$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34333a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a34333a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: 5rXUMVtmzF1a7dFRkZX4ygzTKLEh9OzWb2z64XG+gqw= Subject key identifier: 10:26:AE:89:1B:22:DF:4A:E0:A7:74:29:FE:54:0A:EA:F3:FD:CE:D9 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 3FDED5655E02BF14075268029C9A7105182479E6 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34333a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:08 +0000 ROA not before: Thu 08 Jun 2023 02:57:08 +0000 ROA not after: Thu 06 Jun 2024 03:02:08 +0000 asID: 55701 IP address blocks: 2405:b900:43::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:de:d5:65:5e:02:bf:14:07:52:68:02:9c:9a:71:05:18:24:79:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:08 2023 GMT Not After : Jun 6 03:02:08 2024 GMT Subject: CN=1026AE891B22DF4AE0A77429FE540AEAF3FDCED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:70:82:e9:75:c9:18:c4:34:92:be:09:e2: 8e:47:be:8a:33:b1:6f:7e:bc:e6:2d:1d:b6:f7:1c: 62:d6:04:f0:bb:55:6e:ef:60:80:21:c2:ac:54:98: 74:b7:07:6a:32:9b:99:4e:f2:d3:ec:65:7c:21:1e: cb:63:c9:74:2b:f7:db:60:53:93:89:f1:47:19:f7: af:56:ec:1a:e8:60:7e:9b:45:f2:2a:00:b9:80:33: da:01:60:72:2c:53:55:30:4d:ad:ea:72:77:d5:ba: ef:36:22:98:09:f8:b3:b8:bc:79:45:6b:de:a4:f0: 1e:7b:13:90:4e:79:23:61:2d:a4:f9:ff:ff:79:38: 95:d8:b5:18:9b:2f:fa:af:11:11:95:ad:49:31:60: 47:70:b7:85:07:35:aa:3e:9d:31:e3:0a:c0:c5:e8: 44:05:93:6b:6b:cd:13:16:7c:6a:7d:8f:5f:63:65: 6f:a7:3e:a4:bf:2a:78:33:13:a3:96:dd:94:3f:55: 18:05:c4:9d:53:15:9f:62:d0:07:1c:ef:12:76:80: 39:2e:86:1b:be:1c:d7:1d:33:73:1b:fc:bb:56:59: 3d:06:b7:8b:90:2c:62:8e:a6:3e:66:f5:5c:b1:c1: f8:06:dd:84:3e:60:79:87:aa:ba:5e:01:87:f7:75: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:26:AE:89:1B:22:DF:4A:E0:A7:74:29:FE:54:0A:EA:F3:FD:CE:D9 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34333a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:43::/48 Signature Algorithm: sha256WithRSAEncryption c4:5b:a1:ef:97:a2:f6:86:70:33:9b:c2:4c:df:dd:bd:af:a8: 00:a3:af:98:3c:b3:7a:f5:b9:79:35:27:be:d6:01:6d:94:f5: b4:aa:3a:d1:7b:19:a4:e3:5b:8d:0e:be:cb:98:d3:46:78:2b: 93:7f:ee:45:8b:7c:5e:9a:9e:be:da:9a:fe:89:17:b0:e6:43: 7f:cc:32:f5:48:72:e5:82:e0:97:e6:0d:58:aa:44:5d:e1:48: ee:77:e6:c1:99:18:40:20:5f:a4:63:a7:99:b3:1f:8a:0c:fd: 96:23:d3:1e:06:fd:ca:14:98:06:57:cb:84:15:fa:19:92:0f: 7d:b4:89:b1:ec:e9:6d:00:5a:88:11:b2:93:5e:34:17:1f:ac: 7f:db:43:75:4d:cd:30:c4:d8:15:00:9f:7b:d5:1c:d0:6f:31: 08:47:94:60:31:17:7f:9a:41:a1:bc:e1:f8:2e:44:e1:23:00: 4e:07:ca:35:09:16:db:e5:8f:94:0c:8c:48:59:5c:fe:63:91: a7:ac:d9:4f:3d:4f:30:5d:6b:5c:3d:f5:08:ee:27:5a:52:48: e3:f4:0d:6a:4e:c0:b8:ff:3f:6a:f5:77:43:68:c4:2e:2c:b7: 9e:00:59:2c:3e:3e:98:15:13:80:44:8f:b6:aa:76:27:45:a3: 3d:f9:a8:5e -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUP97VZV4CvxQHUmgCnJpxBRgkeeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDhaFw0yNDA2MDYwMzAyMDhaMDMxMTAvBgNV BAMTKDEwMjZBRTg5MUIyMkRGNEFFMEE3NzQyOUZFNTQwQUVBRjNGRENFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rXCC6XXJGMQ0kr4J4o5Hvooz sW9+vOYtHbb3HGLWBPC7VW7vYIAhwqxUmHS3B2oym5lO8tPsZXwhHstjyXQr99tg U5OJ8UcZ969W7BroYH6bRfIqALmAM9oBYHIsU1UwTa3qcnfVuu82IpgJ+LO4vHlF a96k8B57E5BOeSNhLaT5//95OJXYtRibL/qvERGVrUkxYEdwt4UHNao+nTHjCsDF 6EQFk2trzRMWfGp9j19jZW+nPqS/KngzE6OW3ZQ/VRgFxJ1TFZ9i0Acc7xJ2gDku hhu+HNcdM3Mb/LtWWT0Gt4uQLGKOpj5m9VyxwfgG3YQ+YHmHqrpeAYf3ddThAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUECauiRsi30rgp3Qp/lQK6vP9ztkwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAEMw DQYJKoZIhvcNAQELBQADggEBAMRboe+XovaGcDObwkzf3b2vqACjr5g8s3r1uXk1 J77WAW2U9bSqOtF7GaTjW40OvsuY00Z4K5N/7kWLfF6anr7amv6JF7DmQ3/MMvVI cuWC4JfmDViqRF3hSO535sGZGEAgX6Rjp5mzH4oM/ZYj0x4G/coUmAZXy4QV+hmS D320ibHs6W0AWogRspNeNBcfrH/bQ3VNzTDE2BUAn3vVHNBvMQhHlGAxF3+aQaG8 4fguROEjAE4HyjUJFtvlj5QMjEhZXP5jkaes2U89TzBda1w99QjuJ1pSSOP0DWpO wLj/P2r1d0NoxC4st54AWSw+PpgVE4BEj7aqdidFoz35qF4= -----END CERTIFICATE-----Generated at Sun Apr 28 15:43:45 2024 by rpki-client on console-fra.rpki-client.org