$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a373a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a373a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: fkrcg2I6lJlEQ0VKVZPuZ1AgkV48qh5fX6llXY4rQHU= Subject key identifier: 30:47:BC:77:D1:4B:B7:20:E3:58:5A:FD:17:35:63:10:2D:72:7B:9C Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 0AC22F47252357D4B009FC31E0AF07AA046CA76C Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a373a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:11 +0000 ROA not before: Thu 08 Jun 2023 02:57:11 +0000 ROA not after: Thu 06 Jun 2024 03:02:11 +0000 asID: 55701 IP address blocks: 2405:b900:7::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c2:2f:47:25:23:57:d4:b0:09:fc:31:e0:af:07:aa:04:6c:a7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:11 2023 GMT Not After : Jun 6 03:02:11 2024 GMT Subject: CN=3047BC77D14BB720E3585AFD173563102D727B9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:fe:25:9b:08:64:0b:81:27:4d:85:e0:a7: b9:ef:fc:71:99:d4:9c:d5:4f:e0:6e:f4:c4:f3:9b: 23:7c:9c:14:7f:62:68:86:d2:0b:4d:7d:86:43:22: fa:41:c7:31:ab:a2:0e:c2:7e:db:dc:e9:07:47:ca: 99:3a:4c:ea:2f:ee:f6:90:ed:91:38:2c:6b:04:05: e0:ce:16:18:2e:f0:cb:5c:30:fc:28:18:d3:2b:e4: c5:db:5c:78:5d:73:97:26:64:0d:58:84:94:69:dc: b6:98:41:3b:c3:27:b5:ff:89:53:b1:5b:65:f5:41: 40:c5:07:03:98:d6:91:a2:0f:54:68:da:a5:7a:32: 07:8e:29:13:3e:54:64:cb:59:a5:bc:5c:74:33:4a: ec:01:91:18:3e:01:5c:ba:10:55:43:64:a5:de:bb: e3:e0:ed:82:ed:d1:46:f7:62:7b:e0:1b:7b:bd:68: 9a:89:bd:f9:d2:4e:af:61:95:13:e9:65:e6:d8:84: d9:22:2c:60:25:3a:c4:dd:68:eb:f6:bc:aa:36:32: 85:89:18:3c:7e:0a:f1:c2:1c:2d:8a:26:13:99:89: cf:c1:cb:30:6f:19:fd:d0:06:42:2b:49:89:fd:e3: eb:d0:8d:6e:76:7d:03:d8:63:3f:57:35:d2:e2:e3: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:47:BC:77:D1:4B:B7:20:E3:58:5A:FD:17:35:63:10:2D:72:7B:9C X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a373a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:7::/48 Signature Algorithm: sha256WithRSAEncryption d2:37:12:6b:b9:d5:bf:cd:82:4b:be:17:70:fb:95:7a:9b:e4: 93:b2:ab:02:38:ab:e0:aa:40:63:09:45:fb:df:5c:a7:e6:26: 54:83:d0:bc:d6:1c:b1:cc:9e:e6:e2:76:2c:f8:1d:dd:f7:33: a7:77:e4:97:ea:7b:f3:7c:94:08:f9:62:73:52:4b:bf:65:9c: 74:e1:65:5d:66:89:20:5c:45:2f:4e:ac:e2:73:ea:fc:db:eb: 9a:6b:0b:c8:20:be:94:7b:f6:25:74:3c:9e:bf:71:6b:e8:77: 88:ec:64:7e:c5:2f:06:a5:f4:b6:84:fa:69:2b:2b:9d:d6:74: 68:42:b1:59:b3:3b:cd:90:2b:f0:dc:37:3e:f1:ed:67:60:4f: 58:f8:10:ec:7b:cd:eb:16:61:c1:a5:de:e0:e5:b3:a9:42:1b: b9:ea:ff:ac:01:52:c4:21:d4:de:11:3b:66:23:75:e3:3b:64: 85:51:57:5e:15:8f:d3:4d:1e:bf:3f:a8:50:03:df:f5:43:f5: 56:45:4f:64:d2:5f:f8:9c:57:21:87:24:93:b4:6d:53:cc:24: 50:33:85:34:2e:01:f5:3d:4c:f5:18:9e:ff:aa:a4:a1:58:fb: ef:c6:4a:b5:58:6e:b1:01:1b:40:76:00:f7:74:d2:48:2c:5c: a2:b3:ec:e7 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUCsIvRyUjV9SwCfwx4K8HqgRsp2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MTFaFw0yNDA2MDYwMzAyMTFaMDMxMTAvBgNV BAMTKDMwNDdCQzc3RDE0QkI3MjBFMzU4NUFGRDE3MzU2MzEwMkQ3MjdCOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WP4lmwhkC4EnTYXgp7nv/HGZ 1JzVT+Bu9MTzmyN8nBR/YmiG0gtNfYZDIvpBxzGrog7Cftvc6QdHypk6TOov7vaQ 7ZE4LGsEBeDOFhgu8MtcMPwoGNMr5MXbXHhdc5cmZA1YhJRp3LaYQTvDJ7X/iVOx W2X1QUDFBwOY1pGiD1Ro2qV6MgeOKRM+VGTLWaW8XHQzSuwBkRg+AVy6EFVDZKXe u+Pg7YLt0Ub3YnvgG3u9aJqJvfnSTq9hlRPpZebYhNkiLGAlOsTdaOv2vKo2MoWJ GDx+CvHCHC2KJhOZic/ByzBvGf3QBkIrSYn94+vQjW52fQPYYz9XNdLi4xfZAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUMEe8d9FLtyDjWFr9FzVjEC1ye5wwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzczYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5AAAHMA0G CSqGSIb3DQEBCwUAA4IBAQDSNxJrudW/zYJLvhdw+5V6m+STsqsCOKvgqkBjCUX7 31yn5iZUg9C81hyxzJ7m4nYs+B3d9zOnd+SX6nvzfJQI+WJzUku/ZZx04WVdZokg XEUvTqzic+r82+uaawvIIL6Ue/YldDyev3Fr6HeI7GR+xS8GpfS2hPppKyud1nRo QrFZszvNkCvw3Dc+8e1nYE9Y+BDse83rFmHBpd7g5bOpQhu56v+sAVLEIdTeETtm I3XjO2SFUVdeFY/TTR6/P6hQA9/1Q/VWRU9k0l/4nFchhySTtG1TzCRQM4U0LgH1 PUz1GJ7/qqShWPvvxkq1WG6xARtAdgD3dNJILFyis+zn -----END CERTIFICATE-----Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org