$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31383a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a31383a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: 0ZsN+rJexQBj/xv6on3R5eOOPc62yTE8geY6fUvYt7k= Subject key identifier: 2E:74:97:DC:8E:1E:CC:2F:24:58:8C:70:EF:98:2B:78:33:F5:4B:9C Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 1A27CC8DF4D8060B914CEE1FD7E0FC1459C65DEE Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31383a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:02 +0000 ROA not before: Thu 08 Jun 2023 02:57:02 +0000 ROA not after: Thu 06 Jun 2024 03:02:02 +0000 asID: 55701 IP address blocks: 2405:b900:18::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:27:cc:8d:f4:d8:06:0b:91:4c:ee:1f:d7:e0:fc:14:59:c6:5d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:02 2023 GMT Not After : Jun 6 03:02:02 2024 GMT Subject: CN=2E7497DC8E1ECC2F24588C70EF982B7833F54B9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:b3:bf:8a:46:a5:2a:5a:df:ae:a2:cd:b4: 31:c6:a6:cc:71:9f:63:a0:5a:6a:33:f9:8f:78:97: 2e:9a:46:50:75:9f:64:3f:4c:e4:38:7d:9b:09:03: 13:99:98:a8:94:5b:3b:60:d9:46:6c:fc:52:fa:46: 9c:07:e4:5a:5d:00:0e:58:6c:94:f0:13:0c:34:ce: 9b:12:42:e5:66:aa:f8:34:1c:cc:fe:d1:c9:39:d7: 8a:74:6d:8b:c6:48:b5:f2:cd:4c:e1:c5:fa:a2:54: d0:5b:f1:f7:25:6f:7a:ef:b5:1c:23:df:52:c7:f7: b9:a0:5f:ff:97:9b:fc:7a:6a:25:67:f8:b2:c5:40: 7a:55:c7:74:ae:c1:b8:ec:f4:7b:5b:ec:60:ad:ee: e5:cd:f9:b0:bd:47:e7:60:8b:5e:ed:46:20:d5:c1: 3b:d2:b3:fc:68:26:34:30:a6:61:be:5a:34:89:e3: 12:04:5d:14:c7:7d:ec:7b:e5:50:26:3e:d1:27:a2: 3d:75:ef:4c:83:d9:22:1a:bb:0a:9d:cd:05:a8:69: 7d:47:75:e3:44:4a:82:a6:65:a6:cb:36:94:f8:d0: 15:5b:dd:d5:d6:31:6d:9e:f3:8b:58:1d:7a:3d:60: e5:14:31:73:70:9e:a9:24:4c:a5:a6:dd:e3:c3:c7: 12:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:74:97:DC:8E:1E:CC:2F:24:58:8C:70:EF:98:2B:78:33:F5:4B:9C X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31383a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:18::/48 Signature Algorithm: sha256WithRSAEncryption 24:8d:f2:2a:1a:e6:83:6a:80:66:43:cc:ae:64:39:71:39:ef: ff:c8:96:77:c4:31:c8:75:ca:72:46:9c:fc:43:3d:45:7d:82: 6b:00:e0:01:47:e5:41:47:e6:1e:d4:07:20:94:ed:aa:0b:9b: ea:d2:8d:fb:b0:1e:3e:94:20:f4:3c:1e:eb:90:40:5d:34:90: 91:f7:87:63:7f:0a:b9:86:30:03:56:cc:58:2a:54:10:19:0c: 81:e5:e0:d8:a6:8b:46:db:ea:d7:90:10:2e:4c:b4:a6:9a:ec: ac:98:12:bd:d5:fb:89:52:07:12:a2:a3:92:0a:33:96:e9:41: 22:fa:b6:44:67:4c:ca:f6:a8:ad:1d:ab:4f:97:c8:c2:6c:62: c6:e5:1e:20:07:41:fe:34:5e:f3:94:0f:03:d7:72:5d:35:8f: f1:e1:bc:e6:53:9b:95:f7:3e:6f:c3:55:67:08:af:e2:fc:49: af:0e:3d:c3:cc:43:bb:ac:c1:fd:20:de:0e:9a:c7:f5:12:4c: a3:76:58:1d:21:df:e6:ff:a2:26:d8:bc:9e:f7:ee:b7:20:17: a5:e6:ef:a6:54:69:ba:03:0e:08:42:b1:c6:bb:95:dc:3b:c3: e9:e8:b6:34:a9:e4:e5:b6:1d:de:6d:6e:48:14:a9:ef:1d:ad: 89:7b:a5:8a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUGifMjfTYBguRTO4f1+D8FFnGXe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDJaFw0yNDA2MDYwMzAyMDJaMDMxMTAvBgNV BAMTKDJFNzQ5N0RDOEUxRUNDMkYyNDU4OEM3MEVGOTgyQjc4MzNGNTRCOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOwbO/ikalKlrfrqLNtDHGpsxx n2OgWmoz+Y94ly6aRlB1n2Q/TOQ4fZsJAxOZmKiUWztg2UZs/FL6RpwH5FpdAA5Y bJTwEww0zpsSQuVmqvg0HMz+0ck514p0bYvGSLXyzUzhxfqiVNBb8fclb3rvtRwj 31LH97mgX/+Xm/x6aiVn+LLFQHpVx3Suwbjs9Htb7GCt7uXN+bC9R+dgi17tRiDV wTvSs/xoJjQwpmG+WjSJ4xIEXRTHfex75VAmPtEnoj1170yD2SIauwqdzQWoaX1H deNESoKmZabLNpT40BVb3dXWMW2e84tYHXo9YOUUMXNwnqkkTKWm3ePDxxL5AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQULnSX3I4ezC8kWIxw75greDP1S5wwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzEzODNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAABgw DQYJKoZIhvcNAQELBQADggEBACSN8ioa5oNqgGZDzK5kOXE57//IlnfEMch1ynJG nPxDPUV9gmsA4AFH5UFH5h7UByCU7aoLm+rSjfuwHj6UIPQ8HuuQQF00kJH3h2N/ CrmGMANWzFgqVBAZDIHl4Nimi0bb6teQEC5MtKaa7KyYEr3V+4lSBxKio5IKM5bp QSL6tkRnTMr2qK0dq0+XyMJsYsblHiAHQf40XvOUDwPXcl01j/HhvOZTm5X3Pm/D VWcIr+L8Sa8OPcPMQ7uswf0g3g6ax/USTKN2WB0h3+b/oibYvJ737rcgF6Xm76ZU aboDDghCsca7ldw7w+notjSp5OW2Hd5tbkgUqe8drYl7pYo= -----END CERTIFICATE-----Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org