$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa File: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (raw, json) Hash identifier: J55kQHMO+Zd8tUd1x/DC1ZrPlyNBx1LNMyMME0jdVQw= Subject key identifier: 8B:8A:51:AE:6F:F0:5F:F1:7C:91:69:30:F1:A4:F6:BC:65:33:32:C8 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 7F3D76FB06501AD7A83B61CF14AA514E84F18A9E Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa Signing time: Fri 05 Jul 2024 01:33:09 +0000 ROA not before: Fri 05 Jul 2024 01:28:09 +0000 ROA not after: Fri 04 Jul 2025 01:33:09 +0000 asID: 152790 IP address blocks: 2001:df3:d3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3d:76:fb:06:50:1a:d7:a8:3b:61:cf:14:aa:51:4e:84:f1:8a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Jul 5 01:28:09 2024 GMT Not After : Jul 4 01:33:09 2025 GMT Subject: CN=8B8A51AE6FF05FF17C916930F1A4F6BC653332C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:6d:84:ef:ac:8e:9c:94:3d:3f:24:f1:73: 9d:a1:31:6a:a0:35:ea:fa:21:f2:c8:77:99:22:dd: 4d:ab:a9:82:55:4b:f7:ce:87:3c:0e:cc:46:a3:6f: c3:0d:e0:5a:50:d2:be:9f:51:ea:d3:42:ad:dc:5f: ea:7f:e3:50:5d:d1:06:6a:c9:10:39:49:a5:02:ec: bd:3b:b7:9b:a9:b1:d7:12:cb:bf:0b:fd:08:11:af: 75:df:3f:6d:8c:04:78:65:bf:f7:ab:ad:46:e2:2c: 6d:55:21:38:b1:33:4d:d5:0d:d3:c3:ab:6d:8e:e7: 5b:f7:22:40:a7:b1:e0:bd:0d:66:86:6f:ef:52:93: 9c:22:4b:ac:fd:11:19:10:35:45:fb:9d:7c:d7:13: 49:73:57:c2:01:51:92:a0:cb:52:64:25:91:b2:33: 1b:ff:e5:7d:d1:1e:ad:34:50:b0:7e:d0:96:fe:32: 88:14:83:70:cc:43:bb:16:f3:92:d7:6c:57:ca:21: 62:3b:13:b1:1c:b4:62:0a:69:8d:c0:98:22:8b:6a: 48:3e:d5:47:66:ab:d6:f6:b2:d1:85:c5:49:0d:14: 02:35:69:54:84:44:fa:c5:63:58:79:5e:32:fe:0c: 2d:b6:b0:8b:43:5e:93:c7:c7:99:7d:f2:3e:90:2e: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8A:51:AE:6F:F0:5F:F1:7C:91:69:30:F1:A4:F6:BC:65:33:32:C8 X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:d3c0::/48 Signature Algorithm: sha256WithRSAEncryption 72:c6:86:4b:15:b6:c5:b6:2d:9e:c2:62:9e:55:a5:c7:bb:9c: e0:12:c2:16:38:60:23:9c:76:86:0d:09:ac:92:52:3b:59:90: e8:a9:00:ed:31:a2:37:10:eb:1b:2a:5b:f3:ac:40:34:4e:1a: 6c:48:f5:19:dc:87:21:95:16:a5:45:b7:95:e7:b9:c3:98:29: 75:3f:c5:e9:00:12:5f:5d:f5:88:ef:4c:56:3e:fd:31:f6:89: c9:ad:21:7b:90:34:fb:67:e7:46:17:3d:0d:fa:22:3f:7b:7f: e7:cf:98:09:2a:71:eb:36:4b:1b:c2:d0:8b:82:3c:68:50:f4: 50:d2:c5:2e:b5:66:ec:38:8b:2b:36:dd:95:02:bf:b6:45:23: 65:49:d0:40:0f:81:e5:19:f0:62:44:52:1b:8f:71:a6:d8:f9: db:8f:45:17:0f:a7:60:2b:91:d0:23:58:8e:ad:1c:a8:45:06: ae:43:48:26:d0:2a:cd:12:85:67:b9:f5:75:01:18:71:82:32: 11:38:02:ee:4c:0a:c4:2b:c1:96:7f:04:e0:32:38:9b:e6:e4: 55:fa:e5:c0:95:6c:d0:5e:ea:13:f6:15:1d:6d:74:20:f7:cd: f2:f7:db:1e:07:b9:0c:fd:25:1c:c7:45:7a:41:17:4c:6a:92: 8d:25:16:eb -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUfz12+wZQGteoO2HPFKpRToTxip4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNDA3MDUwMTI4MDlaFw0yNTA3MDQwMTMzMDlaMDMxMTAvBgNV BAMTKDhCOEE1MUFFNkZGMDVGRjE3QzkxNjkzMEYxQTRGNkJDNjUzMzMyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyIW2E76yOnJQ9PyTxc52hMWqg Ner6IfLId5ki3U2rqYJVS/fOhzwOzEajb8MN4FpQ0r6fUerTQq3cX+p/41Bd0QZq yRA5SaUC7L07t5upsdcSy78L/QgRr3XfP22MBHhlv/errUbiLG1VITixM03VDdPD q22O51v3IkCnseC9DWaGb+9Sk5wiS6z9ERkQNUX7nXzXE0lzV8IBUZKgy1JkJZGy Mxv/5X3RHq00ULB+0Jb+MogUg3DMQ7sW85LXbFfKIWI7E7EctGIKaY3AmCKLakg+ 1Udmq9b2stGFxUkNFAI1aVSERPrFY1h5XjL+DC22sItDXpPHx5l98j6QLso9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUi4pRrm/wX/F8kWkw8aT2vGUzMsgwHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiYjVmYTRhLWJlYTYtNDY0Zi1i NDA5LTExZDlhMzc2MWE2Yy8xLzMyMzAzMDMxM2E2NDY2MzMzYTY0MzM2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzczOTMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 89PAMA0GCSqGSIb3DQEBCwUAA4IBAQByxoZLFbbFti2ewmKeVaXHu5zgEsIWOGAj nHaGDQmsklI7WZDoqQDtMaI3EOsbKlvzrEA0ThpsSPUZ3IchlRalRbeV57nDmCl1 P8XpABJfXfWI70xWPv0x9onJrSF7kDT7Z+dGFz0N+iI/e3/nz5gJKnHrNksbwtCL gjxoUPRQ0sUutWbsOIsrNt2VAr+2RSNlSdBAD4HlGfBiRFIbj3Gm2Pnbj0UXD6dg K5HQI1iOrRyoRQauQ0gm0CrNEoVnufV1ARhxgjIROALuTArEK8GWfwTgMjib5uRV +uXAlWzQXuoT9hUdbXQg983y99seB7kM/SUcx0V6QRdMapKNJRbr -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:57 2024 by rpki-client on console-ams.rpki-client.org