$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa File: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (raw, json) Hash identifier: O3osoqSALgy9N+p0Rmg0e4ZPj2EyrgRcwmVuTtoTV+o= Subject key identifier: 37:CB:90:51:83:62:A4:9C:69:3D:94:5F:72:80:07:38:DA:13:38:57 Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Certificate serial: 4E3540778096D08677080B36DFE1DC6D13419AB2 Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa Signing time: Fri 24 May 2024 16:38:44 +0000 ROA not before: Fri 24 May 2024 16:33:44 +0000 ROA not after: Fri 23 May 2025 16:38:44 +0000 asID: 152756 IP address blocks: 2001:df3:cf40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jul 2024 16:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:35:40:77:80:96:d0:86:77:08:0b:36:df:e1:dc:6d:13:41:9a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Validity Not Before: May 24 16:33:44 2024 GMT Not After : May 23 16:38:44 2025 GMT Subject: CN=37CB90518362A49C693D945F72800738DA133857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:10:ff:3f:ca:d8:19:34:1b:21:34:e1:46: 3e:4e:29:c9:72:a6:f8:c0:d5:df:d1:a3:b1:5e:51: f8:7c:76:a4:2b:b1:17:4f:44:d5:d3:df:3e:ee:af: a5:4a:a9:b6:c9:da:7c:67:cd:fb:e9:e4:c7:08:81: ec:bc:29:a5:71:6b:0c:12:97:99:5e:df:b1:c7:30: 59:cf:0f:99:d0:ba:33:38:f3:1f:5f:fa:be:eb:65: 37:e1:f8:ae:55:42:e3:92:0f:52:a7:b5:4f:b8:a3: df:d9:ad:4d:2b:c4:55:15:e3:cb:52:31:59:aa:64: e2:af:41:b0:cc:0e:ae:f1:a7:76:a4:79:ab:d4:2b: 96:ae:86:69:80:35:a7:a7:a7:c7:1d:4d:fe:46:88: b0:5a:7b:27:ac:0d:46:cf:fd:97:63:19:7f:97:af: 39:cb:e0:aa:64:d2:35:a8:a7:c6:2f:0c:99:56:6c: 93:e1:a0:af:63:d4:ed:ef:72:27:58:dd:65:90:52: 53:63:3a:79:35:2f:36:1b:4e:56:28:cc:73:2d:43: 21:7c:6b:28:80:07:48:f8:15:92:d7:99:f1:e7:4d: 8d:95:5a:be:b3:62:e4:f1:76:3b:6c:03:3a:ff:3d: 57:1d:54:55:9f:ed:e4:71:37:21:46:d9:7e:c4:a8: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CB:90:51:83:62:A4:9C:69:3D:94:5F:72:80:07:38:DA:13:38:57 X509v3 Authority Key Identifier: keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:cf40::/48 Signature Algorithm: sha256WithRSAEncryption 55:6a:be:ea:8f:0e:0e:da:84:e1:de:76:6a:7b:a4:62:00:77: 0d:d4:2c:e0:3f:1b:2b:8b:6a:83:e1:3b:b0:bf:45:85:c6:e3: 41:b7:9f:2c:cd:9e:14:16:bc:bd:3e:ab:54:dc:d1:0f:a2:f1: 1b:6a:e6:49:f0:b1:ea:80:1e:49:a3:fc:28:ee:fc:ed:f4:c8: 1e:04:e8:f1:8c:fc:72:15:a4:51:9f:e5:60:b2:3e:60:67:db: c5:e4:70:5b:6e:07:da:84:74:36:e0:40:79:ca:94:84:02:e7: 2f:67:6f:02:98:98:2f:ff:5c:f5:c2:e3:5f:1c:eb:f2:7b:02: f8:8a:22:85:22:35:14:3a:cd:7c:5b:49:84:05:2a:fa:1a:37: 24:45:01:6c:f5:d3:8f:be:18:5e:cc:32:a8:46:17:d3:11:09: 85:81:78:2e:cf:32:16:5a:03:da:21:86:89:79:63:1e:f8:e7: 4d:33:a0:ce:c1:6c:67:41:8f:2e:66:1e:78:5f:2d:69:11:1b: 0d:81:b1:a9:cf:e8:bf:e3:9d:09:38:8c:30:eb:71:d0:ec:53: 63:6c:19:d4:57:a3:66:06:09:3d:c9:d4:94:4b:06:39:40:dc: 54:2e:55:cb:21:14:16:04:a5:a1:fb:0d:44:f2:cf:54:e4:53: 7b:ff:b1:e7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTjVAd4CW0IZ3CAs23+HcbRNBmrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURF QTkyNkMwRjAeFw0yNDA1MjQxNjMzNDRaFw0yNTA1MjMxNjM4NDRaMDMxMTAvBgNV BAMTKDM3Q0I5MDUxODM2MkE0OUM2OTNEOTQ1RjcyODAwNzM4REExMzM4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyChD/P8rYGTQbITThRj5OKcly pvjA1d/Ro7FeUfh8dqQrsRdPRNXT3z7ur6VKqbbJ2nxnzfvp5McIgey8KaVxawwS l5le37HHMFnPD5nQujM48x9f+r7rZTfh+K5VQuOSD1KntU+4o9/ZrU0rxFUV48tS MVmqZOKvQbDMDq7xp3akeavUK5auhmmANaenp8cdTf5GiLBaeyesDUbP/ZdjGX+X rznL4Kpk0jWop8YvDJlWbJPhoK9j1O3vcidY3WWQUlNjOnk1LzYbTlYozHMtQyF8 ayiAB0j4FZLXmfHnTY2VWr6zYuTxdjtsAzr/PVcdVFWf7eRxNyFG2X7EqPBxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUN8uQUYNipJxpPZRfcoAHONoTOFcwHwYDVR0j BBgwFoAUbym1rqD9fsVoqkWhch2OXeqSbA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMS82RjI5QjVBRUEw RkQ3RUM1NjhBQTQ1QTE3MjFEOEU1REVBOTI2QzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURFQTky NkMwRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhYjRlMTRkLTAyMWQtNDBkYy05 MjNhLWMxMmQxYWY0NDNiNS8xLzMyMzAzMDMxM2E2NDY2MzMzYTYzNjYzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzczNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 889AMA0GCSqGSIb3DQEBCwUAA4IBAQBVar7qjw4O2oTh3nZqe6RiAHcN1CzgPxsr i2qD4Tuwv0WFxuNBt58szZ4UFry9PqtU3NEPovEbauZJ8LHqgB5Jo/wo7vzt9Mge BOjxjPxyFaRRn+Vgsj5gZ9vF5HBbbgfahHQ24EB5ypSEAucvZ28CmJgv/1z1wuNf HOvyewL4iiKFIjUUOs18W0mEBSr6GjckRQFs9dOPvhhezDKoRhfTEQmFgXguzzIW WgPaIYaJeWMe+OdNM6DOwWxnQY8uZh54Xy1pERsNgbGpz+i/450JOIww63HQ7FNj bBnUV6NmBgk9ydSUSwY5QNxULlXLIRQWBKWh+w1E8s9U5FN7/7Hn -----END CERTIFICATE-----Generated at Wed Jul 3 17:43:15 2024 by rpki-client on console-ams.rpki-client.org