$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34383a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a34383a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: 0Bc7BbKk/sJH8CzxSfVtyKVRtMSagvX8UwBw2VTrMKw= Subject key identifier: 41:DE:3E:4E:08:57:BF:59:94:E4:B8:E2:48:9D:E0:7E:76:F8:BA:28 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 66C6C7D43A8FB75E827A072FEFFA5FE642E95248 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34383a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:10 +0000 ROA not before: Thu 08 Jun 2023 02:57:10 +0000 ROA not after: Thu 06 Jun 2024 03:02:10 +0000 asID: 55701 IP address blocks: 2405:b900:48::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c6:c7:d4:3a:8f:b7:5e:82:7a:07:2f:ef:fa:5f:e6:42:e9:52:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:10 2023 GMT Not After : Jun 6 03:02:10 2024 GMT Subject: CN=41DE3E4E0857BF5994E4B8E2489DE07E76F8BA28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:77:e3:36:fa:7a:04:ac:cd:23:a4:0c:2f: f0:d9:a2:06:dd:c8:e5:3e:8d:5e:3d:08:ec:a6:64: 7a:51:e0:d4:d7:f6:4e:61:ab:18:d1:b3:e9:f7:62: 81:10:8e:80:26:52:f7:ca:75:aa:f3:8e:67:f0:76: 4f:ef:92:5e:41:c1:17:bc:94:44:7b:5f:6e:f2:e4: e6:c3:3a:db:ca:26:f9:39:1e:4b:56:29:0a:4d:e4: bc:c6:68:fd:32:2e:d2:e8:8d:84:20:1e:e5:ef:9f: ce:f4:98:67:fb:d4:a5:1f:9b:bd:7c:2d:95:86:16: ad:6b:5d:61:63:a7:cf:73:60:e1:65:35:06:c5:a0: da:bd:e0:fd:70:b8:cd:cc:5d:ea:fc:7d:f7:81:e4: 07:f2:96:65:ec:25:b2:d4:47:6b:e0:b3:76:16:76: 57:27:bc:77:b6:2e:9f:fa:2c:84:c0:44:df:26:90: d3:7f:3e:c5:12:bd:4c:59:97:07:8f:83:3c:7b:b0: f5:a0:5a:4e:11:8b:5a:26:c6:66:ce:15:77:02:db: e8:2f:a0:f8:a0:d1:b3:7f:b8:e2:35:f5:6b:15:32: 5a:ef:00:8d:0e:fb:68:a9:24:ca:25:ea:96:ea:3d: 9b:3b:86:5d:dd:d9:e6:50:ee:6a:46:f8:1c:70:1c: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DE:3E:4E:08:57:BF:59:94:E4:B8:E2:48:9D:E0:7E:76:F8:BA:28 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34383a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:48::/48 Signature Algorithm: sha256WithRSAEncryption 17:fe:c5:50:83:96:f3:09:3b:3f:79:f8:09:e0:ab:16:4c:ad: b7:71:bd:bf:db:bb:8c:ed:af:40:a6:79:75:1f:71:76:6a:2b: 9f:3c:62:e1:cc:6c:60:22:89:50:4d:e7:d3:48:f0:0d:74:64: e6:c9:ca:d1:0e:53:88:1b:c7:c8:5d:0c:ca:ce:c0:9c:a2:5d: a2:3b:c8:ee:85:fb:3f:7b:c8:43:a9:67:86:82:c8:c7:8f:1c: df:2f:9b:c6:1a:49:d6:09:be:0a:8f:53:42:40:0b:f5:d8:80: 28:fa:72:32:89:65:b8:af:bf:4d:d1:44:de:09:d1:aa:a1:26: cd:e1:1b:f8:6d:b0:8b:43:4d:fb:57:3d:80:ec:14:73:8a:cd: 3b:5e:c6:5a:50:01:d3:8f:80:7d:5c:fc:69:03:8f:d5:bf:d0: 27:e5:e6:30:fa:dc:1d:f6:5e:9e:bf:95:f2:d5:73:23:8b:da: 2e:5f:e0:3e:de:12:61:00:bf:d8:75:dd:2a:df:d5:fe:0b:a9: b5:b9:56:8f:f2:6b:db:50:db:c5:45:06:6d:66:0b:f1:c3:cb: 32:19:8a:ae:d9:ac:1a:ed:ef:9e:ec:60:af:45:ea:4c:98:92: 5a:05:d5:f4:47:ac:d0:7e:a7:8b:e2:48:56:e0:57:d8:e1:77: 96:0c:40:97 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUZsbH1DqPt16Cegcv7/pf5kLpUkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MTBaFw0yNDA2MDYwMzAyMTBaMDMxMTAvBgNV BAMTKDQxREUzRTRFMDg1N0JGNTk5NEU0QjhFMjQ4OURFMDdFNzZGOEJBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgXfjNvp6BKzNI6QML/DZogbd yOU+jV49COymZHpR4NTX9k5hqxjRs+n3YoEQjoAmUvfKdarzjmfwdk/vkl5BwRe8 lER7X27y5ObDOtvKJvk5HktWKQpN5LzGaP0yLtLojYQgHuXvn870mGf71KUfm718 LZWGFq1rXWFjp89zYOFlNQbFoNq94P1wuM3MXer8ffeB5AfylmXsJbLUR2vgs3YW dlcnvHe2Lp/6LITARN8mkNN/PsUSvUxZlwePgzx7sPWgWk4Ri1omxmbOFXcC2+gv oPig0bN/uOI19WsVMlrvAI0O+2ipJMol6pbqPZs7hl3d2eZQ7mpG+BxwHOFjAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUQd4+TghXv1mU5LjiSJ3gfnb4uigwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzODNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAEgw DQYJKoZIhvcNAQELBQADggEBABf+xVCDlvMJOz95+AngqxZMrbdxvb/bu4ztr0Cm eXUfcXZqK588YuHMbGAiiVBN59NI8A10ZObJytEOU4gbx8hdDMrOwJyiXaI7yO6F +z97yEOpZ4aCyMePHN8vm8YaSdYJvgqPU0JAC/XYgCj6cjKJZbivv03RRN4J0aqh Js3hG/htsItDTftXPYDsFHOKzTtexlpQAdOPgH1c/GkDj9W/0Cfl5jD63B32Xp6/ lfLVcyOL2i5f4D7eEmEAv9h13Srf1f4LqbW5Vo/ya9tQ28VFBm1mC/HDyzIZiq7Z rBrt757sYK9F6kyYkloF1fRHrNB+p4viSFbgV9jhd5YMQJc= -----END CERTIFICATE-----Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org