$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa File: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (raw, json) Hash identifier: gRca+21F1oZ4V6wuKEkPHof1bYiR8BuqCfdoeBLbAPs= Subject key identifier: 10:91:EB:C3:DD:6A:C9:40:85:26:3F:DC:E2:94:27:BB:CE:F4:B6:39 Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 3D463A84BB4FE1D7735F5FFC86214C24A7A52035 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa Signing time: Tue 16 Apr 2024 09:07:37 +0000 ROA not before: Tue 16 Apr 2024 09:02:37 +0000 ROA not after: Tue 15 Apr 2025 09:07:37 +0000 asID: 141920 IP address blocks: 2001:df3:1940::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:46:3a:84:bb:4f:e1:d7:73:5f:5f:fc:86:21:4c:24:a7:a5:20:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Apr 16 09:02:37 2024 GMT Not After : Apr 15 09:07:37 2025 GMT Subject: CN=1091EBC3DD6AC94085263FDCE29427BBCEF4B639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:28:58:bd:aa:f5:68:73:35:f3:bf:68:c1:82: 92:b1:15:e9:56:96:b1:c6:27:41:c3:f4:ed:41:ea: 1c:93:e0:ef:88:fb:25:ec:b3:ba:cd:12:b8:28:cc: 08:2f:a6:ba:8d:56:81:7e:4d:60:38:c1:7c:56:58: 5d:fe:43:59:cc:33:dd:92:5c:49:ef:fd:d8:44:2a: 5d:0a:51:de:59:f6:7d:d3:5c:75:b5:d9:73:e2:ef: 84:87:c7:69:d5:07:c8:32:63:66:c6:93:02:11:35: d7:b0:39:6e:56:ed:1e:9b:52:75:53:c2:94:25:87: 9b:3b:90:0a:10:29:73:e4:6f:d4:cc:9a:84:e5:35: 39:8a:49:de:e1:12:3f:8f:dd:36:3e:27:d6:33:53: c2:27:b6:28:99:eb:a2:a2:d3:a2:4b:65:f0:28:e7: 2c:a5:8b:95:55:5c:61:bd:9c:1a:4c:96:ef:48:11: 0b:57:f1:38:25:cc:b2:ef:73:7f:f0:23:6e:ab:35: ca:36:44:1c:96:35:94:21:35:4e:bf:00:2a:36:69: 2a:05:b1:59:f0:2b:3d:ca:39:1c:e1:06:dc:9e:8a: 51:8b:8a:94:bb:e6:5d:17:bb:c9:03:73:0d:2d:76: 3f:9b:37:a8:48:55:db:d1:cb:71:87:3d:54:8b:71: 9b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:91:EB:C3:DD:6A:C9:40:85:26:3F:DC:E2:94:27:BB:CE:F4:B6:39 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:1940::/48 Signature Algorithm: sha256WithRSAEncryption b1:53:ab:1b:f8:1b:6b:8a:2d:69:c5:f0:d7:40:fa:6c:65:9b: 9c:39:2c:f7:f6:f8:c7:76:14:bb:3a:3a:f7:8e:77:a3:f1:2b: c6:50:83:74:fd:b9:89:d3:ae:91:04:ca:2f:86:10:d1:c2:60: 32:b6:25:45:5e:48:fa:59:23:7c:a6:7e:0b:de:d1:66:d6:4f: 09:50:fd:04:23:01:56:f4:bc:5d:5b:cb:5f:57:77:0f:16:5a: 1a:11:27:11:d9:2c:06:98:eb:e6:67:01:8b:54:95:1a:6d:74: 12:50:70:8b:a1:f2:09:60:22:c1:c9:2f:27:a8:b6:57:a9:f1: da:3e:91:1d:cd:39:3d:ea:82:c2:e0:92:cb:15:39:37:9f:a3: b4:03:91:04:06:cd:8f:f3:b0:04:85:b4:92:05:9a:cf:f3:08: 96:16:c7:0a:c5:8a:ab:ec:6f:68:9a:f3:7e:38:da:4b:2f:a7: f5:83:5e:24:dc:73:11:ab:63:fb:00:77:ab:18:68:24:e1:45: a2:7d:45:6c:cc:b2:af:6f:88:b4:22:a1:38:16:60:33:cc:7a: e7:cb:4d:cc:9d:5c:8b:45:d1:40:1f:c4:d3:65:74:ab:03:7a: 24:7a:85:c9:9d:56:34:43:11:af:73:11:a9:67:90:f8:73:f6: ee:ad:11:cc -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPUY6hLtP4ddzX1/8hiFMJKelIDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNDA0MTYwOTAyMzdaFw0yNTA0MTUwOTA3MzdaMDMxMTAvBgNV BAMTKDEwOTFFQkMzREQ2QUM5NDA4NTI2M0ZEQ0UyOTQyN0JCQ0VGNEI2MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeKFi9qvVoczXzv2jBgpKxFelW lrHGJ0HD9O1B6hyT4O+I+yXss7rNErgozAgvprqNVoF+TWA4wXxWWF3+Q1nMM92S XEnv/dhEKl0KUd5Z9n3TXHW12XPi74SHx2nVB8gyY2bGkwIRNdewOW5W7R6bUnVT wpQlh5s7kAoQKXPkb9TMmoTlNTmKSd7hEj+P3TY+J9YzU8IntiiZ66Ki06JLZfAo 5yyli5VVXGG9nBpMlu9IEQtX8TglzLLvc3/wI26rNco2RByWNZQhNU6/ACo2aSoF sVnwKz3KORzhBtyeilGLipS75l0Xu8kDcw0tdj+bN6hIVdvRy3GHPVSLcZtBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUEJHrw91qyUCFJj/c4pQnu870tjkwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyZjNmNWQ5LWNmYjgtNDEyMy1h MmIxLWIwYjUyOTlmOWM2ZS8wLzMyMzAzMDMxM2E2NDY2MzMzYTMxMzkzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzkzMjMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8xlAMA0GCSqGSIb3DQEBCwUAA4IBAQCxU6sb+Btrii1pxfDXQPpsZZucOSz39vjH dhS7Ojr3jnej8SvGUIN0/bmJ066RBMovhhDRwmAytiVFXkj6WSN8pn4L3tFm1k8J UP0EIwFW9LxdW8tfV3cPFloaEScR2SwGmOvmZwGLVJUabXQSUHCLofIJYCLByS8n qLZXqfHaPpEdzTk96oLC4JLLFTk3n6O0A5EEBs2P87AEhbSSBZrP8wiWFscKxYqr 7G9omvN+ONpLL6f1g14k3HMRq2P7AHerGGgk4UWifUVszLKvb4i0IqE4FmAzzHrn y03MnVyLRdFAH8TTZXSrA3okeoXJnVY0QxGvcxGpZ5D4c/burRHM -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org