$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa File: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (raw, json) Hash identifier: qenZ7hej3sLS1vY58+4t3Rt4+88XfTNSKQnd32cXHbk= Subject key identifier: E6:53:39:17:AF:D0:E4:3A:BC:9F:A1:13:FB:4B:DF:86:AA:8C:D6:72 Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Certificate serial: 0196D04D1ADDC4B37C29C0271209AC601031B7C9 Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa Signing time: Thu 18 Jul 2024 09:00:00 +0000 ROA not before: Thu 18 Jul 2024 08:55:00 +0000 ROA not after: Thu 17 Jul 2025 09:00:00 +0000 asID: 38759 IP address blocks: 2001:d68:9::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 11:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:d0:4d:1a:dd:c4:b3:7c:29:c0:27:12:09:ac:60:10:31:b7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Validity Not Before: Jul 18 08:55:00 2024 GMT Not After : Jul 17 09:00:00 2025 GMT Subject: CN=E6533917AFD0E43ABC9FA113FB4BDF86AA8CD672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1c:a0:95:18:8a:09:ea:cf:84:1a:58:a4:ab: 57:5d:09:0c:3d:21:59:1d:4c:75:09:a6:cb:3a:21: 31:05:2c:1b:e9:07:9a:8c:06:bf:a6:3b:4f:52:3e: 7c:9f:69:ef:f9:9b:6f:11:b3:c2:4d:58:37:bf:09: 14:90:68:29:e3:f1:b4:70:3b:f4:0e:4b:40:f8:01: 88:f2:6f:80:63:95:b0:d3:40:e2:02:07:c9:ab:21: f0:0d:56:12:49:f2:46:c6:f5:94:f1:59:53:4f:be: ae:25:50:b1:57:90:51:2f:4c:2c:40:59:84:66:ef: 55:98:fe:1e:17:51:26:1b:0d:d6:7b:3e:30:a2:c8: e3:a5:65:22:38:32:43:93:1f:cb:af:d8:e5:9a:ac: fe:d9:0c:bd:c4:c3:b1:5d:f1:8f:5a:2d:8a:c4:1c: 30:06:3d:96:9e:91:6f:3b:7a:a3:ef:4b:e7:28:a0: ca:c6:b0:f9:40:66:4c:8d:af:49:7f:7e:a6:d5:16: 91:cc:75:0b:ce:ad:46:78:80:ad:a6:a3:f4:a4:8c: 6e:51:d2:0e:f6:5f:83:64:c0:a8:87:b5:2d:d8:60: 60:df:77:e1:77:b4:c3:fc:7d:b3:80:a6:61:23:e7: e0:4c:d9:1c:7e:e9:f0:41:db:77:df:41:c7:1d:b8: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:53:39:17:AF:D0:E4:3A:BC:9F:A1:13:FB:4B:DF:86:AA:8C:D6:72 X509v3 Authority Key Identifier: keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:d68:9::/48 Signature Algorithm: sha256WithRSAEncryption 6d:56:d5:86:81:ce:43:ed:18:87:7d:b3:26:0a:db:ae:eb:f7: 75:89:a5:b6:5d:fc:0e:65:43:fc:8c:31:e6:cc:f6:be:4f:a8: 05:fa:5b:c5:ee:95:71:6e:97:01:9e:10:94:c2:96:fa:a4:30: 57:73:cd:4c:f7:67:ee:9c:43:31:70:86:22:94:ea:7c:fe:8e: b1:89:97:cf:1b:16:f5:62:93:2c:52:62:4f:30:37:12:7d:10: 70:88:28:1a:9e:73:39:6b:9e:a3:4e:06:7e:61:19:b3:70:0b: af:be:07:dc:9c:86:34:f6:ec:81:4f:96:a4:e7:4c:b6:34:43: 7f:7d:fe:45:10:10:26:06:6b:5c:bc:55:3e:65:fb:cc:73:c2: bc:97:46:7b:42:02:b0:dd:73:79:9e:fa:95:5d:33:d7:4d:78: b9:48:b6:ba:aa:25:e6:e7:dc:25:2b:30:73:5a:3d:e8:6e:73: 2d:d6:5c:fc:71:50:55:f0:bd:97:32:90:11:89:df:fa:20:90: a7:ca:b9:fa:f8:e4:89:10:6c:49:8a:25:4c:a7:9c:5e:7f:3f: 77:9b:b4:9a:ad:a9:40:dd:53:92:8f:13:90:39:3f:ba:93:0a: a1:b7:75:ff:af:ec:09:71:03:2d:22:63:a1:ba:35:e0:50:9e: 1e:83:c6:45 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUAZbQTRrdxLN8KcAnEgmsYBAxt8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFF QzdDQTMwNjAeFw0yNDA3MTgwODU1MDBaFw0yNTA3MTcwOTAwMDBaMDMxMTAvBgNV BAMTKEU2NTMzOTE3QUZEMEU0M0FCQzlGQTExM0ZCNEJERjg2QUE4Q0Q2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHKCVGIoJ6s+EGlikq1ddCQw9 IVkdTHUJpss6ITEFLBvpB5qMBr+mO09SPnyfae/5m28Rs8JNWDe/CRSQaCnj8bRw O/QOS0D4AYjyb4BjlbDTQOICB8mrIfANVhJJ8kbG9ZTxWVNPvq4lULFXkFEvTCxA WYRm71WY/h4XUSYbDdZ7PjCiyOOlZSI4MkOTH8uv2OWarP7ZDL3Ew7Fd8Y9aLYrE HDAGPZaekW87eqPvS+cooMrGsPlAZkyNr0l/fqbVFpHMdQvOrUZ4gK2mo/SkjG5R 0g72X4NkwKiHtS3YYGDfd+F3tMP8fbOApmEj5+BM2Rx+6fBB23ffQccduHqJAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQU5lM5F6/Q5Dq8n6ET+0vfhqqM1nIwHwYDVR0j BBgwFoAUQgQuZytojDBy/UdDs+fdgex8owYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTJmMjI4Yy1kZjIwLTQ3MjgtOWY5Ni04ZmFhMTM0MDAxN2EvMC80MjA0MkU2NzJC Njg4QzMwNzJGRDQ3NDNCM0U3REQ4MUVDN0NBMzA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFFQzdD QTMwNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExMmYyMjhjLWRmMjAtNDcyOC05 Zjk2LThmYWExMzQwMDE3YS8wLzMyMzAzMDMxM2E2NDM2MzgzYTM5M2EzYTJmMzQz ODJkMzQzODIwM2QzZTIwMzMzODM3MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDWgACTANBgkq hkiG9w0BAQsFAAOCAQEAbVbVhoHOQ+0Yh32zJgrbruv3dYmltl38DmVD/Iwx5sz2 vk+oBfpbxe6VcW6XAZ4QlMKW+qQwV3PNTPdn7pxDMXCGIpTqfP6OsYmXzxsW9WKT LFJiTzA3En0QcIgoGp5zOWueo04GfmEZs3ALr74H3JyGNPbsgU+WpOdMtjRDf33+ RRAQJgZrXLxVPmX7zHPCvJdGe0ICsN1zeZ76lV0z1014uUi2uqol5ufcJSswc1o9 6G5zLdZc/HFQVfC9lzKQEYnf+iCQp8q5+vjkiRBsSYolTKecXn8/d5u0mq2pQN1T ko8TkDk/upMKobd1/6/sCXEDLSJjobo14FCeHoPGRQ== -----END CERTIFICATE-----Generated at Mon Nov 25 09:02:06 2024 by rpki-client on console-ams.rpki-client.org