$ rpki-client -vvf repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa File: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (raw, json) Hash identifier: MsU4cnUd8hPfz721LDwHCV8jAAANvPwAWJVVyud6fK8= Subject key identifier: D0:43:59:9D:58:6D:41:68:4F:7D:A8:FB:E3:B4:10:30:27:92:F4:96 Certificate issuer: /CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Certificate serial: 7614086C2E6E5726A049E5CB2333BCADDCEB9EFF Authority key identifier: 7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa Signing time: Tue 10 Sep 2024 08:01:08 +0000 ROA not before: Tue 10 Sep 2024 07:56:08 +0000 ROA not after: Tue 09 Sep 2025 08:01:08 +0000 asID: 139995 IP address blocks: 2001:df2:e580::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 03:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:14:08:6c:2e:6e:57:26:a0:49:e5:cb:23:33:bc:ad:dc:eb:9e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Validity Not Before: Sep 10 07:56:08 2024 GMT Not After : Sep 9 08:01:08 2025 GMT Subject: CN=D043599D586D41684F7DA8FBE3B410302792F496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bd:48:ba:f9:c7:41:47:f9:af:83:8e:29:21: e2:c0:27:bf:cb:de:fb:24:c0:40:6f:97:79:62:dc: 0c:8f:39:9b:92:2f:7b:6a:6f:e9:23:59:83:28:87: c7:b2:cb:93:55:12:33:78:a5:61:8a:03:ff:1e:41: 9f:67:4c:f1:41:e8:ea:0b:74:08:fb:75:98:d0:a9: b8:5d:47:4b:6e:f7:6d:fd:7c:82:0d:14:c2:d4:b3: 28:3b:b2:20:eb:8d:63:80:72:ab:2e:9e:a7:37:cd: f6:de:26:d8:e3:0d:00:fb:9d:a2:f6:b0:5b:cf:3a: 11:91:15:75:ae:4a:2b:6a:cd:fc:86:99:0b:9a:c6: 4c:07:c3:26:fe:7c:0e:16:e9:6e:55:aa:1f:32:64: f5:44:f7:bb:a4:35:35:67:fc:07:8e:52:cd:d9:6b: 1d:ad:57:af:02:ae:02:b1:3f:dd:77:4c:e9:1a:32: 40:b2:6e:bf:26:78:50:cb:1d:9b:ae:32:45:0f:4a: 0a:ad:11:ac:22:46:d2:c4:1a:d0:85:27:01:bd:3e: 22:b5:bc:cd:a0:67:20:84:9d:b7:d9:49:de:93:4d: a2:ca:9a:43:8e:f9:e7:d6:94:2b:b6:1e:86:02:c7: 37:6d:af:11:3e:96:a1:9a:84:1d:9d:cf:15:ab:25: 48:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:43:59:9D:58:6D:41:68:4F:7D:A8:FB:E3:B4:10:30:27:92:F4:96 X509v3 Authority Key Identifier: keyid:7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:e580::/48 Signature Algorithm: sha256WithRSAEncryption a1:db:09:fb:0b:19:5a:ec:75:4e:d2:07:f9:ee:59:11:4b:27: 4a:72:5f:45:d4:33:25:52:b6:ba:24:6c:51:10:84:af:f1:c6: 24:68:b5:63:12:64:33:87:91:c2:31:f5:41:ad:21:41:3a:00: 07:f3:a9:95:dd:33:65:dd:87:21:6c:75:b2:83:45:08:0b:ad: d5:ae:50:4f:d8:30:84:0a:1e:c5:30:a9:fa:f7:59:55:5b:30: 19:f3:fd:f6:45:8d:68:86:a8:52:4a:4e:38:ef:94:90:1b:30: c0:7e:90:45:b7:43:1f:93:77:3f:21:85:65:d7:97:92:69:b6: 08:4d:a5:0a:1c:57:55:44:9a:39:c7:a7:c4:b5:c9:57:be:a6: ac:2e:f3:54:13:68:cf:5d:19:60:aa:10:d4:f5:de:9a:d6:90: 49:af:c8:92:0f:ae:c9:81:1b:31:42:56:5e:47:c9:c5:00:88: f0:76:37:58:d8:4d:14:62:9b:8b:d0:cb:f0:17:85:75:bd:01: 2e:2b:94:62:cb:cc:bc:2b:ee:c2:3f:9b:39:a4:71:16:ef:a1: 21:d1:2a:f8:3a:de:f2:14:a0:10:bb:8f:43:36:ef:62:96:c2: af:82:07:58:26:4d:91:0e:1d:f1:fb:e9:b3:52:05:51:84:78: 0a:fe:bd:58 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdhQIbC5uVyagSeXLIzO8rdzrnv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkND RTBCNjI1NDAeFw0yNDA5MTAwNzU2MDhaFw0yNTA5MDkwODAxMDhaMDMxMTAvBgNV BAMTKEQwNDM1OTlENTg2RDQxNjg0RjdEQThGQkUzQjQxMDMwMjc5MkY0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWvUi6+cdBR/mvg44pIeLAJ7/L 3vskwEBvl3li3AyPOZuSL3tqb+kjWYMoh8eyy5NVEjN4pWGKA/8eQZ9nTPFB6OoL dAj7dZjQqbhdR0tu9239fIINFMLUsyg7siDrjWOAcqsunqc3zfbeJtjjDQD7naL2 sFvPOhGRFXWuSitqzfyGmQuaxkwHwyb+fA4W6W5Vqh8yZPVE97ukNTVn/AeOUs3Z ax2tV68CrgKxP913TOkaMkCybr8meFDLHZuuMkUPSgqtEawiRtLEGtCFJwG9PiK1 vM2gZyCEnbfZSd6TTaLKmkOO+efWlCu2HoYCxzdtrxE+lqGahB2dzxWrJUjnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU0ENZnVhtQWhPfaj747QQMCeS9JYwHwYDVR0j BBgwFoAUfHpztn/8ZmS8zTCyATxU/M4LYlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGI1OTBlOC00Zjg5LTQ3ODUtYWU3OS0yYmZmZmEyYzUyYzkvMC83QzdBNzNCNjdG RkM2NjY0QkNDRDMwQjIwMTNDNTRGQ0NFMEI2MjU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkNDRTBC NjI1NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwYjU5MGU4LTRmODktNDc4NS1h ZTc5LTJiZmZmYTJjNTJjOS8wLzMyMzAzMDMxM2E2NDY2MzIzYTY1MzUzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzOTM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8uWAMA0GCSqGSIb3DQEBCwUAA4IBAQCh2wn7Cxla7HVO0gf57lkRSydKcl9F1DMl Ura6JGxREISv8cYkaLVjEmQzh5HCMfVBrSFBOgAH86mV3TNl3YchbHWyg0UIC63V rlBP2DCECh7FMKn691lVWzAZ8/32RY1ohqhSSk4475SQGzDAfpBFt0Mfk3c/IYVl 15eSabYITaUKHFdVRJo5x6fEtclXvqasLvNUE2jPXRlgqhDU9d6a1pBJr8iSD67J gRsxQlZeR8nFAIjwdjdY2E0UYpuL0MvwF4V1vQEuK5Riy8y8K+7CP5s5pHEW76Eh 0Sr4Ot7yFKAQu49DNu9ilsKvggdYJk2RDh3x++mzUgVRhHgK/r1Y -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org