$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa File: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (raw, json) Hash identifier: oHm/b4iyQLSGBhCpt6FnAGvZb8oOHkZH9fWssNMlC38= Subject key identifier: CF:7A:F4:64:58:62:4A:E3:A6:10:3D:88:70:31:DA:C4:75:20:DA:90 Certificate issuer: /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Certificate serial: 7E5FA96BC22C781DD26394437FDF913E67228B83 Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa Signing time: Thu 20 Feb 2025 12:12:50 +0000 ROA not before: Thu 20 Feb 2025 12:07:50 +0000 ROA not after: Thu 19 Feb 2026 12:12:50 +0000 asID: 152368 IP address blocks: 2001:df1:1c40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 07:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5f:a9:6b:c2:2c:78:1d:d2:63:94:43:7f:df:91:3e:67:22:8b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Validity Not Before: Feb 20 12:07:50 2025 GMT Not After : Feb 19 12:12:50 2026 GMT Subject: CN=CF7AF46458624AE3A6103D887031DAC47520DA90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:9a:81:27:38:8c:40:d2:0d:f7:5a:e7:72: ab:4d:19:81:ad:a3:9a:cf:2b:c2:8a:bc:c3:71:e4: fc:93:88:ae:b1:57:10:5b:85:57:9a:e6:2f:1a:05: 0c:bc:14:2f:2a:ef:7a:b3:b1:f2:29:04:fd:e8:d6: b7:f7:24:c4:77:da:66:b8:c6:92:f0:35:77:7f:30: d0:f7:cf:42:83:15:7a:8b:60:28:17:5f:b5:e9:db: eb:93:23:a3:48:e3:a2:5d:a0:13:a8:44:47:cc:f8: 39:3a:6e:37:f1:47:3a:23:51:50:c7:c9:60:f5:2c: 88:8a:18:bd:6c:d7:02:cf:6f:34:9a:ae:2c:dc:fa: 2e:47:7d:cc:d8:ce:36:31:39:83:da:c3:e4:81:3c: d7:4d:75:3d:de:c2:fb:6c:66:42:dc:95:ca:a2:ed: d1:14:98:0d:ff:f8:70:c9:ca:72:c0:8c:17:5e:9f: f5:a2:76:20:c9:0f:8e:1d:18:89:0a:56:f8:45:03: fe:21:0c:99:b3:60:3b:84:df:6e:aa:9b:1e:bd:52: b3:ec:57:4a:4c:78:01:cc:c5:c8:9d:7e:13:0b:22: ca:dc:03:a8:18:bc:fc:36:8a:db:35:d1:28:eb:34: 7e:0b:9e:0e:0c:c1:63:ec:30:74:4e:b2:76:df:8a: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7A:F4:64:58:62:4A:E3:A6:10:3D:88:70:31:DA:C4:75:20:DA:90 X509v3 Authority Key Identifier: keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:1c40::/48 Signature Algorithm: sha256WithRSAEncryption 44:50:1c:d7:e4:17:3f:b7:e7:41:2c:9e:3e:db:8c:80:f0:1c: f1:ce:c0:62:ca:08:ae:a1:22:82:00:fb:de:b7:c1:83:b4:32: f8:46:88:59:75:63:19:21:b3:ba:45:06:99:b4:0b:81:2e:90: 9f:32:84:66:4e:5e:ec:49:ea:af:6e:0b:58:53:04:b3:e8:24: 1a:76:31:3d:cc:ed:c8:d7:af:73:88:2e:68:f9:1c:0b:8c:ad: b8:b3:e5:c5:bd:e0:dc:75:8c:a8:fe:f5:0c:82:bb:e0:c1:77: 6e:bf:db:1b:69:87:8e:04:c3:30:7f:3d:9b:f0:ee:3c:00:b3: 54:62:3b:35:e8:c3:79:3b:28:8e:dc:fb:59:c7:9d:f8:dd:d6: 87:19:71:91:2c:71:43:90:35:c0:af:84:76:6c:98:58:bb:1f: 26:d8:f8:76:98:75:b3:67:86:58:92:db:14:d4:c2:9a:37:59: 9c:c3:d5:94:e4:02:5c:7e:fa:ff:62:14:dd:6b:a6:ed:ee:89: 47:d1:dc:82:61:f0:ca:e9:88:b5:5f:ca:ed:8a:02:ab:55:6e: 39:cb:43:45:f2:43:d8:f4:0f:e5:7a:a3:0e:a9:4c:b0:95:a9: e2:35:9c:76:de:da:da:20:2c:72:56:71:99:4c:40:17:61:70: 17:36:66:de -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUfl+pa8IseB3SY5RDf9+RPmcii4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC MDhFRkJGMzAeFw0yNTAyMjAxMjA3NTBaFw0yNjAyMTkxMjEyNTBaMDMxMTAvBgNV BAMTKENGN0FGNDY0NTg2MjRBRTNBNjEwM0Q4ODcwMzFEQUM0NzUyMERBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aJqBJziMQNIN91rncqtNGYGt o5rPK8KKvMNx5PyTiK6xVxBbhVea5i8aBQy8FC8q73qzsfIpBP3o1rf3JMR32ma4 xpLwNXd/MND3z0KDFXqLYCgXX7Xp2+uTI6NI46JdoBOoREfM+Dk6bjfxRzojUVDH yWD1LIiKGL1s1wLPbzSarizc+i5HfczYzjYxOYPaw+SBPNdNdT3ewvtsZkLclcqi 7dEUmA3/+HDJynLAjBden/WidiDJD44dGIkKVvhFA/4hDJmzYDuE326qmx69UrPs V0pMeAHMxcidfhMLIsrcA6gYvPw2its10SjrNH4Lng4MwWPsMHROsnbfii17AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUz3r0ZFhiSuOmED2IcDHaxHUg2pAwHwYDVR0j BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4 OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF RkJGMy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05 ZGFhLWQyMjJiN2E4OTA3Mi8wLzMyMzAzMDMxM2E2NDY2MzEzYTMxNjMzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzMzNjM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8RxAMA0GCSqGSIb3DQEBCwUAA4IBAQBEUBzX5Bc/t+dBLJ4+24yA8BzxzsBiygiu oSKCAPvet8GDtDL4RohZdWMZIbO6RQaZtAuBLpCfMoRmTl7sSeqvbgtYUwSz6CQa djE9zO3I169ziC5o+RwLjK24s+XFveDcdYyo/vUMgrvgwXduv9sbaYeOBMMwfz2b 8O48ALNUYjs16MN5OyiO3PtZx5343daHGXGRLHFDkDXAr4R2bJhYux8m2Ph2mHWz Z4ZYktsU1MKaN1mcw9WU5AJcfvr/YhTda6bt7olH0dyCYfDK6Yi1X8rtigKrVW45 y0NF8kPY9A/leqMOqUywlaniNZx23traICxyVnGZTEAXYXAXNmbe -----END CERTIFICATE-----Generated at Sun Apr 6 11:57:04 2025 by rpki-client