$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa File: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (raw, json) Hash identifier: fFX2S0yuCGbDsYrqvIvfedkBEVG6E8+DQx58RVmq88I= Subject key identifier: D9:9F:D8:CA:75:57:9D:1D:81:92:91:C5:CE:8C:EE:47:C5:75:22:C6 Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 482B5B89B376E444CC67848EAFA6D9F3367E2CB2 Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa Signing time: Wed 13 Nov 2024 05:02:28 +0000 ROA not before: Wed 13 Nov 2024 04:57:28 +0000 ROA not after: Wed 12 Nov 2025 05:02:28 +0000 asID: 141642 IP address blocks: 2001:df1:a40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:2b:5b:89:b3:76:e4:44:cc:67:84:8e:af:a6:d9:f3:36:7e:2c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Nov 13 04:57:28 2024 GMT Not After : Nov 12 05:02:28 2025 GMT Subject: CN=D99FD8CA75579D1D819291C5CE8CEE47C57522C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fa:23:b9:87:6b:bd:f5:2f:43:01:e6:f5:e6: 9e:b0:3b:9e:34:d6:19:80:67:34:bb:30:32:8e:d5: 5c:39:75:df:c1:3a:c1:77:50:64:7e:27:2c:37:30: d5:eb:de:50:9f:54:13:18:3d:cb:43:61:24:63:76: 7a:6d:44:f1:c9:42:f1:d8:d5:17:4a:9a:ce:85:1b: c2:d1:20:ce:78:9c:a8:42:f7:6e:ec:15:0a:b3:bf: 7b:be:b0:0a:02:4e:c4:a8:25:04:e3:d2:27:a4:0d: 40:73:35:2e:f0:9f:ad:b6:ab:f8:ac:29:9e:d1:d0: a9:1a:a1:d9:a0:9e:f1:92:ef:9e:0b:e5:26:ba:63: 53:04:2f:6f:3a:94:44:78:e0:e1:e6:0c:82:7d:7e: 6b:a7:51:52:20:35:57:40:b9:61:46:b9:ed:77:40: 77:36:59:75:d8:d0:db:d5:ee:91:fa:91:43:cf:da: 59:8d:29:40:d3:6f:fd:be:68:a0:80:fb:af:62:bf: b3:3b:6f:e7:25:3f:a8:f8:32:93:b9:cf:49:58:fa: 7d:af:c5:58:ec:ba:b9:d2:fa:f4:d4:ed:4d:14:0c: df:9c:5a:a5:f1:1f:fb:36:15:03:24:4f:ef:bc:6c: 47:69:ae:1f:0b:78:4b:49:52:08:ad:0f:e4:c7:95: 23:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9F:D8:CA:75:57:9D:1D:81:92:91:C5:CE:8C:EE:47:C5:75:22:C6 X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:a40::/48 Signature Algorithm: sha256WithRSAEncryption 68:cc:90:d7:6e:10:a8:90:f4:a9:aa:73:4d:2c:2c:5e:2d:0b: 69:55:dc:71:c8:9f:88:09:bf:8a:b1:86:07:db:f0:22:51:7e: ac:00:9d:a3:2d:77:4a:76:5a:e1:dd:fa:b9:6a:cb:bf:d1:5f: b0:84:ca:48:5f:88:af:c2:c5:5f:8d:60:04:59:b8:95:88:cb: 25:ac:42:a2:ee:75:15:a5:15:96:71:7e:3b:8b:b3:15:df:d1: ee:e5:57:f2:dc:28:08:e6:e8:83:ec:eb:a0:46:4f:a9:ca:3e: 70:2f:37:77:57:17:4d:d8:50:22:c0:23:a9:1f:db:02:42:64: 97:25:50:b4:de:f4:fe:69:a4:1d:ae:70:87:cc:c5:c4:b7:c7: c1:62:61:0b:61:f3:6f:c3:65:f4:ef:a3:19:a9:88:6d:76:a2: a5:9c:04:9d:3f:63:14:02:4c:e8:d0:23:59:47:22:d9:da:a6: 04:36:b6:38:de:05:16:c6:8e:9b:9a:3f:c7:6c:cb:8c:71:63: 1c:58:2c:8d:1a:e5:36:cc:61:5c:4d:ac:b0:3b:29:b6:cd:ed: 74:49:52:cc:16:48:94:12:48:b9:6d:6e:8d:d1:3e:82:ac:16: 1d:78:83:d8:07:03:8f:0b:15:05:c2:79:3e:93:d4:cd:5e:be: 76:70:c3:04 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSCtbibN25ETMZ4SOr6bZ8zZ+LLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNDExMTMwNDU3MjhaFw0yNTExMTIwNTAyMjhaMDMxMTAvBgNV BAMTKEQ5OUZEOENBNzU1NzlEMUQ4MTkyOTFDNUNFOENFRTQ3QzU3NTIyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+iO5h2u99S9DAeb15p6wO540 1hmAZzS7MDKO1Vw5dd/BOsF3UGR+Jyw3MNXr3lCfVBMYPctDYSRjdnptRPHJQvHY 1RdKms6FG8LRIM54nKhC927sFQqzv3u+sAoCTsSoJQTj0iekDUBzNS7wn622q/is KZ7R0KkaodmgnvGS754L5Sa6Y1MEL286lER44OHmDIJ9fmunUVIgNVdAuWFGue13 QHc2WXXY0NvV7pH6kUPP2lmNKUDTb/2+aKCA+69iv7M7b+clP6j4MpO5z0lY+n2v xVjsurnS+vTU7U0UDN+cWqXxH/s2FQMkT++8bEdprh8LeEtJUgitD+THlSNLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU2Z/YynVXnR2BkpHFzozuR8V1IsYwHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyYWZkZjUwLWRmNTEtNDk1YS1i MWIwLWExM2EwMTM5YWIxNS8wLzMyMzAzMDMxM2E2NDY2MzEzYTYxMzQzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM2MzQzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfEK QDANBgkqhkiG9w0BAQsFAAOCAQEAaMyQ124QqJD0qapzTSwsXi0LaVXcccifiAm/ irGGB9vwIlF+rACdoy13SnZa4d36uWrLv9FfsITKSF+Ir8LFX41gBFm4lYjLJaxC ou51FaUVlnF+O4uzFd/R7uVX8twoCObog+zroEZPqco+cC83d1cXTdhQIsAjqR/b AkJklyVQtN70/mmkHa5wh8zFxLfHwWJhC2Hzb8Nl9O+jGamIbXaipZwEnT9jFAJM 6NAjWUci2dqmBDa2ON4FFsaOm5o/x2zLjHFjHFgsjRrlNsxhXE2ssDspts3tdElS zBZIlBJIuW1ujdE+gqwWHXiD2AcDjwsVBcJ5PpPUzV6+dnDDBA== -----END CERTIFICATE-----Generated at Sun Nov 24 17:17:41 2024 by rpki-client on console-fra.rpki-client.org