$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa File: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (raw, json) Hash identifier: YS3oqm1Lbyd0/97yvUW9zyotUoDYQl3GyaLAxHR+Jqk= Subject key identifier: F4:09:5D:3D:A3:B2:A6:E7:BB:73:7F:8E:DB:49:86:D4:3C:E3:4B:0C Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 083983A5BFE993F55FF013A828AD1BA2EDF07BC1 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa Signing time: Mon 26 Aug 2024 11:05:19 +0000 ROA not before: Mon 26 Aug 2024 11:00:19 +0000 ROA not after: Mon 25 Aug 2025 11:05:19 +0000 asID: 152830 IP address blocks: 2001:df3:f840::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:39:83:a5:bf:e9:93:f5:5f:f0:13:a8:28:ad:1b:a2:ed:f0:7b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Aug 26 11:00:19 2024 GMT Not After : Aug 25 11:05:19 2025 GMT Subject: CN=F4095D3DA3B2A6E7BB737F8EDB4986D43CE34B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:38:63:51:91:48:16:f9:b3:be:57:ec:da:31: 09:4e:7e:58:ff:72:15:60:73:39:91:16:b5:55:c1: a1:a2:5d:c8:4b:31:a4:eb:fb:f3:18:91:49:d3:27: 66:72:57:08:fb:d4:83:6d:21:da:dd:02:c7:67:e4: 91:7d:98:94:8f:6e:96:14:f7:05:c9:10:dc:27:1d: a1:e1:bc:e4:c3:9f:35:90:b2:a8:20:76:b3:43:3b: 02:bf:79:ed:be:ac:90:dc:06:d6:8e:d4:05:d2:4b: 4e:30:44:37:d1:45:61:e1:60:55:e4:2e:ae:f0:cd: 52:1a:73:1e:75:ee:5a:13:bb:f1:15:24:32:94:9a: 9b:ca:cc:1a:f6:5e:0d:01:9a:88:0f:9c:26:10:fd: f1:7e:22:7c:50:e5:ae:fe:58:ec:98:0a:b0:dd:13: c2:d2:f1:37:a5:95:3f:c7:d0:b3:2d:45:1b:74:39: 24:2a:2f:d6:b8:cc:53:ff:b2:c7:48:a7:4d:d6:da: 8a:3e:07:cc:a2:b5:38:30:2b:e5:d3:c1:eb:f9:2f: c8:56:3a:b4:f7:4d:ba:ae:6d:ed:bf:9c:71:9d:72: ef:b9:60:b7:fd:cd:5c:0b:1d:cc:b7:13:9b:19:6d: 72:e0:f7:02:d9:65:d2:5f:31:da:50:db:93:85:d2: 6e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:09:5D:3D:A3:B2:A6:E7:BB:73:7F:8E:DB:49:86:D4:3C:E3:4B:0C X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:f840::/48 Signature Algorithm: sha256WithRSAEncryption a6:97:54:72:02:17:b0:2a:41:41:b9:33:fd:b0:77:dd:3c:46: c6:4c:40:27:34:af:1d:e1:22:4a:64:99:8e:f3:74:e1:df:af: 5b:0d:0a:c5:ff:2d:15:99:2a:21:66:93:3a:7f:84:0c:e0:da: 04:a0:0e:ad:1c:f8:58:80:83:66:34:2e:7b:9c:9a:38:3a:4d: 2c:70:01:a3:cf:e1:da:ed:97:1b:63:b5:d0:98:a0:a1:8c:82: 2b:8f:13:83:c4:02:2c:95:eb:8b:c5:6d:0d:92:d1:f6:51:0b: 4e:8e:2c:a8:f4:52:b2:c0:4b:3c:ea:46:fe:26:f1:dd:82:30: 50:f2:10:d8:51:6b:30:1b:61:8c:3b:31:4e:d0:e7:95:49:eb: 1b:d0:9c:c8:f2:8b:30:1a:b1:95:89:dd:58:4d:c5:28:b3:24: c4:28:19:e9:b3:ee:21:fa:27:10:e4:b9:62:25:07:b8:bf:aa: 6d:9c:62:0b:55:ee:f0:ca:92:3f:b5:87:e6:26:f4:d6:41:9d: 53:6f:2e:c3:7d:68:76:9d:3c:59:c1:3a:7c:90:96:3a:ff:24: d4:96:67:73:0e:d9:c2:ed:75:cf:34:45:b3:5a:f0:53:1f:07: e7:ca:3f:26:05:b7:f6:ea:c0:d9:a4:2a:89:96:37:3d:63:b4: 68:f4:6b:ef -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCDmDpb/pk/Vf8BOoKK0bou3we8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNDA4MjYxMTAwMTlaFw0yNTA4MjUxMTA1MTlaMDMxMTAvBgNV BAMTKEY0MDk1RDNEQTNCMkE2RTdCQjczN0Y4RURCNDk4NkQ0M0NFMzRCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdOGNRkUgW+bO+V+zaMQlOflj/ chVgczmRFrVVwaGiXchLMaTr+/MYkUnTJ2ZyVwj71INtIdrdAsdn5JF9mJSPbpYU 9wXJENwnHaHhvOTDnzWQsqggdrNDOwK/ee2+rJDcBtaO1AXSS04wRDfRRWHhYFXk Lq7wzVIacx517loTu/EVJDKUmpvKzBr2Xg0BmogPnCYQ/fF+InxQ5a7+WOyYCrDd E8LS8TellT/H0LMtRRt0OSQqL9a4zFP/ssdIp03W2oo+B8yitTgwK+XTwev5L8hW OrT3Tbqube2/nHGdcu+5YLf9zVwLHcy3E5sZbXLg9wLZZdJfMdpQ25OF0m4/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU9AldPaOypue7c3+O20mG1DzjSwwwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMDIxMGIzLWNjYTItNDNjNS04 OWY5LTVhOTA4NmE2MDcwMy8xLzMyMzAzMDMxM2E2NDY2MzMzYTY2MzgzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzgzMzMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8/hAMA0GCSqGSIb3DQEBCwUAA4IBAQCml1RyAhewKkFBuTP9sHfdPEbGTEAnNK8d 4SJKZJmO83Th369bDQrF/y0VmSohZpM6f4QM4NoEoA6tHPhYgINmNC57nJo4Ok0s cAGjz+Ha7ZcbY7XQmKChjIIrjxODxAIsleuLxW0NktH2UQtOjiyo9FKywEs86kb+ JvHdgjBQ8hDYUWswG2GMOzFO0OeVSesb0JzI8oswGrGVid1YTcUosyTEKBnps+4h +icQ5LliJQe4v6ptnGILVe7wypI/tYfmJvTWQZ1Tby7DfWh2nTxZwTp8kJY6/yTU lmdzDtnC7XXPNEWzWvBTHwfnyj8mBbf26sDZpCqJljc9Y7Ro9Gvv -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org