$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34353a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a34353a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: ijfq5n/1hINMIIwbHhJhgiN4RGg7XflcpDwBc0Zqynw= Subject key identifier: 20:9F:7F:23:CC:4C:CA:D0:49:3D:FE:18:39:8A:15:64:D5:F0:BF:CA Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 1E452C3C76F4C525DCE0C9930260CA267F5DA97B Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34353a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:09 +0000 ROA not before: Thu 08 Jun 2023 02:57:09 +0000 ROA not after: Thu 06 Jun 2024 03:02:09 +0000 asID: 55701 IP address blocks: 2405:b900:45::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:45:2c:3c:76:f4:c5:25:dc:e0:c9:93:02:60:ca:26:7f:5d:a9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:09 2023 GMT Not After : Jun 6 03:02:09 2024 GMT Subject: CN=209F7F23CC4CCAD0493DFE18398A1564D5F0BFCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:eb:ab:20:cc:3e:40:ae:ec:94:b6:78:4f: 35:ad:f4:45:c6:79:5f:22:79:d2:50:90:53:4b:22: a4:6d:c8:a0:1a:41:60:e2:48:9e:06:97:f9:fa:d8: 52:67:f8:20:ef:a9:5f:a0:e3:d6:b1:83:17:fc:8e: 01:fd:25:c8:60:32:98:bd:1e:96:75:cf:0b:fb:00: 3a:1d:c5:a9:4b:fa:ea:5b:2a:b2:99:bd:82:dd:3b: c7:91:2f:e1:a2:55:c2:35:56:74:c0:e8:df:30:4b: e1:43:f8:3a:38:44:67:60:e9:a9:60:34:3b:b9:95: da:0c:a8:be:4f:0a:b0:c0:93:2c:a4:20:05:ad:74: 35:96:1f:4e:1c:3e:fd:1f:fe:50:fd:98:5b:17:62: 91:94:2a:5c:55:24:14:32:aa:04:78:ea:2b:35:53: f9:85:30:de:2c:56:1e:5b:63:d9:a3:6e:9e:a1:e6: 3d:ae:43:d6:58:f4:7e:55:98:7a:80:e7:a2:b5:05: 2c:5e:52:56:1c:c8:37:35:f9:21:23:59:b0:e8:33: a8:38:a3:48:91:9e:10:1c:4d:78:d9:2e:22:a5:95: ba:3d:b5:4c:18:ca:46:dd:76:7a:db:32:cb:ee:3e: 8d:2a:61:c1:f7:f5:17:e7:88:fc:cf:d9:27:89:af: 2a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9F:7F:23:CC:4C:CA:D0:49:3D:FE:18:39:8A:15:64:D5:F0:BF:CA X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34353a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:45::/48 Signature Algorithm: sha256WithRSAEncryption 30:5f:5e:38:ea:46:0e:95:07:e9:28:91:18:74:b6:58:0a:d3: 7c:b9:6f:90:e6:97:c8:a6:b3:70:7c:12:b4:e8:e6:06:1d:ab: 95:b2:fb:17:c4:f0:10:20:84:47:b7:4f:38:54:bb:2b:b4:b3: 34:6d:c3:51:c7:45:44:15:41:5a:b9:da:75:46:58:8f:3e:58: c8:be:73:f7:c0:0a:e5:03:23:a5:57:12:c9:1f:85:67:74:33: 43:c3:e5:38:d3:aa:a3:66:3b:18:b0:79:18:1d:04:1b:92:8a: c0:65:98:30:9f:15:64:f3:61:d6:87:5f:5c:76:1b:aa:f8:96: 05:b7:6c:bc:1c:3c:dc:ac:7e:a5:5d:d5:01:2a:77:5f:19:f6: 1f:18:ca:0c:40:df:73:33:81:77:d4:26:14:fa:2c:e1:36:94: b1:f4:33:a1:78:03:87:9c:65:d3:25:86:af:be:e9:e5:43:51: d7:b5:e3:52:6e:25:2d:67:13:e1:56:d7:3a:5b:83:40:10:6e: cc:20:d6:16:ef:c0:df:ed:b8:6e:4c:83:03:f4:4c:fb:74:e8: 59:bf:d8:bc:33:fa:ec:2d:73:b3:32:45:b9:ac:74:32:b1:b6: d1:6c:ec:ef:08:de:8d:2f:e3:2d:fa:89:96:cf:a9:29:e6:0b: 7c:07:77:59 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUHkUsPHb0xSXc4MmTAmDKJn9dqXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDlaFw0yNDA2MDYwMzAyMDlaMDMxMTAvBgNV BAMTKDIwOUY3RjIzQ0M0Q0NBRDA0OTNERkUxODM5OEExNTY0RDVGMEJGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2OurIMw+QK7slLZ4TzWt9EXG eV8iedJQkFNLIqRtyKAaQWDiSJ4Gl/n62FJn+CDvqV+g49axgxf8jgH9JchgMpi9 HpZ1zwv7ADodxalL+upbKrKZvYLdO8eRL+GiVcI1VnTA6N8wS+FD+Do4RGdg6alg NDu5ldoMqL5PCrDAkyykIAWtdDWWH04cPv0f/lD9mFsXYpGUKlxVJBQyqgR46is1 U/mFMN4sVh5bY9mjbp6h5j2uQ9ZY9H5VmHqA56K1BSxeUlYcyDc1+SEjWbDoM6g4 o0iRnhAcTXjZLiKllbo9tUwYykbddnrbMsvuPo0qYcH39RfniPzP2SeJrypTAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUIJ9/I8xMytBJPf4YOYoVZNXwv8owHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAEUw DQYJKoZIhvcNAQELBQADggEBADBfXjjqRg6VB+kokRh0tlgK03y5b5Dml8ims3B8 ErTo5gYdq5Wy+xfE8BAghEe3TzhUuyu0szRtw1HHRUQVQVq52nVGWI8+WMi+c/fA CuUDI6VXEskfhWd0M0PD5TjTqqNmOxiweRgdBBuSisBlmDCfFWTzYdaHX1x2G6r4 lgW3bLwcPNysfqVd1QEqd18Z9h8YygxA33MzgXfUJhT6LOE2lLH0M6F4A4ecZdMl hq++6eVDUde141JuJS1nE+FW1zpbg0AQbswg1hbvwN/tuG5MgwP0TPt06Fm/2Lwz +uwtc7MyRbmsdDKxttFs7O8I3o0v4y36iZbPqSnmC3wHd1k= -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org