$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a323a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a323a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: WGZ4NZAg8XSRZLFBy40/hHAsudxYwDH21VBVVCRa5Qg= Subject key identifier: D9:04:7E:EB:9B:AB:3B:6F:37:4D:C7:BB:8F:9C:2F:8A:BF:8B:67:80 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 5795E63CBC6843A8B2E80AA3A703933738590094 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a323a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:11 +0000 ROA not before: Thu 08 Jun 2023 02:57:11 +0000 ROA not after: Thu 06 Jun 2024 03:02:11 +0000 asID: 55701 IP address blocks: 2405:b900:2::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:95:e6:3c:bc:68:43:a8:b2:e8:0a:a3:a7:03:93:37:38:59:00:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:11 2023 GMT Not After : Jun 6 03:02:11 2024 GMT Subject: CN=D9047EEB9BAB3B6F374DC7BB8F9C2F8ABF8B6780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:eb:b2:67:78:ed:b1:01:3d:fb:ca:08:50: 9a:be:e5:56:d3:bb:5e:71:73:50:94:c8:0d:ac:8a: fc:e4:7b:c3:76:e7:41:27:56:e5:64:ed:64:6f:80: 15:83:6a:2b:f9:72:9f:74:5b:15:3a:3f:d9:6e:bf: 56:08:56:e5:f0:4c:92:5e:e9:5c:b0:88:17:ad:8b: ca:0d:16:7d:73:92:03:4a:73:cf:7f:6a:a3:be:2f: 08:26:58:ec:fa:52:19:80:86:cb:d4:27:b7:25:fe: 59:5f:37:0b:be:63:da:a0:01:4c:46:27:46:76:f1: dc:04:29:a9:a3:03:54:f7:39:de:48:6d:d7:cc:9b: 58:03:a4:2c:16:34:a4:9d:e9:80:07:80:d4:79:dd: 1d:37:af:c1:eb:b6:8a:27:ef:f0:5e:8f:5a:37:08: d8:69:2b:e2:93:d7:a6:58:a9:5a:bf:c3:eb:12:de: 55:a0:c4:ba:e4:03:6c:03:7a:e5:c1:09:27:ea:a5: db:eb:d3:fc:7b:75:43:0a:ee:b7:b3:8e:25:02:a9: 25:9c:d6:ba:6c:f0:c6:b4:ec:c8:f8:bd:cc:46:4c: e1:70:ba:98:3c:43:38:ef:08:c8:15:9b:c0:54:42: 99:79:ac:d8:2e:15:ff:60:6b:29:00:de:29:61:39: 95:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:04:7E:EB:9B:AB:3B:6F:37:4D:C7:BB:8F:9C:2F:8A:BF:8B:67:80 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a323a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:2::/48 Signature Algorithm: sha256WithRSAEncryption 9f:b0:53:0d:72:ed:60:eb:e7:f6:fe:05:eb:be:a0:58:88:db: 5f:bd:98:05:aa:d7:86:e7:3e:ad:bd:60:61:0e:48:7f:70:60: 3e:9d:88:ae:df:36:51:cd:e9:a8:95:1e:f8:30:3f:62:c5:14: 91:08:83:f5:1d:78:f8:6d:ec:38:e6:ed:d4:bc:80:e8:d4:60: 20:94:d5:ef:f3:25:69:01:ad:d7:c7:7e:21:d1:9a:8a:c3:7e: e4:fc:c6:49:94:11:ea:63:8a:bf:13:c5:fb:93:0a:a6:b3:1e: 81:33:d0:d7:02:b5:60:e7:e5:98:84:84:0a:42:1c:a5:b0:53: 8c:04:68:c0:81:a7:de:14:ce:71:74:17:5a:c3:ad:b0:40:85: 3d:54:2b:e8:26:a0:fb:c4:79:69:3a:19:44:fc:a1:74:d2:27: 76:e1:df:35:32:f6:88:8d:52:d3:14:34:d4:81:ce:b6:74:22: 98:d0:6c:cf:0a:52:05:7e:fb:84:8a:14:67:0d:80:e5:b5:65: d3:ac:d4:e9:34:70:fd:95:44:95:02:e4:e0:54:af:08:4c:c2: 08:b7:02:43:10:8e:26:a9:02:dd:7e:75:97:e4:83:a4:3c:09: 59:1b:3a:51:53:b4:ff:3b:b0:61:1a:1f:80:c6:75:24:c3:8f: 63:21:fb:13 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUV5XmPLxoQ6iy6AqjpwOTNzhZAJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MTFaFw0yNDA2MDYwMzAyMTFaMDMxMTAvBgNV BAMTKEQ5MDQ3RUVCOUJBQjNCNkYzNzREQzdCQjhGOUMyRjhBQkY4QjY3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTOuyZ3jtsQE9+8oIUJq+5VbT u15xc1CUyA2sivzke8N250EnVuVk7WRvgBWDaiv5cp90WxU6P9luv1YIVuXwTJJe 6VywiBeti8oNFn1zkgNKc89/aqO+LwgmWOz6UhmAhsvUJ7cl/llfNwu+Y9qgAUxG J0Z28dwEKamjA1T3Od5IbdfMm1gDpCwWNKSd6YAHgNR53R03r8Hrtoon7/Bej1o3 CNhpK+KT16ZYqVq/w+sS3lWgxLrkA2wDeuXBCSfqpdvr0/x7dUMK7rezjiUCqSWc 1rps8Ma07Mj4vcxGTOFwupg8QzjvCMgVm8BUQpl5rNguFf9gaykA3ilhOZWpAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU2QR+65urO283Tce7j5wvir+LZ4AwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5AAACMA0G CSqGSIb3DQEBCwUAA4IBAQCfsFMNcu1g6+f2/gXrvqBYiNtfvZgFqteG5z6tvWBh Dkh/cGA+nYiu3zZRzemolR74MD9ixRSRCIP1HXj4bew45u3UvIDo1GAglNXv8yVp Aa3Xx34h0ZqKw37k/MZJlBHqY4q/E8X7kwqmsx6BM9DXArVg5+WYhIQKQhylsFOM BGjAgafeFM5xdBdaw62wQIU9VCvoJqD7xHlpOhlE/KF00id24d81MvaIjVLTFDTU gc62dCKY0GzPClIFfvuEihRnDYDltWXTrNTpNHD9lUSVAuTgVK8ITMIItwJDEI4m qQLdfnWX5IOkPAlZGzpRU7T/O7BhGh+AxnUkw49jIfsT -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org