$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa File: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (raw, json) Hash identifier: llXvyGLPDurj6bmSYN1tz+/ct/cQR7nz/GjhVW22jnQ= Subject key identifier: 58:D7:23:55:F1:44:C0:36:50:E2:E0:BA:AB:B7:A9:A1:36:AB:44:FC Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 0A4EEA2C8D3B10C2F057319BA299AC2F02095F93 Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa Signing time: Wed 09 Oct 2024 07:08:18 +0000 ROA not before: Wed 09 Oct 2024 07:03:18 +0000 ROA not after: Wed 08 Oct 2025 07:08:18 +0000 asID: 153122 IP address blocks: 2001:df4:5540::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 01:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4e:ea:2c:8d:3b:10:c2:f0:57:31:9b:a2:99:ac:2f:02:09:5f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Oct 9 07:03:18 2024 GMT Not After : Oct 8 07:08:18 2025 GMT Subject: CN=58D72355F144C03650E2E0BAABB7A9A136AB44FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:61:fb:4b:76:3d:7c:d3:ad:26:93:a4:32: 34:ff:8b:a7:1e:62:12:f2:2f:e4:22:ed:2a:53:7d: 58:49:31:2a:21:c4:0e:f2:62:4f:d9:d4:5a:f2:d1: d4:6d:eb:18:8b:df:b5:95:4a:31:da:f2:1c:60:cd: 37:8a:0d:8e:53:96:ad:a8:e7:0b:01:35:f3:8d:f1: 4a:8d:78:d7:2b:a2:fe:cd:5d:57:94:fa:d3:d0:20: 2a:a8:02:8b:60:9b:62:56:ac:53:89:dd:6d:22:d9: 5a:90:23:83:af:2f:13:ae:4b:ea:26:2b:a8:b9:e6: ea:11:3f:66:8b:3b:14:5e:9c:b7:8d:6f:8b:ad:09: 4d:ff:b9:59:0b:e0:ca:71:b1:8d:3e:d4:65:11:0c: 6a:47:59:41:10:ab:17:1c:e8:bd:f4:d3:de:d6:33: 24:ed:38:77:29:b3:fa:3b:fa:83:32:8c:02:98:17: 29:39:22:3f:03:c7:9b:d8:d5:09:4d:8b:57:0f:e1: 9d:23:2f:1c:92:6c:a5:d3:51:83:fa:a6:54:fb:cc: 6e:81:20:7c:f1:7d:89:60:01:89:1b:10:ad:c1:e9: 3e:9a:86:06:94:70:c3:83:a9:c5:dc:c4:4f:e9:73: 0f:c5:db:f2:0e:9b:5a:15:00:99:ff:6a:a5:2f:a3: ca:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D7:23:55:F1:44:C0:36:50:E2:E0:BA:AB:B7:A9:A1:36:AB:44:FC X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:5540::/48 Signature Algorithm: sha256WithRSAEncryption 63:65:63:41:f4:bb:f3:b2:d0:a1:6a:79:13:7d:83:df:43:02: d1:63:ec:9e:2b:ae:d1:84:65:9d:2d:a5:5b:77:27:8d:6e:21: 9e:a2:4e:b3:21:19:dc:d9:ee:be:2c:e6:0f:c6:5f:68:19:83: a5:d7:9c:3c:c5:41:29:68:34:91:20:8a:21:29:ea:8a:5a:42: df:23:d1:64:26:29:9a:47:13:19:aa:66:b8:6e:93:db:89:83: 2c:32:50:35:1d:0c:25:b7:a7:b5:e4:cb:f6:2d:f0:94:0b:25: 11:50:97:36:88:2b:7e:f6:06:d3:74:79:d7:79:9b:bf:e9:ee: 91:47:bf:85:45:ed:98:8b:8b:aa:8c:6e:1d:41:0d:d5:3a:e2: 5a:69:98:95:42:34:cd:22:88:83:6a:76:b3:d0:66:4e:48:4c: 44:76:95:9a:df:42:5d:06:3d:92:8d:df:08:67:ce:94:04:10: 34:e4:5e:e9:fc:d6:f3:d6:5e:1b:d4:e8:49:81:7d:74:17:a5: d0:7a:e0:50:f7:a4:b7:cd:57:81:2b:9c:36:ad:0e:b4:72:c3: 8a:65:57:58:47:14:17:30:6b:62:ea:f0:eb:7c:ed:c9:2c:a3: 19:82:60:41:64:2b:26:3a:71:95:f7:72:29:48:03:14:e9:be: ae:cb:69:f0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCk7qLI07EMLwVzGbopmsLwIJX5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNDEwMDkwNzAzMThaFw0yNTEwMDgwNzA4MThaMDMxMTAvBgNV BAMTKDU4RDcyMzU1RjE0NEMwMzY1MEUyRTBCQUFCQjdBOUExMzZBQjQ0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTI2H7S3Y9fNOtJpOkMjT/i6ce YhLyL+Qi7SpTfVhJMSohxA7yYk/Z1Fry0dRt6xiL37WVSjHa8hxgzTeKDY5Tlq2o 5wsBNfON8UqNeNcrov7NXVeU+tPQICqoAotgm2JWrFOJ3W0i2VqQI4OvLxOuS+om K6i55uoRP2aLOxRenLeNb4utCU3/uVkL4MpxsY0+1GURDGpHWUEQqxcc6L30097W MyTtOHcps/o7+oMyjAKYFyk5Ij8Dx5vY1QlNi1cP4Z0jLxySbKXTUYP6plT7zG6B IHzxfYlgAYkbEK3B6T6ahgaUcMODqcXcxE/pcw/F2/IOm1oVAJn/aqUvo8rRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWNcjVfFEwDZQ4uC6q7epoTarRPwwHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjJmNjQ5LTk5NjgtNDk1ZC1i ZGYxLTdkNzYyNTZkYWFkNS8xLzMyMzAzMDMxM2E2NDY2MzQzYTM1MzUzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMzMzEzMjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9FVAMA0GCSqGSIb3DQEBCwUAA4IBAQBjZWNB9LvzstChankTfYPfQwLRY+yeK67R hGWdLaVbdyeNbiGeok6zIRnc2e6+LOYPxl9oGYOl15w8xUEpaDSRIIohKeqKWkLf I9FkJimaRxMZqma4bpPbiYMsMlA1HQwlt6e15Mv2LfCUCyURUJc2iCt+9gbTdHnX eZu/6e6RR7+FRe2Yi4uqjG4dQQ3VOuJaaZiVQjTNIoiDanaz0GZOSExEdpWa30Jd Bj2Sjd8IZ86UBBA05F7p/Nbz1l4b1OhJgX10F6XQeuBQ96S3zVeBK5w2rQ60csOK ZVdYRxQXMGti6vDrfO3JLKMZgmBBZCsmOnGV93IpSAMU6b6uy2nw -----END CERTIFICATE-----Generated at Sat Nov 23 01:25:10 2024 by rpki-client on console-ams.rpki-client.org