$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa File: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (raw, json) Hash identifier: NofpD1sl8DXcTobPYZA70vZaLVMJLrRdwRdQN8Q2j3s= Subject key identifier: EB:30:74:23:72:5B:47:F2:96:80:62:52:74:C3:BE:34:57:06:A3:B6 Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Certificate serial: 086F5BFBA38619AB6F4F4C5BF439C24CDBB057C6 Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa Signing time: Thu 17 Aug 2023 08:00:00 +0000 ROA not before: Thu 17 Aug 2023 07:55:00 +0000 ROA not after: Thu 15 Aug 2024 08:00:00 +0000 asID: 38759 IP address blocks: 2001:d68:8::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6f:5b:fb:a3:86:19:ab:6f:4f:4c:5b:f4:39:c2:4c:db:b0:57:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Validity Not Before: Aug 17 07:55:00 2023 GMT Not After : Aug 15 08:00:00 2024 GMT Subject: CN=EB307423725B47F29680625274C3BE345706A3B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:f2:d2:2a:c7:32:12:d4:36:7d:e0:36:65: 78:3c:53:66:06:7f:51:38:ea:ec:77:c2:49:48:a6: 41:d2:a1:76:43:41:4f:f1:ca:ca:06:60:a2:e0:4a: 47:cf:93:08:81:7b:3d:8a:c1:1d:8d:54:e3:93:cd: 7a:13:24:2f:74:47:c2:1f:1c:49:a1:f6:c2:f9:4c: f9:7f:86:ef:ea:cc:73:df:1c:c4:47:17:f1:0d:94: bd:39:9e:ca:88:d7:c6:7d:6b:f6:e2:92:56:9e:bd: 9f:b8:b3:a4:91:51:68:1a:e8:6b:f7:2b:b2:95:1c: ec:60:b7:3f:fc:53:35:ca:4e:b2:2f:29:3f:c7:cc: b6:32:4c:ab:2f:7c:4c:0d:63:a0:ae:2e:dc:76:3e: 36:43:fb:fd:77:cb:04:87:4c:18:51:50:a5:2b:4d: 09:28:40:c1:f0:56:fc:a6:fb:fa:1e:42:7f:ae:da: 58:84:26:38:15:e8:02:86:a5:95:a6:6a:e2:d3:ab: c1:7f:c0:25:9a:d7:35:a4:61:bf:87:19:de:f5:60: cb:67:32:11:61:93:0d:e6:de:ef:8a:ed:ab:e5:2f: 55:f0:d6:17:e4:87:97:b9:d0:35:73:84:f6:b6:e7: d7:ff:5e:58:4b:94:d5:8c:24:4c:24:7b:2e:83:2e: 85:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:30:74:23:72:5B:47:F2:96:80:62:52:74:C3:BE:34:57:06:A3:B6 X509v3 Authority Key Identifier: keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:d68:8::/48 Signature Algorithm: sha256WithRSAEncryption 54:0b:7a:6c:27:17:dc:11:88:50:77:ea:63:35:f3:ba:6d:d4: 96:6a:ca:5f:4c:8b:69:e9:0a:03:f5:2e:1f:fe:71:d8:49:ad: 13:80:ca:6b:bf:54:95:91:2f:5f:cf:25:8b:e9:04:5e:ce:8b: 4c:85:58:64:87:f0:72:61:a0:75:6c:cd:38:08:3d:c3:a2:14: 85:7a:70:27:96:7b:74:72:a5:f2:ce:06:67:85:a2:3c:51:fd: 76:f0:ff:f2:78:f2:2d:05:d2:a6:72:84:46:78:11:82:c7:7e: 76:26:25:9a:05:fc:33:8a:ea:fb:13:b7:0b:ec:ba:00:d4:7d: 95:7b:6b:ba:2c:f7:d5:d8:c0:98:45:93:a6:a2:c0:f7:cf:d3: 93:fe:88:0c:75:30:af:cb:97:dc:69:fb:03:1b:35:29:88:5c: 44:d2:08:9f:62:a4:12:71:da:45:15:9f:61:06:51:68:97:7e: c6:48:21:1a:13:2e:ec:9a:e9:74:65:de:a7:77:da:36:ce:9f: 9f:1b:be:1e:27:2d:a0:f0:4c:f2:c5:24:c9:69:ec:a5:65:16: fe:04:1f:fe:3e:9f:dc:1c:98:be:b1:00:00:b2:7e:34:ec:0c: e5:f1:6a:37:91:8f:ce:3c:27:d5:61:29:f8:c6:ee:22:38:00: 3b:ca:51:fb -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUCG9b+6OGGatvT0xb9DnCTNuwV8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFF QzdDQTMwNjAeFw0yMzA4MTcwNzU1MDBaFw0yNDA4MTUwODAwMDBaMDMxMTAvBgNV BAMTKEVCMzA3NDIzNzI1QjQ3RjI5NjgwNjI1Mjc0QzNCRTM0NTcwNkEzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPvLSKscyEtQ2feA2ZXg8U2YG f1E46ux3wklIpkHSoXZDQU/xysoGYKLgSkfPkwiBez2KwR2NVOOTzXoTJC90R8If HEmh9sL5TPl/hu/qzHPfHMRHF/ENlL05nsqI18Z9a/biklaevZ+4s6SRUWga6Gv3 K7KVHOxgtz/8UzXKTrIvKT/HzLYyTKsvfEwNY6CuLtx2PjZD+/13ywSHTBhRUKUr TQkoQMHwVvym+/oeQn+u2liEJjgV6AKGpZWmauLTq8F/wCWa1zWkYb+HGd71YMtn MhFhkw3m3u+K7avlL1Xw1hfkh5e50DVzhPa259f/XlhLlNWMJEwkey6DLoWFAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQU6zB0I3JbR/KWgGJSdMO+NFcGo7YwHwYDVR0j BBgwFoAUQgQuZytojDBy/UdDs+fdgex8owYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTJmMjI4Yy1kZjIwLTQ3MjgtOWY5Ni04ZmFhMTM0MDAxN2EvMC80MjA0MkU2NzJC Njg4QzMwNzJGRDQ3NDNCM0U3REQ4MUVDN0NBMzA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFFQzdD QTMwNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExMmYyMjhjLWRmMjAtNDcyOC05 Zjk2LThmYWExMzQwMDE3YS8wLzMyMzAzMDMxM2E2NDM2MzgzYTM4M2EzYTJmMzQz ODJkMzQzODIwM2QzZTIwMzMzODM3MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDWgACDANBgkq hkiG9w0BAQsFAAOCAQEAVAt6bCcX3BGIUHfqYzXzum3UlmrKX0yLaekKA/UuH/5x 2EmtE4DKa79UlZEvX88li+kEXs6LTIVYZIfwcmGgdWzNOAg9w6IUhXpwJ5Z7dHKl 8s4GZ4WiPFH9dvD/8njyLQXSpnKERngRgsd+diYlmgX8M4rq+xO3C+y6ANR9lXtr uiz31djAmEWTpqLA98/Tk/6IDHUwr8uX3Gn7Axs1KYhcRNIIn2KkEnHaRRWfYQZR aJd+xkghGhMu7JrpdGXep3faNs6fnxu+HictoPBM8sUkyWnspWUW/gQf/j6f3ByY vrEAALJ+NOwM5fFqN5GPzjwn1WEp+MbuIjgAO8pR+w== -----END CERTIFICATE-----Generated at Sat Jun 1 14:35:01 2024 by rpki-client on console-fra.rpki-client.org