$ rpki-client -vvf repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa File: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (raw, json) Hash identifier: LHo1zMaie53AFYRQsAMBj1avC34kq9NJCGSH/LsdSnI= Subject key identifier: 61:55:2A:5D:5F:A1:35:BB:5F:10:AA:96:F5:2C:B0:82:BF:05:3E:A4 Certificate issuer: /CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Certificate serial: 65583447D1A127017233D057727B198FDD202CB4 Authority key identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa Signing time: Mon 02 Dec 2024 05:03:04 +0000 ROA not before: Mon 02 Dec 2024 04:58:04 +0000 ROA not after: Mon 01 Dec 2025 05:03:04 +0000 asID: 150503 IP address blocks: 2001:df1:de40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:58:34:47:d1:a1:27:01:72:33:d0:57:72:7b:19:8f:dd:20:2c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Validity Not Before: Dec 2 04:58:04 2024 GMT Not After : Dec 1 05:03:04 2025 GMT Subject: CN=61552A5D5FA135BB5F10AA96F52CB082BF053EA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0c:31:22:34:3e:46:7b:06:4b:16:c5:bd:9f: 0f:e2:06:eb:03:25:65:8a:30:fd:60:f0:ae:bd:27: 12:8e:9b:c6:ae:58:53:8b:a1:eb:b9:3f:33:0b:b6: 0e:33:b6:d3:9d:4a:59:a7:56:f3:32:2e:c3:ee:ff: 80:9f:48:84:a5:73:86:c7:13:3a:71:84:92:8a:6b: c1:81:87:02:a8:83:3f:ca:8d:b9:4f:23:6d:8f:90: ab:5c:e1:e7:08:89:e5:1f:01:a8:b1:03:b3:9e:82: 81:e4:a2:09:16:4a:20:f5:d1:61:b1:8b:b8:b6:3b: e2:cb:f9:cc:26:1c:1c:03:52:e9:35:a6:6a:69:0f: 9b:b7:73:b1:fa:f2:94:90:5d:4e:a5:d2:95:3a:18: 17:8f:6e:2c:e8:0b:61:f2:3e:6f:21:40:61:c1:bf: cb:01:c5:9e:2f:47:5d:93:7c:55:15:6d:e5:12:da: fc:f3:8c:f6:2f:a3:5f:62:ec:24:66:d9:7f:81:b4: 96:08:23:4e:5c:9a:be:b0:ef:b5:98:ce:10:52:d5: 54:c3:63:63:20:86:5e:ff:20:92:12:ea:75:02:e6: 88:b4:d1:1c:bf:91:cb:e0:68:87:6e:f2:a0:3d:e7: f4:25:d4:88:db:0e:6f:50:1a:be:bc:8d:3b:4f:11: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:55:2A:5D:5F:A1:35:BB:5F:10:AA:96:F5:2C:B0:82:BF:05:3E:A4 X509v3 Authority Key Identifier: keyid:D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:de40::/48 Signature Algorithm: sha256WithRSAEncryption 9c:cd:d9:6e:65:9d:71:e0:2a:4f:2a:77:3f:95:b8:96:8e:b6: c8:cd:21:4f:4f:0a:f1:46:2e:40:26:70:c9:9b:ce:ff:05:cb: b9:31:9a:79:46:e5:72:27:ec:2d:8a:63:7b:c3:b8:d5:51:d0: 27:a8:ae:56:35:c9:ed:8f:49:6d:86:ea:24:fb:59:4c:60:c2: 0f:53:41:ca:9d:5b:ca:37:5b:88:ec:3d:08:ef:28:ed:c1:66: 02:e5:98:ae:8c:27:6a:de:e3:d2:00:11:d1:f5:9e:90:a2:b1: 7b:27:d9:d7:ed:17:64:35:99:41:13:40:80:c7:de:11:3a:e8: 1c:e3:7c:27:95:aa:7d:fc:e3:f5:cd:5e:82:af:f9:e0:18:ef: 1f:67:0e:d4:96:92:c8:60:c1:08:73:09:e2:c5:1e:30:73:bd: a4:fb:b1:bc:ea:0a:2f:a7:29:b0:0e:9d:bf:20:c0:ea:2e:79: e7:04:73:03:d3:f8:6c:d3:3a:23:02:84:bd:d2:c7:bc:42:3d: 0a:74:73:14:b2:e0:e6:ee:14:a8:28:1e:11:c0:00:90:d4:73: 39:ba:1f:a6:9b:57:38:72:98:eb:a4:80:51:1f:bc:35:c8:4c: 6c:ba:12:a7:46:7a:12:9b:dd:0b:b0:49:2c:b1:30:52:fb:ff: cf:f7:d0:15 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZVg0R9GhJwFyM9BXcnsZj90gLLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJC Q0NGOTFFQTAeFw0yNDEyMDIwNDU4MDRaFw0yNTEyMDEwNTAzMDRaMDMxMTAvBgNV BAMTKDYxNTUyQTVENUZBMTM1QkI1RjEwQUE5NkY1MkNCMDgyQkYwNTNFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXDDEiND5GewZLFsW9nw/iBusD JWWKMP1g8K69JxKOm8auWFOLoeu5PzMLtg4zttOdSlmnVvMyLsPu/4CfSISlc4bH EzpxhJKKa8GBhwKogz/KjblPI22PkKtc4ecIieUfAaixA7OegoHkogkWSiD10WGx i7i2O+LL+cwmHBwDUuk1pmppD5u3c7H68pSQXU6l0pU6GBePbizoC2HyPm8hQGHB v8sBxZ4vR12TfFUVbeUS2vzzjPYvo19i7CRm2X+BtJYII05cmr6w77WYzhBS1VTD Y2Mghl7/IJIS6nUC5oi00Ry/kcvgaIdu8qA95/Ql1IjbDm9QGr68jTtPEZ/XAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUYVUqXV+hNbtfEKqW9Sywgr8FPqQwHwYDVR0j BBgwFoAU0XW9xaZBTOurRy35FZy9MrzPkeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjJkNGQ3NC02Mjk1LTQ0OTYtODIzYS0xZThhM2Q1YmJiNmMvMC9EMTc1QkRDNUE2 NDE0Q0VCQUI0NzJERjkxNTlDQkQzMkJDQ0Y5MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJCQ0NG OTFFQS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2MmQ0ZDc0LTYyOTUtNDQ5Ni04 MjNhLTFlOGEzZDViYmI2Yy8wLzMyMzAzMDMxM2E2NDY2MzEzYTY0NjUzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMwMzUzMDMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8d5AMA0GCSqGSIb3DQEBCwUAA4IBAQCczdluZZ1x4CpPKnc/lbiWjrbIzSFPTwrx Ri5AJnDJm87/Bcu5MZp5RuVyJ+wtimN7w7jVUdAnqK5WNcntj0lthuok+1lMYMIP U0HKnVvKN1uI7D0I7yjtwWYC5ZiujCdq3uPSABHR9Z6QorF7J9nX7RdkNZlBE0CA x94ROugc43wnlap9/OP1zV6Cr/ngGO8fZw7UlpLIYMEIcwnixR4wc72k+7G86gov pymwDp2/IMDqLnnnBHMD0/hs0zojAoS90se8Qj0KdHMUsuDm7hSoKB4RwACQ1HM5 uh+mm1c4cpjrpIBRH7w1yExsuhKnRnoSm90LsEkssTBS+//P99AV -----END CERTIFICATE-----Generated at Mon Apr 7 15:45:56 2025 by rpki-client