$ rpki-client -vvf repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa File: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (raw, json) Hash identifier: upu1VPzy6o0FN6QglBXq0+VY59NJ9UIpV8oCgyFRNdc= Subject key identifier: 72:54:9C:3D:62:59:7E:89:ED:06:89:ED:85:B8:54:BD:CF:5F:12:E5 Certificate issuer: /CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323 Certificate serial: 28204F35568D153AAC6F1A717D839B138DF53EEB Authority key identifier: 74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa Signing time: Tue 09 Jan 2024 14:01:19 +0000 ROA not before: Tue 09 Jan 2024 13:56:19 +0000 ROA not after: Tue 07 Jan 2025 14:01:19 +0000 asID: 151011 IP address blocks: 2001:df2:e4c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:20:4f:35:56:8d:15:3a:ac:6f:1a:71:7d:83:9b:13:8d:f5:3e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323 Validity Not Before: Jan 9 13:56:19 2024 GMT Not After : Jan 7 14:01:19 2025 GMT Subject: CN=72549C3D62597E89ED0689ED85B854BDCF5F12E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:31:b6:ce:1b:90:42:29:24:29:36:c2:7a: a3:d2:a7:9d:b3:30:eb:82:e4:0e:73:de:da:30:9a: 98:6b:58:79:2b:43:86:54:ae:9b:67:42:20:b2:ce: 42:fc:ff:ba:fa:05:3b:39:dd:68:2f:6c:5e:81:52: 33:62:68:fb:14:d4:df:b4:9a:af:75:31:30:33:4b: 5f:fa:46:8f:fa:f6:40:76:17:1b:18:54:b3:5f:9d: 65:10:b3:56:2c:07:05:c2:a0:30:9a:5e:df:5a:06: 92:1d:fc:46:68:b1:d7:60:32:d1:88:3b:5a:f8:8a: 7b:fd:23:9f:8b:e9:54:13:c5:8d:17:42:0e:ef:2b: 37:2e:d2:3a:43:b8:5b:2f:04:af:9d:31:b5:7e:09: a5:87:2a:f1:59:51:73:6a:f3:61:b3:c3:6c:fc:07: a6:e6:c0:72:d4:78:f0:02:3e:2e:34:86:da:90:ce: a5:97:42:18:b4:7c:5f:64:15:94:08:f5:4e:50:4e: 8b:26:30:60:e8:48:9d:a7:8e:eb:18:2b:95:8c:5c: a4:11:64:5c:03:89:9c:32:f1:00:f1:82:63:b0:19: 90:48:7e:af:f1:05:30:ba:8d:40:8e:5f:0c:6d:2d: 14:fe:fa:c7:2b:e6:15:7f:3c:ba:a7:8d:29:48:75: 96:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:54:9C:3D:62:59:7E:89:ED:06:89:ED:85:B8:54:BD:CF:5F:12:E5 X509v3 Authority Key Identifier: keyid:74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:e4c0::/48 Signature Algorithm: sha256WithRSAEncryption a7:84:52:ed:9b:1f:b3:2f:bc:3f:dd:a3:5d:8a:c8:3d:29:7d: 7d:de:41:c3:56:a0:3c:4c:42:4d:4e:0d:24:9c:81:82:c8:a2: 38:8e:42:5a:e2:cf:3f:e0:10:a2:5e:af:7d:3f:1b:c9:30:c7: b7:92:dc:1d:da:0c:ff:a1:76:dc:2e:b7:ae:19:f6:fa:31:38: ce:22:49:c4:68:5c:c2:4a:b0:ba:0a:98:c9:5e:ed:5d:39:80: b6:86:ac:89:16:28:8d:ae:fa:1c:5b:8c:af:ee:42:b2:0c:d5: ae:c6:ec:bd:a8:e8:56:61:85:61:70:48:48:5f:e6:e0:e2:ad: 78:68:ca:6c:bb:b8:96:1b:d2:76:eb:ad:89:e3:66:c2:c8:4f: 61:f4:a3:93:a7:b1:65:44:4c:3d:a4:f7:f6:4a:27:df:25:f5: c9:96:9f:d8:75:dd:0a:10:41:87:24:b5:8d:54:bd:fa:c6:7a: 8d:9a:a5:44:42:58:88:5b:bf:44:49:0c:11:c2:51:da:3f:3d: fe:5a:42:d5:1f:d9:51:b0:ec:aa:f5:e1:81:05:47:dc:9d:f5: cc:ab:f7:6f:7e:c9:63:41:aa:28:ad:eb:a5:b5:2b:76:99:f2: 88:b9:42:e7:4e:16:f4:14:ed:77:1a:1a:c1:be:69:84:b5:1f: a1:46:f5:df -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKCBPNVaNFTqsbxpxfYObE431PuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5 OEY0MzMyMzAeFw0yNDAxMDkxMzU2MTlaFw0yNTAxMDcxNDAxMTlaMDMxMTAvBgNV BAMTKDcyNTQ5QzNENjI1OTdFODlFRDA2ODlFRDg1Qjg1NEJEQ0Y1RjEyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eTG2zhuQQikkKTbCeqPSp52z MOuC5A5z3towmphrWHkrQ4ZUrptnQiCyzkL8/7r6BTs53WgvbF6BUjNiaPsU1N+0 mq91MTAzS1/6Ro/69kB2FxsYVLNfnWUQs1YsBwXCoDCaXt9aBpId/EZosddgMtGI O1r4inv9I5+L6VQTxY0XQg7vKzcu0jpDuFsvBK+dMbV+CaWHKvFZUXNq82Gzw2z8 B6bmwHLUePACPi40htqQzqWXQhi0fF9kFZQI9U5QTosmMGDoSJ2njusYK5WMXKQR ZFwDiZwy8QDxgmOwGZBIfq/xBTC6jUCOXwxtLRT++scr5hV/PLqnjSlIdZY9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUclScPWJZfontBonthbhUvc9fEuUwHwYDVR0j BBgwFoAUdE+X4d8b1tN+bC6o8CwIhJj0MyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODBkZGU5NC1lNWJlLTRkMjktYmIxMi00NWZiNWMxZDJjNzkvMC83NDRGOTdFMURG MUJENkQzN0U2QzJFQThGMDJDMDg4NDk4RjQzMzIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5OEY0 MzMyMy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4MGRkZTk0LWU1YmUtNGQyOS1i YjEyLTQ1ZmI1YzFkMmM3OS8wLzMyMzAzMDMxM2E2NDY2MzIzYTY1MzQ2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMxMzAzMTMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8uTAMA0GCSqGSIb3DQEBCwUAA4IBAQCnhFLtmx+zL7w/3aNdisg9KX193kHDVqA8 TEJNTg0knIGCyKI4jkJa4s8/4BCiXq99PxvJMMe3ktwd2gz/oXbcLreuGfb6MTjO IknEaFzCSrC6CpjJXu1dOYC2hqyJFiiNrvocW4yv7kKyDNWuxuy9qOhWYYVhcEhI X+bg4q14aMpsu7iWG9J2662J42bCyE9h9KOTp7FlREw9pPf2SiffJfXJlp/Ydd0K EEGHJLWNVL36xnqNmqVEQliIW79ESQwRwlHaPz3+WkLVH9lRsOyq9eGBBUfcnfXM q/dvfsljQaooreultSt2mfKIuULnThb0FO13GhrBvmmEtR+hRvXf -----END CERTIFICATE-----Generated at Mon Nov 25 04:42:07 2024 by rpki-client on console-ams.rpki-client.org