$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32393a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a32393a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: kTCi3lgOUr2BXPl2S0Sgt3IGGlGvViEydtdBQ45uGdk= Subject key identifier: 8C:D1:3D:3D:32:8D:62:FF:7D:B7:F5:AC:74:C7:0E:F5:F5:4B:88:E9 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 6496AF3C1257C6798A1638E4440F858B4A7BC760 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32393a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:06 +0000 ROA not before: Thu 08 Jun 2023 02:57:06 +0000 ROA not after: Thu 06 Jun 2024 03:02:06 +0000 asID: 55701 IP address blocks: 2405:b900:29::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:96:af:3c:12:57:c6:79:8a:16:38:e4:44:0f:85:8b:4a:7b:c7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:06 2023 GMT Not After : Jun 6 03:02:06 2024 GMT Subject: CN=8CD13D3D328D62FF7DB7F5AC74C70EF5F54B88E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6a:2c:42:63:43:18:a2:d4:c3:fd:7d:79:7d: 7d:51:0b:c9:10:9c:a5:ac:4a:a9:71:99:6f:64:9c: 53:7d:eb:63:92:0e:c8:c6:a4:ba:25:39:a9:86:4e: a9:ad:c2:54:12:61:bb:e6:fe:fd:f3:a3:35:d7:00: 8b:3d:29:9f:05:5c:f8:a3:57:fb:09:f9:83:f9:b3: a7:bc:cf:b1:9e:8e:6e:b1:ea:b4:62:1e:75:b6:b2: 43:08:0b:2e:76:10:e7:36:e9:8e:85:39:45:60:cf: cf:6b:2b:4d:2c:00:97:bd:3c:5e:81:cf:52:fa:d0: c8:f6:ae:32:44:e8:35:42:6d:c0:b7:42:ab:5d:4d: 60:12:e7:6d:4c:13:8a:f1:cd:4d:6b:c7:67:bd:db: 19:0a:74:2e:a2:c4:53:a6:20:cd:95:ce:52:89:6e: 25:e5:ef:f1:e3:4e:96:a5:cc:51:e0:27:27:ac:aa: 91:a9:84:2b:ac:b2:2b:1d:1a:cc:20:c3:1a:01:ca: a1:78:e6:4f:64:5a:29:b0:a1:c8:84:e7:af:da:31: 49:6a:84:93:1a:56:d5:30:c0:c5:a0:94:1d:ed:c7: 84:d0:f6:4c:74:7e:e3:54:1e:74:c8:9d:8b:f6:d8: 7c:54:8b:eb:c1:ad:b7:9b:72:9c:9b:bc:fc:50:9f: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D1:3D:3D:32:8D:62:FF:7D:B7:F5:AC:74:C7:0E:F5:F5:4B:88:E9 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32393a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:29::/48 Signature Algorithm: sha256WithRSAEncryption bf:0a:b7:80:fe:62:0c:0e:cb:38:ee:ef:0d:30:97:cc:b3:0e: 2f:cb:35:c5:d0:34:94:77:e5:66:75:4f:de:3b:97:41:76:15: 9c:91:a9:b6:59:17:6a:f7:de:99:28:bc:99:83:e0:3b:75:92: b1:b8:f8:1e:b9:df:4b:2a:51:a0:ed:f5:f5:9d:34:5e:2d:60: af:41:11:5f:7c:f2:e9:1f:46:38:1f:e3:2f:57:cc:f2:95:e3: 24:de:10:be:31:13:bc:b9:6a:bc:0a:16:f4:7a:f6:e7:66:d8: 8d:1b:9e:f4:64:93:be:97:9a:fd:49:4b:ef:75:78:79:4b:7f: 8d:ff:cb:bb:6e:53:a2:a6:2a:95:1b:ff:18:3f:19:b6:0f:66: e4:4a:50:22:ad:a8:e6:bc:e4:78:0c:c8:f5:31:65:c4:04:8f: 3d:57:74:8e:29:f5:3c:fd:8c:bf:f2:00:fc:41:b9:73:b2:ee: 91:02:21:9e:7b:7d:f0:a4:18:cb:0f:f3:76:a2:2d:e2:aa:2b: 0a:13:18:71:ab:70:83:8e:de:18:4a:e5:7c:78:8f:6f:92:5b: f4:b2:e9:ff:f6:95:76:e5:d8:6d:60:07:d4:f1:c8:cd:e9:89: 2d:10:06:05:aa:3c:ba:d1:37:dd:7b:67:e1:d4:8c:68:f5:6b: 68:c7:77:e3 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUZJavPBJXxnmKFjjkRA+Fi0p7x2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDZaFw0yNDA2MDYwMzAyMDZaMDMxMTAvBgNV BAMTKDhDRDEzRDNEMzI4RDYyRkY3REI3RjVBQzc0QzcwRUY1RjU0Qjg4RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwaixCY0MYotTD/X15fX1RC8kQ nKWsSqlxmW9knFN962OSDsjGpLolOamGTqmtwlQSYbvm/v3zozXXAIs9KZ8FXPij V/sJ+YP5s6e8z7Gejm6x6rRiHnW2skMICy52EOc26Y6FOUVgz89rK00sAJe9PF6B z1L60Mj2rjJE6DVCbcC3QqtdTWAS521ME4rxzU1rx2e92xkKdC6ixFOmIM2VzlKJ biXl7/HjTpalzFHgJyesqpGphCussisdGswgwxoByqF45k9kWimwociE56/aMUlq hJMaVtUwwMWglB3tx4TQ9kx0fuNUHnTInYv22HxUi+vBrbebcpybvPxQn0P1AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUjNE9PTKNYv99t/WsdMcO9fVLiOkwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzIzOTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAACkw DQYJKoZIhvcNAQELBQADggEBAL8Kt4D+YgwOyzju7w0wl8yzDi/LNcXQNJR35WZ1 T947l0F2FZyRqbZZF2r33pkovJmD4Dt1krG4+B6530sqUaDt9fWdNF4tYK9BEV98 8ukfRjgf4y9XzPKV4yTeEL4xE7y5arwKFvR69udm2I0bnvRkk76Xmv1JS+91eHlL f43/y7tuU6KmKpUb/xg/GbYPZuRKUCKtqOa85HgMyPUxZcQEjz1XdI4p9Tz9jL/y APxBuXOy7pECIZ57ffCkGMsP83aiLeKqKwoTGHGrcIOO3hhK5Xx4j2+SW/Sy6f/2 lXbl2G1gB9TxyM3piS0QBgWqPLrRN917Z+HUjGj1a2jHd+M= -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org