$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33333a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a33333a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: z9kCm3XDIGrYUonkYE8DMDFxwf2S6EoGBrpUgta/cTE= Subject key identifier: 08:50:52:CC:12:0C:E8:71:3A:7E:98:FE:6F:D1:6D:44:ED:D7:E7:5D Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 1789381FEEFBB24296D06BB9FDF9172BC6F4649B Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33333a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:04 +0000 ROA not before: Thu 08 Jun 2023 02:57:04 +0000 ROA not after: Thu 06 Jun 2024 03:02:04 +0000 asID: 55701 IP address blocks: 2405:b900:33::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:89:38:1f:ee:fb:b2:42:96:d0:6b:b9:fd:f9:17:2b:c6:f4:64:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:04 2023 GMT Not After : Jun 6 03:02:04 2024 GMT Subject: CN=085052CC120CE8713A7E98FE6FD16D44EDD7E75D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:08:f5:cf:dc:07:57:5c:e4:6a:69:e9:38:b5: 33:a9:61:5d:49:3f:29:fa:49:68:a1:bf:75:43:e8: f0:5a:85:49:1a:be:3f:6f:af:77:6a:e2:42:ab:8b: dd:7e:52:94:14:e6:a0:f6:26:c2:fa:e0:0b:bb:89: 80:01:65:54:bd:f4:e2:8e:a3:74:4e:38:c9:fd:51: e6:47:cc:98:73:44:a9:a5:7a:5c:f5:dd:32:e0:f1: e5:de:1b:3d:38:a3:c1:45:35:66:55:43:5e:de:8b: f8:0d:bd:eb:0b:84:0f:a7:5a:56:52:bc:1f:7a:ef: af:3d:52:b3:fb:56:44:ea:51:32:81:3a:0d:15:7a: e8:95:ca:e2:6b:26:b1:49:55:ff:04:c0:26:b8:da: 34:13:63:6f:15:25:7d:31:05:60:b4:ce:65:eb:ff: 45:a6:08:1c:63:9a:71:e2:5e:56:3e:e7:a0:ff:a0: e6:54:4e:9b:8b:e3:ee:ce:98:18:6f:0d:6f:8a:6f: 32:56:99:dc:44:06:8c:94:47:cd:31:ed:be:2c:6f: 04:3d:08:df:a1:93:e0:ee:0c:22:09:8a:48:32:e7: 0b:ee:f6:c0:d7:37:e4:5e:ad:cd:4c:fd:41:84:85: c0:49:9e:99:6c:25:67:08:51:68:8a:81:a8:fa:21: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:50:52:CC:12:0C:E8:71:3A:7E:98:FE:6F:D1:6D:44:ED:D7:E7:5D X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33333a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:33::/48 Signature Algorithm: sha256WithRSAEncryption 7e:9a:bc:4c:34:31:5b:0a:ec:43:14:85:68:8e:ca:73:7e:ea: 57:80:0d:dc:ab:63:e1:25:74:03:ff:a6:4c:39:ce:2b:9a:19: 03:b3:7b:b4:d9:f0:d7:81:50:93:db:26:90:35:ef:ee:a0:f9: b2:83:58:84:cc:53:ba:dc:1d:80:dd:6e:c9:5f:3e:b4:6a:a0: 8b:f5:d4:dd:1b:6a:87:8a:26:ba:57:29:c6:f8:b3:58:f2:ae: 5f:57:f3:fc:d4:e4:79:20:1b:e8:28:f4:be:7a:9d:c9:d1:17: 46:d6:ac:15:c7:00:18:09:e5:1b:fa:44:ba:74:72:fa:18:4a: fd:8f:6a:c5:5a:92:e7:03:79:fd:2f:48:5f:7f:cc:7b:d8:53: 2c:16:04:c1:b5:5c:02:f7:68:32:c9:18:fb:5b:47:79:1c:c6: 5b:9b:08:7b:b4:90:1e:4b:5d:03:ee:a5:55:5a:02:ce:18:03: 8d:28:57:02:88:8d:99:d4:01:23:bf:7b:9c:63:e7:78:79:ef: 0c:3e:55:b5:7c:87:fe:55:a6:8b:9a:68:a1:a5:de:8b:0b:2a: ab:45:1c:0b:ac:49:b2:07:91:e0:f3:0c:a6:7e:d7:31:ed:37: 0e:2c:aa:20:24:dc:b4:3b:84:64:be:10:84:4e:75:31:3d:53: 4d:3e:78:15 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUF4k4H+77skKW0Gu5/fkXK8b0ZJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDRaFw0yNDA2MDYwMzAyMDRaMDMxMTAvBgNV BAMTKDA4NTA1MkNDMTIwQ0U4NzEzQTdFOThGRTZGRDE2RDQ0RUREN0U3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCPXP3AdXXORqaek4tTOpYV1J Pyn6SWihv3VD6PBahUkavj9vr3dq4kKri91+UpQU5qD2JsL64Au7iYABZVS99OKO o3ROOMn9UeZHzJhzRKmlelz13TLg8eXeGz04o8FFNWZVQ17ei/gNvesLhA+nWlZS vB967689UrP7VkTqUTKBOg0VeuiVyuJrJrFJVf8EwCa42jQTY28VJX0xBWC0zmXr /0WmCBxjmnHiXlY+56D/oOZUTpuL4+7OmBhvDW+KbzJWmdxEBoyUR80x7b4sbwQ9 CN+hk+DuDCIJikgy5wvu9sDXN+Rerc1M/UGEhcBJnplsJWcIUWiKgaj6ISlNAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUCFBSzBIM6HE6fpj+b9FtRO3X510wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzMzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAADMw DQYJKoZIhvcNAQELBQADggEBAH6avEw0MVsK7EMUhWiOynN+6leADdyrY+EldAP/ pkw5ziuaGQOze7TZ8NeBUJPbJpA17+6g+bKDWITMU7rcHYDdbslfPrRqoIv11N0b aoeKJrpXKcb4s1jyrl9X8/zU5HkgG+go9L56ncnRF0bWrBXHABgJ5Rv6RLp0cvoY Sv2PasVakucDef0vSF9/zHvYUywWBMG1XAL3aDLJGPtbR3kcxlubCHu0kB5LXQPu pVVaAs4YA40oVwKIjZnUASO/e5xj53h57ww+VbV8h/5VpouaaKGl3osLKqtFHAus SbIHkeDzDKZ+1zHtNw4sqiAk3LQ7hGS+EIROdTE9U00+eBU= -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org