$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa File: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (raw, json) Hash identifier: EuM1b43A4zanlFLZXzTW5dwTWLgqOCuSBAJ2ktTT1mk= Subject key identifier: 63:53:F9:C3:37:3E:ED:55:D6:50:86:FB:63:F3:51:14:1B:F3:6C:67 Certificate issuer: /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Certificate serial: 15FE917EA5A5653AB3CC0421AEF78D9D3CB965B5 Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa Signing time: Fri 15 Dec 2023 03:50:35 +0000 ROA not before: Fri 15 Dec 2023 03:45:35 +0000 ROA not after: Fri 13 Dec 2024 03:50:35 +0000 asID: 134640 IP address blocks: 2001:df0:a00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 09:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fe:91:7e:a5:a5:65:3a:b3:cc:04:21:ae:f7:8d:9d:3c:b9:65:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Validity Not Before: Dec 15 03:45:35 2023 GMT Not After : Dec 13 03:50:35 2024 GMT Subject: CN=6353F9C3373EED55D65086FB63F351141BF36C67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e9:bc:0d:a2:af:b7:f4:97:bd:25:2b:b0:ce: 3c:19:d0:3d:d9:c4:15:cc:be:27:df:91:52:4a:3a: 41:f4:d9:2e:d4:54:24:44:a6:3b:ea:b7:1c:e1:6a: e1:a9:e0:00:0e:d8:16:bb:71:f5:e5:8e:f5:a1:2e: fe:fe:11:de:05:1c:f8:d7:aa:a1:0b:fe:1c:ca:2c: c8:40:17:db:4d:da:46:3c:07:ed:43:f8:6e:0a:36: f2:cb:77:16:af:5d:00:83:8e:5a:9e:56:72:ef:cc: 26:f9:a5:94:f3:29:c1:08:49:d5:56:ec:21:3c:57: 81:ae:d2:aa:48:79:ed:69:af:c3:f6:9b:ec:fe:23: 7a:ce:6f:a8:81:3e:61:10:0d:14:89:c5:6c:32:47: 54:cd:92:36:44:64:11:01:2d:33:0e:f8:52:5b:0d: 18:19:18:53:5c:d6:89:d7:77:97:40:52:52:49:60: 4f:76:5f:13:be:a5:10:5c:fd:f5:ec:0b:a9:7f:38: fe:71:07:fb:b2:92:12:f2:98:95:45:f9:64:03:fd: 87:a8:73:cb:50:33:6c:55:48:28:82:10:9f:93:79: 0f:48:3b:2c:29:b6:2b:e6:b7:02:77:13:5a:db:5c: 92:39:ee:da:b9:c3:19:0b:e4:16:e4:d2:1d:fc:fd: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:53:F9:C3:37:3E:ED:55:D6:50:86:FB:63:F3:51:14:1B:F3:6C:67 X509v3 Authority Key Identifier: keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:a00::/48 Signature Algorithm: sha256WithRSAEncryption ba:61:47:eb:53:6b:6a:ec:03:9f:55:9e:45:9a:1d:c0:40:e8: 34:5a:d5:58:63:2c:02:38:fe:23:0f:a9:1d:86:6c:2b:d7:87: a2:f9:61:e4:d3:e4:5f:a4:6d:0a:2d:1e:0a:fc:36:35:2f:6a: 12:5d:69:4d:51:30:85:a3:96:c6:6e:53:a4:5d:ae:90:a2:fb: b2:b2:4d:04:35:a4:cf:7e:95:cf:3a:df:2f:3e:60:d9:5c:77: 74:03:39:4d:4f:1e:62:f1:43:b0:c2:f3:e4:48:a0:e5:da:9d: 17:71:62:cd:f7:4f:93:d6:e7:2f:11:6f:ad:c0:8b:20:72:8c: 96:54:17:e0:6a:99:23:fd:b5:54:54:40:2f:53:b9:3a:70:59: cf:5d:b0:a0:e4:3c:d2:a5:d8:57:be:93:f3:a4:9d:b5:2b:21: ae:c9:09:e6:c1:97:02:97:08:78:be:e6:98:a8:17:51:7e:77: 7e:f8:c4:85:82:ae:5d:62:d3:41:1a:8d:36:b8:26:42:f8:a6: bb:40:5c:dc:77:2e:b4:06:f5:f7:35:ed:eb:d0:67:66:98:49: 29:dc:dd:a3:1b:dd:f7:e7:d7:30:7c:e2:06:d1:1d:b0:78:2b: 1f:bb:ff:67:04:7c:9a:53:ef:8e:05:5f:4f:dc:cc:7a:34:5e: 2e:0c:dd:7e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUFf6RfqWlZTqzzAQhrveNnTy5ZbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAx QURFREE4QTAeFw0yMzEyMTUwMzQ1MzVaFw0yNDEyMTMwMzUwMzVaMDMxMTAvBgNV BAMTKDYzNTNGOUMzMzczRUVENTVENjUwODZGQjYzRjM1MTE0MUJGMzZDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6bwNoq+39Je9JSuwzjwZ0D3Z xBXMviffkVJKOkH02S7UVCREpjvqtxzhauGp4AAO2Ba7cfXljvWhLv7+Ed4FHPjX qqEL/hzKLMhAF9tN2kY8B+1D+G4KNvLLdxavXQCDjlqeVnLvzCb5pZTzKcEISdVW 7CE8V4Gu0qpIee1pr8P2m+z+I3rOb6iBPmEQDRSJxWwyR1TNkjZEZBEBLTMO+FJb DRgZGFNc1onXd5dAUlJJYE92XxO+pRBc/fXsC6l/OP5xB/uykhLymJVF+WQD/Yeo c8tQM2xVSCiCEJ+TeQ9IOywptivmtwJ3E1rbXJI57tq5wxkL5Bbk0h38/ditAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUY1P5wzc+7VXWUIb7Y/NRFBvzbGcwHwYDVR0j BBgwFoAUoHXv5lxZZDhCfGoi5g6woBre2oowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDRkMDM5Ny1mZmEwLTQ5MDMtODA1Zi0wODQ1MjdiYzQzMGMvMC9BMDc1RUZFNjVD NTk2NDM4NDI3QzZBMjJFNjBFQjBBMDFBREVEQThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAxQURF REE4QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwNGQwMzk3LWZmYTAtNDkwMy04 MDVmLTA4NDUyN2JjNDMwYy8wLzMyMzAzMDMxM2E2NDY2MzAzYTYxMzAzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNDM2MzQzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfAK ADANBgkqhkiG9w0BAQsFAAOCAQEAumFH61NrauwDn1WeRZodwEDoNFrVWGMsAjj+ Iw+pHYZsK9eHovlh5NPkX6RtCi0eCvw2NS9qEl1pTVEwhaOWxm5TpF2ukKL7srJN BDWkz36VzzrfLz5g2Vx3dAM5TU8eYvFDsMLz5Eig5dqdF3FizfdPk9bnLxFvrcCL IHKMllQX4GqZI/21VFRAL1O5OnBZz12woOQ80qXYV76T86SdtSshrskJ5sGXApcI eL7mmKgXUX53fvjEhYKuXWLTQRqNNrgmQvimu0Bc3HcutAb19zXt69BnZphJKdzd oxvd9+fXMHziBtEdsHgrH7v/ZwR8mlPvjgVfT9zMejReLgzdfg== -----END CERTIFICATE-----Generated at Sat Jun 1 09:09:43 2024 by rpki-client on console-fra.rpki-client.org