$ rpki-client -vvf repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa File: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (raw, json) Hash identifier: q/aSw8dNXjF6GDG+KHGBg9PKXH4YVjAUk1ld0FDlmcg= Subject key identifier: 98:E7:E1:75:73:B3:6C:41:3D:B6:6A:2C:93:DF:7C:62:CA:AD:41:4F Certificate issuer: /CN=1678F34665D7A5281AECD895B892F07EA136CF72 Certificate serial: 6F51F3C82C5F94A39908191CD4D54024B11B0FDC Authority key identifier: 16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa Signing time: Mon 01 Jul 2024 01:03:34 +0000 ROA not before: Mon 01 Jul 2024 00:58:34 +0000 ROA not after: Mon 30 Jun 2025 01:03:34 +0000 asID: 38781 IP address blocks: 2001:df3:e600::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 16:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:51:f3:c8:2c:5f:94:a3:99:08:19:1c:d4:d5:40:24:b1:1b:0f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678F34665D7A5281AECD895B892F07EA136CF72 Validity Not Before: Jul 1 00:58:34 2024 GMT Not After : Jun 30 01:03:34 2025 GMT Subject: CN=98E7E17573B36C413DB66A2C93DF7C62CAAD414F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:57:b7:00:05:51:d2:53:e6:70:18:b8:ac:6a: 52:3f:d8:2c:4a:32:c4:6f:01:28:03:7a:ec:d1:e3: 5f:31:d9:a3:88:b2:a7:a5:b2:96:1e:26:5a:df:90: f1:84:2c:a1:d4:8f:3f:e5:ca:90:8c:36:f9:ae:40: 85:5d:fc:a3:ed:7e:43:70:b7:77:73:41:24:02:56: d1:16:a6:45:0f:5a:9a:6b:b1:f2:fd:ba:fc:dd:d3: 55:14:3f:a5:89:ba:45:23:e2:3c:aa:b4:bf:9d:89: 1c:aa:4c:d7:17:e8:cf:94:65:eb:b8:bd:ad:71:16: 87:5a:57:df:c2:23:c7:b5:a2:df:b5:e8:38:6b:71: b1:b7:05:e6:b5:dd:c4:2f:de:06:b5:ee:f2:17:cc: 1c:9a:30:50:04:5a:ec:ac:d0:8a:69:60:e9:d8:a3: f6:6d:35:ec:cf:87:f2:db:59:d9:70:fd:7b:61:37: be:b3:93:76:6a:21:c8:06:55:4e:10:33:77:2d:30: 55:1c:cf:44:12:3c:c7:77:dd:f5:70:8c:46:50:4b: 55:3e:91:0b:b4:57:f7:1a:1e:c0:b3:1b:c3:32:a3: 75:b9:27:1d:52:5c:dc:32:14:94:cd:93:c9:43:c7: 13:27:65:ca:7c:cc:87:e6:64:d6:e1:36:e3:e0:05: 32:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E7:E1:75:73:B3:6C:41:3D:B6:6A:2C:93:DF:7C:62:CA:AD:41:4F X509v3 Authority Key Identifier: keyid:16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:e600::/48 Signature Algorithm: sha256WithRSAEncryption 32:7f:61:aa:43:dd:ab:89:55:28:d9:ed:9d:45:58:84:a1:5b: 8c:88:3d:87:f1:30:c9:a9:16:9c:96:c1:05:03:67:e4:de:50: bf:e7:e4:4f:c5:e0:e1:9d:61:35:de:51:01:1d:d8:c5:90:3e: 7b:a1:f6:d6:e0:a7:10:95:26:6a:2e:d6:54:0c:f7:38:a5:73: 78:80:b0:78:fc:91:6b:e5:70:b0:4c:ff:6a:f0:21:74:3c:7a: d7:b1:1e:f5:85:01:6d:d4:e4:26:dc:ad:1d:57:b0:f9:94:cf: d8:51:c5:6f:89:cd:38:fa:06:ce:57:67:ab:21:ee:d5:5e:e3: 4c:c9:19:95:77:1b:09:f0:39:e3:ca:ba:16:cc:01:87:99:9e: 70:fc:6e:84:d5:de:d5:a2:1b:ac:30:7f:4b:a3:d9:26:12:02: 74:77:61:39:f9:fe:bf:ca:1e:82:2f:34:8a:79:f2:27:1b:2b: d8:61:55:45:47:ad:3e:0e:dc:72:ce:60:ca:04:90:b2:0e:20: fe:ac:2f:6e:69:e5:80:41:b1:60:ec:17:40:76:88:62:b1:d2: 31:b5:42:44:4a:06:a5:9e:00:e4:ba:d8:05:0b:9a:a8:61:ba: 94:7c:61:95:06:39:07:83:77:4a:1c:8b:00:ae:a6:03:7f:ed: 8b:a0:e5:1d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUb1HzyCxflKOZCBkc1NVAJLEbD9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VB MTM2Q0Y3MjAeFw0yNDA3MDEwMDU4MzRaFw0yNTA2MzAwMTAzMzRaMDMxMTAvBgNV BAMTKDk4RTdFMTc1NzNCMzZDNDEzREI2NkEyQzkzREY3QzYyQ0FBRDQxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZV7cABVHSU+ZwGLisalI/2CxK MsRvASgDeuzR418x2aOIsqelspYeJlrfkPGELKHUjz/lypCMNvmuQIVd/KPtfkNw t3dzQSQCVtEWpkUPWpprsfL9uvzd01UUP6WJukUj4jyqtL+diRyqTNcX6M+UZeu4 va1xFodaV9/CI8e1ot+16DhrcbG3Bea13cQv3ga17vIXzByaMFAEWuys0IppYOnY o/ZtNezPh/LbWdlw/XthN76zk3ZqIcgGVU4QM3ctMFUcz0QSPMd33fVwjEZQS1U+ kQu0V/caHsCzG8Myo3W5Jx1SXNwyFJTNk8lDxxMnZcp8zIfmZNbhNuPgBTLXAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUmOfhdXOzbEE9tmosk998YsqtQU8wHwYDVR0j BBgwFoAUFnjzRmXXpSga7NiVuJLwfqE2z3IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzkzNjg2Yi0zMzg0LTQ0MTItOGU3Yy1lOWQxYjg1MmFhMWUvMC8xNjc4RjM0NjY1 RDdBNTI4MUFFQ0Q4OTVCODkyRjA3RUExMzZDRjcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VBMTM2 Q0Y3Mi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OTM2ODZiLTMzODQtNDQxMi04 ZTdjLWU5ZDFiODUyYWExZS8wLzMyMzAzMDMxM2E2NDY2MzMzYTY1MzYzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM3MzgzMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfPm ADANBgkqhkiG9w0BAQsFAAOCAQEAMn9hqkPdq4lVKNntnUVYhKFbjIg9h/EwyakW nJbBBQNn5N5Qv+fkT8Xg4Z1hNd5RAR3YxZA+e6H21uCnEJUmai7WVAz3OKVzeICw ePyRa+VwsEz/avAhdDx617Ee9YUBbdTkJtytHVew+ZTP2FHFb4nNOPoGzldnqyHu 1V7jTMkZlXcbCfA548q6FswBh5mecPxuhNXe1aIbrDB/S6PZJhICdHdhOfn+v8oe gi80innyJxsr2GFVRUetPg7ccs5gygSQsg4g/qwvbmnlgEGxYOwXQHaIYrHSMbVC REoGpZ4A5LrYBQuaqGG6lHxhlQY5B4N3ShyLAK6mA3/ti6DlHQ== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org