$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31343a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a31343a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: cr4QoEL3KwsB6WvX2rB9xHLyMfEdykMWjo/vYUz33BI= Subject key identifier: F9:AF:FB:AD:25:22:FF:D9:4C:05:41:54:2D:DF:80:ED:F7:E0:08:79 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 27A01576765143065BE54B6B21ABE72437F552BC Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31343a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:00 +0000 ROA not before: Thu 09 May 2024 03:56:00 +0000 ROA not after: Thu 08 May 2025 04:01:00 +0000 asID: 55701 IP address blocks: 2405:b900:14::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a0:15:76:76:51:43:06:5b:e5:4b:6b:21:ab:e7:24:37:f5:52:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:00 2024 GMT Not After : May 8 04:01:00 2025 GMT Subject: CN=F9AFFBAD2522FFD94C0541542DDF80EDF7E00879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:7b:3b:d8:3a:43:71:d4:ce:1d:39:17:3e: ac:0e:d8:b6:c2:16:77:9e:ec:e3:27:d3:d3:43:5e: f7:89:88:a7:13:fd:d4:e6:36:54:91:af:bc:8b:82: 40:cd:6c:22:9b:6b:1c:99:ad:3f:eb:38:9d:c7:45: 45:72:0d:d9:1c:a5:c0:e5:c2:d9:a4:73:d2:72:69: 3d:dd:36:a5:4c:5b:52:c6:3b:07:4c:f5:91:cf:31: 1e:62:0d:97:54:0f:5e:70:8d:b0:fc:88:c0:8e:68: a0:29:63:1a:46:9b:60:cd:a1:b6:ae:68:35:78:bb: 66:a5:03:0d:b5:d1:94:e1:59:9a:3b:30:58:98:a9: 20:95:d6:9b:cf:68:79:2c:a7:1f:4d:ac:fd:5e:ce: cb:bb:d3:0a:81:ff:74:1b:9f:1e:47:4b:9d:d0:de: a1:5b:00:15:00:2d:aa:39:0d:82:13:52:38:3a:1c: 2e:22:c6:b1:16:54:b8:d7:f3:10:8f:02:5f:4b:ab: 56:5e:fe:80:ba:41:50:15:06:2c:a2:b4:06:2e:ca: 26:56:2b:6a:23:f7:6a:41:23:85:56:c7:5f:2d:bb: 98:d9:2d:13:39:d6:0c:05:88:3d:77:df:13:e4:3c: 7b:eb:21:b7:6e:b5:c6:ed:65:eb:b4:9c:4e:04:3f: db:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AF:FB:AD:25:22:FF:D9:4C:05:41:54:2D:DF:80:ED:F7:E0:08:79 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31343a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:14::/48 Signature Algorithm: sha256WithRSAEncryption 55:91:8a:8f:28:08:f1:26:e6:a4:59:78:40:02:56:a4:29:f4: 75:43:32:0a:95:8a:29:5d:ac:15:8a:70:0e:ff:13:f3:56:d3: 0a:33:06:dc:96:4b:f5:8b:d1:df:83:3c:c7:e2:3d:27:f1:7f: b3:40:38:f4:a8:95:48:a2:16:16:ac:52:4e:74:ca:5b:ee:b3: 0f:e6:d6:a7:6b:28:47:e5:bd:f4:9a:79:b6:af:f1:15:03:a2: 32:3d:32:17:2f:23:23:bc:3a:e5:aa:c3:3d:6e:be:c2:e8:ba: 06:32:00:bb:f8:b9:05:f4:59:bc:e0:3a:8a:89:90:e7:40:61: 23:8a:2f:2b:3e:f7:c7:e0:ad:3e:d9:e8:83:22:4d:30:71:fa: 4c:5e:e4:39:9e:92:0c:af:26:b6:57:3c:2f:89:54:34:c5:03: 8b:c8:0b:2d:02:bc:bb:bb:d1:a6:83:e0:f5:19:90:37:52:77: 4a:fd:f0:64:50:93:0e:cd:f2:c7:a2:96:60:42:43:30:bb:22: dc:92:8c:0a:69:d2:1e:8d:77:99:bd:6e:b3:21:30:c3:d5:f2: 29:4c:52:20:fd:9d:34:ac:01:88:f0:1f:98:8c:eb:af:79:2e: df:32:ba:31:4e:d3:c3:f1:bb:f0:18:ac:76:46:df:bb:ec:74: 52:05:95:48 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUJ6AVdnZRQwZb5UtrIavnJDf1UrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDBaFw0yNTA1MDgwNDAxMDBaMDMxMTAvBgNV BAMTKEY5QUZGQkFEMjUyMkZGRDk0QzA1NDE1NDJEREY4MEVERjdFMDA4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/3s72DpDcdTOHTkXPqwO2LbC Fnee7OMn09NDXveJiKcT/dTmNlSRr7yLgkDNbCKbaxyZrT/rOJ3HRUVyDdkcpcDl wtmkc9JyaT3dNqVMW1LGOwdM9ZHPMR5iDZdUD15wjbD8iMCOaKApYxpGm2DNobau aDV4u2alAw210ZThWZo7MFiYqSCV1pvPaHkspx9NrP1ezsu70wqB/3Qbnx5HS53Q 3qFbABUALao5DYITUjg6HC4ixrEWVLjX8xCPAl9Lq1Ze/oC6QVAVBiyitAYuyiZW K2oj92pBI4VWx18tu5jZLRM51gwFiD133xPkPHvrIbdutcbtZeu0nE4EP9sJAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU+a/7rSUi/9lMBUFULd+A7ffgCHkwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzEzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAABQw DQYJKoZIhvcNAQELBQADggEBAFWRio8oCPEm5qRZeEACVqQp9HVDMgqViildrBWK cA7/E/NW0wozBtyWS/WL0d+DPMfiPSfxf7NAOPSolUiiFhasUk50ylvusw/m1qdr KEflvfSaebav8RUDojI9MhcvIyO8OuWqwz1uvsLougYyALv4uQX0WbzgOoqJkOdA YSOKLys+98fgrT7Z6IMiTTBx+kxe5DmekgyvJrZXPC+JVDTFA4vICy0CvLu70aaD 4PUZkDdSd0r98GRQkw7N8seilmBCQzC7ItySjApp0h6Nd5m9brMhMMPV8ilMUiD9 nTSsAYjwH5iM6695Lt8yujFO08Pxu/AYrHZG37vsdFIFlUg= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org