$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36343a3a2f34382d3438203d3e20313431383932.roa File: 323430353a623930303a36343a3a2f34382d3438203d3e20313431383932.roa (raw, json) Hash identifier: LtwIK09XIOnDrh1K4OLDwL5bC+dtwPFfzo43R1FNaMM= Subject key identifier: 98:EA:B2:5A:BC:8F:80:27:93:DE:FB:40:8C:65:B4:92:80:1A:1C:AD Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 5F9028055AE09F56389417FEB51E4DD6E7C7B072 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36343a3a2f34382d3438203d3e20313431383932.roa Signing time: Thu 08 Jun 2023 03:02:03 +0000 ROA not before: Thu 08 Jun 2023 02:57:03 +0000 ROA not after: Thu 06 Jun 2024 03:02:03 +0000 asID: 141892 IP address blocks: 2405:b900:64::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:90:28:05:5a:e0:9f:56:38:94:17:fe:b5:1e:4d:d6:e7:c7:b0:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:03 2023 GMT Not After : Jun 6 03:02:03 2024 GMT Subject: CN=98EAB25ABC8F802793DEFB408C65B492801A1CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d9:2e:8c:85:4a:a2:48:40:1b:f1:7a:88:92: e1:89:22:66:c3:80:af:24:ed:1a:04:52:1a:dc:de: 22:6b:d2:39:96:d2:20:4e:03:b5:6e:44:17:3f:8d: 9c:b8:03:54:d5:66:ce:9f:d7:a7:5e:0d:92:e4:3d: bb:b6:1e:d6:1e:9c:36:8d:c0:19:8e:00:ec:a0:52: d4:f7:a4:8c:cf:3d:a5:63:8b:bb:44:b8:4e:eb:5e: 94:32:96:b4:3a:b5:c3:0d:06:0b:cc:34:b6:25:49: a4:46:fe:39:6a:96:17:55:42:34:9f:c4:a7:92:20: 00:75:8c:5f:e1:e9:30:9b:1a:ed:78:b5:57:cb:32: fb:b9:ed:f9:52:b3:82:48:e2:fc:6f:16:5b:8e:de: 2b:a4:bc:95:02:b0:00:7c:df:d8:08:fe:49:ea:8c: 39:ae:27:27:c1:46:1f:27:10:fa:6d:c8:ac:9a:7b: 93:40:cc:ef:3e:e0:00:92:4b:4e:c9:97:6a:19:3a: df:66:72:61:b2:5b:05:a1:40:af:98:fc:c1:fe:2f: 6e:5a:cd:4e:f1:ee:b5:89:ad:82:b4:21:74:87:71: 27:15:8d:00:de:55:99:12:8e:c2:65:3a:f3:c1:2f: 41:5d:09:8b:4d:1e:b0:ab:6f:98:f7:d0:07:3b:d0: 40:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EA:B2:5A:BC:8F:80:27:93:DE:FB:40:8C:65:B4:92:80:1A:1C:AD X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36343a3a2f34382d3438203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:64::/48 Signature Algorithm: sha256WithRSAEncryption 7f:5c:f9:33:95:33:b2:ef:56:38:f3:8a:49:b7:40:9e:fd:8d: 27:d0:99:ec:1e:c2:dc:3d:cd:ae:6d:56:0e:c1:71:62:ee:35: f6:5e:8b:dd:50:4b:e4:dd:4d:0a:ff:6d:f5:4b:53:1e:12:3d: 0f:99:ff:d5:53:1d:53:e3:71:39:43:48:f9:fd:93:14:c0:0a: 21:8e:07:f8:36:8f:f0:be:08:a4:da:fb:e6:40:41:59:d7:f5: 82:a1:9a:56:07:b7:02:73:a3:d1:bf:07:a9:c6:db:72:00:a8: 3e:f7:85:2d:62:78:a0:36:59:92:4b:69:8b:07:ad:5f:1c:ef: 16:1b:f2:c8:7c:b3:3f:f7:86:c5:4d:ef:be:62:40:bf:38:2c: 1b:a0:50:99:dc:03:cf:f3:cd:96:05:bc:9d:2a:46:d4:ce:60: 59:66:37:96:10:d8:fc:2c:c1:1d:54:57:85:3b:3e:70:5a:20: e6:c4:a2:ea:22:3d:94:a5:67:ed:80:74:2e:ce:72:a4:0c:e8: 8a:a2:6c:f0:3e:94:00:1d:22:65:bf:f6:23:87:7c:fc:ba:5f: 22:a9:0e:d9:8f:dd:f4:37:57:fa:61:da:a1:52:b2:f5:68:2e: 63:ae:a4:2f:1f:58:d7:58:4c:75:b3:36:9f:4e:af:76:79:e3: 41:5c:af:d6 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUX5AoBVrgn1Y4lBf+tR5N1ufHsHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDNaFw0yNDA2MDYwMzAyMDNaMDMxMTAvBgNV BAMTKDk4RUFCMjVBQkM4RjgwMjc5M0RFRkI0MDhDNjVCNDkyODAxQTFDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa2S6MhUqiSEAb8XqIkuGJImbD gK8k7RoEUhrc3iJr0jmW0iBOA7VuRBc/jZy4A1TVZs6f16deDZLkPbu2HtYenDaN wBmOAOygUtT3pIzPPaVji7tEuE7rXpQylrQ6tcMNBgvMNLYlSaRG/jlqlhdVQjSf xKeSIAB1jF/h6TCbGu14tVfLMvu57flSs4JI4vxvFluO3iukvJUCsAB839gI/knq jDmuJyfBRh8nEPptyKyae5NAzO8+4ACSS07Jl2oZOt9mcmGyWwWhQK+Y/MH+L25a zU7x7rWJrYK0IXSHcScVjQDeVZkSjsJlOvPBL0FdCYtNHrCrb5j30Ac70ED/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUmOqyWryPgCeT3vtAjGW0koAaHK0wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzYzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFuQAA ZDANBgkqhkiG9w0BAQsFAAOCAQEAf1z5M5Uzsu9WOPOKSbdAnv2NJ9CZ7B7C3D3N rm1WDsFxYu419l6L3VBL5N1NCv9t9UtTHhI9D5n/1VMdU+NxOUNI+f2TFMAKIY4H +DaP8L4IpNr75kBBWdf1gqGaVge3AnOj0b8HqcbbcgCoPveFLWJ4oDZZkktpiwet XxzvFhvyyHyzP/eGxU3vvmJAvzgsG6BQmdwDz/PNlgW8nSpG1M5gWWY3lhDY/CzB HVRXhTs+cFog5sSi6iI9lKVn7YB0Ls5ypAzoiqJs8D6UAB0iZb/2I4d8/LpfIqkO 2Y/d9DdX+mHaoVKy9WguY66kLx9Y11hMdbM2n06vdnnjQVyv1g== -----END CERTIFICATE-----Generated at Sun Apr 28 15:43:45 2024 by rpki-client on console-fra.rpki-client.org