$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a343030303a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a343030303a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: MIQwQGLRGtMjUjVhFk8pne6cyNU2oaOpRgaIVwKN9lc= Subject key identifier: 96:AB:9C:C6:57:69:48:54:EA:E1:B9:95:A3:8F:7E:D5:57:4A:43:FF Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 68ADE2EE9E28F1B2B599AE7B3306C3B487FC63D5 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a343030303a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:09 +0000 ROA not before: Thu 08 Jun 2023 02:57:09 +0000 ROA not after: Thu 06 Jun 2024 03:02:09 +0000 asID: 55701 IP address blocks: 2405:b900:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ad:e2:ee:9e:28:f1:b2:b5:99:ae:7b:33:06:c3:b4:87:fc:63:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:09 2023 GMT Not After : Jun 6 03:02:09 2024 GMT Subject: CN=96AB9CC657694854EAE1B995A38F7ED5574A43FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:57:12:f2:81:39:ea:41:40:18:67:49:51: 09:7c:5f:fb:2f:21:58:ce:32:8e:9a:d8:a1:76:8e: 95:88:20:10:70:1e:31:cf:b9:ea:3e:21:a3:ee:ed: 70:c0:72:b9:9c:0e:9d:ef:d2:5a:39:cb:d0:84:d4: 79:48:ab:7a:0b:f4:c0:ad:bf:f4:1c:b1:6d:99:fb: fd:d5:8a:40:d1:51:0a:35:7c:da:a1:78:01:76:85: 72:b8:39:c2:0d:a5:aa:93:47:d6:85:61:ad:aa:a3: 35:5d:d3:ea:fc:bb:5b:d7:9f:d3:6b:9b:26:14:8d: 43:49:f5:31:af:e8:df:82:92:2e:47:1e:8a:98:b1: ee:8a:85:c4:f5:c8:62:0e:8d:b1:97:d6:d2:dc:5e: 21:d4:1e:d6:4c:aa:19:d6:97:9b:ff:77:38:d3:53: bd:40:88:21:bb:8b:00:9b:5b:e5:d8:89:81:b4:8f: a6:2f:2a:e2:02:fe:7c:6b:ac:e5:32:86:63:52:eb: af:5a:63:4b:86:ea:e6:5a:34:1e:d4:9b:26:e9:7b: 56:3b:63:7e:3b:ea:a9:9a:73:66:19:03:89:4b:fc: 0f:a7:99:88:65:1e:e0:98:99:9c:15:44:cf:36:a8: e5:be:80:67:3a:98:a1:5b:07:da:c9:9e:da:fe:3f: 68:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AB:9C:C6:57:69:48:54:EA:E1:B9:95:A3:8F:7E:D5:57:4A:43:FF X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a343030303a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:4000::/48 Signature Algorithm: sha256WithRSAEncryption a6:b5:99:52:9a:55:e2:0a:e3:bd:8a:d4:69:b3:4f:fd:69:38: 6b:68:d1:eb:5c:ba:58:5f:c8:75:91:c1:0e:4e:13:1d:38:c1: 44:2f:99:66:53:96:45:46:ba:3a:b2:8e:d7:4c:3a:08:cb:1f: ea:19:57:ef:0b:b2:67:c4:e7:dc:b1:5a:a0:19:52:09:04:cb: c6:fa:f5:eb:d6:ad:9f:6c:91:8e:0c:f2:e1:59:7e:a0:6e:35: 61:d1:59:28:50:8a:0c:cd:98:03:ac:a9:58:65:7b:c9:f8:0b: 32:4f:c4:94:5e:c1:cc:be:19:20:fb:64:13:38:c6:9c:10:18: bd:26:28:06:e3:05:c8:3e:ac:ee:9f:24:49:67:69:90:b4:ca: 61:8a:4f:c4:c6:00:54:ee:80:fa:aa:8a:ec:62:97:bc:53:c1: 95:8e:f8:fc:f4:f2:9e:ad:c0:55:ad:f9:64:a9:9d:0c:e7:07: 3c:e6:84:be:ed:65:cd:2f:ef:a1:90:72:45:f0:d9:3d:c3:d6: 96:38:46:47:a3:f9:18:f4:2c:21:da:15:eb:a5:13:ad:e2:7c: 7f:59:85:29:cd:13:a8:2f:2d:5c:72:7e:d3:12:28:36:ee:9a: e8:af:25:b6:96:cc:0e:34:1f:ba:a6:45:6c:8d:c6:e5:7e:b3: 9f:7c:80:27 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUaK3i7p4o8bK1ma57MwbDtIf8Y9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDlaFw0yNDA2MDYwMzAyMDlaMDMxMTAvBgNV BAMTKDk2QUI5Q0M2NTc2OTQ4NTRFQUUxQjk5NUEzOEY3RUQ1NTc0QTQzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobVcS8oE56kFAGGdJUQl8X/sv IVjOMo6a2KF2jpWIIBBwHjHPueo+IaPu7XDAcrmcDp3v0lo5y9CE1HlIq3oL9MCt v/QcsW2Z+/3VikDRUQo1fNqheAF2hXK4OcINpaqTR9aFYa2qozVd0+r8u1vXn9Nr myYUjUNJ9TGv6N+Cki5HHoqYse6KhcT1yGIOjbGX1tLcXiHUHtZMqhnWl5v/dzjT U71AiCG7iwCbW+XYiYG0j6YvKuIC/nxrrOUyhmNS669aY0uG6uZaNB7Umybpe1Y7 Y3476qmac2YZA4lL/A+nmYhlHuCYmZwVRM82qOW+gGc6mKFbB9rJntr+P2gLAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUlqucxldpSFTq4bmVo49+1VdKQ/8wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5 AEAAMA0GCSqGSIb3DQEBCwUAA4IBAQCmtZlSmlXiCuO9itRps0/9aThraNHrXLpY X8h1kcEOThMdOMFEL5lmU5ZFRro6so7XTDoIyx/qGVfvC7JnxOfcsVqgGVIJBMvG +vXr1q2fbJGODPLhWX6gbjVh0VkoUIoMzZgDrKlYZXvJ+AsyT8SUXsHMvhkg+2QT OMacEBi9JigG4wXIPqzunyRJZ2mQtMphik/ExgBU7oD6qorsYpe8U8GVjvj89PKe rcBVrflkqZ0M5wc85oS+7WXNL++hkHJF8Nk9w9aWOEZHo/kY9Cwh2hXrpROt4nx/ WYUpzROoLy1ccn7TEig27proryW2lswONB+6pkVsjcblfrOffIAn -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org