$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a35313a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a35313a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: jcYarUNI8JrhHPAZXrY4qpF+kuPDaxkPc+BjRqg9itE= Subject key identifier: 1A:A8:81:11:3A:82:D5:D4:35:F3:06:41:74:9C:43:24:57:BE:F2:09 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 345DA013623F9DC20939CCE7E6C21870F61ED677 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a35313a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:07 +0000 ROA not before: Thu 08 Jun 2023 02:57:07 +0000 ROA not after: Thu 06 Jun 2024 03:02:07 +0000 asID: 55701 IP address blocks: 2405:b900:51::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5d:a0:13:62:3f:9d:c2:09:39:cc:e7:e6:c2:18:70:f6:1e:d6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:07 2023 GMT Not After : Jun 6 03:02:07 2024 GMT Subject: CN=1AA881113A82D5D435F30641749C432457BEF209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:d7:97:71:cf:18:ad:ff:fb:c6:b1:30:07: 2c:5c:83:fc:a8:fb:ab:c0:78:dc:ab:fb:ec:c3:bb: 92:04:60:e5:59:7f:2d:4f:89:41:2a:d7:17:6e:83: db:8b:62:b7:2c:3b:4a:1c:d5:98:8b:5c:fa:52:a6: 56:2b:f7:8f:15:ac:90:09:5e:b8:a0:da:50:db:61: cc:16:1b:17:a7:c8:b2:10:d4:c8:f4:67:e8:be:6c: 10:28:e3:90:63:5b:04:d3:c2:15:b4:80:d3:8c:b0: b9:b3:9f:c2:bd:8a:a6:d4:75:f4:9a:27:90:54:b2: 76:02:34:96:46:50:f1:44:73:ef:8c:af:15:f8:a3: 41:83:59:af:34:5a:d8:88:9e:e4:61:1e:96:25:66: 0b:a1:de:b2:83:4f:71:40:2d:2e:47:4c:8e:e0:80: 43:27:43:67:2a:94:5e:a2:a6:8c:9e:4e:82:73:26: d7:d8:1e:00:4d:5c:e4:6d:c3:78:c1:2e:79:bf:c1: 67:bf:2a:d9:7c:03:fa:99:92:77:72:a2:e1:62:8e: 8f:93:06:f0:63:09:70:86:9b:78:b4:b0:b3:e1:93: 39:b9:8a:cc:87:55:de:56:e7:6f:4b:0b:4c:49:79: 94:e3:8d:06:b1:9d:51:0d:76:9a:3d:6e:9d:12:c6: 14:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A8:81:11:3A:82:D5:D4:35:F3:06:41:74:9C:43:24:57:BE:F2:09 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a35313a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:51::/48 Signature Algorithm: sha256WithRSAEncryption 8c:fd:27:82:d8:61:71:b7:3f:2a:99:d3:a5:bd:b6:91:c1:69: c1:ef:ef:e9:47:05:4b:9f:91:b0:5d:d7:37:35:62:62:fd:ad: 8b:2a:07:18:03:6d:c3:c7:2d:67:ef:a7:62:e5:71:ac:40:6d: 84:cd:56:0c:e5:b5:76:e6:68:ca:a0:48:8d:6c:19:0c:8a:4d: 1a:0a:6a:64:20:50:32:4e:0e:55:8b:c5:1c:33:15:d1:d4:94: 6e:19:c8:bd:09:a6:13:f4:0d:39:7b:d4:c3:3c:1f:81:0c:73: 2a:01:fb:df:d5:13:b2:3d:05:1c:9b:8c:02:1d:fd:0d:31:d3: d9:00:92:56:eb:35:71:db:3b:ac:2f:a2:bc:af:8a:bd:de:57: b0:e1:31:0a:31:31:c1:9f:e7:9b:5b:f5:5c:3f:e7:26:a1:c2: 3c:3b:c9:b1:80:16:fc:a6:4d:b9:5b:67:6c:8b:03:15:2f:fa: 7a:59:bc:e5:7c:d5:73:50:c6:28:31:cc:40:d4:ff:31:ea:fe: a7:3e:8b:e7:6b:dc:be:c3:56:5a:f8:15:05:89:76:0e:87:41: 2d:15:16:3d:02:a0:4d:41:1c:07:aa:1a:16:2e:4a:aa:ba:09: 7f:c0:14:7e:eb:b1:be:7f:ef:06:76:4c:49:24:75:07:77:3d: 71:3b:8c:b9 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUNF2gE2I/ncIJOczn5sIYcPYe1ncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDdaFw0yNDA2MDYwMzAyMDdaMDMxMTAvBgNV BAMTKDFBQTg4MTExM0E4MkQ1RDQzNUYzMDY0MTc0OUM0MzI0NTdCRUYyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChF9eXcc8Yrf/7xrEwByxcg/yo +6vAeNyr++zDu5IEYOVZfy1PiUEq1xdug9uLYrcsO0oc1ZiLXPpSplYr948VrJAJ Xrig2lDbYcwWGxenyLIQ1Mj0Z+i+bBAo45BjWwTTwhW0gNOMsLmzn8K9iqbUdfSa J5BUsnYCNJZGUPFEc++MrxX4o0GDWa80WtiInuRhHpYlZguh3rKDT3FALS5HTI7g gEMnQ2cqlF6ipoyeToJzJtfYHgBNXORtw3jBLnm/wWe/Ktl8A/qZkndyouFijo+T BvBjCXCGm3i0sLPhkzm5isyHVd5W529LC0xJeZTjjQaxnVENdpo9bp0SxhR5AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUGqiBETqC1dQ18wZBdJxDJFe+8gkwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzUzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAFEw DQYJKoZIhvcNAQELBQADggEBAIz9J4LYYXG3PyqZ06W9tpHBacHv7+lHBUufkbBd 1zc1YmL9rYsqBxgDbcPHLWfvp2LlcaxAbYTNVgzltXbmaMqgSI1sGQyKTRoKamQg UDJODlWLxRwzFdHUlG4ZyL0JphP0DTl71MM8H4EMcyoB+9/VE7I9BRybjAId/Q0x 09kAklbrNXHbO6wvoryvir3eV7DhMQoxMcGf55tb9Vw/5yahwjw7ybGAFvymTblb Z2yLAxUv+npZvOV81XNQxigxzEDU/zHq/qc+i+dr3L7DVlr4FQWJdg6HQS0VFj0C oE1BHAeqGhYuSqq6CX/AFH7rsb5/7wZ2TEkkdQd3PXE7jLk= -----END CERTIFICATE-----Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org