$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36323a3a2f34382d3438203d3e20313431383932.roa File: 323430353a623930303a36323a3a2f34382d3438203d3e20313431383932.roa (raw, json) Hash identifier: /1Xpsc8vXq5uW9IySXOZPnyWE4JwCUeDbnmaI5y2Jvk= Subject key identifier: 0A:4C:B9:DC:7B:A3:33:46:60:F9:17:BF:6C:59:23:B0:39:F5:FA:C4 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 61C3E50135EA330CF65786B3101DDA690B23B326 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36323a3a2f34382d3438203d3e20313431383932.roa Signing time: Thu 08 Jun 2023 03:02:02 +0000 ROA not before: Thu 08 Jun 2023 02:57:02 +0000 ROA not after: Thu 06 Jun 2024 03:02:02 +0000 asID: 141892 IP address blocks: 2405:b900:62::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c3:e5:01:35:ea:33:0c:f6:57:86:b3:10:1d:da:69:0b:23:b3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:02 2023 GMT Not After : Jun 6 03:02:02 2024 GMT Subject: CN=0A4CB9DC7BA3334660F917BF6C5923B039F5FAC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:32:6e:3b:b8:03:00:50:80:be:61:3f:e3:c5: eb:c9:69:0f:6c:03:97:6a:e3:13:fd:cb:24:6e:16: 25:34:ec:97:e7:8f:06:0f:0e:72:a6:1d:d0:87:c9: c1:3d:e9:6c:06:13:e6:95:80:d1:f1:ba:8f:a4:c7: 52:3a:6f:16:53:05:cc:15:d8:b7:0d:30:a1:ae:eb: 19:5d:34:89:cb:3d:a9:22:5e:d5:e8:cb:19:e4:b1: 69:51:54:35:ef:e4:5c:a0:03:64:ce:de:cb:68:bd: 4d:a4:45:13:60:aa:47:4d:cd:c1:b3:82:4f:e5:da: 98:b4:05:56:aa:41:c5:be:25:63:50:40:4e:53:86: a7:9e:c4:2c:a9:e2:85:6d:7d:57:a1:6d:81:0a:18: c0:fc:e6:d9:28:6a:1d:e9:1e:d7:3d:af:99:c2:e9: d7:b1:14:0a:c7:86:16:90:38:71:4a:e2:fc:3a:c8: 2d:38:3d:6d:c7:f8:41:b0:58:84:95:d2:3a:4a:a4: e0:d4:0d:a1:43:35:85:62:ea:6b:34:49:c8:a1:c8: bb:01:ec:6e:38:e2:ce:31:d9:4a:54:95:e6:88:52: 5a:f1:b4:bd:84:8f:cd:ed:aa:d5:55:7f:32:5b:c2: c9:71:95:3c:99:7c:48:88:c0:e6:66:a5:76:8b:5d: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4C:B9:DC:7B:A3:33:46:60:F9:17:BF:6C:59:23:B0:39:F5:FA:C4 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36323a3a2f34382d3438203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:62::/48 Signature Algorithm: sha256WithRSAEncryption 16:7f:65:1b:b5:04:9c:00:e2:f2:a0:85:ad:cd:6c:6c:aa:4e: ff:5e:b6:03:86:c9:4d:87:94:52:8b:b5:34:80:0c:33:50:9b: 31:c3:63:ec:9d:64:84:ac:9b:dc:b1:0f:c1:0a:4c:df:91:bf: 1f:84:da:a2:ab:20:60:1b:d9:26:ce:5e:38:5d:9d:05:a0:b8: 14:15:9c:83:fb:12:b8:ef:ec:6b:bb:c6:08:6a:d8:b6:8a:67: 54:b6:18:23:92:55:12:9c:a4:36:e7:3a:55:a1:68:1c:e7:17: 4e:12:3b:b0:d6:fc:bc:02:d6:f5:cc:fa:50:62:eb:5a:d9:56: 71:1d:07:21:4c:c8:13:86:d0:97:71:e1:71:51:fa:e6:f1:ab: 34:2d:25:59:2c:32:63:55:44:d9:f9:8f:ee:da:99:0d:24:e4: 48:18:28:c0:97:e8:ee:68:5a:04:cc:c0:95:51:e2:25:81:29: e5:e6:b9:00:76:bb:aa:de:f8:7b:35:61:49:ae:89:a2:2a:62: b0:3e:f8:bd:ac:98:c6:82:eb:03:15:9a:58:33:0b:3b:67:dd: 23:47:b0:6b:5d:22:9e:e1:49:4e:6d:4b:5a:f3:19:b8:91:d0: 4b:37:c3:5a:33:de:04:36:e1:5d:d9:9d:fa:bc:cf:15:aa:26: 3f:bf:25:7a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUYcPlATXqMwz2V4azEB3aaQsjsyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDJaFw0yNDA2MDYwMzAyMDJaMDMxMTAvBgNV BAMTKDBBNENCOURDN0JBMzMzNDY2MEY5MTdCRjZDNTkyM0IwMzlGNUZBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKMm47uAMAUIC+YT/jxevJaQ9s A5dq4xP9yyRuFiU07JfnjwYPDnKmHdCHycE96WwGE+aVgNHxuo+kx1I6bxZTBcwV 2LcNMKGu6xldNInLPakiXtXoyxnksWlRVDXv5FygA2TO3stovU2kRRNgqkdNzcGz gk/l2pi0BVaqQcW+JWNQQE5ThqeexCyp4oVtfVehbYEKGMD85tkoah3pHtc9r5nC 6dexFArHhhaQOHFK4vw6yC04PW3H+EGwWISV0jpKpODUDaFDNYVi6ms0ScihyLsB 7G444s4x2UpUleaIUlrxtL2Ej83tqtVVfzJbwslxlTyZfEiIwOZmpXaLXTPpAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUCky53HujM0Zg+Re/bFkjsDn1+sQwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzYzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFuQAA YjANBgkqhkiG9w0BAQsFAAOCAQEAFn9lG7UEnADi8qCFrc1sbKpO/162A4bJTYeU Uou1NIAMM1CbMcNj7J1khKyb3LEPwQpM35G/H4TaoqsgYBvZJs5eOF2dBaC4FBWc g/sSuO/sa7vGCGrYtopnVLYYI5JVEpykNuc6VaFoHOcXThI7sNb8vALW9cz6UGLr WtlWcR0HIUzIE4bQl3HhcVH65vGrNC0lWSwyY1VE2fmP7tqZDSTkSBgowJfo7mha BMzAlVHiJYEp5ea5AHa7qt74ezVhSa6JoipisD74vayYxoLrAxWaWDMLO2fdI0ew a10inuFJTm1LWvMZuJHQSzfDWjPeBDbhXdmd+rzPFaomP78leg== -----END CERTIFICATE-----Generated at Tue Apr 30 19:12:30 2024 by rpki-client on console-ams.rpki-client.org