$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa File: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (raw, json) Hash identifier: PnRI3Uu+JJ725MbQ+YhLq+LyDVoJx2rKHUBvIMC1/UY= Subject key identifier: 44:FB:F2:2C:5B:B9:57:58:3D:2A:04:85:F1:7A:DE:9D:70:B0:BE:72 Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 719AD75D6A605AB03BB18AE907E0E9929BCF518A Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa Signing time: Sat 05 Aug 2023 07:01:49 +0000 ROA not before: Sat 05 Aug 2023 06:56:49 +0000 ROA not after: Sat 03 Aug 2024 07:01:49 +0000 asID: 137338 IP address blocks: 2001:df4:bd00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9a:d7:5d:6a:60:5a:b0:3b:b1:8a:e9:07:e0:e9:92:9b:cf:51:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Aug 5 06:56:49 2023 GMT Not After : Aug 3 07:01:49 2024 GMT Subject: CN=44FBF22C5BB957583D2A0485F17ADE9D70B0BE72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:ff:26:7f:e3:ef:c8:c7:e7:de:58:d7:a5: 16:4b:33:32:93:04:4c:cc:c4:c5:4a:fd:79:9a:6a: ec:77:08:8b:6e:e0:28:d1:69:55:29:6f:c9:7d:86: fe:98:6c:de:33:ec:c7:da:bb:2c:96:fe:70:a3:02: c9:65:6b:7c:8d:1d:c4:6e:af:af:87:09:7f:1c:1e: 26:79:1a:35:bb:a4:a5:94:72:1f:91:8c:ab:ff:df: 2f:e8:be:81:a3:16:e2:eb:9f:3b:56:89:b0:06:b0: 84:a4:ec:20:71:bf:fc:29:77:5f:f2:49:79:cf:51: fc:9f:3b:53:63:9b:a6:2b:b9:0a:7c:61:67:05:75: f5:14:82:8d:89:b6:ef:8c:37:01:cd:9e:d0:b0:cf: ce:59:ed:4f:5b:f9:b0:ed:2f:7b:6d:65:7b:bc:c7: 6f:dc:f8:fa:7d:6a:de:75:24:a0:33:53:d9:09:b5: 1e:34:70:e9:c2:54:3e:7d:d5:96:50:a3:ec:c6:71: d0:33:9b:c2:cf:e0:7b:8e:a4:6a:91:32:67:2b:32: 60:f8:21:e0:41:ba:c4:ef:4b:ef:c3:6e:26:63:e6: 84:f1:f6:b5:e1:61:2a:1b:ea:07:09:66:04:43:b9: 14:f4:a0:af:d1:b8:b9:c0:db:89:ea:20:42:a4:22: 17:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FB:F2:2C:5B:B9:57:58:3D:2A:04:85:F1:7A:DE:9D:70:B0:BE:72 X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 7b:98:bc:8f:17:37:5e:28:c0:7a:e7:d1:c8:cd:6f:01:0e:cb: ab:ba:b0:96:31:5c:b2:2b:e0:3c:93:82:ee:91:ba:54:03:00: 3d:1d:f2:d6:5a:70:5c:f5:af:d3:e0:a9:e8:40:9b:0c:7a:73: 90:15:9e:a2:9e:d7:d6:3b:bb:f5:a1:68:4f:11:24:b2:a9:1b: 59:19:e2:1e:af:69:cf:11:50:3c:d2:34:e8:d5:a9:5b:29:02: 78:41:b7:1b:e8:fd:c4:97:de:c3:84:13:f2:bc:22:2c:aa:e4: 07:91:40:04:09:59:ca:cc:4b:2b:f5:25:13:d0:26:7f:66:f2: 5e:5f:3a:ed:b7:99:29:ef:32:a7:a2:c8:24:0f:6b:6b:e6:71: 42:d5:92:97:ea:b7:eb:72:60:ce:73:89:fe:57:cc:cc:a6:db: 12:d5:5f:06:08:0a:88:df:1b:e0:f0:e2:43:05:a1:c9:83:1e: aa:2f:21:18:ab:94:71:d2:ad:09:87:1e:98:a0:82:b0:ca:68: 42:37:34:35:e3:21:ea:53:02:1d:ee:39:1e:18:fa:41:f7:27: dc:6f:f8:27:ac:50:f6:3a:26:1b:d7:65:2d:e1:18:ae:7e:ef: 4f:12:f0:96:a1:67:f5:52:95:a1:30:fb:3c:65:af:b1:4c:85: a4:ea:0d:35 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcZrXXWpgWrA7sYrpB+DpkpvPUYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yMzA4MDUwNjU2NDlaFw0yNDA4MDMwNzAxNDlaMDMxMTAvBgNV BAMTKDQ0RkJGMjJDNUJCOTU3NTgzRDJBMDQ4NUYxN0FERTlENzBCMEJFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNif8mf+PvyMfn3ljXpRZLMzKT BEzMxMVK/Xmaaux3CItu4CjRaVUpb8l9hv6YbN4z7MfauyyW/nCjAslla3yNHcRu r6+HCX8cHiZ5GjW7pKWUch+RjKv/3y/ovoGjFuLrnztWibAGsISk7CBxv/wpd1/y SXnPUfyfO1Njm6YruQp8YWcFdfUUgo2Jtu+MNwHNntCwz85Z7U9b+bDtL3ttZXu8 x2/c+Pp9at51JKAzU9kJtR40cOnCVD591ZZQo+zGcdAzm8LP4HuOpGqRMmcrMmD4 IeBBusTvS+/DbiZj5oTx9rXhYSob6gcJZgRDuRT0oK/RuLnA24nqIEKkIheVAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURPvyLFu5V1g9KgSF8XrenXCwvnIwHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyZDZkMGRmLWMyMWUtNDkxYy1i MTE2LTRhMWQ5YTJjNzRiZS8wLzMyMzAzMDMxM2E2NDY2MzQzYTYyNjQzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM3MzMzMzM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9L0AMA0GCSqGSIb3DQEBCwUAA4IBAQB7mLyPFzdeKMB659HIzW8BDsururCWMVyy K+A8k4LukbpUAwA9HfLWWnBc9a/T4KnoQJsMenOQFZ6intfWO7v1oWhPESSyqRtZ GeIer2nPEVA80jTo1albKQJ4Qbcb6P3El97DhBPyvCIsquQHkUAECVnKzEsr9SUT 0CZ/ZvJeXzrtt5kp7zKnosgkD2tr5nFC1ZKX6rfrcmDOc4n+V8zMptsS1V8GCAqI 3xvg8OJDBaHJgx6qLyEYq5Rx0q0Jhx6YoIKwymhCNzQ14yHqUwId7jkeGPpB9yfc b/gnrFD2OiYb12Ut4Riufu9PEvCWoWf1UpWhMPs8Za+xTIWk6g01 -----END CERTIFICATE-----Generated at Sun Jun 2 08:36:55 2024 by rpki-client on console-fra.rpki-client.org