$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37303a3a2f34382d3438203d3e20313431383932.roa File: 323430353a623930303a37303a3a2f34382d3438203d3e20313431383932.roa (raw, json) Hash identifier: MuXcj0Wdfw/j6pmKia+gq3cFOPnmV/Qanz7kZpbXoqk= Subject key identifier: 05:CE:78:3B:60:75:96:AA:F3:7B:5C:B8:C6:9E:C6:E5:7D:FF:5B:D4 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 19C17DEB19046B267902486B31D6EE88BE2F9A12 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37303a3a2f34382d3438203d3e20313431383932.roa Signing time: Thu 08 Jun 2023 03:02:04 +0000 ROA not before: Thu 08 Jun 2023 02:57:04 +0000 ROA not after: Thu 06 Jun 2024 03:02:04 +0000 asID: 141892 IP address blocks: 2405:b900:70::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c1:7d:eb:19:04:6b:26:79:02:48:6b:31:d6:ee:88:be:2f:9a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:04 2023 GMT Not After : Jun 6 03:02:04 2024 GMT Subject: CN=05CE783B607596AAF37B5CB8C69EC6E57DFF5BD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:e0:b2:fc:a9:62:b8:52:41:48:b8:51:4d: 23:23:e0:45:87:9c:85:3c:7f:0f:84:5f:e9:12:ca: 1b:80:a7:3a:9b:3a:46:7c:17:6a:11:4f:5b:b6:d9: 12:0f:2a:15:df:d6:95:a3:ee:a5:de:b9:fa:29:cc: 8a:01:8c:5a:ad:35:b7:05:67:22:b3:ff:ef:25:19: d6:42:c5:33:7c:35:2f:9d:74:d0:76:e6:5f:a3:a3: ab:da:11:d9:33:a5:22:48:ed:8b:93:d1:e8:06:de: bb:ee:fb:85:3a:51:b7:d0:cf:61:0e:31:c6:5f:63: b8:04:ea:b0:a3:0a:6b:de:48:10:25:b9:98:44:3a: a4:df:c8:75:20:8a:c1:2c:07:f6:f9:4e:6a:48:3b: c4:63:54:1a:89:2c:5c:3d:68:e1:d0:b0:48:c2:12: 4d:c8:cf:f5:a4:3d:51:c6:8f:7a:4f:5c:e5:2d:11: 81:2a:70:42:67:30:1c:bd:46:4f:2b:73:9d:43:e5: 2e:73:00:2f:ca:0e:9a:0f:89:97:ac:c3:81:07:5f: 1c:00:ba:06:6d:5e:aa:07:65:90:44:83:04:79:20: ce:41:f0:9c:33:89:ad:0b:a3:12:4d:1f:c8:e8:68: 74:1f:9d:2b:f7:b2:3a:cf:0c:39:55:63:b5:22:09: b9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CE:78:3B:60:75:96:AA:F3:7B:5C:B8:C6:9E:C6:E5:7D:FF:5B:D4 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37303a3a2f34382d3438203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:70::/48 Signature Algorithm: sha256WithRSAEncryption 3c:cb:e3:b5:e2:a4:99:da:34:b6:fd:c0:dc:a3:c8:9f:d3:38: 32:09:95:c3:a8:97:b9:95:1e:a0:e5:b8:78:fa:d0:11:5e:ec: bb:2b:22:cf:fd:35:8a:9d:f9:a4:dc:ae:c6:28:fc:68:1e:01: 89:26:92:74:94:57:31:fa:1b:48:5e:dc:ec:7a:14:f8:65:24: 21:a0:bc:4d:4d:26:56:f4:13:a5:b8:3c:59:f2:54:87:62:54: 52:00:2a:68:94:38:78:1f:17:4e:67:e9:0b:cb:51:55:3d:fb: e4:25:bb:17:ed:ff:f7:b0:51:05:b3:aa:0e:ac:fe:75:9c:93: 41:66:b6:f9:36:f6:31:70:94:4a:71:33:bc:77:9d:2b:62:9c: 91:b8:ff:5b:e3:ef:8a:7d:10:8a:8a:83:8d:85:64:73:e4:40: 22:9f:96:5b:ab:b8:2b:34:4c:e3:13:99:9a:34:3d:e7:ee:30: 2e:75:6b:1b:12:87:97:6c:41:5f:0e:61:45:58:2d:00:9c:86: aa:df:ac:eb:84:cb:0a:4c:ff:58:0e:98:e9:2d:99:76:d6:7b: 58:8a:5e:3b:0c:09:cf:20:a4:7e:72:0c:0c:d7:74:6e:2b:f4: 9b:dc:20:8a:ce:86:2f:69:ac:cb:30:f9:ce:c6:a3:95:80:f6: 21:be:1b:94 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUGcF96xkEayZ5AkhrMdbuiL4vmhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MDRaFw0yNDA2MDYwMzAyMDRaMDMxMTAvBgNV BAMTKDA1Q0U3ODNCNjA3NTk2QUFGMzdCNUNCOEM2OUVDNkU1N0RGRjVCRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1+Cy/KliuFJBSLhRTSMj4EWH nIU8fw+EX+kSyhuApzqbOkZ8F2oRT1u22RIPKhXf1pWj7qXeufopzIoBjFqtNbcF ZyKz/+8lGdZCxTN8NS+ddNB25l+jo6vaEdkzpSJI7YuT0egG3rvu+4U6UbfQz2EO McZfY7gE6rCjCmveSBAluZhEOqTfyHUgisEsB/b5TmpIO8RjVBqJLFw9aOHQsEjC Ek3Iz/WkPVHGj3pPXOUtEYEqcEJnMBy9Rk8rc51D5S5zAC/KDpoPiZesw4EHXxwA ugZtXqoHZZBEgwR5IM5B8Jwzia0LoxJNH8joaHQfnSv3sjrPDDlVY7UiCbm1AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUBc54O2B1lqrze1y4xp7G5X3/W9QwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzczMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFuQAA cDANBgkqhkiG9w0BAQsFAAOCAQEAPMvjteKkmdo0tv3A3KPIn9M4MgmVw6iXuZUe oOW4ePrQEV7suysiz/01ip35pNyuxij8aB4BiSaSdJRXMfobSF7c7HoU+GUkIaC8 TU0mVvQTpbg8WfJUh2JUUgAqaJQ4eB8XTmfpC8tRVT375CW7F+3/97BRBbOqDqz+ dZyTQWa2+Tb2MXCUSnEzvHedK2Kckbj/W+Pvin0QioqDjYVkc+RAIp+WW6u4KzRM 4xOZmjQ95+4wLnVrGxKHl2xBXw5hRVgtAJyGqt+s64TLCkz/WA6Y6S2ZdtZ7WIpe OwwJzyCkfnIMDNd0biv0m9wgis6GL2msyzD5zsajlYD2Ib4blA== -----END CERTIFICATE-----Generated at Tue Apr 30 19:12:30 2024 by rpki-client on console-ams.rpki-client.org