$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a393a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a393a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: 4LLFADi+vTN+q8CCZe/UrvhHoumHC5c4Dq28Ft6u0uY= Subject key identifier: FA:48:AF:2E:F2:6C:CC:D5:C5:85:BF:05:0C:E1:76:C7:4B:E6:83:FA Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 7468BD8D9A660145E0D02C90F5DB73F10EE0A597 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a393a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 08 Jun 2023 03:02:10 +0000 ROA not before: Thu 08 Jun 2023 02:57:10 +0000 ROA not after: Thu 06 Jun 2024 03:02:10 +0000 asID: 55701 IP address blocks: 2405:b900:9::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:68:bd:8d:9a:66:01:45:e0:d0:2c:90:f5:db:73:f1:0e:e0:a5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 8 02:57:10 2023 GMT Not After : Jun 6 03:02:10 2024 GMT Subject: CN=FA48AF2EF26CCCD5C585BF050CE176C74BE683FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:55:93:ff:05:97:44:a3:11:f3:7b:da:e2:3c: fd:79:75:1f:19:e7:72:d6:5c:2b:da:d5:48:ce:f9: 38:62:c0:ae:2d:d8:e9:f6:ee:f9:66:4c:be:50:49: bf:04:0d:62:fd:c1:39:0f:30:00:c8:c6:52:17:cb: c8:42:4c:1c:e5:b8:00:2d:e1:56:81:8a:f6:5f:6f: ef:ae:14:c9:bb:b4:8f:13:d4:ed:4c:e2:1b:75:c3: eb:e0:e9:ca:0c:e0:fc:2b:64:7f:a3:ef:7b:db:e7: 81:ec:2d:2b:26:dc:ad:ca:5f:9f:7c:f0:ba:4f:6e: ee:94:8f:43:eb:6c:4e:e5:86:ee:e2:7d:7b:2e:04: 49:c5:56:45:43:80:5a:ee:0f:b6:f5:23:a4:4a:d8: f6:08:95:99:1d:90:c8:d5:34:38:fa:7d:12:c5:c1: c5:38:95:ff:70:8c:44:c2:9f:b7:ef:47:4b:a2:8b: 30:21:68:3d:57:f5:84:65:b3:60:ee:09:a0:aa:05: 14:c0:e6:4e:93:e9:94:04:d3:8f:95:36:fb:d8:95: b5:d4:53:53:67:b1:88:ab:2e:95:41:18:c5:b1:d7: b1:51:cc:80:00:be:7d:98:e9:f9:38:97:3c:6e:89: 8f:de:3d:b9:cb:1c:33:71:25:cb:fb:5c:ba:a2:50: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:48:AF:2E:F2:6C:CC:D5:C5:85:BF:05:0C:E1:76:C7:4B:E6:83:FA X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a393a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:9::/48 Signature Algorithm: sha256WithRSAEncryption c2:c0:6e:ca:6e:5a:53:af:68:21:06:5e:d8:12:8c:55:ba:47: 0d:de:3b:08:b5:4f:70:56:7f:56:7a:e9:f4:cb:a9:e9:77:9c: 39:46:ca:44:46:46:d2:55:67:17:b6:45:20:4f:5c:65:a8:70: f2:64:60:f6:53:a3:5e:a7:5d:3b:94:91:35:c5:8e:53:2e:f4: f1:bd:04:fc:08:01:31:80:e7:be:88:3f:88:28:d9:fd:c7:91: 2e:d9:95:5b:37:a6:c2:c8:fe:a9:f3:cb:17:62:b0:bb:c3:76: 28:be:70:66:de:62:61:fc:77:1f:e8:2e:91:85:bb:f3:2a:2c: 96:e9:8f:25:8f:88:a3:59:b9:ab:86:43:9f:73:1c:01:9a:0e: d1:e8:c6:1e:12:98:8e:1d:fa:23:af:4c:5c:71:fd:69:af:3d: 06:ba:fc:1f:f5:3e:2a:2a:e2:a9:87:03:01:c7:68:eb:97:3f: ea:9b:54:cd:12:de:d4:b1:e8:b9:c1:86:ea:91:0e:48:ed:1f: f4:54:2b:e6:d6:67:be:83:87:05:7d:50:33:9d:48:9f:42:c4: 42:61:aa:96:d2:b8:24:0a:a1:8a:2b:44:fb:75:56:49:05:f7: d8:db:0b:c6:32:eb:4a:cc:dc:b4:83:ea:a7:a2:3a:f9:32:d0: 06:79:e6:93 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUdGi9jZpmAUXg0CyQ9dtz8Q7gpZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yMzA2MDgwMjU3MTBaFw0yNDA2MDYwMzAyMTBaMDMxMTAvBgNV BAMTKEZBNDhBRjJFRjI2Q0NDRDVDNTg1QkYwNTBDRTE3NkM3NEJFNjgzRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVZP/BZdEoxHze9riPP15dR8Z 53LWXCva1UjO+ThiwK4t2On27vlmTL5QSb8EDWL9wTkPMADIxlIXy8hCTBzluAAt 4VaBivZfb++uFMm7tI8T1O1M4ht1w+vg6coM4PwrZH+j73vb54HsLSsm3K3KX598 8LpPbu6Uj0PrbE7lhu7ifXsuBEnFVkVDgFruD7b1I6RK2PYIlZkdkMjVNDj6fRLF wcU4lf9wjETCn7fvR0uiizAhaD1X9YRls2DuCaCqBRTA5k6T6ZQE04+VNvvYlbXU U1NnsYirLpVBGMWx17FRzIAAvn2Y6fk4lzxuiY/ePbnLHDNxJcv7XLqiUANnAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU+kivLvJszNXFhb8FDOF2x0vmg/owHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzkzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5AAAJMA0G CSqGSIb3DQEBCwUAA4IBAQDCwG7KblpTr2ghBl7YEoxVukcN3jsItU9wVn9Weun0 y6npd5w5RspERkbSVWcXtkUgT1xlqHDyZGD2U6Nep107lJE1xY5TLvTxvQT8CAEx gOe+iD+IKNn9x5Eu2ZVbN6bCyP6p88sXYrC7w3YovnBm3mJh/Hcf6C6RhbvzKiyW 6Y8lj4ijWbmrhkOfcxwBmg7R6MYeEpiOHfojr0xccf1prz0Guvwf9T4qKuKphwMB x2jrlz/qm1TNEt7Usei5wYbqkQ5I7R/0VCvm1me+g4cFfVAznUifQsRCYaqW0rgk CqGKK0T7dVZJBffY2wvGMutKzNy0g+qnojr5MtAGeeaT -----END CERTIFICATE-----Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org