$ rpki-client -vvf repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa File: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (raw, json) Hash identifier: wfDpnHqmUN+eXihzqBSKr7BZajQvwRQ5W0edcS/2fRk= Subject key identifier: 97:54:F1:5C:7B:EF:83:2E:BD:5C:FE:46:AC:BC:8F:F2:84:B1:F0:13 Certificate issuer: /CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Certificate serial: 4C10C6E39B91A51F397B08E1A1314381B07D9134 Authority key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa Signing time: Thu 15 Aug 2024 05:00:02 +0000 ROA not before: Thu 15 Aug 2024 04:55:02 +0000 ROA not after: Thu 14 Aug 2025 05:00:02 +0000 asID: 138078 IP address blocks: 2001:df6:d700::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 11:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:10:c6:e3:9b:91:a5:1f:39:7b:08:e1:a1:31:43:81:b0:7d:91:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Validity Not Before: Aug 15 04:55:02 2024 GMT Not After : Aug 14 05:00:02 2025 GMT Subject: CN=9754F15C7BEF832EBD5CFE46ACBC8FF284B1F013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:fa:b3:92:53:90:b9:3c:55:72:aa:40:02: 2d:b4:1b:8c:3a:7f:18:63:90:68:d8:2b:fd:c3:ef: 8d:fa:db:47:78:63:23:c3:24:38:3d:32:1d:83:7f: 1c:c6:dd:fb:52:d4:d5:af:d9:1a:db:df:d3:1b:fb: 4d:ee:00:26:60:e8:64:fc:c4:56:ba:b8:3d:e8:ed: 72:78:9b:90:55:15:88:76:81:c7:5f:ff:b9:bf:13: 3f:7d:0f:72:0c:49:e1:f3:49:3c:b0:da:9c:0b:a2: d6:b5:fc:3b:79:aa:45:b4:28:92:d4:29:7d:4d:db: e3:89:b9:3f:75:c4:e9:22:4c:df:15:19:68:73:51: 96:7e:5b:e6:50:a1:26:4a:8e:dd:94:26:80:09:9b: c1:fe:da:fa:90:86:bb:78:4c:c8:22:be:52:d8:47: 0d:8c:04:f4:9b:58:7f:7d:4e:fd:b3:4f:0e:8b:81: b1:54:b7:56:8a:5c:3f:d8:62:5e:94:8f:53:fe:b4: a5:dd:3a:60:6f:d5:71:97:d5:45:f0:fd:c8:ba:26: 46:69:be:9e:ae:5f:b3:0b:0b:db:ee:9e:50:81:60: 3a:2c:06:1e:cf:87:9f:fa:4c:a5:17:ba:bc:22:7e: 1d:55:d4:03:b9:f1:c6:c6:35:16:be:33:a1:68:b9: 54:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:54:F1:5C:7B:EF:83:2E:BD:5C:FE:46:AC:BC:8F:F2:84:B1:F0:13 X509v3 Authority Key Identifier: keyid:B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:d700::/48 Signature Algorithm: sha256WithRSAEncryption 35:18:58:3d:4d:8a:f2:a9:5e:ba:cc:36:d2:9e:ae:4b:3c:b9: b3:9d:77:f0:47:6f:7c:ea:dd:b1:de:93:98:54:67:3e:06:74: bb:41:2b:95:26:36:fb:9f:52:22:a4:9b:dd:45:b5:04:4e:ef: d4:d3:59:19:2d:7b:fc:91:04:46:12:41:b2:c7:47:3e:25:ca: 4b:6a:b1:57:4d:dd:9f:b5:d6:82:11:00:5c:26:54:8b:40:35: 78:c9:4b:94:9e:6a:67:0b:47:7e:90:65:f5:3a:23:45:e6:b6: 1b:f3:6b:13:70:c0:62:01:47:cb:72:70:21:93:a8:8c:78:fd: 60:02:0f:1c:ba:e0:a3:eb:53:7d:df:a1:e1:72:a3:fb:51:9a: 27:1a:52:e8:64:bf:6b:93:2b:3b:ed:90:bf:ee:70:f1:d8:7c: 30:ce:4f:0b:99:f0:1a:00:2e:b2:8a:27:01:ff:84:e4:70:7d: a2:e1:8e:d3:0a:5d:2b:f1:e7:86:64:45:5f:cf:0e:93:02:85: 1c:55:36:95:9b:80:da:61:88:5d:96:13:8b:9e:03:76:a8:82: 4d:1e:fe:7f:98:14:05:18:85:8a:b8:8d:1b:9b:22:cc:a9:b0: 53:8c:04:fb:2e:9c:bd:e7:3a:14:da:37:d3:01:c3:7a:eb:78: 73:12:c1:1d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTBDG45uRpR85ewjhoTFDgbB9kTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1 REU1Q0ZDQzAeFw0yNDA4MTUwNDU1MDJaFw0yNTA4MTQwNTAwMDJaMDMxMTAvBgNV BAMTKDk3NTRGMTVDN0JFRjgzMkVCRDVDRkU0NkFDQkM4RkYyODRCMUYwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnPqzklOQuTxVcqpAAi20G4w6 fxhjkGjYK/3D743620d4YyPDJDg9Mh2DfxzG3ftS1NWv2Rrb39Mb+03uACZg6GT8 xFa6uD3o7XJ4m5BVFYh2gcdf/7m/Ez99D3IMSeHzSTyw2pwLota1/Dt5qkW0KJLU KX1N2+OJuT91xOkiTN8VGWhzUZZ+W+ZQoSZKjt2UJoAJm8H+2vqQhrt4TMgivlLY Rw2MBPSbWH99Tv2zTw6LgbFUt1aKXD/YYl6Uj1P+tKXdOmBv1XGX1UXw/ci6JkZp vp6uX7MLC9vunlCBYDosBh7Ph5/6TKUXurwifh1V1AO58cbGNRa+M6FouVQTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUl1TxXHvvgy69XP5GrLyP8oSx8BMwHwYDVR0j BBgwFoAUtBU9zuh+Ffkqq6wN9nKcml3lz8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWM5YzM5NC1mY2QwLTRiNGItYmIxYS04MjQ3NzBmNDAzNDIvMC9CNDE1M0RDRUU4 N0UxNUY5MkFBQkFDMERGNjcyOUM5QTVERTVDRkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1REU1 Q0ZDQy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1YzljMzk0LWZjZDAtNGI0Yi1i YjFhLTgyNDc3MGY0MDM0Mi8wLzMyMzAzMDMxM2E2NDY2MzYzYTY0MzczMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM4MzAzNzM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9tcAMA0GCSqGSIb3DQEBCwUAA4IBAQA1GFg9TYryqV66zDbSnq5LPLmznXfwR298 6t2x3pOYVGc+BnS7QSuVJjb7n1IipJvdRbUETu/U01kZLXv8kQRGEkGyx0c+JcpL arFXTd2ftdaCEQBcJlSLQDV4yUuUnmpnC0d+kGX1OiNF5rYb82sTcMBiAUfLcnAh k6iMeP1gAg8cuuCj61N936HhcqP7UZonGlLoZL9rkys77ZC/7nDx2Hwwzk8LmfAa AC6yiicB/4TkcH2i4Y7TCl0r8eeGZEVfzw6TAoUcVTaVm4DaYYhdlhOLngN2qIJN Hv5/mBQFGIWKuI0bmyLMqbBTjAT7Lpy95zoU2jfTAcN663hzEsEd -----END CERTIFICATE-----Generated at Tue Apr 22 15:30:58 2025 by rpki-client