$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa File: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (raw, json) Hash identifier: jZW9pP83pfMfhNQAbPKjYIQIf3owIxez3BQ7EEpmyu4= Subject key identifier: 65:DD:47:98:01:9B:F6:01:C4:5F:A8:F7:08:76:B5:C6:65:66:BE:0D Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Certificate serial: 7CB039D7D9AE82E665EA51FFBDEDCE6D1D80C88B Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa Signing time: Fri 26 Jul 2024 05:02:17 +0000 ROA not before: Fri 26 Jul 2024 04:57:17 +0000 ROA not after: Fri 25 Jul 2025 05:02:17 +0000 asID: 45718 IP address blocks: 2001:df0:b3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b0:39:d7:d9:ae:82:e6:65:ea:51:ff:bd:ed:ce:6d:1d:80:c8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Validity Not Before: Jul 26 04:57:17 2024 GMT Not After : Jul 25 05:02:17 2025 GMT Subject: CN=65DD4798019BF601C45FA8F70876B5C66566BE0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:ad:8e:2c:0b:d4:dc:c1:d4:a0:b8:06:68: a6:38:35:30:0c:43:48:58:0f:9b:33:bf:1d:8e:55: d6:68:67:bf:3f:27:6d:fe:20:94:6a:07:68:2f:15: 4c:59:c3:e1:57:e0:10:6a:8f:fe:65:54:af:84:f2: ad:ca:f9:96:18:24:27:f9:29:75:e5:93:90:b5:1a: 2f:70:0b:41:cc:e8:fc:81:08:d4:3d:59:0f:b3:89: 58:47:58:74:44:62:cf:83:bf:b9:15:d6:72:e5:64: 5b:0b:ed:cf:64:f9:d0:8f:6f:b7:60:cd:48:74:68: e7:af:01:e8:13:8b:d4:67:7d:65:c3:db:3e:ed:6e: d5:96:59:f9:22:3e:a1:7f:16:81:99:22:94:7a:60: 86:75:c7:07:fd:07:bf:72:c3:98:f5:f5:45:52:fd: 07:98:1c:75:5b:3b:e1:45:57:28:8a:e4:83:6a:9b: eb:6d:af:b9:69:1f:1a:61:31:8f:5b:fc:1d:01:bc: 54:10:e7:9e:05:bd:92:79:87:ea:6c:e7:bb:f2:0d: 6f:1c:73:d0:b3:cb:47:4e:76:1a:66:53:25:4f:a8: f3:34:38:86:e3:f0:ef:59:a2:34:77:3b:1d:2d:71: 2d:a8:5d:68:f7:e9:d9:2c:fa:85:df:a4:95:08:86: 56:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DD:47:98:01:9B:F6:01:C4:5F:A8:F7:08:76:B5:C6:65:66:BE:0D X509v3 Authority Key Identifier: keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:b3::/48 Signature Algorithm: sha256WithRSAEncryption 97:6e:9f:ae:64:e9:1a:b4:3f:08:aa:bd:41:0f:7c:60:8b:8c: ff:2c:80:d4:eb:2f:ba:51:0f:a8:4d:29:e0:b3:29:78:12:0b: 22:f0:65:03:6e:28:57:ab:07:ce:d8:d3:e4:01:c5:b6:89:ab: 1a:a2:67:9f:b2:62:f9:9f:99:d5:ff:92:ba:fc:10:ea:94:0a: 4d:58:1b:e4:a0:cb:d9:f7:9a:e0:2d:ab:9d:44:de:f8:23:3e: 8f:23:1a:8a:cb:54:18:97:f4:4b:b4:8a:22:1b:b8:ea:5f:a5: 51:42:6c:b3:fa:be:27:8a:78:22:35:8d:d0:0c:2b:34:e4:a8: fb:ac:fe:2a:0c:32:c8:9d:bf:0a:7b:de:fa:59:fe:95:86:06: ba:ed:6b:8a:57:42:6a:42:36:bd:e7:57:a0:e7:fd:c1:51:e0: 93:5f:2a:ba:9c:15:99:59:bd:a4:1e:b8:fa:3d:e1:80:27:f6: 2f:c3:74:b8:62:8c:1c:d2:16:d6:6c:52:38:c6:bd:3e:68:18: 40:4d:c9:f1:03:21:06:1c:1c:1f:81:d6:eb:88:0e:40:5c:05: 90:e7:a2:a0:57:1c:af:89:5c:2e:c5:2b:57:e2:fe:f6:0b:43: 2e:9f:44:14:f3:6e:7d:20:1e:1c:8a:20:40:48:7b:c7:48:f9: 35:1d:ba:7a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUfLA519muguZl6lH/ve3ObR2AyIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz QkQzMUQxRDAeFw0yNDA3MjYwNDU3MTdaFw0yNTA3MjUwNTAyMTdaMDMxMTAvBgNV BAMTKDY1REQ0Nzk4MDE5QkY2MDFDNDVGQThGNzA4NzZCNUM2NjU2NkJFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3U62OLAvU3MHUoLgGaKY4NTAM Q0hYD5szvx2OVdZoZ78/J23+IJRqB2gvFUxZw+FX4BBqj/5lVK+E8q3K+ZYYJCf5 KXXlk5C1Gi9wC0HM6PyBCNQ9WQ+ziVhHWHREYs+Dv7kV1nLlZFsL7c9k+dCPb7dg zUh0aOevAegTi9RnfWXD2z7tbtWWWfkiPqF/FoGZIpR6YIZ1xwf9B79yw5j19UVS /QeYHHVbO+FFVyiK5INqm+ttr7lpHxphMY9b/B0BvFQQ554FvZJ5h+ps57vyDW8c c9Czy0dOdhpmUyVPqPM0OIbj8O9ZojR3Ox0tcS2oXWj36dks+oXfpJUIhlYLAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUZd1HmAGb9gHEX6j3CHa1xmVmvg0wHwYDVR0j BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4 QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz MUQxRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwNDljMjEwLWYzNjUtNDMyZi1h N2NhLTBiNWViODZiMDFjNi8wLzMyMzAzMDMxM2E2NDY2MzAzYTYyMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNDM1MzczMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8ACzMA0G CSqGSIb3DQEBCwUAA4IBAQCXbp+uZOkatD8Iqr1BD3xgi4z/LIDU6y+6UQ+oTSng syl4Egsi8GUDbihXqwfO2NPkAcW2iasaomefsmL5n5nV/5K6/BDqlApNWBvkoMvZ 95rgLaudRN74Iz6PIxqKy1QYl/RLtIoiG7jqX6VRQmyz+r4ningiNY3QDCs05Kj7 rP4qDDLInb8Ke976Wf6Vhga67WuKV0JqQja951eg5/3BUeCTXyq6nBWZWb2kHrj6 PeGAJ/Yvw3S4Yowc0hbWbFI4xr0+aBhATcnxAyEGHBwfgdbriA5AXAWQ56KgVxyv iVwuxStX4v72C0Mun0QU8259IB4ciiBASHvHSPk1Hbp6 -----END CERTIFICATE-----Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org