$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa File: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (raw, json) Hash identifier: +t40M702VFWJpOgJRkFuplSndiJmUCoSc6okBYwiNSY= Subject key identifier: E1:0B:06:E5:B5:89:96:C4:E2:00:C1:4B:A1:7E:D3:2D:29:55:AE:C3 Certificate issuer: /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Certificate serial: 6555DC8BC9513D67A6D102968E5A585A4853602E Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa Signing time: Fri 30 Aug 2024 07:00:01 +0000 ROA not before: Fri 30 Aug 2024 06:55:01 +0000 ROA not after: Fri 29 Aug 2025 07:00:01 +0000 asID: 136070 IP address blocks: 2001:df0:1700::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 04:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:55:dc:8b:c9:51:3d:67:a6:d1:02:96:8e:5a:58:5a:48:53:60:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Validity Not Before: Aug 30 06:55:01 2024 GMT Not After : Aug 29 07:00:01 2025 GMT Subject: CN=E10B06E5B58996C4E200C14BA17ED32D2955AEC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9c:55:5d:95:01:6e:3a:b9:ba:31:bc:cc:7b: 00:8e:1d:09:0e:dd:4f:4c:be:c7:2e:ca:8a:9e:f6: 48:29:ae:eb:47:ef:ec:52:68:ee:3a:57:ca:b4:49: e8:b3:2f:1d:f1:12:4d:37:9d:d2:f8:a7:22:ad:85: c6:20:0a:a1:16:2f:e6:6f:0b:44:93:a8:30:45:64: 40:66:3c:91:42:50:37:d7:1b:cf:76:d1:fd:22:16: a2:80:fb:3e:6f:fe:2c:1a:99:8b:2b:46:e0:0f:69: 49:93:07:fc:39:f4:85:35:4f:37:c8:43:f1:0b:60: 82:6b:e6:ff:78:8b:65:51:2c:7f:82:cf:c4:b2:3d: 17:13:9a:5f:3f:8c:5b:5d:82:cf:fe:bb:98:53:29: 2d:d2:b5:7c:0a:bc:cb:04:c2:c0:83:7b:86:77:a7: cb:49:d5:02:01:a1:63:39:bb:3d:30:e2:5e:dc:5f: eb:39:de:3c:da:5a:97:a8:2a:a6:f5:03:e3:ff:37: 71:e7:d4:1b:5e:12:e3:93:5f:0e:41:87:9d:68:b8: 7d:9a:85:0f:34:76:58:60:50:43:e6:56:35:65:2d: 4f:50:82:ab:1f:3e:a0:ba:a5:f9:7b:1e:16:e2:bd: 42:d5:b9:5d:11:22:9d:54:ae:cd:3d:d7:55:b3:b7: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0B:06:E5:B5:89:96:C4:E2:00:C1:4B:A1:7E:D3:2D:29:55:AE:C3 X509v3 Authority Key Identifier: keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:1700::/48 Signature Algorithm: sha256WithRSAEncryption 19:f7:33:18:a7:d8:56:24:2a:4f:a1:60:b4:fe:c7:ef:05:b9: bc:b4:f4:a5:ac:5e:8e:94:58:07:2e:96:34:38:f7:d3:d4:70: 71:97:c3:5b:fb:0b:a9:3a:40:fe:5c:63:26:d7:bb:a6:ff:eb: 38:9e:0d:fc:19:ad:1c:df:5c:24:83:95:08:8f:cf:33:8e:0f: 50:51:95:82:9f:c1:a9:9f:6b:fe:dd:ff:65:c2:51:4c:81:86: bd:d6:fd:3c:d0:ed:12:b6:5c:01:df:2e:20:4d:9b:0a:07:3e: f8:b6:e2:b8:e9:0e:f8:31:1e:bb:f9:8d:a8:1e:e9:be:d8:d0: ff:3a:57:24:89:b5:77:46:89:9d:e0:51:1d:a4:d2:8e:8d:21: 23:ab:e3:66:7c:0f:90:c1:b2:9b:42:75:58:80:7d:4f:0d:66: 11:26:8c:87:64:cb:15:e0:78:48:ce:16:c3:53:40:30:27:b7: be:92:4a:31:ec:7f:72:d5:0e:82:42:c1:14:19:8c:bf:26:1e: 39:d7:14:85:94:a8:29:82:3f:67:eb:6c:70:47:69:46:8c:0e: 9b:a2:df:96:65:22:88:5d:e9:c9:f4:3a:02:6f:b8:a4:f4:74: 48:3c:f5:a6:17:1f:e9:16:84:82:6d:a8:d7:aa:b7:1d:88:fb: 7b:db:bf:ad -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZVXci8lRPWem0QKWjlpYWkhTYC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2 RjNGRTBCMzAeFw0yNDA4MzAwNjU1MDFaFw0yNTA4MjkwNzAwMDFaMDMxMTAvBgNV BAMTKEUxMEIwNkU1QjU4OTk2QzRFMjAwQzE0QkExN0VEMzJEMjk1NUFFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDonFVdlQFuOrm6MbzMewCOHQkO 3U9Mvscuyoqe9kgprutH7+xSaO46V8q0SeizLx3xEk03ndL4pyKthcYgCqEWL+Zv C0STqDBFZEBmPJFCUDfXG8920f0iFqKA+z5v/iwamYsrRuAPaUmTB/w59IU1TzfI Q/ELYIJr5v94i2VRLH+Cz8SyPRcTml8/jFtdgs/+u5hTKS3StXwKvMsEwsCDe4Z3 p8tJ1QIBoWM5uz0w4l7cX+s53jzaWpeoKqb1A+P/N3Hn1BteEuOTXw5Bh51ouH2a hQ80dlhgUEPmVjVlLU9QgqsfPqC6pfl7HhbivULVuV0RIp1Urs0911Wzt+kXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU4QsG5bWJlsTiAMFLoX7TLSlVrsMwHwYDVR0j BBgwFoAUoKKlyowgp89toTJcm9XDN28/4LMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjM3NzcxMS0xZTNkLTRlNWEtYTRhYy0wNWExYzUwMmFkMjgvMC9BMEEyQTVDQThD MjBBN0NGNkRBMTMyNUM5QkQ1QzMzNzZGM0ZFMEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2RjNG RTBCMy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmMzc3NzExLTFlM2QtNGU1YS1h NGFjLTA1YTFjNTAyYWQyOC8wLzMyMzAzMDMxM2E2NDY2MzAzYTMxMzczMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzNzMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8BcAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ9zMYp9hWJCpPoWC0/sfvBbm8tPSlrF6O lFgHLpY0OPfT1HBxl8Nb+wupOkD+XGMm17um/+s4ng38Ga0c31wkg5UIj88zjg9Q UZWCn8Gpn2v+3f9lwlFMgYa91v080O0StlwB3y4gTZsKBz74tuK46Q74MR67+Y2o Hum+2ND/OlckibV3Romd4FEdpNKOjSEjq+NmfA+QwbKbQnVYgH1PDWYRJoyHZMsV 4HhIzhbDU0AwJ7e+kkox7H9y1Q6CQsEUGYy/Jh451xSFlKgpgj9n62xwR2lGjA6b ot+WZSKIXenJ9DoCb7ik9HRIPPWmFx/pFoSCbajXqrcdiPt727+t -----END CERTIFICATE-----Generated at Wed Nov 27 04:01:41 2024 by rpki-client on console-fra.rpki-client.org