$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa File: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (raw, json) Hash identifier: 9xS15/XMHdAFDuGNQRe1F50n/1BDB1GC2kKELzQ0FX0= Subject key identifier: AC:21:13:2D:A8:63:7F:0D:1B:3A:5F:D7:B8:E0:86:EF:AC:1A:82:F6 Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Certificate serial: 4C930918E39AA87C771679B32B25F8EF54CFDC95 Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa Signing time: Fri 23 Aug 2024 04:02:19 +0000 ROA not before: Fri 23 Aug 2024 03:57:19 +0000 ROA not after: Fri 22 Aug 2025 04:02:19 +0000 asID: 45731 IP address blocks: 2001:df0:bc::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:93:09:18:e3:9a:a8:7c:77:16:79:b3:2b:25:f8:ef:54:cf:dc:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Validity Not Before: Aug 23 03:57:19 2024 GMT Not After : Aug 22 04:02:19 2025 GMT Subject: CN=AC21132DA8637F0D1B3A5FD7B8E086EFAC1A82F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:94:8b:5f:3b:94:c2:04:9a:da:65:5e:13:43: d2:ba:8b:9b:6c:d6:7c:95:78:e1:aa:74:7f:ea:1b: 10:7b:5e:f7:15:4d:0b:66:c3:50:7c:76:dc:dd:92: 19:53:25:0c:bb:97:96:c4:04:c6:e8:ad:09:20:ba: 9c:32:62:60:4e:ad:20:27:cc:5f:af:84:15:8c:c2: 7d:e4:cd:92:30:7e:72:c6:c5:a4:93:0d:66:7d:e8: 25:1b:3b:c4:5e:ec:af:75:e2:56:1c:59:61:1d:fb: 15:46:a4:85:9c:63:e1:2e:cb:7c:f1:54:55:9a:69: 73:0d:0e:93:91:3d:dd:f7:a2:4c:d0:39:04:b7:79: 8b:5b:6b:ff:6b:f6:c3:16:8b:54:ad:fd:13:b0:5d: ad:e6:3c:cd:ce:40:8e:1f:50:d8:6d:6e:0f:0b:2b: b8:78:17:17:61:ce:4e:97:25:39:d2:b1:29:44:53: cb:7f:5a:bd:ab:b4:e9:6c:c7:3f:25:dd:f1:16:78: 43:27:c4:ad:18:ab:21:59:06:37:0a:40:7e:d1:06: 32:3a:c8:9c:3b:84:68:f0:65:75:f6:c6:68:30:c8: 88:fe:2e:b1:84:05:11:b4:d7:17:05:0e:18:09:4a: 93:52:46:e9:d8:14:a0:11:f0:ef:01:51:eb:25:8c: 2a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:21:13:2D:A8:63:7F:0D:1B:3A:5F:D7:B8:E0:86:EF:AC:1A:82:F6 X509v3 Authority Key Identifier: keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:bc::/48 Signature Algorithm: sha256WithRSAEncryption 7a:a8:45:6b:ea:d3:4a:49:40:bc:e8:a2:0a:83:34:17:91:38: 87:ef:7d:b5:20:8c:3b:2b:bd:e5:04:7d:53:f1:dd:0b:b7:9e: 73:53:f6:24:30:10:46:99:00:1c:98:e4:ef:64:5f:c1:eb:ea: fc:ee:a2:9b:00:66:5e:83:1f:9a:d9:da:36:62:96:6b:dd:7b: f7:ff:59:01:b1:a0:e6:9a:b7:f4:7f:56:bf:04:75:62:3a:a4: 58:d5:35:c4:49:8d:23:59:64:9a:0d:8b:39:54:e2:84:0f:41: 98:b0:35:cb:9d:32:b3:72:81:70:ea:95:ab:5e:23:a1:c0:e0: 77:23:b8:b9:82:98:20:6a:4d:a4:55:10:7b:06:6c:de:6e:68: 91:db:5a:69:70:20:0c:8b:d9:f8:85:61:3d:23:35:d1:d7:26: 38:f0:50:d8:07:5e:f1:33:a2:a0:f8:7c:00:7e:a0:42:af:e4: 0f:ff:67:14:55:b8:09:f2:8e:6d:f8:1e:84:53:00:44:10:fa: 4c:7e:2c:f5:ad:66:2d:2b:7a:ed:4d:95:3c:82:6e:12:37:bf: bc:aa:11:40:c1:13:0f:4c:bc:2b:b7:14:d4:93:29:8c:41:35: 03:3b:f0:54:ca:f9:a8:15:68:ce:ad:5a:e5:d7:f9:ce:f3:98: 5f:8b:e6:f4 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUTJMJGOOaqHx3FnmzKyX471TP3JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUw REEzMjFDRDAeFw0yNDA4MjMwMzU3MTlaFw0yNTA4MjIwNDAyMTlaMDMxMTAvBgNV BAMTKEFDMjExMzJEQTg2MzdGMEQxQjNBNUZEN0I4RTA4NkVGQUMxQTgyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFlItfO5TCBJraZV4TQ9K6i5ts 1nyVeOGqdH/qGxB7XvcVTQtmw1B8dtzdkhlTJQy7l5bEBMborQkgupwyYmBOrSAn zF+vhBWMwn3kzZIwfnLGxaSTDWZ96CUbO8Re7K914lYcWWEd+xVGpIWcY+Euy3zx VFWaaXMNDpORPd33okzQOQS3eYtba/9r9sMWi1St/ROwXa3mPM3OQI4fUNhtbg8L K7h4Fxdhzk6XJTnSsSlEU8t/Wr2rtOlsxz8l3fEWeEMnxK0YqyFZBjcKQH7RBjI6 yJw7hGjwZXX2xmgwyIj+LrGEBRG01xcFDhgJSpNSRunYFKAR8O8BUesljCqnAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUrCETLahjfw0bOl/XuOCG76wagvYwHwYDVR0j BBgwFoAUgRXTAJH4lIt2rgqsi09oVQ2jIc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmRiYmMwOC00ZThlLTQ0YmEtYTRjZi0wNWUyMzNkZGEzYTUvMC84MTE1RDMwMDkx Rjg5NDhCNzZBRTBBQUM4QjRGNjg1NTBEQTMyMUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUwREEz MjFDRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiZGJiYzA4LTRlOGUtNDRiYS1h NGNmLTA1ZTIzM2RkYTNhNS8wLzMyMzAzMDMxM2E2NDY2MzAzYTYyNjMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNDM1MzczMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8AC8MA0G CSqGSIb3DQEBCwUAA4IBAQB6qEVr6tNKSUC86KIKgzQXkTiH7321IIw7K73lBH1T 8d0Lt55zU/YkMBBGmQAcmOTvZF/B6+r87qKbAGZegx+a2do2YpZr3Xv3/1kBsaDm mrf0f1a/BHViOqRY1TXESY0jWWSaDYs5VOKED0GYsDXLnTKzcoFw6pWrXiOhwOB3 I7i5gpggak2kVRB7BmzebmiR21ppcCAMi9n4hWE9IzXR1yY48FDYB17xM6Kg+HwA fqBCr+QP/2cUVbgJ8o5t+B6EUwBEEPpMfiz1rWYtK3rtTZU8gm4SN7+8qhFAwRMP TLwrtxTUkymMQTUDO/BUyvmoFWjOrVrl1/nO85hfi+b0 -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org