$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34313a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a34313a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: mWkf3kfFjXYmBxgHaVV368uhu8NDxSUow2snT+6tcfc= Subject key identifier: AA:FE:73:E6:CE:5D:6D:E8:EF:17:06:34:B8:54:FF:F3:1C:D3:1B:62 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 291BBC76E48D0AE4BC10F257A4C5DF5FD87EADEB Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34313a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:09 +0000 ROA not before: Thu 08 Jun 2023 02:57:09 +0000 ROA not after: Thu 06 Jun 2024 03:02:09 +0000 asID: 55701 IP address blocks: 2405:b900:41::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1b:bc:76:e4:8d:0a:e4:bc:10:f2:57:a4:c5:df:5f:d8:7e:ad:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:09 2023 GMT Not After : Jun 6 03:02:09 2024 GMT Subject: CN=AAFE73E6CE5D6DE8EF170634B854FFF31CD31B62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:31:ae:b0:0e:69:cc:8f:9b:f9:43:75:0d: cf:3f:35:eb:9a:43:7b:c8:f2:0c:37:4e:58:f4:06: b9:c8:f5:d4:21:31:9b:a5:56:bf:06:55:79:28:36: f9:89:90:14:21:33:d1:64:12:57:1e:04:a9:ce:57: c1:b7:bf:46:b7:8d:39:88:98:cf:ca:37:eb:cd:04: a5:b6:cc:d7:d7:85:da:54:6d:01:ee:b1:a5:02:98: 77:be:f0:b6:5d:b3:78:67:1c:41:d0:0c:c1:9e:ac: d5:a2:89:b0:f8:fd:61:fd:f5:3a:98:5f:2f:ad:fc: 11:18:e9:83:58:75:e8:aa:d1:e4:48:db:d3:24:42: cf:2b:f9:a7:79:46:1b:c4:af:40:a7:d3:24:4f:a5: 75:4e:11:7c:c4:21:5b:78:8d:69:f9:08:1f:9e:c1: 69:b0:75:f3:ad:ca:f1:53:a4:c0:de:40:12:59:58: f5:bc:f1:6c:b4:a0:8f:82:ee:76:c5:fc:6e:23:4d: 2c:1a:97:cf:7e:ad:d0:c7:c3:9f:7b:01:7d:e0:4a: fe:38:f1:32:45:2b:56:b6:51:3e:05:1b:b0:e2:8a: 8b:5d:93:f7:9c:1b:0a:69:71:b3:ea:49:ce:83:49: 34:60:8f:bb:a0:13:ae:b5:67:b6:8f:b3:11:74:3f: 64:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FE:73:E6:CE:5D:6D:E8:EF:17:06:34:B8:54:FF:F3:1C:D3:1B:62 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34313a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:41::/48 Signature Algorithm: sha256WithRSAEncryption 10:a5:19:d5:d3:8a:57:41:bb:41:cd:b5:a3:45:4e:90:ca:aa: 4f:f5:e6:c9:35:a1:0f:45:45:35:03:5a:74:53:a9:d0:07:fd: 99:d3:c6:6d:98:27:7b:de:2f:3f:91:f8:62:4d:ab:2e:83:cc: 70:6e:77:5d:cd:33:16:7f:9c:13:d8:d2:b6:1f:66:d7:30:dc: 75:81:2f:03:6c:01:0b:f5:c3:7c:45:3e:e5:af:94:14:8a:9b: af:4f:03:a2:5d:d4:4e:61:73:68:a3:34:79:c8:98:ba:ed:e5: 91:7f:da:af:58:ce:df:53:e6:95:b4:a1:b7:52:84:86:a2:86: 9f:f3:be:b1:9a:d5:63:14:01:70:c9:8e:d1:ad:b9:f6:6b:d2: 21:04:c0:63:69:c0:69:61:5b:3b:fc:8c:c2:38:23:17:04:bd: 47:a5:80:b7:84:3e:c4:17:61:a4:cf:d7:a8:b8:28:b2:6b:47: c2:15:96:41:07:be:87:6e:ee:70:1e:14:a9:d8:b1:45:cf:95: 65:8f:72:14:c9:74:9d:db:33:13:a5:00:1f:ae:4d:16:de:09: 5a:05:ed:dd:f0:1e:0e:3c:2d:cc:54:33:90:0b:e5:fb:39:da: aa:cd:92:3d:7b:4c:42:44:96:bc:07:ce:52:f2:7d:bb:30:38: 24:fb:c1:47 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUKRu8duSNCuS8EPJXpMXfX9h+reswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDlaFw0yNDA2MDYwMzAyMDlaMDMxMTAvBgNV BAMTKEFBRkU3M0U2Q0U1RDZERThFRjE3MDYzNEI4NTRGRkYzMUNEMzFCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rDGusA5pzI+b+UN1Dc8/Neua Q3vI8gw3Tlj0BrnI9dQhMZulVr8GVXkoNvmJkBQhM9FkElceBKnOV8G3v0a3jTmI mM/KN+vNBKW2zNfXhdpUbQHusaUCmHe+8LZds3hnHEHQDMGerNWiibD4/WH99TqY Xy+t/BEY6YNYdeiq0eRI29MkQs8r+ad5RhvEr0Cn0yRPpXVOEXzEIVt4jWn5CB+e wWmwdfOtyvFTpMDeQBJZWPW88Wy0oI+C7nbF/G4jTSwal89+rdDHw597AX3gSv44 8TJFK1a2UT4FG7Diiotdk/ecGwppcbPqSc6DSTRgj7ugE661Z7aPsxF0P2TPAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUqv5z5s5dbejvFwY0uFT/8xzTG2IwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAEEw DQYJKoZIhvcNAQELBQADggEBABClGdXTildBu0HNtaNFTpDKqk/15sk1oQ9FRTUD WnRTqdAH/ZnTxm2YJ3veLz+R+GJNqy6DzHBud13NMxZ/nBPY0rYfZtcw3HWBLwNs AQv1w3xFPuWvlBSKm69PA6Jd1E5hc2ijNHnImLrt5ZF/2q9Yzt9T5pW0obdShIai hp/zvrGa1WMUAXDJjtGtufZr0iEEwGNpwGlhWzv8jMI4IxcEvUelgLeEPsQXYaTP 16i4KLJrR8IVlkEHvodu7nAeFKnYsUXPlWWPchTJdJ3bMxOlAB+uTRbeCVoF7d3w Hg48LcxUM5AL5fs52qrNkj17TEJElrwHzlLyfbswOCT7wUc= -----END CERTIFICATE-----Generated at Sun Apr 28 15:43:45 2024 by rpki-client on console-fra.rpki-client.org