$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa File: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (raw, json) Hash identifier: H/sQHGm23pHeiM29QxCCnpOLF9jsO1FQ1jBVySyo3Cs= Subject key identifier: 95:54:67:98:38:BE:14:BD:74:E8:A4:BE:31:8A:DD:88:22:F5:BD:84 Certificate issuer: /CN=2FEC60739EF087F0D4F947C7230A725109EC6178 Certificate serial: 6534853598F0618DEBBFF1DC721BD8ACEB5873B7 Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa Signing time: Tue 12 Nov 2024 03:02:53 +0000 ROA not before: Tue 12 Nov 2024 02:57:53 +0000 ROA not after: Tue 11 Nov 2025 03:02:53 +0000 asID: 136071 IP address blocks: 2001:df0:2900::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:34:85:35:98:f0:61:8d:eb:bf:f1:dc:72:1b:d8:ac:eb:58:73:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178 Validity Not Before: Nov 12 02:57:53 2024 GMT Not After : Nov 11 03:02:53 2025 GMT Subject: CN=9554679838BE14BD74E8A4BE318ADD8822F5BD84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:81:03:e2:27:c4:6f:25:a1:42:5f:c7:39: 01:a3:2c:f3:37:3e:82:10:ff:26:ff:3a:16:28:60: 4f:3f:5d:34:f9:ee:e7:77:70:ef:5b:bd:d5:ca:0d: 16:9a:6d:21:ac:56:d8:fe:80:ac:ff:57:ed:27:0a: 48:9c:be:7a:bc:18:92:95:c5:9f:ec:11:63:41:c2: f3:36:e6:4f:f5:d0:2c:e9:2f:09:98:0f:6e:1e:fd: 82:16:7d:0b:6e:7c:11:10:1c:da:ac:03:dc:90:70: e2:dd:8a:51:79:68:0c:36:71:01:73:7e:00:ad:45: 36:5c:76:80:65:7d:d8:02:12:2a:84:12:b3:b3:b4: f2:5f:3e:7e:33:96:31:8c:37:32:b2:29:43:b6:b4: 6f:38:89:6a:f2:a5:24:a1:72:e9:c9:3e:a2:56:84: b0:86:85:8c:8e:fe:fb:fe:a9:92:f0:d2:8e:dd:4a: 77:4d:1e:a9:af:fa:13:24:f1:53:68:e2:26:91:b7: 4e:02:d9:67:b8:a4:23:fc:8a:ea:b4:8a:f6:b9:0e: 62:5e:be:e9:5c:8e:d4:31:ad:51:83:c1:10:fe:50: bf:d6:e4:cc:7f:b5:a4:5e:04:3e:38:6c:16:9f:56: 5b:9b:55:93:82:84:d5:0d:21:6d:b5:54:bf:f2:6b: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:54:67:98:38:BE:14:BD:74:E8:A4:BE:31:8A:DD:88:22:F5:BD:84 X509v3 Authority Key Identifier: keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:2900::/48 Signature Algorithm: sha256WithRSAEncryption e3:84:d1:4b:9d:c5:44:7d:12:f4:ac:be:73:dd:1d:84:0d:fe: 1c:38:50:b2:9a:1b:95:d5:6d:c8:ed:05:8a:73:f2:b3:19:47: 18:12:cf:92:b3:ed:d0:7c:3a:ab:fc:97:72:6a:39:0b:ec:08: 83:9d:08:5a:05:c2:2b:6e:87:f7:5f:20:1d:07:64:ee:14:df: 50:6d:ea:79:69:78:bd:98:c4:ca:29:17:f1:14:99:6a:fd:aa: 42:7a:3f:70:1f:ac:6e:43:7c:54:85:c9:e2:90:e4:dd:3e:e1: aa:9e:54:3f:5a:ca:ff:63:13:b3:eb:53:26:89:ec:43:35:8e: 28:5c:b2:07:c4:61:9a:99:8e:c2:27:17:8b:ab:bb:50:ae:3d: 26:e2:6e:1d:69:95:74:4b:da:7c:c1:44:23:ae:b6:30:7c:ba: 36:9b:2c:f8:4e:a0:18:b0:fa:93:9b:9a:cf:a8:9c:eb:62:7f: 20:29:5e:85:59:c6:20:03:0f:ce:ce:50:e8:5b:d9:53:4a:00: d0:df:e4:02:06:13:55:f1:84:7d:0f:dd:3a:56:05:1a:10:86: 03:37:73:81:46:e0:23:1b:72:34:3f:3f:cb:dc:19:67:04:0e: 30:25:55:cb:1c:28:1c:ae:cf:8e:c6:54:51:b2:02:21:d8:67: 6d:37:b4:31 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZTSFNZjwYY3rv/HcchvYrOtYc7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEw OUVDNjE3ODAeFw0yNDExMTIwMjU3NTNaFw0yNTExMTEwMzAyNTNaMDMxMTAvBgNV BAMTKDk1NTQ2Nzk4MzhCRTE0QkQ3NEU4QTRCRTMxOEFERDg4MjJGNUJEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tIED4ifEbyWhQl/HOQGjLPM3 PoIQ/yb/OhYoYE8/XTT57ud3cO9bvdXKDRaabSGsVtj+gKz/V+0nCkicvnq8GJKV xZ/sEWNBwvM25k/10CzpLwmYD24e/YIWfQtufBEQHNqsA9yQcOLdilF5aAw2cQFz fgCtRTZcdoBlfdgCEiqEErOztPJfPn4zljGMNzKyKUO2tG84iWrypSShcunJPqJW hLCGhYyO/vv+qZLw0o7dSndNHqmv+hMk8VNo4iaRt04C2We4pCP8iuq0iva5DmJe vulcjtQxrVGDwRD+UL/W5Mx/taReBD44bBafVlubVZOChNUNIW21VL/ya/DbAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUlVRnmDi+FL106KS+MYrdiCL1vYQwHwYDVR0j BBgwFoAUL+xgc57wh/DU+UfHIwpyUQnsYXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTE3ZTJmYS0yZjY4LTQ1MmUtYTQwNC04ZTdjY2I2ODcyMTUvMC8yRkVDNjA3MzlF RjA4N0YwRDRGOTQ3QzcyMzBBNzI1MTA5RUM2MTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEwOUVD NjE3OC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc1MTdlMmZhLTJmNjgtNDUyZS1h NDA0LThlN2NjYjY4NzIxNS8wLzMyMzAzMDMxM2E2NDY2MzAzYTMyMzkzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzNzMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8CkAMA0GCSqGSIb3DQEBCwUAA4IBAQDjhNFLncVEfRL0rL5z3R2EDf4cOFCymhuV 1W3I7QWKc/KzGUcYEs+Ss+3QfDqr/JdyajkL7AiDnQhaBcIrbof3XyAdB2TuFN9Q bep5aXi9mMTKKRfxFJlq/apCej9wH6xuQ3xUhcnikOTdPuGqnlQ/Wsr/YxOz61Mm iexDNY4oXLIHxGGamY7CJxeLq7tQrj0m4m4daZV0S9p8wUQjrrYwfLo2myz4TqAY sPqTm5rPqJzrYn8gKV6FWcYgAw/OzlDoW9lTSgDQ3+QCBhNV8YR9D906VgUaEIYD N3OBRuAjG3I0Pz/L3BlnBA4wJVXLHCgcrs+OxlRRsgIh2GdtN7Qx -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org