$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37343a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a37343a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: ITY5JYt2rGD4jNl/byajHNzGTKrkxsn4vuaCtb1YcEs= Subject key identifier: 67:F0:76:A9:A3:F6:74:E1:E0:95:ED:88:A2:44:0C:B3:12:0E:3E:04 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 7A09CC9BAA6603F352E99E756DE609AF7964C96C Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37343a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 17 Aug 2023 02:00:02 +0000 ROA not before: Thu 17 Aug 2023 01:55:02 +0000 ROA not after: Thu 15 Aug 2024 02:00:02 +0000 asID: 55701 IP address blocks: 2405:b900:74::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:09:cc:9b:aa:66:03:f3:52:e9:9e:75:6d:e6:09:af:79:64:c9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Aug 17 01:55:02 2023 GMT Not After : Aug 15 02:00:02 2024 GMT Subject: CN=67F076A9A3F674E1E095ED88A2440CB3120E3E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:ee:21:1f:5e:75:f8:76:93:f0:ae:e5:a9: 03:58:c3:66:4c:db:ef:29:30:12:38:2b:ca:91:7b: 99:96:2a:fa:fb:b4:e5:ee:e5:9a:c8:3a:88:bc:90: d1:bd:7b:a8:a8:cb:95:49:4c:d7:75:a0:75:ca:ce: d1:e6:9a:75:7f:d5:0b:22:08:6b:0b:25:3d:b1:10: 2a:e3:f2:de:47:b6:44:9b:8d:a3:4e:7e:7a:b1:70: c5:b0:73:6d:cf:98:68:5c:22:d7:46:26:51:83:bd: 53:28:3d:46:12:ec:e7:bd:3a:79:2f:96:89:f1:d9: aa:d7:4d:67:4b:21:d6:31:b5:38:eb:48:7a:41:b7: 98:77:13:5b:8f:dc:a3:9c:8f:55:f8:82:d1:24:79: 74:50:80:92:55:41:62:41:29:c9:ac:38:4d:2c:b7: 69:55:c6:78:e5:dc:1f:09:ef:42:6e:b3:7d:13:4a: 1c:d2:7b:04:18:b0:a7:85:10:66:43:6b:1d:2c:ad: 59:b4:be:7a:bf:72:2a:84:5b:28:94:62:d8:cd:b5: 35:4a:4a:84:9e:46:0d:09:08:f2:9c:b3:17:5b:00: 24:60:ae:87:5d:9a:2c:4b:19:44:14:55:fb:17:2a: 21:d2:82:a0:01:e1:be:68:a7:6f:a3:5c:12:6c:0e: 87:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F0:76:A9:A3:F6:74:E1:E0:95:ED:88:A2:44:0C:B3:12:0E:3E:04 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37343a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:74::/48 Signature Algorithm: sha256WithRSAEncryption 99:42:9c:5a:c1:77:01:d9:52:e8:48:82:5f:7c:09:c8:b4:6c: b3:1a:21:3e:6a:e4:24:8d:5b:67:62:1a:7c:ba:d7:0e:a9:a2: 00:7b:93:b0:72:fa:ee:6b:80:d8:dc:f9:3e:13:f8:43:a9:0d: 00:4c:2e:d0:e8:82:a3:ae:3c:eb:78:ce:1d:89:5f:97:33:f7: 97:4c:63:f8:85:53:cf:af:36:fc:57:cf:b2:c0:bb:84:3a:58: d9:e2:7d:3e:ca:e5:c9:f3:20:e3:8b:cd:7f:67:28:c3:9d:55: 95:a7:bb:1a:7f:c9:81:e3:ba:e1:92:51:01:d6:65:af:72:08: a1:21:ab:fa:69:4b:54:fa:0a:9c:6a:90:60:27:bf:fc:47:44: 46:f8:7b:ae:e0:ac:ef:38:e6:17:54:6d:f6:95:9e:cb:07:33: 79:2a:21:bc:81:b5:e3:59:3c:81:10:e7:a8:60:1b:f0:0d:df: 0f:2b:07:b8:1b:d2:a3:5e:6c:67:86:e5:c5:3b:2a:55:0c:53: fe:d2:e6:3b:0f:64:55:da:bc:fa:b5:37:eb:3b:b2:49:a0:83: 7f:50:60:f1:12:86:ae:ad:33:f0:c2:97:81:2b:f1:ec:ca:b9: 55:f8:cd:49:88:eb:02:21:67:7f:2f:c1:0e:ab:83:7d:6a:dd: 48:1d:77:ce -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUegnMm6pmA/NS6Z51beYJr3lkyWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA4MTcwMTU1MDJaFw0yNDA4MTUwMjAwMDJaMDMxMTAvBgNV BAMTKDY3RjA3NkE5QTNGNjc0RTFFMDk1RUQ4OEEyNDQwQ0IzMTIwRTNFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHu4hH151+HaT8K7lqQNYw2ZM 2+8pMBI4K8qRe5mWKvr7tOXu5ZrIOoi8kNG9e6ioy5VJTNd1oHXKztHmmnV/1Qsi CGsLJT2xECrj8t5HtkSbjaNOfnqxcMWwc23PmGhcItdGJlGDvVMoPUYS7Oe9Onkv lonx2arXTWdLIdYxtTjrSHpBt5h3E1uP3KOcj1X4gtEkeXRQgJJVQWJBKcmsOE0s t2lVxnjl3B8J70Jus30TShzSewQYsKeFEGZDax0srVm0vnq/ciqEWyiUYtjNtTVK SoSeRg0JCPKcsxdbACRgroddmixLGUQUVfsXKiHSgqAB4b5op2+jXBJsDoe9AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUZ/B2qaP2dOHgle2IokQMsxIOPgQwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzczNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAHQw DQYJKoZIhvcNAQELBQADggEBAJlCnFrBdwHZUuhIgl98Cci0bLMaIT5q5CSNW2di Gny61w6pogB7k7By+u5rgNjc+T4T+EOpDQBMLtDogqOuPOt4zh2JX5cz95dMY/iF U8+vNvxXz7LAu4Q6WNnifT7K5cnzIOOLzX9nKMOdVZWnuxp/yYHjuuGSUQHWZa9y CKEhq/ppS1T6CpxqkGAnv/xHREb4e67grO845hdUbfaVnssHM3kqIbyBteNZPIEQ 56hgG/AN3w8rB7gb0qNebGeG5cU7KlUMU/7S5jsPZFXavPq1N+s7skmgg39QYPES hq6tM/DCl4Er8ezKuVX4zUmI6wIhZ38vwQ6rg31q3Ugdd84= -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org