$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa File: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (raw, json) Hash identifier: qqCe6NIeY5wOKnmmaXo6AjpaN3wuW5Sv2eZDOjhNZNE= Subject key identifier: C9:5B:D9:ED:74:29:3E:95:A3:27:D9:38:92:8B:26:A9:1F:1F:9D:98 Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Certificate serial: 2BCCB146E36AED92DC93F84599C9609AF79A2C0D Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa Signing time: Tue 09 Apr 2024 13:00:01 +0000 ROA not before: Tue 09 Apr 2024 12:55:01 +0000 ROA not after: Tue 08 Apr 2025 13:00:01 +0000 asID: 137323 IP address blocks: 2001:df4:9100::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:cc:b1:46:e3:6a:ed:92:dc:93:f8:45:99:c9:60:9a:f7:9a:2c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Validity Not Before: Apr 9 12:55:01 2024 GMT Not After : Apr 8 13:00:01 2025 GMT Subject: CN=C95BD9ED74293E95A327D938928B26A91F1F9D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a2:c1:9e:f5:03:9e:b6:19:e3:20:92:7b:ae: cb:61:1d:99:a7:67:6a:b3:2c:d5:10:6c:f8:0e:ac: 89:ea:37:07:94:7c:e3:15:1f:be:59:4a:c8:d8:b7: 7f:1b:db:64:79:d6:41:20:2f:c4:5f:bd:d2:1c:2c: 04:59:1e:66:ea:39:dc:0a:90:f0:f0:3e:a8:59:91: 1d:88:64:7a:dc:0f:c0:4c:84:cb:51:a4:17:86:a4: 8c:90:e2:23:c9:78:e9:5f:3a:4d:ae:36:11:de:25: 5e:57:7a:5d:f9:ad:78:aa:a3:20:5f:97:ad:d3:93: 20:74:6f:4b:9e:72:74:5a:ed:85:c6:dc:d3:12:e6: c1:4c:2b:1e:ee:f6:b5:a3:74:3b:d0:7e:82:b3:6c: 54:3c:ea:c4:eb:85:b1:d0:c4:ab:92:22:b6:28:91: 88:c8:38:e2:b8:fc:cc:77:51:ee:ca:97:38:0e:e1: 8e:43:ba:36:e0:cf:dd:b1:a9:99:d0:61:fe:bb:96: 58:81:2d:88:68:5b:0d:db:51:b8:7c:cd:07:4b:d4: 1e:9d:46:cb:38:17:f0:d1:5e:38:46:e0:c0:ec:35: b7:7c:cf:bf:8e:55:a5:98:31:b7:31:77:3c:9d:fb: 7f:bd:c3:8b:76:bf:c0:f6:9f:89:8e:5a:51:de:98: cb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5B:D9:ED:74:29:3E:95:A3:27:D9:38:92:8B:26:A9:1F:1F:9D:98 X509v3 Authority Key Identifier: keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:9100::/48 Signature Algorithm: sha256WithRSAEncryption 4e:01:50:71:54:dc:c0:ae:d4:98:1b:31:64:dc:59:8e:a7:39: 00:1d:cc:5b:64:a8:33:c1:81:c5:d9:3b:87:8e:0d:f7:3e:32: 7a:9d:9a:e3:99:a8:9b:9c:1c:9c:bc:a0:18:29:12:cb:7b:86: b9:17:ee:74:67:fb:6c:61:f9:40:ea:e7:bf:f7:74:10:ee:63: 3f:55:d2:83:aa:d8:81:d3:d4:52:58:48:b3:74:be:95:7c:f7: 99:f2:07:45:dd:b8:a7:cd:f2:d9:fb:1d:2a:51:3f:19:78:0f: 8c:e9:39:e4:ba:fc:49:3b:d3:be:94:a6:e3:c1:e0:02:21:34: a6:00:36:35:1f:44:19:bf:81:a2:f8:46:f4:65:55:1c:a7:6d: b9:eb:07:ad:8b:ce:40:c1:7f:72:c3:c6:7e:29:e3:58:47:26: 02:19:13:51:50:bd:a3:65:13:f0:8b:5e:5d:31:e9:58:d6:b3: ee:13:85:ad:0e:6e:9f:6b:7a:26:67:36:e0:20:2b:0a:c0:82: 88:11:de:e3:b7:8a:7b:54:aa:f0:a6:1d:75:18:35:aa:ab:28: cd:e5:e6:94:17:47:ab:b5:ed:28:9a:3e:b4:eb:db:08:0d:aa: aa:b9:1b:6a:5e:c0:fd:64:25:e4:52:6b:1b:25:b8:d9:d9:b9: e0:b0:0c:f4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUK8yxRuNq7ZLck/hFmclgmveaLA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFB Q0YwRjMwRjAeFw0yNDA0MDkxMjU1MDFaFw0yNTA0MDgxMzAwMDFaMDMxMTAvBgNV BAMTKEM5NUJEOUVENzQyOTNFOTVBMzI3RDkzODkyOEIyNkE5MUYxRjlEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnosGe9QOethnjIJJ7rsthHZmn Z2qzLNUQbPgOrInqNweUfOMVH75ZSsjYt38b22R51kEgL8RfvdIcLARZHmbqOdwK kPDwPqhZkR2IZHrcD8BMhMtRpBeGpIyQ4iPJeOlfOk2uNhHeJV5Xel35rXiqoyBf l63TkyB0b0uecnRa7YXG3NMS5sFMKx7u9rWjdDvQfoKzbFQ86sTrhbHQxKuSIrYo kYjIOOK4/Mx3Ue7KlzgO4Y5Dujbgz92xqZnQYf67lliBLYhoWw3bUbh8zQdL1B6d Rss4F/DRXjhG4MDsNbd8z7+OVaWYMbcxdzyd+3+9w4t2v8D2n4mOWlHemMuPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUyVvZ7XQpPpWjJ9k4kosmqR8fnZgwHwYDVR0j BBgwFoAU3Pz+ToGX/6+5pXkgvUDcwazw8w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWFmMTQ0Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9EQ0ZDRkU0RTgx OTdGRkFGQjlBNTc5MjBCRDQwRENDMUFDRjBGMzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFBQ0Yw RjMwRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxYWYxNDRiLWI5MmUtNGZmZi1i NjQxLWU0NmZkZGU4YzZkZi8wLzMyMzAzMDMxM2E2NDY2MzQzYTM5MzEzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM3MzMzMjMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9JEAMA0GCSqGSIb3DQEBCwUAA4IBAQBOAVBxVNzArtSYGzFk3FmOpzkAHcxbZKgz wYHF2TuHjg33PjJ6nZrjmaibnBycvKAYKRLLe4a5F+50Z/tsYflA6ue/93QQ7mM/ VdKDqtiB09RSWEizdL6VfPeZ8gdF3binzfLZ+x0qUT8ZeA+M6TnkuvxJO9O+lKbj weACITSmADY1H0QZv4Gi+Eb0ZVUcp2256weti85AwX9yw8Z+KeNYRyYCGRNRUL2j ZRPwi15dMelY1rPuE4WtDm6fa3omZzbgICsKwIKIEd7jt4p7VKrwph11GDWqqyjN 5eaUF0erte0omj6069sIDaqquRtqXsD9ZCXkUmsbJbjZ2bngsAz0 -----END CERTIFICATE-----Generated at Sun Jun 23 10:11:54 2024 by rpki-client on console-ams.rpki-client.org