVVYL6AwiUT0t+EoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNDA3MDEwMDU3NDBaFw0yNTA2MzAwMTAyNDBaMDMxMTAvBgNV BAMTKDhBOTEwMzU3REE5QzdCMTlCQjlDRjUwRDQ4RkI0QzE2NzFGQjZCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DB1ssrEw3ig0WhhFJoas6Iy8 Na2sYQ92tbXrilioWSKMEa1GyVHLqRxLIidtLjp4J975wypTIVfLbK+jEolvuvmB x2+ufcBJdJsBSnd1nFx8r1QS9iiu04NbHzs4e1C7X4S7qsoRtR9+Tkv1yuLN48eb aIlyNbx5ByytcGevZxYjQd1YOeuy+dTC23eB7+ocvhiNuFWHqkyLfUqJAQ4kXsti TESktWxr7AmE4twexKT5z9gSdAVA4EGyUzLQlPtHwlFAGN4GmMGUMC6cA5emNZ1R ovgWiWZgDA0aBvNzguloZw7NsCGTsISe0NtzehJYufR2l9NnaiI3XMWzZjqHAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUipEDV9qcexm7nPUNSPtMFnH7a20wHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiMWM5NTc5LTU2YmEtNGE3MC1i YTEzLTNiMDVhNmNjYjIxZS8wLzMyMzAzMDMxM2E2NDY2MzAzYTYzMzgzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNDM5Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3wDIAw DQYJKoZIhvcNAQELBQADggEBAJwD4kTSM2S4Di+gppTYiAFwXe7GVvwUnI+OeBLj BRZezijpDeoe1D0+myUb8VTifhyy1avOouY/e2rtxbbz5rqHVWJDYu+2CGfGVcKA xjwPtpTKEknIMx/3goBVIws4gZ/CW+lGxp21LxF4PjuOk/llSjEIqAKn4+QsVJ6C AYrmvr4yXxWy1TUvWdPIo3tHCDbikWxpWwapdH8Pj0lKGYlX76ePoh0k7l+J+AF4 wtUr1MBucaYCmFadqYS86OizVMmMm3UKS9DOPR1qBlOGH9r/gStElvGGnDy7g6KB Ej6HObB9LZJVPaf1bZQAwJ8rXKmnu9nUr9mCIK8aJ9v5cS8= -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org