$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34363a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a34363a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: CT4hillNZnM+PlUNvXTLzWRZ5HZWaDC38sg9ymBZTlc= Subject key identifier: 73:06:92:88:08:0C:2A:9C:AA:A6:2A:0E:11:66:F9:F2:73:C0:D5:2B Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 1F3CB6FCEDE9142DCD09B6917D3D525C4EF4D581 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34363a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:11 +0000 ROA not before: Thu 08 Jun 2023 02:57:11 +0000 ROA not after: Thu 06 Jun 2024 03:02:11 +0000 asID: 55701 IP address blocks: 2405:b900:46::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3c:b6:fc:ed:e9:14:2d:cd:09:b6:91:7d:3d:52:5c:4e:f4:d5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:11 2023 GMT Not After : Jun 6 03:02:11 2024 GMT Subject: CN=73069288080C2A9CAAA62A0E1166F9F273C0D52B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:32:c7:a2:77:11:da:da:e7:3d:53:94:8d:f7: e2:0c:e4:47:19:d4:4e:ab:2a:3e:24:0e:f1:cf:80: 26:19:dd:db:03:0d:b8:58:a5:59:6c:5c:28:dc:f4: e0:d6:4d:b3:63:33:c1:3a:2b:88:cb:e9:85:9f:eb: 4a:fa:a1:a9:97:3f:2a:8a:d2:df:55:24:a5:30:98: 37:c5:ef:c1:1c:44:0e:bf:8d:f5:2e:ec:3c:2a:ad: 84:fd:2d:d9:b3:fd:bc:e0:a1:de:e7:09:a3:df:5f: 25:f6:d4:0b:f5:85:ff:de:c1:d9:ce:4e:c7:68:5c: 71:e6:3b:78:59:2e:99:1f:0c:99:c0:15:4a:f4:43: ee:93:22:e8:fb:5b:70:67:7e:f9:1a:1e:b7:8a:c0: 13:e6:cf:84:5f:20:0f:47:09:cd:19:2c:35:d2:11: 29:e3:89:7a:a3:39:60:b6:c4:df:8e:57:ee:f4:c7: d8:91:d6:34:53:c2:41:9e:e2:3f:c5:6a:1e:24:cf: 0a:d6:aa:07:95:04:48:03:2f:00:72:59:da:a9:7c: 6c:48:fb:f0:a8:d1:b3:18:d9:27:7b:26:11:4c:8a: 74:ac:95:79:4a:52:19:d1:b3:8e:9f:84:49:0b:17: 99:8e:9c:e3:5b:5a:94:52:1b:bb:db:c0:e8:a6:56: 00:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:06:92:88:08:0C:2A:9C:AA:A6:2A:0E:11:66:F9:F2:73:C0:D5:2B X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34363a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:46::/48 Signature Algorithm: sha256WithRSAEncryption 8a:74:46:b3:84:b1:15:fe:be:68:45:14:bb:83:d4:ba:0b:c9: 3b:52:bc:ec:cf:56:41:d4:0a:89:28:7f:9b:9d:01:0c:99:a8: 6a:95:77:60:07:e0:c4:91:4a:55:a3:a7:6c:c7:22:2c:90:a4: 68:78:df:aa:ea:de:fa:93:d9:ae:96:1e:40:71:e8:56:80:a0: 14:53:72:8b:cb:1e:be:d6:27:9b:49:dc:e0:37:38:0f:f1:1c: 04:c9:cc:0f:17:aa:e0:f1:f3:1a:43:e4:cd:41:3a:0d:8d:2e: aa:e6:07:b7:6e:49:55:15:a4:74:ce:9c:ee:a2:31:0c:e8:48: 15:06:00:b2:25:51:94:4c:34:e9:d8:d5:b3:9b:ee:d9:4f:d3: ae:cd:b1:95:8a:e9:d8:39:1d:ee:02:7b:36:ca:5f:2a:03:3b: c3:64:23:9d:53:94:84:d5:20:92:05:13:81:1e:87:87:9e:ff: 93:46:d7:ad:49:7e:0d:2e:7f:67:ee:32:93:9c:1f:94:6a:f0: 3d:74:03:58:bd:53:84:fe:53:f7:b6:5c:25:0e:74:23:3d:75: 0b:66:1f:66:89:92:12:0a:ac:40:47:63:64:de:8a:13:c3:07: 74:5f:35:1e:72:8c:e8:4b:2b:26:8b:a1:b3:e2:3f:2e:5a:0b: 91:d0:07:12 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUHzy2/O3pFC3NCbaRfT1SXE701YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MTFaFw0yNDA2MDYwMzAyMTFaMDMxMTAvBgNV BAMTKDczMDY5Mjg4MDgwQzJBOUNBQUE2MkEwRTExNjZGOUYyNzNDMEQ1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiMseidxHa2uc9U5SN9+IM5EcZ 1E6rKj4kDvHPgCYZ3dsDDbhYpVlsXCjc9ODWTbNjM8E6K4jL6YWf60r6oamXPyqK 0t9VJKUwmDfF78EcRA6/jfUu7DwqrYT9Ldmz/bzgod7nCaPfXyX21Av1hf/ewdnO TsdoXHHmO3hZLpkfDJnAFUr0Q+6TIuj7W3BnfvkaHreKwBPmz4RfIA9HCc0ZLDXS ESnjiXqjOWC2xN+OV+70x9iR1jRTwkGe4j/Fah4kzwrWqgeVBEgDLwByWdqpfGxI +/Co0bMY2Sd7JhFMinSslXlKUhnRs46fhEkLF5mOnONbWpRSG7vbwOimVgCzAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUcwaSiAgMKpyqpioOEWb58nPA1SswHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzNjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAEYw DQYJKoZIhvcNAQELBQADggEBAIp0RrOEsRX+vmhFFLuD1LoLyTtSvOzPVkHUCoko f5udAQyZqGqVd2AH4MSRSlWjp2zHIiyQpGh436rq3vqT2a6WHkBx6FaAoBRTcovL Hr7WJ5tJ3OA3OA/xHATJzA8XquDx8xpD5M1BOg2NLqrmB7duSVUVpHTOnO6iMQzo SBUGALIlUZRMNOnY1bOb7tlP067NsZWK6dg5He4CezbKXyoDO8NkI51TlITVIJIF E4Eeh4ee/5NG161Jfg0uf2fuMpOcH5Rq8D10A1i9U4T+U/e2XCUOdCM9dQtmH2aJ khIKrEBHY2TeihPDB3RfNR5yjOhLKyaLobPiPy5aC5HQBxI= -----END CERTIFICATE-----Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org