$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36353a3a2f34382d3438203d3e20313431383932.roa File: 323430353a623930303a36353a3a2f34382d3438203d3e20313431383932.roa (raw, json) Hash identifier: L9m5Ve1DpY+n37IPgyY9xiDABXONIxWeqWUutXLInaw= Subject key identifier: AF:EE:FE:F5:7E:F9:47:8A:14:3B:02:50:CE:99:21:0E:2C:9C:7D:35 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 66438F5CA1551DF40C6DA43D87F169506D364BDF Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36353a3a2f34382d3438203d3e20313431383932.roa Signing time: Thu 08 Jun 2023 03:02:05 +0000 ROA not before: Thu 08 Jun 2023 02:57:05 +0000 ROA not after: Thu 06 Jun 2024 03:02:05 +0000 asID: 141892 IP address blocks: 2405:b900:65::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:43:8f:5c:a1:55:1d:f4:0c:6d:a4:3d:87:f1:69:50:6d:36:4b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:05 2023 GMT Not After : Jun 6 03:02:05 2024 GMT Subject: CN=AFEEFEF57EF9478A143B0250CE99210E2C9C7D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:67:79:b1:a1:3c:bf:95:d9:21:2c:c7:43: 3b:a5:9d:af:ef:40:6c:a7:e4:f3:3a:af:56:6c:bc: d2:0f:c8:00:c2:a7:c6:7f:68:ae:bf:fe:a7:75:9a: 34:cc:52:6a:49:bd:23:01:e2:5f:19:d1:cf:5d:0f: 3a:ae:16:76:6e:80:72:be:6b:30:7f:d0:17:1e:18: a7:02:9a:e2:f4:bb:e9:a0:29:60:c8:93:b6:d9:bc: d2:47:a6:cc:7b:e2:94:ef:ee:c6:83:03:d8:93:70: 10:3f:92:ba:3a:b9:f1:4c:6d:ae:30:f9:f0:5f:ba: d8:5e:61:fb:f7:e1:01:09:b4:65:ad:5f:bf:da:6e: 78:30:51:81:3a:49:f5:82:ea:6c:be:f5:e6:18:a1: f3:df:88:28:78:71:e4:81:15:aa:9d:3c:7d:6f:77: e2:dc:d9:40:be:17:30:8b:ed:c8:75:0d:12:10:02: 04:d8:12:7f:26:f7:f2:21:a5:2c:91:be:b7:19:d1: 29:d3:9c:f0:ca:4a:0a:7f:56:9c:1e:d5:30:bb:66: 2d:c2:12:c4:a9:8d:a3:24:ba:5b:a4:b2:41:fd:a5: 45:87:d4:5d:5f:4a:4c:eb:3c:d7:b1:4e:63:ce:d5: 16:3e:2d:58:e0:06:80:08:56:35:23:98:72:59:48: f4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EE:FE:F5:7E:F9:47:8A:14:3B:02:50:CE:99:21:0E:2C:9C:7D:35 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36353a3a2f34382d3438203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:65::/48 Signature Algorithm: sha256WithRSAEncryption b1:74:99:c7:76:de:0d:ab:76:0c:d3:dc:b3:df:c0:2b:af:6c: 41:b7:79:2e:dc:4a:da:f6:4b:4a:1d:03:a2:5d:9c:8b:15:af: 2d:fb:48:74:80:4c:95:46:b2:c6:3f:00:9b:54:00:9f:83:b5: 56:7a:1d:ee:e0:d7:ca:33:de:24:e0:3b:9e:7d:2f:10:65:3b: ab:15:bf:4b:bc:0c:48:07:2c:aa:20:0f:bd:89:1a:29:2d:a2: d2:6c:c8:47:70:83:df:77:b4:99:d2:ae:3e:74:3f:d8:78:82: ae:19:d9:56:4e:91:00:3f:86:11:57:3e:2e:c3:23:9a:6c:49: 6e:65:ab:5b:44:d3:f3:c6:81:f6:47:42:d6:6a:72:fb:70:c6: 75:f5:65:ab:0b:c1:72:75:d9:bd:b2:8a:78:2e:f0:6a:1e:a8: 9d:c4:24:e5:4d:9a:86:2b:b9:46:21:f4:cd:ac:cd:c3:79:d2: b5:81:1a:68:f7:1e:6e:9d:ae:c3:f4:ac:11:04:2a:0f:96:03: 0b:ac:8d:ba:0d:29:9f:90:ae:56:77:df:ce:3c:c3:f7:15:ef: 0b:9a:9f:ff:d1:c7:e0:e0:11:c8:40:a0:cc:d2:d1:02:76:5d: 19:91:ec:ea:08:15:2b:0a:6b:36:a4:60:83:da:9c:43:4c:67: db:72:30:a5 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUZkOPXKFVHfQMbaQ9h/FpUG02S98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDVaFw0yNDA2MDYwMzAyMDVaMDMxMTAvBgNV BAMTKEFGRUVGRUY1N0VGOTQ3OEExNDNCMDI1MENFOTkyMTBFMkM5QzdEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqF2d5saE8v5XZISzHQzulna/v QGyn5PM6r1ZsvNIPyADCp8Z/aK6//qd1mjTMUmpJvSMB4l8Z0c9dDzquFnZugHK+ azB/0BceGKcCmuL0u+mgKWDIk7bZvNJHpsx74pTv7saDA9iTcBA/kro6ufFMba4w +fBfutheYfv34QEJtGWtX7/abngwUYE6SfWC6my+9eYYofPfiCh4ceSBFaqdPH1v d+Lc2UC+FzCL7ch1DRIQAgTYEn8m9/IhpSyRvrcZ0SnTnPDKSgp/Vpwe1TC7Zi3C EsSpjaMkulukskH9pUWH1F1fSkzrPNexTmPO1RY+LVjgBoAIVjUjmHJZSPSXAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUr+7+9X75R4oUOwJQzpkhDiycfTUwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzYzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFuQAA ZTANBgkqhkiG9w0BAQsFAAOCAQEAsXSZx3beDat2DNPcs9/AK69sQbd5LtxK2vZL Sh0Dol2cixWvLftIdIBMlUayxj8Am1QAn4O1Vnod7uDXyjPeJOA7nn0vEGU7qxW/ S7wMSAcsqiAPvYkaKS2i0mzIR3CD33e0mdKuPnQ/2HiCrhnZVk6RAD+GEVc+LsMj mmxJbmWrW0TT88aB9kdC1mpy+3DGdfVlqwvBcnXZvbKKeC7wah6oncQk5U2ahiu5 RiH0zazNw3nStYEaaPcebp2uw/SsEQQqD5YDC6yNug0pn5CuVnffzjzD9xXvC5qf /9HH4OARyECgzNLRAnZdGZHs6ggVKwprNqRgg9qcQ0xn23IwpQ== -----END CERTIFICATE-----Generated at Tue Apr 30 19:12:30 2024 by rpki-client on console-ams.rpki-client.org