$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa File: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (raw, json) Hash identifier: R+pvCWWflCqQ0T3y2Iw5EX0+sgeJWSEmzKfvR3CLFwo= Subject key identifier: DA:93:84:F1:74:96:72:BF:2B:19:2B:8E:32:2A:5B:C9:BC:88:26:81 Certificate issuer: /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Certificate serial: 70A0998A9F857161F08BE1C3FC11704362F8113E Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa Signing time: Mon 01 Jul 2024 01:03:46 +0000 ROA not before: Mon 01 Jul 2024 00:58:46 +0000 ROA not after: Mon 30 Jun 2025 01:03:46 +0000 asID: 141057 IP address blocks: 2001:df4:aa80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a0:99:8a:9f:85:71:61:f0:8b:e1:c3:fc:11:70:43:62:f8:11:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Validity Not Before: Jul 1 00:58:46 2024 GMT Not After : Jun 30 01:03:46 2025 GMT Subject: CN=DA9384F1749672BF2B192B8E322A5BC9BC882681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:75:c5:56:65:e4:3a:9b:59:3a:49:50:2b: 6d:96:da:87:14:90:2d:f3:4b:39:6c:85:07:a4:4c: e9:8b:e9:c8:e2:3f:33:bd:7d:b8:fe:0b:cf:ef:24: b8:b4:c7:63:c0:6f:58:c2:d4:8a:f6:28:fc:d2:e9: f4:30:fe:90:39:ea:4b:c1:4e:0d:ff:b7:e5:03:32: 9d:1b:63:23:34:cb:a7:5c:9c:bb:36:19:b1:8f:84: 52:5c:d6:ba:f8:a0:a4:73:d9:60:1f:d4:67:75:c4: 38:16:9f:03:3e:3c:e1:ac:e9:70:d2:8e:75:7f:f9: aa:51:52:eb:03:43:16:8f:3d:a0:53:01:7f:e6:de: 2d:f5:2d:da:b5:fd:6a:5e:c5:b8:91:1f:2e:e0:2b: 91:d0:3a:46:3b:f6:d7:ac:4a:28:8b:dc:45:86:3d: 47:a9:65:69:10:0c:40:05:2d:a9:c0:bb:90:cd:a3: 37:8d:db:d2:d4:3f:25:ac:6e:2b:66:5f:6b:de:63: 6b:88:40:78:28:33:3f:c6:49:11:36:d3:84:a0:a2: 5b:c4:bc:b5:cc:1c:d4:e8:5a:85:32:f1:62:96:2d: f4:77:97:3c:4d:32:c5:6b:00:e2:ec:65:33:15:3b: d0:93:62:e9:33:f6:ec:fa:01:23:61:e2:4a:28:74: 16:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:93:84:F1:74:96:72:BF:2B:19:2B:8E:32:2A:5B:C9:BC:88:26:81 X509v3 Authority Key Identifier: keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:aa80::/48 Signature Algorithm: sha256WithRSAEncryption 6a:15:e3:46:99:be:36:46:1d:6b:e5:c0:cc:ed:cc:a2:7d:90: b6:35:8d:60:7b:49:25:fd:5c:a8:1c:ad:2f:1d:5a:d5:13:a3: 28:9a:4a:be:1d:83:dd:9d:ae:23:2e:2b:bd:c9:7b:f1:fe:a5: 40:7d:ee:d3:50:f8:a8:01:b3:a7:8d:66:b4:d3:7d:95:c9:85: 94:21:4e:1d:d5:2a:b9:11:4f:46:ab:98:9b:b6:c5:3a:2f:ee: e3:92:0d:be:d9:e2:37:34:40:9d:e8:df:57:68:c8:b3:93:6e: 0c:b4:26:79:d5:14:51:45:01:ca:56:4b:2c:9f:8f:65:f4:ad: 3c:88:54:28:d5:44:57:9f:44:47:37:fc:e5:6b:54:a1:62:81: 1d:57:8e:a9:54:af:0a:03:d6:4c:d0:17:87:ef:4d:e2:41:01: bc:9c:92:6a:cb:4b:1f:33:67:82:ee:ff:18:67:27:0c:93:29: 67:19:b7:f0:93:d7:cb:77:08:33:4a:c1:95:a3:0a:65:88:ef: 18:83:18:6e:c8:b3:4a:dc:f4:d3:33:7a:8a:e4:76:7b:8b:01: 7a:2f:0b:11:01:90:75:04:fe:19:fd:23:c0:bd:88:d4:c6:db: 44:59:9a:73:e4:51:1e:b8:b5:52:af:29:62:21:32:37:1f:ba: 6c:d3:3a:f6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcKCZip+FcWHwi+HD/BFwQ2L4ET4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1 OTFDRkUzRjAeFw0yNDA3MDEwMDU4NDZaFw0yNTA2MzAwMTAzNDZaMDMxMTAvBgNV BAMTKERBOTM4NEYxNzQ5NjcyQkYyQjE5MkI4RTMyMkE1QkM5QkM4ODI2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vHXFVmXkOptZOklQK22W2ocU kC3zSzlshQekTOmL6cjiPzO9fbj+C8/vJLi0x2PAb1jC1Ir2KPzS6fQw/pA56kvB Tg3/t+UDMp0bYyM0y6dcnLs2GbGPhFJc1rr4oKRz2WAf1Gd1xDgWnwM+POGs6XDS jnV/+apRUusDQxaPPaBTAX/m3i31Ldq1/WpexbiRHy7gK5HQOkY79tesSiiL3EWG PUepZWkQDEAFLanAu5DNozeN29LUPyWsbitmX2veY2uIQHgoMz/GSRE204SgolvE vLXMHNToWoUy8WKWLfR3lzxNMsVrAOLsZTMVO9CTYukz9uz6ASNh4koodBYnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU2pOE8XSWcr8rGSuOMipbybyIJoEwHwYDVR0j BBgwFoAU8ihreNLJbPPN8GeonT9UgVkc/j8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYTE1Mi0wMDI0LTQzNmQtOTkwZC0zMjM4MDZlMDE2OTkvMC9GMjI4NkI3OEQy Qzk2Q0YzQ0RGMDY3QTg5RDNGNTQ4MTU5MUNGRTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1OTFD RkUzRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyNGRhMTUyLTAwMjQtNDM2ZC05 OTBkLTMyMzgwNmUwMTY5OS8wLzMyMzAzMDMxM2E2NDY2MzQzYTYxNjEzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzAzNTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9KqAMA0GCSqGSIb3DQEBCwUAA4IBAQBqFeNGmb42Rh1r5cDM7cyifZC2NY1ge0kl /VyoHK0vHVrVE6Momkq+HYPdna4jLiu9yXvx/qVAfe7TUPioAbOnjWa0032VyYWU IU4d1Sq5EU9Gq5ibtsU6L+7jkg2+2eI3NECd6N9XaMizk24MtCZ51RRRRQHKVkss n49l9K08iFQo1URXn0RHN/zla1ShYoEdV46pVK8KA9ZM0BeH703iQQG8nJJqy0sf M2eC7v8YZycMkylnGbfwk9fLdwgzSsGVowpliO8YgxhuyLNK3PTTM3qK5HZ7iwF6 LwsRAZB1BP4Z/SPAvYjUxttEWZpz5FEeuLVSryliITI3H7ps0zr2 -----END CERTIFICATE-----Generated at Sun Nov 24 07:10:00 2024 by rpki-client on console-ams.rpki-client.org