$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a363a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a363a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: oI9tzo3E8XQ3Z52gTwCTZnUNv7Y0Hg7TIfbf9joTTgQ= Subject key identifier: 27:AB:08:45:9F:75:38:84:15:0F:03:02:02:ED:F1:12:39:4C:2F:65 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 57A62E9207D1700FBC3CBFC83FD9EE2A4FB5D558 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a363a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:06 +0000 ROA not before: Thu 08 Jun 2023 02:57:06 +0000 ROA not after: Thu 06 Jun 2024 03:02:06 +0000 asID: 55701 IP address blocks: 2405:b900:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a6:2e:92:07:d1:70:0f:bc:3c:bf:c8:3f:d9:ee:2a:4f:b5:d5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:06 2023 GMT Not After : Jun 6 03:02:06 2024 GMT Subject: CN=27AB08459F753884150F030202EDF112394C2F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8b:cd:cb:03:e1:61:81:f7:0c:01:48:99:79: c2:c7:9c:e6:49:78:08:69:c9:0b:bc:f5:79:9f:3a: 5a:d4:b6:d8:52:cd:3c:58:9f:aa:d3:1e:e3:cf:11: a2:08:cb:fe:3b:9d:37:26:48:cf:e6:a0:e2:b3:90: c1:a4:52:99:9d:5e:ca:50:9f:b6:fc:50:d8:39:39: a6:e9:24:32:be:7a:e1:5a:e0:72:ef:37:a9:9b:c8: 15:68:40:32:c5:d9:46:4c:44:7e:aa:31:61:d0:90: 62:d4:5c:b0:c7:7c:fd:05:6c:44:42:40:99:ec:63: b5:35:54:df:dc:c1:2b:a4:40:2e:9c:d2:aa:9f:d4: 0d:9d:3d:f8:4c:32:1f:58:22:56:90:72:56:46:5b: b2:40:41:c0:16:b8:fd:a9:b4:f6:5b:93:4e:b9:42: 0d:7f:cc:b9:c3:6e:1f:24:ac:39:f6:79:24:fd:7b: 76:08:99:a0:af:63:55:7f:27:c6:32:de:dc:ab:c3: 02:5f:c0:95:0d:d5:9e:42:e5:e2:12:9d:c3:05:d3: f3:6a:80:a4:5b:55:27:dc:83:c5:48:97:30:e0:7f: f7:07:f9:32:02:30:66:2d:6f:5b:b6:0b:2d:ab:b4: 8d:f5:74:6d:3b:ea:2c:5d:33:2e:04:37:e3:91:85: b2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AB:08:45:9F:75:38:84:15:0F:03:02:02:ED:F1:12:39:4C:2F:65 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a363a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:6::/48 Signature Algorithm: sha256WithRSAEncryption 0e:3e:34:71:c5:b7:b8:86:a5:22:ee:c8:a0:c1:81:03:d4:eb: 00:7a:1a:3a:7a:94:34:fb:a1:ca:c2:aa:3a:23:2b:94:34:ca: dc:fb:e2:be:ba:75:e0:f9:4c:9e:76:26:c5:e7:db:c3:b9:12: 3c:18:76:75:4f:a5:97:09:49:a7:52:6e:61:24:86:3d:e3:3e: 8f:99:e8:a0:f6:35:b1:6d:5a:9d:75:06:76:4c:1d:c2:df:6a: 6a:51:b1:81:1f:69:25:14:93:27:22:29:4f:cc:45:22:68:0e: 44:26:d5:76:63:a8:a9:27:bd:2d:0e:4b:f8:76:6c:0d:2a:1e: 7c:d8:4f:0f:85:16:4c:a0:de:6d:9e:74:49:72:e1:90:e9:82: 0f:7b:8b:f1:32:10:51:f0:02:51:5f:dd:79:31:4f:51:61:c2: 5c:dc:91:f5:d9:91:8f:b0:d4:98:ea:d1:40:ce:dc:73:4a:f7: d7:5a:ff:e3:c3:c8:15:d2:c8:c1:94:e4:bf:8b:b3:cd:72:ff: 7c:f2:cb:85:25:2d:12:3e:44:19:07:75:c7:46:35:9b:cc:c3: 1c:47:e9:4c:3d:59:be:62:2b:1d:7f:4e:13:ad:41:89:f2:fc: 9c:76:0e:53:90:89:10:6d:9c:4d:92:45:8a:86:22:7b:93:09: 01:80:aa:8b -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUV6YukgfRcA+8PL/IP9nuKk+11VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDZaFw0yNDA2MDYwMzAyMDZaMDMxMTAvBgNV BAMTKDI3QUIwODQ1OUY3NTM4ODQxNTBGMDMwMjAyRURGMTEyMzk0QzJGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4i83LA+FhgfcMAUiZecLHnOZJ eAhpyQu89XmfOlrUtthSzTxYn6rTHuPPEaIIy/47nTcmSM/moOKzkMGkUpmdXspQ n7b8UNg5OabpJDK+euFa4HLvN6mbyBVoQDLF2UZMRH6qMWHQkGLUXLDHfP0FbERC QJnsY7U1VN/cwSukQC6c0qqf1A2dPfhMMh9YIlaQclZGW7JAQcAWuP2ptPZbk065 Qg1/zLnDbh8krDn2eST9e3YImaCvY1V/J8Yy3tyrwwJfwJUN1Z5C5eISncMF0/Nq gKRbVSfcg8VIlzDgf/cH+TICMGYtb1u2Cy2rtI31dG076ixdMy4EN+ORhbLLAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUJ6sIRZ91OIQVDwMCAu3xEjlML2UwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5AAAGMA0G CSqGSIb3DQEBCwUAA4IBAQAOPjRxxbe4hqUi7sigwYED1OsAeho6epQ0+6HKwqo6 IyuUNMrc++K+unXg+UyedibF59vDuRI8GHZ1T6WXCUmnUm5hJIY94z6Pmeig9jWx bVqddQZ2TB3C32pqUbGBH2klFJMnIilPzEUiaA5EJtV2Y6ipJ70tDkv4dmwNKh58 2E8PhRZMoN5tnnRJcuGQ6YIPe4vxMhBR8AJRX915MU9RYcJc3JH12ZGPsNSY6tFA ztxzSvfXWv/jw8gV0sjBlOS/i7PNcv988suFJS0SPkQZB3XHRjWbzMMcR+lMPVm+ Yisdf04TrUGJ8vycdg5TkIkQbZxNkkWKhiJ7kwkBgKqL -----END CERTIFICATE-----Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org