$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa File: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (raw, json) Hash identifier: sSXWhrWvqzQ+vxHJjhskTpislSGynAyGOv8jxoTDXpU= Subject key identifier: F5:81:A8:A6:AB:4E:1E:D0:40:BB:4F:81:27:18:A4:A8:DD:09:F3:13 Certificate issuer: /CN=30C39359651C33B59AC32BC46831980108960568 Certificate serial: 0B153D6FD4DCF355D04A53EC67AA49D4CA0D7510 Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa Signing time: Wed 16 Oct 2024 03:00:01 +0000 ROA not before: Wed 16 Oct 2024 02:55:01 +0000 ROA not after: Wed 15 Oct 2025 03:00:01 +0000 asID: 137297 IP address blocks: 2001:df3:d700::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:15:3d:6f:d4:dc:f3:55:d0:4a:53:ec:67:aa:49:d4:ca:0d:75:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C39359651C33B59AC32BC46831980108960568 Validity Not Before: Oct 16 02:55:01 2024 GMT Not After : Oct 15 03:00:01 2025 GMT Subject: CN=F581A8A6AB4E1ED040BB4F812718A4A8DD09F313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:78:ea:d7:fd:7a:65:34:df:71:1e:f6:60:5e: 13:ce:07:31:95:11:7d:d7:7c:6f:e1:b0:c0:38:8b: 78:6b:41:b9:fb:ba:95:d4:22:fc:17:b9:95:aa:c6: 45:97:d5:f5:e6:56:6c:bc:fd:a0:0c:5e:16:07:6f: bc:91:1e:6a:74:f8:39:fb:70:ee:c4:3d:6e:80:c9: 97:28:2b:4a:f3:3a:d7:9b:b3:3b:d9:4b:c8:65:b3: 76:85:40:e1:41:1b:71:b0:a8:dc:fd:b7:10:e1:9a: f3:6d:e3:40:62:09:16:78:a2:60:6e:86:29:1e:4b: 62:be:b6:f4:96:a5:ac:17:36:6c:89:49:8d:4e:da: b1:b5:4e:9b:19:60:2c:00:c7:35:4d:5a:a0:74:17: 4d:1a:66:c7:1d:df:74:b1:6b:d8:8a:07:b2:ee:09: 3f:6c:bc:01:ab:d7:f1:eb:e3:fd:33:39:ce:bc:97: ca:ac:b5:b8:1d:e0:79:f1:27:76:8b:28:c3:f3:03: 1c:ad:43:33:74:f2:ed:a2:d0:9b:a2:9f:2e:14:0a: 6a:23:7a:5b:dd:21:c1:3f:08:1c:ab:53:74:07:07: 23:1a:af:13:16:8c:39:09:ce:85:7e:5d:9d:d1:6c: b6:4c:89:71:aa:30:4a:21:7c:0e:fd:04:6e:b6:b7: 39:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:81:A8:A6:AB:4E:1E:D0:40:BB:4F:81:27:18:A4:A8:DD:09:F3:13 X509v3 Authority Key Identifier: keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:d700::/48 Signature Algorithm: sha256WithRSAEncryption 7d:d2:2e:a3:50:31:07:e8:75:0f:32:1b:55:b1:e7:86:5b:db: e0:b2:a2:5d:79:78:2a:f6:72:a5:7f:2f:fa:cf:f4:0c:2c:87: 46:75:06:30:96:26:db:ea:13:4b:03:da:f5:a5:e0:f9:16:a3: 4c:a3:85:ac:4c:a8:93:e5:bb:66:6d:9a:28:06:64:76:2a:f2: c6:42:64:ab:4d:a2:a3:3e:57:de:55:03:2d:14:f3:27:c7:26: d5:89:7d:2f:9c:52:86:38:58:b0:23:76:5e:af:f0:70:91:6b: 0d:09:56:80:5b:26:f4:4d:d4:19:a3:40:5e:d4:70:7f:c6:4a: 94:43:44:06:85:65:fa:51:09:b9:95:9d:f4:2e:ed:80:76:8c: 0b:bc:4c:68:aa:2d:93:fc:e5:de:af:06:15:2b:4f:39:7f:2d: 5a:13:61:58:2d:e9:19:95:c9:34:8e:2a:91:64:38:3a:aa:bd: 34:10:51:b7:48:69:95:8f:03:fa:27:dc:9a:7e:3f:ca:26:df: f9:c7:6a:2e:43:f7:78:be:e3:be:22:ae:83:b2:04:3f:e9:d9: cb:82:c4:bf:bb:15:8b:85:93:1a:cf:40:58:c3:48:f3:c8:5e: ce:e2:0e:60:52:2a:58:46:d2:24:8c:07:b3:9a:ee:bc:1f:40: 2f:ca:cb:9f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCxU9b9Tc81XQSlPsZ6pJ1MoNdRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEw ODk2MDU2ODAeFw0yNDEwMTYwMjU1MDFaFw0yNTEwMTUwMzAwMDFaMDMxMTAvBgNV BAMTKEY1ODFBOEE2QUI0RTFFRDA0MEJCNEY4MTI3MThBNEE4REQwOUYzMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZeOrX/XplNN9xHvZgXhPOBzGV EX3XfG/hsMA4i3hrQbn7upXUIvwXuZWqxkWX1fXmVmy8/aAMXhYHb7yRHmp0+Dn7 cO7EPW6AyZcoK0rzOtebszvZS8hls3aFQOFBG3GwqNz9txDhmvNt40BiCRZ4omBu hikeS2K+tvSWpawXNmyJSY1O2rG1TpsZYCwAxzVNWqB0F00aZscd33Sxa9iKB7Lu CT9svAGr1/Hr4/0zOc68l8qstbgd4HnxJ3aLKMPzAxytQzN08u2i0Juiny4UCmoj elvdIcE/CByrU3QHByMarxMWjDkJzoV+XZ3RbLZMiXGqMEohfA79BG62tzmhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU9YGopqtOHtBAu0+BJxikqN0J8xMwHwYDVR0j BBgwFoAUMMOTWWUcM7WawyvEaDGYAQiWBWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTc5OTZmNS1hOTM0LTRiNDQtODU0Ny0xOWVjMzdjZjdjMTQvMC8zMEMzOTM1OTY1 MUMzM0I1OUFDMzJCQzQ2ODMxOTgwMTA4OTYwNTY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEwODk2 MDU2OC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1Nzk5NmY1LWE5MzQtNGI0NC04 NTQ3LTE5ZWMzN2NmN2MxNC8wLzMyMzAzMDMxM2E2NDY2MzMzYTY0MzczMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM3MzIzOTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 89cAMA0GCSqGSIb3DQEBCwUAA4IBAQB90i6jUDEH6HUPMhtVseeGW9vgsqJdeXgq 9nKlfy/6z/QMLIdGdQYwlibb6hNLA9r1peD5FqNMo4WsTKiT5btmbZooBmR2KvLG QmSrTaKjPlfeVQMtFPMnxybViX0vnFKGOFiwI3Zer/BwkWsNCVaAWyb0TdQZo0Be 1HB/xkqUQ0QGhWX6UQm5lZ30Lu2AdowLvExoqi2T/OXerwYVK085fy1aE2FYLekZ lck0jiqRZDg6qr00EFG3SGmVjwP6J9yafj/KJt/5x2ouQ/d4vuO+Iq6DsgQ/6dnL gsS/uxWLhZMaz0BYw0jzyF7O4g5gUipYRtIkjAezmu68H0Avysuf -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org