$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa File: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (raw, json) Hash identifier: eWJNrd7oOSiXTA9n1wU9sNOkZqpaejw7YWXovGeNvp0= Subject key identifier: 16:0D:CB:58:47:D9:19:AD:7B:0C:3D:92:EF:F5:ED:45:0F:D2:DA:15 Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Certificate serial: 20AA943B4032AC979D756E08E2CDE9CD1FFBBDEB Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa Signing time: Thu 18 Jul 2024 09:00:00 +0000 ROA not before: Thu 18 Jul 2024 08:55:00 +0000 ROA not after: Thu 17 Jul 2025 09:00:00 +0000 asID: 38759 IP address blocks: 2001:d68:11::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:aa:94:3b:40:32:ac:97:9d:75:6e:08:e2:cd:e9:cd:1f:fb:bd:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Validity Not Before: Jul 18 08:55:00 2024 GMT Not After : Jul 17 09:00:00 2025 GMT Subject: CN=160DCB5847D919AD7B0C3D92EFF5ED450FD2DA15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e0:a0:ab:57:7b:ea:53:ab:e6:f9:61:7b:88: aa:6d:26:7b:8c:76:5f:d6:e2:e4:57:95:0f:f8:68: 5f:b1:a1:13:0e:16:0d:1a:de:cc:1a:27:e9:65:08: 7c:45:e2:a0:d7:8c:e5:70:42:35:4c:7c:0c:c6:c7: 6a:7a:48:3a:02:db:6f:e4:fe:b2:d8:20:0c:ce:92: 5a:dc:78:17:30:0c:dc:85:58:bc:e0:b4:59:05:8d: a1:57:b0:70:bd:4f:0c:95:db:96:eb:fe:e1:06:1a: b4:b9:f9:c8:b0:79:08:de:4c:b4:71:37:ad:eb:a8: 8e:a5:db:e5:ec:47:8a:f6:b5:b6:80:b2:93:e7:f1: fa:63:fc:87:78:35:8c:1f:7b:3c:73:b1:f0:90:f3: dc:7c:91:e3:97:c1:3b:e5:2b:2f:95:a2:2b:fc:2a: 56:ae:03:a5:de:15:d7:73:c8:c7:87:e8:4b:eb:67: f8:a4:de:28:95:cd:a7:6a:76:c0:1b:cd:6a:d2:38: ce:52:21:02:32:bd:8c:38:21:a8:9e:f4:03:ef:3b: 80:85:7a:12:57:e7:67:86:c9:c6:71:e2:e8:7b:a4: 47:a5:d9:1e:44:0d:2b:9b:09:17:7f:50:be:aa:c9: 15:21:e1:81:06:a1:5c:55:3a:ee:f4:ac:6a:09:d4: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0D:CB:58:47:D9:19:AD:7B:0C:3D:92:EF:F5:ED:45:0F:D2:DA:15 X509v3 Authority Key Identifier: keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:d68:11::/48 Signature Algorithm: sha256WithRSAEncryption 08:cf:a0:d5:62:17:15:d2:28:89:36:5f:3c:e6:f4:3b:bf:6c: a2:fa:38:5d:eb:16:08:df:74:f4:ec:bc:c0:e9:38:bb:ed:13: 7c:b8:3a:d9:3e:b6:9d:6d:c2:7d:75:91:e0:cd:39:66:99:eb: 94:cf:01:99:61:46:ad:80:e1:26:59:e5:b5:4c:fb:50:0f:17: cb:5a:f6:bf:2b:04:42:29:1e:2c:08:2b:0f:27:36:7a:9a:d1: 0f:0a:a6:79:fa:15:e9:d4:b0:31:c6:3d:35:86:bd:46:47:6f: 49:36:a8:eb:d8:dc:5d:c4:55:6e:e4:97:ac:b6:c3:ac:e9:6e: c4:78:e3:e6:71:b5:d0:b2:00:8d:9e:3d:11:ed:b5:5d:c5:5a: d2:29:1a:0d:94:cc:c3:3d:cf:bc:c7:bf:e2:36:d3:63:3e:f4: 7a:03:56:63:32:95:b8:67:14:87:8b:bc:b6:b8:95:15:22:24: 0f:94:30:66:2f:e6:53:3c:d2:82:41:ab:d8:87:bb:ce:21:1b: 06:21:e2:ec:91:59:6c:47:fd:81:2a:84:2c:7b:34:e8:ab:6b: 8d:b9:d0:b6:32:e9:c8:9b:95:fd:5d:27:13:62:de:ac:b0:ef: c0:94:88:51:41:31:11:fd:38:e8:c7:4f:6d:5b:09:9f:a8:b3: 11:41:50:ca -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUIKqUO0AyrJeddW4I4s3pzR/7veswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFF QzdDQTMwNjAeFw0yNDA3MTgwODU1MDBaFw0yNTA3MTcwOTAwMDBaMDMxMTAvBgNV BAMTKDE2MERDQjU4NDdEOTE5QUQ3QjBDM0Q5MkVGRjVFRDQ1MEZEMkRBMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr4KCrV3vqU6vm+WF7iKptJnuM dl/W4uRXlQ/4aF+xoRMOFg0a3swaJ+llCHxF4qDXjOVwQjVMfAzGx2p6SDoC22/k /rLYIAzOklrceBcwDNyFWLzgtFkFjaFXsHC9TwyV25br/uEGGrS5+ciweQjeTLRx N63rqI6l2+XsR4r2tbaAspPn8fpj/Id4NYwfezxzsfCQ89x8keOXwTvlKy+Voiv8 KlauA6XeFddzyMeH6EvrZ/ik3iiVzadqdsAbzWrSOM5SIQIyvYw4Iaie9APvO4CF ehJX52eGycZx4uh7pEel2R5EDSubCRd/UL6qyRUh4YEGoVxVOu70rGoJ1O4zAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUFg3LWEfZGa17DD2S7/XtRQ/S2hUwHwYDVR0j BBgwFoAUQgQuZytojDBy/UdDs+fdgex8owYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTJmMjI4Yy1kZjIwLTQ3MjgtOWY5Ni04ZmFhMTM0MDAxN2EvMC80MjA0MkU2NzJC Njg4QzMwNzJGRDQ3NDNCM0U3REQ4MUVDN0NBMzA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFFQzdD QTMwNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExMmYyMjhjLWRmMjAtNDcyOC05 Zjk2LThmYWExMzQwMDE3YS8wLzMyMzAzMDMxM2E2NDM2MzgzYTMxMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzczNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAENaAARMA0G CSqGSIb3DQEBCwUAA4IBAQAIz6DVYhcV0iiJNl885vQ7v2yi+jhd6xYI33T07LzA 6Ti77RN8uDrZPradbcJ9dZHgzTlmmeuUzwGZYUatgOEmWeW1TPtQDxfLWva/KwRC KR4sCCsPJzZ6mtEPCqZ5+hXp1LAxxj01hr1GR29JNqjr2NxdxFVu5JestsOs6W7E eOPmcbXQsgCNnj0R7bVdxVrSKRoNlMzDPc+8x7/iNtNjPvR6A1ZjMpW4ZxSHi7y2 uJUVIiQPlDBmL+ZTPNKCQavYh7vOIRsGIeLskVlsR/2BKoQsezToq2uNudC2MunI m5X9XScTYt6ssO/AlIhRQTER/Tjox09tWwmfqLMRQVDK -----END CERTIFICATE-----Generated at Mon Nov 25 09:00:39 2024 by rpki-client on console-fra.rpki-client.org