$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36333a3a2f34382d3438203d3e20313431383932.roa File: 323430353a623930303a36333a3a2f34382d3438203d3e20313431383932.roa (raw, json) Hash identifier: cbMxADNs1az/fMFlAv47kLhRJ51CxTTyEtE2XGuW9no= Subject key identifier: F3:87:6C:9E:D1:7E:05:90:5F:14:A7:7E:98:BF:12:90:BD:0A:1B:53 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 0CD8F9266E7D35CD5B914BB74EF501D3BAA07098 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36333a3a2f34382d3438203d3e20313431383932.roa Signing time: Thu 08 Jun 2023 03:02:05 +0000 ROA not before: Thu 08 Jun 2023 02:57:05 +0000 ROA not after: Thu 06 Jun 2024 03:02:05 +0000 asID: 141892 IP address blocks: 2405:b900:63::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d8:f9:26:6e:7d:35:cd:5b:91:4b:b7:4e:f5:01:d3:ba:a0:70:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:05 2023 GMT Not After : Jun 6 03:02:05 2024 GMT Subject: CN=F3876C9ED17E05905F14A77E98BF1290BD0A1B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:90:81:64:51:d1:ee:9f:2e:14:70:03:ad: a8:74:42:7b:49:a5:06:3b:6a:de:f6:98:32:67:f4: 8d:33:69:78:31:63:cd:e7:86:c8:8a:ae:ef:ed:3f: 50:6c:2b:9d:4b:f6:90:9a:85:da:2f:0d:6a:b8:b3: 9b:ed:25:bc:e2:f9:91:cc:52:f1:bc:53:85:9a:c9: fd:6c:8f:11:0f:4e:c4:7b:57:a0:8d:56:eb:03:a6: 13:3d:19:42:c9:2f:f7:8b:22:70:dc:cb:2b:6e:2c: 4d:b3:0d:23:b6:10:78:df:29:dd:9c:65:e9:3d:84: 8a:67:1c:db:6b:2c:ee:2b:aa:9b:fb:f8:e6:17:5d: d9:dd:4f:30:c7:be:35:a4:cb:86:29:50:f4:3d:e8: 84:34:29:40:64:d9:c2:2c:d7:ab:e7:30:ca:a3:39: 2c:0a:f0:a7:ae:36:5a:a3:b9:df:fc:a6:e6:b8:76: 6f:7b:53:f7:26:cb:ff:8d:30:6b:d6:c0:be:ef:39: 37:ec:de:65:5d:65:a2:19:12:59:83:4f:9f:0b:57: d2:31:fa:a2:5a:5f:da:6d:5f:7c:26:4a:4e:a3:20: d7:0d:e2:db:39:53:c6:c0:b6:94:33:5d:49:ce:49: a5:46:55:36:3a:07:b3:a9:b0:0f:8b:bd:91:63:cd: 2e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:87:6C:9E:D1:7E:05:90:5F:14:A7:7E:98:BF:12:90:BD:0A:1B:53 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36333a3a2f34382d3438203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:63::/48 Signature Algorithm: sha256WithRSAEncryption 0b:7f:20:9d:6e:fe:59:16:f1:dc:8c:d4:4a:a3:f4:f8:10:f9: 61:6e:06:be:dc:e9:77:57:7f:3d:01:0f:30:86:67:05:59:ef: a6:ad:aa:37:89:9b:33:ff:72:89:aa:1e:ec:29:37:28:9c:22: c3:c5:76:d1:33:59:31:b9:9f:18:3a:39:a7:6e:c4:92:5e:0b: b2:cb:a0:3a:d8:b1:00:c4:12:f1:b9:7c:a6:53:2b:11:9d:39: c2:1a:5b:1e:22:e6:82:06:1f:6f:14:09:41:e6:4e:19:54:90: 7f:1a:26:58:6d:b9:ea:fb:37:71:8d:11:4c:32:0c:00:7c:7b: a6:c8:79:79:35:cd:20:f9:b7:a4:76:4f:b0:6d:fb:d7:ad:2d: 76:72:04:fe:b8:f2:e7:c5:99:82:c7:ec:d7:3b:3f:37:01:34: 25:b8:79:05:5b:1d:72:6a:41:48:b5:56:07:12:95:26:38:67: cb:d5:f7:54:c3:b3:a5:a7:db:f6:c6:f7:06:51:0c:ab:75:f3: 0c:1d:fb:06:dd:ea:89:77:14:e4:99:75:ac:36:9d:da:71:b3: fb:67:56:e2:b2:1f:b6:2e:2e:36:45:aa:b5:b3:4e:61:f5:7a: 56:bc:ce:2b:06:66:2c:5b:8d:dd:a2:1a:c8:56:6f:d3:41:69: ae:88:3d:7e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUDNj5Jm59Nc1bkUu3TvUB07qgcJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDVaFw0yNDA2MDYwMzAyMDVaMDMxMTAvBgNV BAMTKEYzODc2QzlFRDE3RTA1OTA1RjE0QTc3RTk4QkYxMjkwQkQwQTFCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvJCBZFHR7p8uFHADrah0QntJ pQY7at72mDJn9I0zaXgxY83nhsiKru/tP1BsK51L9pCahdovDWq4s5vtJbzi+ZHM UvG8U4Wayf1sjxEPTsR7V6CNVusDphM9GULJL/eLInDcyytuLE2zDSO2EHjfKd2c Zek9hIpnHNtrLO4rqpv7+OYXXdndTzDHvjWky4YpUPQ96IQ0KUBk2cIs16vnMMqj OSwK8KeuNlqjud/8pua4dm97U/cmy/+NMGvWwL7vOTfs3mVdZaIZElmDT58LV9Ix +qJaX9ptX3wmSk6jINcN4ts5U8bAtpQzXUnOSaVGVTY6B7OpsA+LvZFjzS6lAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU84dsntF+BZBfFKd+mL8SkL0KG1MwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzYzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFuQAA YzANBgkqhkiG9w0BAQsFAAOCAQEAC38gnW7+WRbx3IzUSqP0+BD5YW4Gvtzpd1d/ PQEPMIZnBVnvpq2qN4mbM/9yiaoe7Ck3KJwiw8V20TNZMbmfGDo5p27Ekl4Lssug OtixAMQS8bl8plMrEZ05whpbHiLmggYfbxQJQeZOGVSQfxomWG256vs3cY0RTDIM AHx7psh5eTXNIPm3pHZPsG37160tdnIE/rjy58WZgsfs1zs/NwE0Jbh5BVsdcmpB SLVWBxKVJjhny9X3VMOzpafb9sb3BlEMq3XzDB37Bt3qiXcU5Jl1rDad2nGz+2dW 4rIfti4uNkWqtbNOYfV6VrzOKwZmLFuN3aIayFZv00Fprog9fg== -----END CERTIFICATE-----Generated at Sun Apr 28 15:43:45 2024 by rpki-client on console-fra.rpki-client.org