$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa File: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (raw, json) Hash identifier: sckkCjMHs7WsRB95RCqI2G0Z8CclzEEJ3tVAHrA+aMM= Subject key identifier: DF:44:6E:1A:A9:19:4C:61:57:5E:F1:1F:F2:43:01:B7:30:60:A7:63 Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 3160DA8AFCC96A332DB40B8591696E0CAAF85CC2 Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa Signing time: Mon 01 Jul 2024 01:05:20 +0000 ROA not before: Mon 01 Jul 2024 01:00:20 +0000 ROA not after: Mon 30 Jun 2025 01:05:20 +0000 asID: 58476 IP address blocks: 2001:df0:26f::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 13:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:60:da:8a:fc:c9:6a:33:2d:b4:0b:85:91:69:6e:0c:aa:f8:5c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Jul 1 01:00:20 2024 GMT Not After : Jun 30 01:05:20 2025 GMT Subject: CN=DF446E1AA9194C61575EF11FF24301B73060A763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6d:0e:34:6b:89:f7:8f:90:f9:ef:57:53:3f: a8:dc:41:cc:6c:29:c9:ff:67:68:4d:7d:63:58:cf: 31:9e:26:29:35:b3:20:c2:07:02:ff:36:99:1e:f8: f1:eb:93:eb:59:d5:6b:d1:af:6b:f8:aa:ea:82:ac: d4:1a:31:78:43:f9:ce:19:ec:dd:8d:d2:c5:9b:42: 53:f9:7a:c9:a2:e9:18:d5:f8:17:df:13:7e:ab:aa: 63:ee:65:22:7e:4e:f6:4d:3e:7d:c1:a8:a5:3e:46: 63:d3:45:17:27:b8:e3:8a:b2:b6:c5:99:be:d5:29: ec:a3:37:c8:2e:2a:6d:db:b7:c1:3e:40:c4:46:7b: 2a:5d:14:4d:4a:4e:da:8b:40:d6:3f:97:a3:42:25: f3:87:26:58:b7:55:6a:36:04:4c:b2:76:07:b9:34: d9:fa:11:fd:ab:a4:14:54:9f:3e:87:a1:55:bc:5a: 5e:32:f0:5c:f3:92:21:77:55:49:71:bb:c3:dc:64: f3:9f:b1:95:8f:8b:f6:ef:9c:08:f4:10:34:1f:db: 58:fe:8c:25:65:60:e5:4b:35:46:8a:60:4c:9a:b7: cc:a2:ed:f5:4e:89:de:30:e7:69:45:cf:fa:1b:cb: 5d:e1:e1:e6:0d:2f:86:c2:e8:46:b5:bf:80:42:f8: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:44:6E:1A:A9:19:4C:61:57:5E:F1:1F:F2:43:01:B7:30:60:A7:63 X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:26f::/48 Signature Algorithm: sha256WithRSAEncryption 2c:99:d4:c9:08:6b:22:c0:9b:23:67:15:86:fa:a7:c5:c3:4d: 21:13:88:6e:3e:d0:a0:7e:10:23:3f:0d:56:1f:70:87:34:ae: ba:fc:99:b5:1c:d1:bd:c8:c5:af:52:b7:43:54:6a:05:a2:47: ce:92:2b:e2:f3:13:ff:59:e7:f9:41:97:4a:ed:8a:e6:3e:bb: c1:8d:09:96:5b:31:30:fc:bb:f1:07:b9:76:87:25:a9:e1:e7: da:48:f2:8a:52:ec:c1:76:c8:6a:d3:6d:d2:07:9e:be:da:3d: 11:0b:76:b6:ef:a4:5e:ae:cb:be:58:97:4b:93:90:56:26:84: 5a:56:8a:38:be:12:f9:12:f2:59:f4:b4:43:4e:97:de:ce:fa: 2a:8b:33:aa:72:3e:c7:8d:63:20:bf:87:be:31:8b:c5:dc:04: d0:6c:e9:a0:cc:4d:02:83:98:3a:67:bd:85:ae:a6:11:49:8e: 36:fb:43:3a:c4:eb:4e:f0:e1:86:db:e1:3d:07:06:a6:56:11: 95:0f:fd:4b:da:af:6c:88:4d:49:ca:e0:78:fa:9d:d2:44:47: 6c:ba:d9:1e:a7:89:74:ac:ec:65:5c:4f:0f:83:94:90:52:c0: a1:e3:fa:99:57:44:55:15:36:f3:a9:c1:62:cf:57:83:22:6a: d7:cb:bf:1d -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUMWDaivzJajMttAuFkWluDKr4XMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNDA3MDEwMTAwMjBaFw0yNTA2MzAwMTA1MjBaMDMxMTAvBgNV BAMTKERGNDQ2RTFBQTkxOTRDNjE1NzVFRjExRkYyNDMwMUI3MzA2MEE3NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbQ40a4n3j5D571dTP6jcQcxs Kcn/Z2hNfWNYzzGeJik1syDCBwL/Npke+PHrk+tZ1WvRr2v4quqCrNQaMXhD+c4Z 7N2N0sWbQlP5esmi6RjV+BffE36rqmPuZSJ+TvZNPn3BqKU+RmPTRRcnuOOKsrbF mb7VKeyjN8guKm3bt8E+QMRGeypdFE1KTtqLQNY/l6NCJfOHJli3VWo2BEyydge5 NNn6Ef2rpBRUnz6HoVW8Wl4y8FzzkiF3VUlxu8PcZPOfsZWPi/bvnAj0EDQf21j+ jCVlYOVLNUaKYEyat8yi7fVOid4w52lFz/oby13h4eYNL4bC6Ea1v4BC+C1PAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU30RuGqkZTGFXXvEf8kMBtzBgp2MwHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3ZjQ5MDY4LWMwY2EtNGEyMS05 YThhLWVlZDI2ZmNkZDFhYS8wLzMyMzAzMDMxM2E2NDY2MzAzYTMyMzY2NjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNDM3MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3wAm8w DQYJKoZIhvcNAQELBQADggEBACyZ1MkIayLAmyNnFYb6p8XDTSETiG4+0KB+ECM/ DVYfcIc0rrr8mbUc0b3Ixa9St0NUagWiR86SK+LzE/9Z5/lBl0rtiuY+u8GNCZZb MTD8u/EHuXaHJanh59pI8opS7MF2yGrTbdIHnr7aPRELdrbvpF6uy75Yl0uTkFYm hFpWiji+EvkS8ln0tENOl97O+iqLM6pyPseNYyC/h74xi8XcBNBs6aDMTQKDmDpn vYWuphFJjjb7QzrE607w4Ybb4T0HBqZWEZUP/Uvar2yITUnK4Hj6ndJER2y62R6n iXSs7GVcTw+DlJBSwKHj+plXRFUVNvOpwWLPV4MiatfLvx0= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:44 2024 by rpki-client on console-fra.rpki-client.org