$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32353a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a32353a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: bILMqr5puv6kN0iQzeDsgMEjgJ29eF7BuAd24d9v2kE= Subject key identifier: 97:F4:CA:4E:0F:BE:6B:D5:49:01:9A:AB:A7:F4:25:1E:4D:5E:E4:34 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 3E2104BF76442BA38FF8EA76E565E5CAA7859929 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32353a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:04 +0000 ROA not before: Thu 08 Jun 2023 02:57:04 +0000 ROA not after: Thu 06 Jun 2024 03:02:04 +0000 asID: 55701 IP address blocks: 2405:b900:25::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:21:04:bf:76:44:2b:a3:8f:f8:ea:76:e5:65:e5:ca:a7:85:99:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:04 2023 GMT Not After : Jun 6 03:02:04 2024 GMT Subject: CN=97F4CA4E0FBE6BD549019AABA7F4251E4D5EE434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5c:42:15:73:a8:23:00:4d:61:51:9e:1c:a2: 70:08:c9:dd:24:e5:dc:1f:d0:36:62:0f:af:ce:8a: 93:48:2f:47:a4:34:04:38:4e:74:b8:03:03:d7:4f: 59:b3:cf:7d:f6:b0:ba:1e:53:b6:13:d3:d5:d6:22: c5:54:6c:64:31:ed:cf:a8:71:a9:c4:93:da:c4:a5: 67:1a:72:ec:a1:8f:f1:cd:3f:9b:d8:45:7e:31:4a: 8f:68:ea:ea:86:1e:55:35:e6:5e:35:a7:a1:a1:fd: 85:60:27:35:80:a5:4b:cd:af:be:b7:33:d4:68:ff: 90:70:4a:18:3e:80:86:61:a9:18:2f:0c:9b:bd:c0: f2:ea:e7:b7:06:b7:9b:10:e6:22:10:2e:bb:07:61: 2e:17:33:ed:1b:62:ab:9d:12:39:42:8c:08:73:80: 94:25:b8:8d:4b:05:23:5e:f6:0d:1a:d7:43:e5:0d: ab:59:01:75:e7:47:e6:5b:f0:da:20:9f:95:d8:c8: 22:77:97:44:d3:45:aa:8c:8d:3b:db:02:b5:ab:4f: 60:74:fb:8e:a3:1b:9c:09:40:b6:58:e9:da:9b:b8: d7:be:e9:31:cd:18:2c:60:e8:7c:75:54:89:81:0b: 48:39:7e:18:23:bb:cf:37:fd:b1:cd:34:6b:8e:c7: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F4:CA:4E:0F:BE:6B:D5:49:01:9A:AB:A7:F4:25:1E:4D:5E:E4:34 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32353a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:25::/48 Signature Algorithm: sha256WithRSAEncryption d5:52:2a:a0:b0:6a:81:c9:6b:26:d9:49:92:72:a9:81:52:e0: 67:51:22:8a:34:a6:90:2f:23:b0:d1:83:8f:a1:f6:a7:9a:0c: 3c:6f:68:74:a1:87:c1:7e:19:81:29:e6:e9:df:a1:28:3c:c0: 09:ef:42:4b:81:25:33:bf:b4:57:25:be:a8:80:0a:8c:e2:c5: 60:d5:f7:b8:2d:55:a3:5c:4d:7d:69:aa:41:44:a7:cc:87:14: 6c:79:ec:97:5c:b3:c6:5e:14:a1:25:1c:33:fe:a8:60:cd:b6: 06:d0:85:3e:1c:d1:13:18:6d:cb:72:5c:c1:14:81:c3:70:f3: d0:c1:5f:76:66:cc:13:b0:6c:0e:26:e4:bd:f6:f3:1f:49:ac: 70:64:60:b1:fe:89:16:ec:e3:e7:c9:8e:be:70:fe:64:7b:3d: c9:ad:6d:9c:cb:48:1a:3d:b2:52:14:5b:e3:09:b0:d9:eb:8c: e1:b9:31:9e:5e:e4:37:d0:b4:00:2d:68:2b:c2:61:f3:2d:e9: 7b:b2:e4:03:d1:ad:a9:cc:65:29:cb:91:b9:35:25:0a:12:ea: 00:da:71:0d:47:81:71:bb:b1:48:28:91:f5:70:59:2f:a0:65: 37:bf:62:87:d0:6e:6e:63:38:85:4a:89:49:a3:42:ca:08:12: 5c:47:6d:b3 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUPiEEv3ZEK6OP+Op25WXlyqeFmSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDRaFw0yNDA2MDYwMzAyMDRaMDMxMTAvBgNV BAMTKDk3RjRDQTRFMEZCRTZCRDU0OTAxOUFBQkE3RjQyNTFFNEQ1RUU0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdXEIVc6gjAE1hUZ4conAIyd0k 5dwf0DZiD6/OipNIL0ekNAQ4TnS4AwPXT1mzz332sLoeU7YT09XWIsVUbGQx7c+o canEk9rEpWcacuyhj/HNP5vYRX4xSo9o6uqGHlU15l41p6Gh/YVgJzWApUvNr763 M9Ro/5BwShg+gIZhqRgvDJu9wPLq57cGt5sQ5iIQLrsHYS4XM+0bYqudEjlCjAhz gJQluI1LBSNe9g0a10PlDatZAXXnR+Zb8Nogn5XYyCJ3l0TTRaqMjTvbArWrT2B0 +46jG5wJQLZY6dqbuNe+6THNGCxg6Hx1VImBC0g5fhgju883/bHNNGuOx0rpAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUl/TKTg++a9VJAZqrp/QlHk1e5DQwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzIzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAACUw DQYJKoZIhvcNAQELBQADggEBANVSKqCwaoHJaybZSZJyqYFS4GdRIoo0ppAvI7DR g4+h9qeaDDxvaHShh8F+GYEp5unfoSg8wAnvQkuBJTO/tFclvqiACozixWDV97gt VaNcTX1pqkFEp8yHFGx57Jdcs8ZeFKElHDP+qGDNtgbQhT4c0RMYbctyXMEUgcNw 89DBX3ZmzBOwbA4m5L328x9JrHBkYLH+iRbs4+fJjr5w/mR7PcmtbZzLSBo9slIU W+MJsNnrjOG5MZ5e5DfQtAAtaCvCYfMt6Xuy5APRranMZSnLkbk1JQoS6gDacQ1H gXG7sUgokfVwWS+gZTe/YofQbm5jOIVKiUmjQsoIElxHbbM= -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org