$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33343a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a33343a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: 5jH4OzjgRdY0MnLFcZxlIo3RlOT1yIrb5IOl8wiQE14= Subject key identifier: 2A:EF:14:71:BC:CC:33:BE:80:58:5E:93:A3:EC:B1:D1:15:6F:BA:7A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 046BB07296DFEDDE7B11E5BDAF3F5BF7E2366645 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33343a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:08 +0000 ROA not before: Thu 08 Jun 2023 02:57:08 +0000 ROA not after: Thu 06 Jun 2024 03:02:08 +0000 asID: 55701 IP address blocks: 2405:b900:34::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6b:b0:72:96:df:ed:de:7b:11:e5:bd:af:3f:5b:f7:e2:36:66:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:08 2023 GMT Not After : Jun 6 03:02:08 2024 GMT Subject: CN=2AEF1471BCCC33BE80585E93A3ECB1D1156FBA7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3c:08:50:1e:67:2b:7e:86:27:84:75:6c:70: 0f:b6:47:37:f0:23:22:62:55:30:62:f9:90:2e:f3: 7f:fe:1e:c7:d0:f4:4a:45:ba:c7:e6:e3:e1:9a:d5: 87:61:c0:fa:58:0a:3e:73:df:ca:72:7f:39:c8:f5: 20:3c:e1:45:5b:2e:19:c7:b3:96:5e:12:d5:b6:37: 57:33:ce:26:aa:13:2c:d8:a0:18:25:a8:a4:90:be: 11:ff:8a:47:1e:b7:52:13:28:d0:c3:a3:13:52:08: 74:ae:92:83:9a:f9:5b:d5:da:2c:19:0f:12:6b:68: 29:b9:7a:4b:89:77:31:4b:4c:5c:17:16:95:dc:f3: 66:12:b0:41:f5:de:37:63:6d:b7:80:f4:ab:f5:c8: 5d:e4:58:51:78:47:98:d4:e4:f7:12:5a:17:22:82: 23:b3:5d:01:0d:08:9b:b5:45:97:ac:df:1b:c4:c5: e8:e6:54:f8:52:70:88:91:5f:03:94:51:b4:c5:b8: 38:b6:ba:7f:eb:41:8d:b0:96:90:23:49:21:25:04: 52:42:25:df:06:1f:ec:c5:fd:b5:d0:1f:fa:2c:4b: 84:44:06:8a:82:9a:0c:6a:ef:16:f1:2f:0a:c7:9f: bd:e3:b5:92:5f:43:fe:d8:5f:80:d9:dd:1c:e4:b8: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EF:14:71:BC:CC:33:BE:80:58:5E:93:A3:EC:B1:D1:15:6F:BA:7A X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33343a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:34::/48 Signature Algorithm: sha256WithRSAEncryption 93:0f:71:cf:2b:fb:a9:28:fd:aa:31:9f:7b:2d:23:49:74:b4: c2:c4:03:51:d4:4d:8e:5e:13:9d:54:6e:e2:b2:95:fa:4a:f6: 68:6c:a3:a5:3b:74:60:d4:a3:c1:dd:59:12:f3:e2:ab:8d:78: fa:07:91:46:f7:02:88:91:22:8c:17:b6:40:6b:52:91:cd:d3: 79:1c:5a:26:72:0e:67:c2:3c:20:28:28:92:54:66:65:30:32: d1:6f:4c:35:78:04:c3:ed:a1:f6:05:65:5b:9b:ef:06:09:cc: 00:7d:18:7c:47:0d:0f:fd:06:7c:b3:07:a6:23:d4:19:01:f3: 64:93:67:e0:99:f6:fd:cd:13:5b:2e:8c:97:ca:99:f9:ef:03: 16:05:67:30:82:fb:e7:18:9d:5f:a0:b6:95:b9:3f:ab:f7:38: 60:87:64:85:0d:dd:92:b4:c1:69:16:22:49:4b:29:21:a1:7f: 23:be:2e:32:c2:81:ff:e1:46:c9:4e:ae:d9:fc:57:e1:ef:22: 89:5c:9d:c5:b1:f4:01:ad:23:f1:85:25:a4:c7:6a:64:00:0c: 8a:e9:52:c8:73:6e:85:37:2a:96:08:06:eb:fe:9c:96:ee:e3: bd:2c:80:f7:17:84:7f:bf:26:fe:56:00:d7:97:0b:99:e6:8b: d0:dd:fd:49 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUBGuwcpbf7d57EeW9rz9b9+I2ZkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDhaFw0yNDA2MDYwMzAyMDhaMDMxMTAvBgNV BAMTKDJBRUYxNDcxQkNDQzMzQkU4MDU4NUU5M0EzRUNCMUQxMTU2RkJBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhPAhQHmcrfoYnhHVscA+2Rzfw IyJiVTBi+ZAu83/+HsfQ9EpFusfm4+Ga1YdhwPpYCj5z38pyfznI9SA84UVbLhnH s5ZeEtW2N1czziaqEyzYoBglqKSQvhH/ikcet1ITKNDDoxNSCHSukoOa+VvV2iwZ DxJraCm5ekuJdzFLTFwXFpXc82YSsEH13jdjbbeA9Kv1yF3kWFF4R5jU5PcSWhci giOzXQENCJu1RZes3xvExejmVPhScIiRXwOUUbTFuDi2un/rQY2wlpAjSSElBFJC Jd8GH+zF/bXQH/osS4REBoqCmgxq7xbxLwrHn73jtZJfQ/7YX4DZ3RzkuLPhAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUKu8UcbzMM76AWF6To+yx0RVvunowHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzMzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAADQw DQYJKoZIhvcNAQELBQADggEBAJMPcc8r+6ko/aoxn3stI0l0tMLEA1HUTY5eE51U buKylfpK9mhso6U7dGDUo8HdWRLz4quNePoHkUb3AoiRIowXtkBrUpHN03kcWiZy DmfCPCAoKJJUZmUwMtFvTDV4BMPtofYFZVub7wYJzAB9GHxHDQ/9BnyzB6Yj1BkB 82STZ+CZ9v3NE1sujJfKmfnvAxYFZzCC++cYnV+gtpW5P6v3OGCHZIUN3ZK0wWkW IklLKSGhfyO+LjLCgf/hRslOrtn8V+HvIolcncWx9AGtI/GFJaTHamQADIrpUshz boU3KpYIBuv+nJbu470sgPcXhH+/Jv5WANeXC5nmi9Dd/Uk= -----END CERTIFICATE-----Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org