$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa File: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (raw, json) Hash identifier: 09trBlM0X7cPILlYSlJaUQWhmbw7RC+j1hg9ineoeq4= Subject key identifier: 80:63:85:D3:EA:5F:9D:E3:9E:53:36:B7:10:E0:DA:CE:F8:F8:EB:04 Certificate issuer: /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Certificate serial: 577F81B4DFA4DA5E494E8684A48C835098C2BD86 Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa Signing time: Mon 03 Jun 2024 04:00:41 +0000 ROA not before: Mon 03 Jun 2024 03:55:41 +0000 ROA not after: Mon 02 Jun 2025 04:00:41 +0000 asID: 150266 IP address blocks: 2001:df2:7b40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7f:81:b4:df:a4:da:5e:49:4e:86:84:a4:8c:83:50:98:c2:bd:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Validity Not Before: Jun 3 03:55:41 2024 GMT Not After : Jun 2 04:00:41 2025 GMT Subject: CN=806385D3EA5F9DE39E5336B710E0DACEF8F8EB04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:93:e4:31:e3:19:e5:62:28:5a:28:ce:28: 76:b7:ba:1e:57:a0:2e:6e:5b:75:23:d1:c4:fe:14: 89:cc:76:19:03:2f:db:1d:58:17:a7:16:91:e0:6a: a9:cd:9d:05:f9:b3:99:3f:c7:92:d1:7e:3b:ed:9e: 47:ba:9b:1c:64:88:6a:14:b1:a9:95:a2:f4:e1:3e: 40:2e:55:8d:d4:cc:02:a0:4f:a4:b9:ca:9d:31:33: 74:42:e4:55:6b:f6:6d:b6:b3:23:25:0b:4f:78:ee: a5:8d:b1:32:7b:24:18:24:64:8a:09:b6:6f:ee:9f: e4:fb:12:61:59:6d:66:40:93:66:7b:ec:e2:26:ba: 46:ca:c3:27:00:d3:b0:58:a1:fd:35:ab:fc:ab:3f: 3a:14:ce:d9:f6:62:7a:96:03:f8:2e:e5:97:68:45: 91:94:9f:15:94:96:ba:ec:22:a9:56:4d:15:4c:a1: 65:3e:c4:34:c8:7b:44:0d:68:58:60:5a:39:27:c4: b6:c6:c6:7d:7c:ec:ec:38:6d:e9:33:06:99:d1:61: cc:46:e4:9e:5e:3e:f8:82:58:f2:e8:55:2b:6c:01: 66:bf:88:63:47:69:57:45:4c:6c:c9:36:45:cf:aa: 09:26:41:fa:98:82:49:6c:e9:3d:c5:68:f4:10:f1: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:63:85:D3:EA:5F:9D:E3:9E:53:36:B7:10:E0:DA:CE:F8:F8:EB:04 X509v3 Authority Key Identifier: keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:7b40::/48 Signature Algorithm: sha256WithRSAEncryption 5d:3b:c6:87:e2:1f:9c:db:a8:cb:bd:6c:5b:68:e3:af:ec:48: 3f:ec:da:d4:4f:6c:19:fb:15:65:1f:12:26:51:db:02:1d:48: ba:5d:2e:c4:9e:fd:7a:3f:e2:53:07:b4:51:b5:61:db:7d:32: 46:e6:f9:0c:4a:05:de:78:b4:9f:bc:56:db:60:ff:5a:bb:a5: c8:92:15:18:01:70:45:0c:c7:30:82:67:80:82:00:fc:45:99: d7:2b:25:4d:f0:cb:d9:99:2f:77:b0:b7:b9:d3:42:52:ee:2d: 53:9c:57:aa:47:fd:ca:06:38:b5:de:67:5b:4b:ab:9a:ef:5d: a8:82:0a:96:f0:db:23:51:c9:c8:ea:bb:dd:f3:ea:fb:99:15: 52:dd:d8:b5:4e:67:ce:85:84:3c:24:dd:29:47:35:3a:75:a3: 4b:45:9c:42:cb:da:2c:9e:f0:e0:5e:fa:52:f3:d5:d5:c4:6e: b6:a1:a6:7f:9a:89:33:c0:96:63:a1:2b:4e:4c:3b:fd:90:d3: 13:a3:70:0d:5b:67:49:73:5a:9f:62:f5:36:5f:f4:af:c0:a8: 04:26:dc:45:93:42:19:b8:d1:ee:98:b9:ee:27:2e:bb:fa:55: 26:ec:94:e7:97:ca:fa:79:dc:f1:d6:5f:f1:a7:33:27:8f:58: 5a:29:30:5a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUV3+BtN+k2l5JToaEpIyDUJjCvYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5 MEU4QjdBRDAeFw0yNDA2MDMwMzU1NDFaFw0yNTA2MDIwNDAwNDFaMDMxMTAvBgNV BAMTKDgwNjM4NUQzRUE1RjlERTM5RTUzMzZCNzEwRTBEQUNFRjhGOEVCMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqpPkMeMZ5WIoWijOKHa3uh5X oC5uW3Uj0cT+FInMdhkDL9sdWBenFpHgaqnNnQX5s5k/x5LRfjvtnke6mxxkiGoU samVovThPkAuVY3UzAKgT6S5yp0xM3RC5FVr9m22syMlC0947qWNsTJ7JBgkZIoJ tm/un+T7EmFZbWZAk2Z77OImukbKwycA07BYof01q/yrPzoUztn2YnqWA/gu5Zdo RZGUnxWUlrrsIqlWTRVMoWU+xDTIe0QNaFhgWjknxLbGxn187Ow4bekzBpnRYcxG 5J5ePviCWPLoVStsAWa/iGNHaVdFTGzJNkXPqgkmQfqYgkls6T3FaPQQ8ZapAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUgGOF0+pfneOeUza3EODazvj46wQwHwYDVR0j BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4 QjdBRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1MmJlYWUxLTM0ODAtNGU5Mi1h M2E5LTVhNTRmYmJhY2QyZC8wLzMyMzAzMDMxM2E2NDY2MzIzYTM3NjIzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMwMzIzNjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8ntAMA0GCSqGSIb3DQEBCwUAA4IBAQBdO8aH4h+c26jLvWxbaOOv7Eg/7NrUT2wZ +xVlHxImUdsCHUi6XS7Env16P+JTB7RRtWHbfTJG5vkMSgXeeLSfvFbbYP9au6XI khUYAXBFDMcwgmeAggD8RZnXKyVN8MvZmS93sLe500JS7i1TnFeqR/3KBji13mdb S6ua712oggqW8NsjUcnI6rvd8+r7mRVS3di1TmfOhYQ8JN0pRzU6daNLRZxCy9os nvDgXvpS89XVxG62oaZ/mokzwJZjoStOTDv9kNMTo3ANW2dJc1qfYvU2X/SvwKgE JtxFk0IZuNHumLnuJy67+lUm7JTnl8r6edzx1l/xpzMnj1haKTBa -----END CERTIFICATE-----Generated at Mon Nov 25 23:58:44 2024 by rpki-client on console-fra.rpki-client.org