$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31393a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a31393a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: J552VjLw7C8i63X85Y+7lPuSvmpRBjj8quOyZBfJpoY= Subject key identifier: 09:09:0C:59:24:C4:3D:99:1C:F6:9A:72:1D:4B:10:3C:F8:65:D4:52 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 46074EB4D646BEF03A107DCD26AC48F66A97BE97 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31393a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:11 +0000 ROA not before: Thu 08 Jun 2023 02:57:11 +0000 ROA not after: Thu 06 Jun 2024 03:02:11 +0000 asID: 55701 IP address blocks: 2405:b900:19::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:07:4e:b4:d6:46:be:f0:3a:10:7d:cd:26:ac:48:f6:6a:97:be:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:11 2023 GMT Not After : Jun 6 03:02:11 2024 GMT Subject: CN=09090C5924C43D991CF69A721D4B103CF865D452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:aa:6e:da:ef:39:89:ad:12:57:a7:92:4c:1e: 07:78:90:d7:fc:df:67:09:8e:e1:7f:d1:db:21:68: 40:46:45:25:c8:52:81:ec:3a:ae:64:01:9e:54:24: 26:b9:76:12:24:d8:81:94:97:8f:ce:ec:19:2b:7f: 5d:23:bd:d5:55:90:b8:e7:60:58:71:dd:63:6b:af: a1:83:26:f0:be:95:f3:26:f0:c2:06:a3:1a:5f:60: 40:59:e3:93:34:35:57:13:61:2e:16:a5:73:07:72: 37:14:4c:a5:e3:86:3c:10:ec:97:4d:c1:52:89:f9: 7c:b8:39:b2:83:c7:1f:e9:fa:e8:92:43:41:e1:0c: 9a:60:33:17:4f:1d:e9:23:fe:0e:f7:e1:34:6c:9f: 76:ea:2b:13:27:81:b1:59:a9:5d:ea:f9:86:1b:54: 57:9b:73:4a:ec:10:45:87:8d:81:dc:0f:46:2b:35: ed:f4:46:da:ac:7f:3f:19:b9:53:8e:aa:33:06:7a: 0b:fb:ab:05:48:dd:e3:0e:03:50:c5:c6:0d:bf:e2: 44:43:64:71:68:51:db:bf:51:83:46:17:44:cd:32: 1d:e8:2e:8d:3f:65:ac:bb:5b:47:93:12:10:dd:0c: b6:07:6c:8f:6f:14:d3:4e:03:66:2a:8f:2b:11:6f: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:09:0C:59:24:C4:3D:99:1C:F6:9A:72:1D:4B:10:3C:F8:65:D4:52 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31393a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:19::/48 Signature Algorithm: sha256WithRSAEncryption 5b:0c:1f:70:ef:73:f1:ea:18:a7:aa:c6:6b:ad:2b:82:2e:a0: 36:f9:82:b4:ed:0a:c2:34:70:29:30:37:31:12:7d:67:32:d8: 55:c2:89:ca:f4:2a:db:e9:63:70:df:9c:5b:9f:fd:e6:b1:ba: 69:71:f0:8e:8a:20:28:c1:89:5d:f7:ef:e0:cf:ce:d4:8c:fc: aa:bb:04:28:49:be:f3:5c:33:c3:f6:17:5f:ae:ec:da:9e:dc: 6e:c6:f9:92:db:50:ef:e0:21:68:37:b8:94:dd:6e:2c:80:5f: e7:d9:2b:f5:b0:8e:20:ef:6f:f7:56:ed:4e:ab:69:c3:b9:1a: c1:2e:59:9a:07:ce:15:57:a6:c7:f7:b2:9e:8a:22:20:9f:c0: a2:91:31:b5:5b:49:35:35:e0:1e:35:0b:c7:21:cf:33:f7:c5: 80:3b:0b:f3:31:6d:9e:a9:fe:67:8f:bc:16:88:59:a6:e0:8b: 28:f8:bf:34:1f:37:17:ea:b7:3f:05:77:53:41:88:50:3f:0e: b8:d5:88:42:2a:39:ac:4f:55:8b:7a:00:e2:2a:53:46:0c:5a: 46:de:aa:75:f6:23:ab:6d:ff:19:47:30:7d:4a:14:ab:64:df: d6:3b:59:9a:71:67:7d:78:96:1e:12:7d:07:2a:f1:7a:f2:fc: e6:db:b1:68 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIURgdOtNZGvvA6EH3NJqxI9mqXvpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MTFaFw0yNDA2MDYwMzAyMTFaMDMxMTAvBgNV BAMTKDA5MDkwQzU5MjRDNDNEOTkxQ0Y2OUE3MjFENEIxMDNDRjg2NUQ0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqm7a7zmJrRJXp5JMHgd4kNf8 32cJjuF/0dshaEBGRSXIUoHsOq5kAZ5UJCa5dhIk2IGUl4/O7Bkrf10jvdVVkLjn YFhx3WNrr6GDJvC+lfMm8MIGoxpfYEBZ45M0NVcTYS4WpXMHcjcUTKXjhjwQ7JdN wVKJ+Xy4ObKDxx/p+uiSQ0HhDJpgMxdPHekj/g734TRsn3bqKxMngbFZqV3q+YYb VFebc0rsEEWHjYHcD0YrNe30Rtqsfz8ZuVOOqjMGegv7qwVI3eMOA1DFxg2/4kRD ZHFoUdu/UYNGF0TNMh3oLo0/Zay7W0eTEhDdDLYHbI9vFNNOA2YqjysRb8lfAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUCQkMWSTEPZkc9ppyHUsQPPhl1FIwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzEzOTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAABkw DQYJKoZIhvcNAQELBQADggEBAFsMH3Dvc/HqGKeqxmutK4IuoDb5grTtCsI0cCkw NzESfWcy2FXCicr0KtvpY3DfnFuf/eaxumlx8I6KICjBiV337+DPztSM/Kq7BChJ vvNcM8P2F1+u7Nqe3G7G+ZLbUO/gIWg3uJTdbiyAX+fZK/WwjiDvb/dW7U6racO5 GsEuWZoHzhVXpsf3sp6KIiCfwKKRMbVbSTU14B41C8chzzP3xYA7C/MxbZ6p/meP vBaIWabgiyj4vzQfNxfqtz8Fd1NBiFA/DrjViEIqOaxPVYt6AOIqU0YMWkbeqnX2 I6tt/xlHMH1KFKtk39Y7WZpxZ314lh4SfQcq8Xry/ObbsWg= -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org