$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a323030303a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a323030303a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: R0lhja1EybKbTV5eqMf64udQw+UN6ZR8/ECunPVM9P8= Subject key identifier: EF:5C:88:5A:BA:53:7E:17:07:51:44:FC:21:AA:2C:82:34:55:12:F6 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 0469E81133C9BE7C6FB8AF436D79A1CAC05FB455 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a323030303a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:07 +0000 ROA not before: Thu 08 Jun 2023 02:57:07 +0000 ROA not after: Thu 06 Jun 2024 03:02:07 +0000 asID: 55701 IP address blocks: 2405:b900:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:69:e8:11:33:c9:be:7c:6f:b8:af:43:6d:79:a1:ca:c0:5f:b4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:07 2023 GMT Not After : Jun 6 03:02:07 2024 GMT Subject: CN=EF5C885ABA537E17075144FC21AA2C82345512F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:81:b9:c6:48:7e:f0:18:e6:5f:d5:f5:83:0a: 98:32:0f:48:43:12:4c:ac:14:2a:5e:96:9a:24:74: cb:a6:65:07:78:60:3f:96:0d:46:26:3b:86:62:51: 7b:dd:6f:6a:db:42:12:64:28:41:9b:d2:06:a7:76: bd:0f:1a:89:f7:91:14:fd:ac:81:1a:95:b1:e9:99: 32:ca:c5:c7:40:bd:2c:fa:13:3a:b0:90:68:ff:1e: 53:37:ec:8b:a2:98:9f:77:4c:67:d4:34:13:49:ab: b2:df:b6:12:75:bd:ea:2f:fd:2c:ac:03:79:4a:f2: f2:5f:2c:32:18:96:96:86:54:c8:42:4b:f8:cf:10: 58:7b:cf:cc:9b:b5:a7:0b:b6:4c:ed:28:89:79:fb: 22:f4:01:9e:db:09:8e:7d:23:c4:ef:ae:ca:71:b6: cf:a8:1d:6b:f1:7a:d5:bb:ac:08:91:6f:d0:b5:b0: 75:2e:31:46:ae:d4:b3:de:48:78:3d:17:1c:33:bd: 1e:76:54:1a:63:f8:25:af:68:bc:4a:11:40:12:83: c0:63:ff:7c:af:87:47:eb:e6:bf:d1:3f:e1:c0:d5: 8e:ae:96:7f:c5:ef:3e:b5:6f:69:a0:2f:57:05:17: 87:df:3e:c2:4c:70:a5:e4:1a:6d:a3:41:f6:5b:da: 38:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5C:88:5A:BA:53:7E:17:07:51:44:FC:21:AA:2C:82:34:55:12:F6 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a323030303a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:2000::/48 Signature Algorithm: sha256WithRSAEncryption 28:48:56:a9:5d:fa:cf:5a:81:bb:27:c1:a5:8c:ee:16:06:6f: 08:94:fc:f1:c1:16:02:f2:52:d1:20:87:da:74:30:39:e5:09: b8:b2:a2:3e:0d:df:d8:66:cd:40:28:3b:0f:fa:2d:e4:25:49: 94:27:8f:38:44:01:9a:b2:a5:69:fa:7c:b9:82:1e:3e:93:13: 6c:ac:7f:f3:e4:83:a7:d4:9f:73:7e:c8:19:d8:14:c1:2d:d3: f5:28:51:88:6f:b8:bb:84:db:8d:7c:05:5c:2e:bb:4d:6c:98: 6e:56:b6:60:1c:09:64:dd:6f:5c:b2:96:b1:f4:86:a5:8b:ea: e9:0d:d7:f4:98:a4:1e:89:e3:e8:dd:7b:1f:cb:6d:76:d7:84: e5:87:1d:bc:82:3d:26:0e:e6:9b:0c:2f:1e:ae:a8:89:7f:67: 33:44:93:42:a5:97:5f:2f:d8:9a:21:0d:f0:99:4a:64:8a:e9: 90:87:24:64:28:1c:80:5b:b3:0b:7e:7f:38:49:50:cb:45:4f: 9b:31:9a:f7:44:c6:bc:01:fa:d8:76:4c:19:f2:98:03:a6:d8: a0:67:1a:72:b8:25:49:ae:dd:31:cb:12:fa:2b:7e:83:0a:c1: 96:92:2e:d1:0a:d3:5d:26:e9:d8:af:50:b4:3a:eb:c5:26:a5: 27:da:92:e5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBGnoETPJvnxvuK9DbXmhysBftFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDdaFw0yNDA2MDYwMzAyMDdaMDMxMTAvBgNV BAMTKEVGNUM4ODVBQkE1MzdFMTcwNzUxNDRGQzIxQUEyQzgyMzQ1NTEyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkgbnGSH7wGOZf1fWDCpgyD0hD EkysFCpelpokdMumZQd4YD+WDUYmO4ZiUXvdb2rbQhJkKEGb0gandr0PGon3kRT9 rIEalbHpmTLKxcdAvSz6EzqwkGj/HlM37IuimJ93TGfUNBNJq7LfthJ1veov/Sys A3lK8vJfLDIYlpaGVMhCS/jPEFh7z8ybtacLtkztKIl5+yL0AZ7bCY59I8Tvrspx ts+oHWvxetW7rAiRb9C1sHUuMUau1LPeSHg9FxwzvR52VBpj+CWvaLxKEUASg8Bj /3yvh0fr5r/RP+HA1Y6uln/F7z61b2mgL1cFF4ffPsJMcKXkGm2jQfZb2jiZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU71yIWrpTfhcHUUT8IaosgjRVEvYwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzIzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5 ACAAMA0GCSqGSIb3DQEBCwUAA4IBAQAoSFapXfrPWoG7J8GljO4WBm8IlPzxwRYC 8lLRIIfadDA55Qm4sqI+Dd/YZs1AKDsP+i3kJUmUJ484RAGasqVp+ny5gh4+kxNs rH/z5IOn1J9zfsgZ2BTBLdP1KFGIb7i7hNuNfAVcLrtNbJhuVrZgHAlk3W9cspax 9Iali+rpDdf0mKQeiePo3Xsfy21214Tlhx28gj0mDuabDC8erqiJf2czRJNCpZdf L9iaIQ3wmUpkiumQhyRkKByAW7MLfn84SVDLRU+bMZr3RMa8AfrYdkwZ8pgDptig ZxpyuCVJrt0xyxL6K36DCsGWki7RCtNdJunYr1C0OuvFJqUn2pLl -----END CERTIFICATE-----Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org