$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a35323a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a35323a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: mudEu9jCTFEDcJ8UTPW11bpqT447AfEvKPo7lP5kxtY= Subject key identifier: EB:8A:A7:9C:4C:53:A3:7B:D2:02:CA:4D:CF:82:C1:18:2C:F4:49:5C Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 16F6A458CE6065AE07D18C2334FB2640BA872A98 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a35323a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:04 +0000 ROA not before: Thu 08 Jun 2023 02:57:04 +0000 ROA not after: Thu 06 Jun 2024 03:02:04 +0000 asID: 55701 IP address blocks: 2405:b900:52::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f6:a4:58:ce:60:65:ae:07:d1:8c:23:34:fb:26:40:ba:87:2a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:04 2023 GMT Not After : Jun 6 03:02:04 2024 GMT Subject: CN=EB8AA79C4C53A37BD202CA4DCF82C1182CF4495C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:28:ff:b2:0e:bb:cd:7b:84:e2:00:7f:8d:62: 88:f3:db:a8:cf:0d:d7:98:e6:2a:10:82:35:7b:4e: 0e:25:eb:6e:d4:4d:df:74:2c:c3:4b:6d:98:57:7c: e0:31:00:0e:61:e1:23:89:a6:ad:96:3f:7b:8a:19: 8c:0b:ae:2f:ed:e1:a7:fe:ea:7d:1e:ae:6e:35:fb: 36:c8:84:01:f6:4b:22:8a:26:81:6a:e3:e7:3c:83: c8:bd:01:c0:c4:4d:56:9b:07:9c:fa:be:63:7d:ae: 01:3c:37:88:d0:e8:f4:7f:c3:b1:77:8c:7e:c6:c9: 4f:12:88:55:a6:d0:3c:54:d2:b5:c4:e2:ab:6b:2e: 4b:e1:29:f6:d0:bd:1b:8a:49:9f:55:0b:49:5c:5b: f3:85:c2:69:bd:3c:a3:2f:85:73:81:3f:30:64:6c: f2:14:94:3f:e7:d8:31:f2:e9:4b:03:a0:d6:fb:58: 98:ac:4b:3f:f9:bf:21:07:8d:2b:c4:d6:43:18:55: 3e:ca:2b:90:ad:44:bd:58:a6:7f:d2:30:28:bc:f7: 89:fe:4e:b6:62:87:b0:88:68:c1:ed:9b:09:c7:38: bc:43:fe:23:5f:20:5d:fe:24:3a:3e:96:38:f8:4b: 84:87:4b:c5:fd:b5:f4:4b:9d:2c:32:98:9c:2a:c8: 4c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8A:A7:9C:4C:53:A3:7B:D2:02:CA:4D:CF:82:C1:18:2C:F4:49:5C X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a35323a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:52::/48 Signature Algorithm: sha256WithRSAEncryption 3a:e9:64:c7:10:34:53:9a:6d:0e:c1:fd:4c:a1:bf:bf:75:4a: 2d:6b:c2:7a:81:aa:18:c8:6d:df:a4:87:f7:4d:e5:84:21:ef: cb:15:cf:32:dc:bc:f0:10:20:40:8b:2d:b9:f2:a9:5d:d7:d4: ca:88:d2:cf:b8:12:33:23:e9:16:f5:a8:52:98:d9:d3:0d:65: cd:73:f6:f5:db:fe:26:04:28:2f:cf:49:c7:55:bb:ae:7f:63: 57:dc:87:1f:80:f0:c2:81:87:6b:cd:6a:2f:47:46:46:52:61: 67:ba:20:bc:82:67:d6:99:91:f0:0f:89:a1:f1:ca:51:70:b6: b2:72:4f:51:f3:7b:e3:45:00:d1:08:f3:43:3f:36:c4:50:b1: 8c:cf:5f:dd:f2:7d:87:14:15:cf:0d:88:8e:25:a3:0a:7c:6f: 88:6b:ee:8d:2e:6c:88:6b:06:1f:bd:76:d2:3d:63:d1:87:f2: 64:8f:74:a0:e9:6e:89:1d:90:71:1f:b0:66:a7:e6:fc:9a:55: f8:5e:42:20:f6:48:1d:e2:5d:d5:65:85:42:00:d1:20:af:b5: b3:ed:27:a2:48:c4:94:c7:6f:41:40:20:36:dc:33:3f:6a:0b: f2:4e:a3:4a:3b:73:e1:1f:41:5c:f6:d1:4c:52:48:ba:19:ed: 8a:a8:c2:60 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUFvakWM5gZa4H0YwjNPsmQLqHKpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDRaFw0yNDA2MDYwMzAyMDRaMDMxMTAvBgNV BAMTKEVCOEFBNzlDNEM1M0EzN0JEMjAyQ0E0RENGODJDMTE4MkNGNDQ5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfKP+yDrvNe4TiAH+NYojz26jP DdeY5ioQgjV7Tg4l627UTd90LMNLbZhXfOAxAA5h4SOJpq2WP3uKGYwLri/t4af+ 6n0erm41+zbIhAH2SyKKJoFq4+c8g8i9AcDETVabB5z6vmN9rgE8N4jQ6PR/w7F3 jH7GyU8SiFWm0DxU0rXE4qtrLkvhKfbQvRuKSZ9VC0lcW/OFwmm9PKMvhXOBPzBk bPIUlD/n2DHy6UsDoNb7WJisSz/5vyEHjSvE1kMYVT7KK5CtRL1Ypn/SMCi894n+ TrZih7CIaMHtmwnHOLxD/iNfIF3+JDo+ljj4S4SHS8X9tfRLnSwymJwqyEzlAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU64qnnExTo3vSAspNz4LBGCz0SVwwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzUzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAFIw DQYJKoZIhvcNAQELBQADggEBADrpZMcQNFOabQ7B/Uyhv791Si1rwnqBqhjIbd+k h/dN5YQh78sVzzLcvPAQIECLLbnyqV3X1MqI0s+4EjMj6Rb1qFKY2dMNZc1z9vXb /iYEKC/PScdVu65/Y1fchx+A8MKBh2vNai9HRkZSYWe6ILyCZ9aZkfAPiaHxylFw trJyT1Hze+NFANEI80M/NsRQsYzPX93yfYcUFc8NiI4lowp8b4hr7o0ubIhrBh+9 dtI9Y9GH8mSPdKDpbokdkHEfsGan5vyaVfheQiD2SB3iXdVlhUIA0SCvtbPtJ6JI xJTHb0FAIDbcMz9qC/JOo0o7c+EfQVz20UxSSLoZ7YqowmA= -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org