$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33313a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a33313a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: fPQO5cnqM8gf9F8pbVXoJsNqJlk7XhwMCJUGg3f1iOY= Subject key identifier: 52:D0:B0:76:E4:0C:1C:AD:57:71:9C:62:E4:9C:9A:19:76:F3:E8:2F Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 06626B199C7CCEE671C77E8E48F674B657AB6EA9 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33313a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:03 +0000 ROA not before: Thu 08 Jun 2023 02:57:03 +0000 ROA not after: Thu 06 Jun 2024 03:02:03 +0000 asID: 55701 IP address blocks: 2405:b900:31::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:62:6b:19:9c:7c:ce:e6:71:c7:7e:8e:48:f6:74:b6:57:ab:6e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:03 2023 GMT Not After : Jun 6 03:02:03 2024 GMT Subject: CN=52D0B076E40C1CAD57719C62E49C9A1976F3E82F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:1e:cf:e8:05:a5:f0:69:ee:1a:1c:8d:3e: 86:54:2b:ea:f9:56:44:07:b1:b9:17:ce:be:d9:b4: 6e:35:8b:33:d9:46:d3:4e:13:94:6d:37:b5:4b:70: 34:be:b5:8c:62:8a:0d:cc:3a:2b:53:e5:6b:7d:f0: 7c:5d:db:e0:6e:ae:24:51:ba:54:47:6e:92:db:0a: 78:1f:91:b1:b4:29:88:b2:5f:2f:f5:9f:94:f6:fb: 37:e8:bb:8a:78:eb:44:f3:10:f9:3f:92:71:30:2a: 9e:62:18:fc:e4:a1:f1:56:80:e3:29:ac:94:54:b7: 1e:f8:51:c5:32:c6:05:d1:09:10:89:43:98:5c:7c: e0:12:4f:3d:b3:74:a4:bd:94:87:d7:a9:75:33:e5: 8d:cc:da:0e:c9:fe:21:73:bb:f7:f3:68:65:a0:60: 26:96:41:92:05:2b:1e:f6:07:be:84:13:aa:9a:56: 43:76:c2:c7:14:83:da:27:9f:c9:29:c6:d2:fc:9b: bb:d7:e4:70:6c:e3:f1:ae:9c:c1:9e:13:78:7a:b9: cd:c2:1f:0c:7b:ff:21:ab:0f:ee:b0:2e:b8:8f:e8: 77:09:65:ed:2a:b7:54:0e:46:20:1d:a5:2f:34:f2: 16:5c:11:d0:90:ba:38:2c:61:a4:21:c3:7f:14:de: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D0:B0:76:E4:0C:1C:AD:57:71:9C:62:E4:9C:9A:19:76:F3:E8:2F X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33313a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:31::/48 Signature Algorithm: sha256WithRSAEncryption 27:63:e6:05:79:c4:05:96:f4:05:49:16:af:71:40:62:64:69: bf:cf:8a:64:b9:e9:22:ba:c0:46:1d:a2:77:e0:b5:79:be:9a: 50:92:7b:c1:8a:ea:d2:4a:22:72:5a:10:de:7d:d6:ca:df:40: 48:1b:3a:8b:1b:3a:3c:94:c4:e4:1f:e6:f1:7d:99:30:7f:ef: 98:ae:85:db:63:83:99:35:59:1b:04:1c:ae:b5:07:90:14:9a: 3b:06:3e:7b:c5:07:f2:e1:4d:79:5d:a7:83:d9:9e:79:b3:0d: 50:69:65:90:79:fb:01:ea:e0:7f:bb:fc:8e:d0:7f:49:69:a7: bf:05:fb:cd:d9:75:52:59:84:98:ae:bb:5c:9a:79:5d:0d:2f: db:3c:45:08:c7:5e:3e:8e:43:31:a9:ed:f6:0f:2d:2b:e6:81: 20:0a:8c:ce:fb:65:98:c0:05:0b:6d:8f:5a:b4:f7:0b:ba:3d: b1:5f:3c:73:fb:58:38:75:c3:b1:5b:6c:cb:49:6a:8b:15:80: 55:6e:dc:f9:92:e9:0c:fb:61:8b:ab:55:58:6e:43:5a:7f:60: 07:e5:1e:53:d3:ab:ac:bf:01:62:8b:41:7a:9d:0f:99:2c:6e: da:6a:cd:92:8a:d5:1c:7a:9d:44:fb:cc:4d:bc:70:d8:3a:05: 6a:f9:9b:5e -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUBmJrGZx8zuZxx36OSPZ0tlerbqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDNaFw0yNDA2MDYwMzAyMDNaMDMxMTAvBgNV BAMTKDUyRDBCMDc2RTQwQzFDQUQ1NzcxOUM2MkU0OUM5QTE5NzZGM0U4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNR7P6AWl8GnuGhyNPoZUK+r5 VkQHsbkXzr7ZtG41izPZRtNOE5RtN7VLcDS+tYxiig3MOitT5Wt98Hxd2+BuriRR ulRHbpLbCngfkbG0KYiyXy/1n5T2+zfou4p460TzEPk/knEwKp5iGPzkofFWgOMp rJRUtx74UcUyxgXRCRCJQ5hcfOASTz2zdKS9lIfXqXUz5Y3M2g7J/iFzu/fzaGWg YCaWQZIFKx72B76EE6qaVkN2wscUg9onn8kpxtL8m7vX5HBs4/GunMGeE3h6uc3C Hwx7/yGrD+6wLriP6HcJZe0qt1QORiAdpS808hZcEdCQujgsYaQhw38U3vgFAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUUtCwduQMHK1XcZxi5JyaGXbz6C8wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzMzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAADEw DQYJKoZIhvcNAQELBQADggEBACdj5gV5xAWW9AVJFq9xQGJkab/PimS56SK6wEYd onfgtXm+mlCSe8GK6tJKInJaEN591srfQEgbOosbOjyUxOQf5vF9mTB/75iuhdtj g5k1WRsEHK61B5AUmjsGPnvFB/LhTXldp4PZnnmzDVBpZZB5+wHq4H+7/I7Qf0lp p78F+83ZdVJZhJiuu1yaeV0NL9s8RQjHXj6OQzGp7fYPLSvmgSAKjM77ZZjABQtt j1q09wu6PbFfPHP7WDh1w7FbbMtJaosVgFVu3PmS6Qz7YYurVVhuQ1p/YAflHlPT q6y/AWKLQXqdD5ksbtpqzZKK1Rx6nUT7zE28cNg6BWr5m14= -----END CERTIFICATE-----Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org