$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31323a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a31323a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: qkKXujpDA6a+smkuJJHIRI/Q2BLkvO0hnfs/j6BuSnw= Subject key identifier: B8:8A:7E:7D:E2:06:50:55:A1:2D:88:A1:91:86:D5:40:B6:08:EC:50 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 4112E0E230EB63E18646214F88B021A0F70306B9 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31323a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:00:58 +0000 ROA not before: Thu 09 May 2024 03:55:58 +0000 ROA not after: Thu 08 May 2025 04:00:58 +0000 asID: 55701 IP address blocks: 2405:b900:12::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:12:e0:e2:30:eb:63:e1:86:46:21:4f:88:b0:21:a0:f7:03:06:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:55:58 2024 GMT Not After : May 8 04:00:58 2025 GMT Subject: CN=B88A7E7DE2065055A12D88A19186D540B608EC50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:2d:3b:c8:29:09:40:50:df:02:97:87:8c: b1:60:6e:25:b8:13:12:31:fe:fb:ac:be:b0:85:0e: 65:23:fe:8e:9b:bd:ed:d6:02:af:f9:76:34:df:95: 03:08:31:03:14:44:1d:55:ce:78:f3:05:6c:fb:14: 43:7d:2d:69:2e:77:f5:f4:70:f5:d4:bb:3f:2a:0c: 79:71:c8:83:01:cc:18:83:3d:a5:e0:e1:10:c2:58: 49:1e:53:01:7d:bc:61:d1:e7:42:19:83:c4:0e:58: 81:10:e6:80:8e:9a:57:e5:aa:df:28:51:70:ea:de: 16:bc:5e:5a:d0:29:e3:d0:4a:3d:20:55:07:e2:4c: c6:35:96:d1:c8:57:50:fa:d8:56:f8:0e:23:30:f5: aa:8d:e9:61:0e:f4:ae:ee:8d:1d:95:29:d3:d8:ff: 50:d0:06:4d:b9:c6:98:c1:88:30:cb:e4:33:e8:db: 88:28:77:52:32:7b:27:8f:a2:3f:30:38:01:6b:43: 17:a9:98:cc:8b:ee:0b:a9:1d:82:8e:a2:b2:d6:4a: 9a:20:e9:fa:2e:17:c4:86:7f:57:fe:8a:f3:65:84: 49:3b:29:ff:7f:e1:ed:46:e5:25:cd:52:71:b5:7e: cb:1e:b6:cf:af:b0:32:32:01:49:e6:48:8d:ba:ed: ae:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8A:7E:7D:E2:06:50:55:A1:2D:88:A1:91:86:D5:40:B6:08:EC:50 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31323a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:12::/48 Signature Algorithm: sha256WithRSAEncryption 9f:a8:6f:83:3d:3d:05:dd:01:79:25:d0:da:c5:e0:ed:64:7d: 0c:52:71:a9:60:51:dc:ed:40:c6:1a:89:92:00:41:6a:b2:bf: a8:4c:35:0a:b2:11:31:2e:c9:bc:5f:f7:8f:41:b2:ae:b8:aa: 49:9f:c5:90:4c:fd:f7:af:ee:a2:51:9d:28:cf:5b:ec:93:d9: 0f:0c:ad:e4:55:74:13:df:a2:cf:2d:47:5c:3e:da:5f:00:94: c2:73:b0:93:0e:b7:4b:09:3e:15:5d:50:e6:5a:d7:9c:f3:53: be:ac:77:93:09:fe:4e:1c:a7:df:02:1f:89:e0:06:4c:2d:f8: fc:19:27:8f:d3:f3:b4:a6:bb:fe:d0:99:01:a1:33:09:35:30: 28:c8:be:20:45:bc:00:64:30:2b:76:40:5d:1e:89:25:88:37: 61:1e:12:b4:3d:37:c8:0b:85:50:22:72:a1:10:96:dd:9a:ea: 05:d6:f4:31:9d:60:9d:5c:6c:10:5b:ca:43:c0:ed:8c:56:2a: db:75:9f:34:ce:eb:4c:23:e4:91:54:9a:5e:1b:47:f4:51:5b: 58:cd:f1:a7:e3:23:ca:62:84:30:8e:ed:b2:9d:0f:3f:1f:c7: 9b:91:a6:77:0e:fd:8a:f0:9d:d7:85:ce:05:22:96:bb:6b:e7: 63:27:96:13 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUQRLg4jDrY+GGRiFPiLAhoPcDBrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU1NThaFw0yNTA1MDgwNDAwNThaMDMxMTAvBgNV BAMTKEI4OEE3RTdERTIwNjUwNTVBMTJEODhBMTkxODZENTQwQjYwOEVDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvi07yCkJQFDfApeHjLFgbiW4 ExIx/vusvrCFDmUj/o6bve3WAq/5djTflQMIMQMURB1VznjzBWz7FEN9LWkud/X0 cPXUuz8qDHlxyIMBzBiDPaXg4RDCWEkeUwF9vGHR50IZg8QOWIEQ5oCOmlflqt8o UXDq3ha8XlrQKePQSj0gVQfiTMY1ltHIV1D62Fb4DiMw9aqN6WEO9K7ujR2VKdPY /1DQBk25xpjBiDDL5DPo24god1IyeyePoj8wOAFrQxepmMyL7gupHYKOorLWSpog 6fouF8SGf1f+ivNlhEk7Kf9/4e1G5SXNUnG1fssets+vsDIyAUnmSI267a73AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUuIp+feIGUFWhLYihkYbVQLYI7FAwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzEzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAABIw DQYJKoZIhvcNAQELBQADggEBAJ+ob4M9PQXdAXkl0NrF4O1kfQxScalgUdztQMYa iZIAQWqyv6hMNQqyETEuybxf949Bsq64qkmfxZBM/fev7qJRnSjPW+yT2Q8MreRV dBPfos8tR1w+2l8AlMJzsJMOt0sJPhVdUOZa15zzU76sd5MJ/k4cp98CH4ngBkwt +PwZJ4/T87Smu/7QmQGhMwk1MCjIviBFvABkMCt2QF0eiSWIN2EeErQ9N8gLhVAi cqEQlt2a6gXW9DGdYJ1cbBBbykPA7YxWKtt1nzTO60wj5JFUml4bR/RRW1jN8afj I8pihDCO7bKdDz8fx5uRpncO/YrwndeFzgUilrtr52MnlhM= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org