$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36303a3a2f34382d3438203d3e20313431383932.roa File: 323430353a623930303a36303a3a2f34382d3438203d3e20313431383932.roa (raw, json) Hash identifier: X3Fe56PtPWeT24XDvGjP7UE/pq6ZYEZguG+OXQMla90= Subject key identifier: C5:08:ED:E7:04:7A:5A:4C:7E:43:0C:31:DD:8C:4E:F6:87:38:40:E3 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 0625EE54DD62520A57C9ACCEC0B0CE270C486835 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36303a3a2f34382d3438203d3e20313431383932.roa Signing time: Thu 08 Jun 2023 03:02:02 +0000 ROA not before: Thu 08 Jun 2023 02:57:02 +0000 ROA not after: Thu 06 Jun 2024 03:02:02 +0000 asID: 141892 IP address blocks: 2405:b900:60::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:25:ee:54:dd:62:52:0a:57:c9:ac:ce:c0:b0:ce:27:0c:48:68:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:02 2023 GMT Not After : Jun 6 03:02:02 2024 GMT Subject: CN=C508EDE7047A5A4C7E430C31DD8C4EF6873840E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:7b:1b:47:d1:cc:86:4f:a9:0a:d6:ac:cf: 65:90:b9:44:b3:89:ac:71:f5:a6:ec:01:f7:38:b6: b6:26:45:8c:e7:53:1f:2d:5b:f0:41:c2:85:d7:05: d6:57:24:70:00:f7:28:f3:b6:4c:14:5d:9f:1b:9d: 28:59:68:b7:d6:9c:3f:55:56:6b:a3:e5:2e:28:46: 07:f6:f0:20:67:88:0d:ad:e7:54:e6:97:64:46:84: 91:5b:54:76:c5:ae:e5:ee:ad:d1:8c:ab:5f:66:32: 13:e3:5a:ce:6b:ac:7c:6c:f6:2d:c1:24:f4:5a:ab: 5f:d2:c2:a1:a1:4b:6b:74:d8:ac:35:fc:76:fd:25: 1f:87:65:18:5d:85:02:8c:92:6e:a2:a8:77:46:c0: 3f:70:42:6c:ef:57:84:0a:f5:c3:61:65:f2:08:71: 15:10:ed:d3:30:b0:63:92:15:09:7e:b0:99:d7:13: 2b:7e:c9:52:10:46:86:75:8a:a4:f4:9d:b4:3f:d1: a0:dd:7a:87:b5:74:ec:32:00:67:15:2f:b7:12:04: 9a:23:cf:1a:73:68:41:67:f5:52:76:c1:0f:8d:be: e2:8b:7b:72:da:c0:33:0c:ed:47:c6:49:48:79:ea: 1f:97:07:08:53:cb:20:92:84:17:a3:82:1f:19:97: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:08:ED:E7:04:7A:5A:4C:7E:43:0C:31:DD:8C:4E:F6:87:38:40:E3 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36303a3a2f34382d3438203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:60::/48 Signature Algorithm: sha256WithRSAEncryption 2b:87:f0:dc:f3:95:14:f0:47:64:64:53:72:4f:7f:93:28:e7: 98:9b:7a:d3:d1:a0:f0:95:02:ee:3f:b8:91:e8:7c:a6:48:43: 5b:89:78:28:1d:ee:a2:0b:37:a3:0b:21:cf:a9:51:bc:f6:53: fa:12:11:85:88:de:9e:76:a9:81:f5:42:22:67:3d:76:3c:87: 58:9a:6a:8e:2e:78:cf:b4:74:c1:7a:83:13:0d:64:d6:be:31: e7:07:e8:7c:58:b4:0b:f9:52:43:c8:51:48:fd:5e:b6:02:e2: 48:c2:73:94:74:52:7d:67:9e:48:d6:c8:74:30:da:08:81:cb: 5d:69:38:95:7c:0a:7c:3c:12:1e:cb:48:df:c8:0a:a7:bc:94: 30:48:c8:26:fc:70:04:4b:93:2a:9c:a4:8c:6a:9e:c3:68:39: 4f:2d:e0:a6:7a:c9:81:27:f9:17:e8:a4:2c:db:a4:b7:35:ab: ac:89:b2:08:7c:f8:fd:92:a3:c7:a8:6d:e8:b2:3b:4f:11:a5: d2:52:eb:4e:8b:d0:53:7b:e7:41:e7:15:8f:52:10:b2:b0:d9: 1e:72:e4:3b:9f:19:91:a6:be:b7:7d:86:94:69:78:a5:33:47: 34:d8:ce:54:55:d4:2c:43:52:6c:14:36:74:d1:54:f8:ac:4e: 43:75:c6:03 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUBiXuVN1iUgpXyazOwLDOJwxIaDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDJaFw0yNDA2MDYwMzAyMDJaMDMxMTAvBgNV BAMTKEM1MDhFREU3MDQ3QTVBNEM3RTQzMEMzMUREOEM0RUY2ODczODQwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/S3sbR9HMhk+pCtasz2WQuUSz iaxx9absAfc4trYmRYznUx8tW/BBwoXXBdZXJHAA9yjztkwUXZ8bnShZaLfWnD9V Vmuj5S4oRgf28CBniA2t51Tml2RGhJFbVHbFruXurdGMq19mMhPjWs5rrHxs9i3B JPRaq1/SwqGhS2t02Kw1/Hb9JR+HZRhdhQKMkm6iqHdGwD9wQmzvV4QK9cNhZfII cRUQ7dMwsGOSFQl+sJnXEyt+yVIQRoZ1iqT0nbQ/0aDdeoe1dOwyAGcVL7cSBJoj zxpzaEFn9VJ2wQ+NvuKLe3LawDMM7UfGSUh56h+XBwhTyyCShBejgh8Zl+r3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUxQjt5wR6Wkx+Qwwx3YxO9oc4QOMwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzYzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFuQAA YDANBgkqhkiG9w0BAQsFAAOCAQEAK4fw3POVFPBHZGRTck9/kyjnmJt609Gg8JUC 7j+4keh8pkhDW4l4KB3uogs3owshz6lRvPZT+hIRhYjennapgfVCImc9djyHWJpq ji54z7R0wXqDEw1k1r4x5wfofFi0C/lSQ8hRSP1etgLiSMJzlHRSfWeeSNbIdDDa CIHLXWk4lXwKfDwSHstI38gKp7yUMEjIJvxwBEuTKpykjGqew2g5Ty3gpnrJgSf5 F+ikLNuktzWrrImyCHz4/ZKjx6ht6LI7TxGl0lLrTovQU3vnQecVj1IQsrDZHnLk O58Zkaa+t32GlGl4pTNHNNjOVFXULENSbBQ2dNFU+KxOQ3XGAw== -----END CERTIFICATE-----Generated at Sun Apr 28 15:43:45 2024 by rpki-client on console-fra.rpki-client.org