$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31343a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a31343a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: OGT1MFKVmDWUPiJ3xSmJmURSBRwT1Z+0vbECamaLm4k= Subject key identifier: 0B:5A:75:5A:F9:BD:C4:18:E8:F0:1B:5B:C6:D5:5F:CA:DA:41:D2:B1 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 45A93F9D414327D1A7268B38554860EB7B01E29B Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31343a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:06 +0000 ROA not before: Thu 08 Jun 2023 02:57:06 +0000 ROA not after: Thu 06 Jun 2024 03:02:06 +0000 asID: 55701 IP address blocks: 2405:b900:14::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a9:3f:9d:41:43:27:d1:a7:26:8b:38:55:48:60:eb:7b:01:e2:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:06 2023 GMT Not After : Jun 6 03:02:06 2024 GMT Subject: CN=0B5A755AF9BDC418E8F01B5BC6D55FCADA41D2B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:31:4a:88:af:b5:e8:19:36:fa:b7:29:32: 6a:50:66:eb:69:95:fa:36:d8:a7:de:9a:50:03:8d: 1f:c0:8c:d0:9e:6b:23:e9:02:cd:d7:94:63:55:d3: b6:ff:a5:0a:bf:50:6f:4a:b9:05:17:23:02:a1:6f: 6d:2c:aa:d4:23:37:a8:63:45:d4:d7:be:8a:b9:f8: 55:51:86:3c:0f:87:51:3c:1f:b6:24:5c:13:ba:fa: 0f:8a:99:03:d8:8c:08:a1:0f:0d:ed:05:32:56:bd: 0f:32:3b:a2:40:c5:07:51:0e:62:d1:3a:db:80:4b: 20:8b:96:04:28:73:81:39:57:2b:e0:85:00:76:7a: 99:db:e8:de:4c:cf:be:2a:5e:e9:96:fd:ff:3d:f0: b9:7f:18:54:01:84:47:2f:74:90:3f:c0:6d:b2:00: 9e:ed:5f:8a:c0:a1:93:5e:90:30:0a:81:4e:af:51: c7:eb:bb:5f:cc:cc:de:c0:af:33:3c:21:bc:0b:b7: 3f:00:1c:f1:b7:95:2b:22:73:51:50:47:3d:1b:f5: 56:94:b8:e0:1f:4f:ad:34:51:25:da:72:61:d3:1b: 33:f5:ad:a6:12:bc:56:94:cc:a4:4d:5d:60:ba:91: 00:03:21:ba:ea:4c:16:f4:3a:22:a3:a7:a6:76:70: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5A:75:5A:F9:BD:C4:18:E8:F0:1B:5B:C6:D5:5F:CA:DA:41:D2:B1 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31343a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:14::/48 Signature Algorithm: sha256WithRSAEncryption 8a:c2:07:70:1a:f1:81:f2:28:1f:eb:72:e7:76:99:05:24:84: a8:ae:bf:50:ba:da:f3:b4:47:d1:18:8a:c9:21:16:91:41:b4: d4:06:82:91:1f:89:19:c7:88:f7:c2:06:d1:49:d5:00:10:d6: b5:0a:52:3e:30:43:73:f8:2e:bd:0a:36:43:47:79:5a:1b:7a: e5:05:f5:d6:96:ce:b0:9f:51:2f:8b:b1:47:97:7b:46:8b:e9: f4:20:79:d3:eb:5c:d5:73:e0:3b:43:31:5c:43:87:75:5b:df: 54:b0:9d:9f:5b:4f:d5:24:de:02:6c:29:1e:91:64:9f:d4:40: 88:80:b8:a3:4f:7b:1e:1f:49:0c:4c:16:b0:77:86:b8:f7:0f: f3:0e:bd:89:b5:ca:d7:84:8d:fc:5f:8a:07:95:8e:99:9c:43: a7:26:be:b5:5e:d9:45:75:c8:61:b2:76:c5:2d:80:e8:ab:b6: 82:4a:b8:b6:ca:40:00:33:7b:37:48:1d:b5:49:94:68:e0:99: b5:23:b1:68:ec:68:c9:9c:ab:60:d3:ee:84:1b:6d:c0:7c:68: e0:7f:5a:c3:58:00:b9:62:03:8d:02:2d:65:cc:db:f5:00:9f: 98:70:68:de:f6:07:67:a1:67:33:4b:c4:a1:47:ba:c0:73:b8: 28:63:58:25 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIURak/nUFDJ9GnJos4VUhg63sB4pswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDZaFw0yNDA2MDYwMzAyMDZaMDMxMTAvBgNV BAMTKDBCNUE3NTVBRjlCREM0MThFOEYwMUI1QkM2RDU1RkNBREE0MUQyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4TFKiK+16Bk2+rcpMmpQZutp lfo22KfemlADjR/AjNCeayPpAs3XlGNV07b/pQq/UG9KuQUXIwKhb20sqtQjN6hj RdTXvoq5+FVRhjwPh1E8H7YkXBO6+g+KmQPYjAihDw3tBTJWvQ8yO6JAxQdRDmLR OtuASyCLlgQoc4E5VyvghQB2epnb6N5Mz74qXumW/f898Ll/GFQBhEcvdJA/wG2y AJ7tX4rAoZNekDAKgU6vUcfru1/MzN7ArzM8IbwLtz8AHPG3lSsic1FQRz0b9VaU uOAfT600USXacmHTGzP1raYSvFaUzKRNXWC6kQADIbrqTBb0OiKjp6Z2cOgrAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUC1p1Wvm9xBjo8BtbxtVfytpB0rEwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzEzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAABQw DQYJKoZIhvcNAQELBQADggEBAIrCB3Aa8YHyKB/rcud2mQUkhKiuv1C62vO0R9EY iskhFpFBtNQGgpEfiRnHiPfCBtFJ1QAQ1rUKUj4wQ3P4Lr0KNkNHeVobeuUF9daW zrCfUS+LsUeXe0aL6fQgedPrXNVz4DtDMVxDh3Vb31SwnZ9bT9Uk3gJsKR6RZJ/U QIiAuKNPex4fSQxMFrB3hrj3D/MOvYm1yteEjfxfigeVjpmcQ6cmvrVe2UV1yGGy dsUtgOirtoJKuLbKQAAzezdIHbVJlGjgmbUjsWjsaMmcq2DT7oQbbcB8aOB/WsNY ALliA40CLWXM2/UAn5hwaN72B2ehZzNLxKFHusBzuChjWCU= -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org