$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31353a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a31353a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: 9Ns/Gwu0I1ciNRT0DaCOzUa4Oj3I1bevee4QjNJ5o7M= Subject key identifier: 76:28:8C:7C:0E:15:12:2D:B7:5C:81:3A:49:BE:15:3B:92:F1:D7:11 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 5D215D06B8F9E45FDBE6E7DCB35DD27C3E53E78E Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31353a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:06 +0000 ROA not before: Thu 09 May 2024 03:56:06 +0000 ROA not after: Thu 08 May 2025 04:01:06 +0000 asID: 55701 IP address blocks: 2405:b900:15::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:21:5d:06:b8:f9:e4:5f:db:e6:e7:dc:b3:5d:d2:7c:3e:53:e7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:06 2024 GMT Not After : May 8 04:01:06 2025 GMT Subject: CN=76288C7C0E15122DB75C813A49BE153B92F1D711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:c3:78:39:49:87:b7:8a:11:51:89:c9:1d: bd:e2:77:d6:5c:15:0d:56:cb:ff:cf:ff:68:50:5a: 5f:42:dc:de:23:4a:5f:39:e0:2b:49:c0:c6:e4:b9: d9:45:2e:bf:1c:56:7a:ad:1b:fd:19:0f:1e:71:ed: 86:ad:2e:1b:31:85:c3:33:04:57:3d:2f:08:12:6e: 97:5d:ba:3f:98:87:69:70:bf:5e:63:51:4a:83:37: fe:57:b4:40:e6:dd:0c:33:52:91:56:76:63:02:3d: 42:86:db:ce:9c:50:74:25:ab:74:f2:7c:a0:05:eb: 7b:3c:ef:ca:54:2f:f9:17:8b:ab:cf:1f:97:e2:ec: 41:2f:5c:77:8a:64:e7:9f:6c:6f:95:94:1e:81:f5: 05:05:d8:21:96:67:1e:02:ac:cf:0d:9d:33:23:22: a0:97:c1:d6:c5:28:86:ff:91:3f:e2:45:ec:a5:1c: d9:7e:51:35:95:d5:a9:1e:97:48:8d:8a:f7:60:59: 62:d2:ca:fb:d2:b8:b3:13:66:48:d6:87:af:7a:81: 3f:bd:58:46:e1:4f:04:46:f8:c8:d5:4d:d2:dc:b8: d7:7d:65:81:4a:83:a0:4e:cc:8e:44:ef:9a:d6:72: 4a:a8:09:b0:c8:ce:fe:ca:b5:3a:8c:fe:56:b2:97: 95:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:28:8C:7C:0E:15:12:2D:B7:5C:81:3A:49:BE:15:3B:92:F1:D7:11 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31353a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:15::/48 Signature Algorithm: sha256WithRSAEncryption 89:db:cb:ab:78:e5:9a:28:6f:e0:37:39:70:64:57:d7:c3:f4: a2:ef:7b:58:9e:ae:0b:2a:07:a3:7d:7c:39:59:45:ee:49:66: d5:72:fe:77:0f:3b:ab:7f:59:ff:8e:b0:3a:0f:6b:61:67:9f: f6:de:38:1f:55:1c:77:73:16:38:4d:09:5c:6c:24:6a:c7:32: 7c:67:8b:65:db:7f:b0:5b:1b:cf:e2:de:24:94:c8:43:23:ae: 3d:b1:48:cd:db:ec:23:7d:34:60:5b:ed:34:58:b8:73:f9:8e: ac:3e:0d:4b:37:96:9e:20:f5:fe:dd:47:01:63:e1:85:09:ce: 9a:63:1d:bf:70:88:b4:b6:0e:fe:f5:08:32:aa:3a:e0:89:89: e4:6f:31:48:5f:29:db:26:58:e9:5c:e5:81:93:f2:e0:cd:85: 8b:36:a8:4d:1c:61:00:a7:17:9f:99:d2:92:6a:4d:42:32:c8: a4:1f:54:91:c9:ea:6a:17:78:c8:5b:32:96:63:5a:d4:60:3e: 76:3d:30:1a:fc:9e:d6:56:ba:55:17:28:64:ea:96:df:23:35: 4d:3c:f3:30:53:ea:54:04:aa:b4:31:fc:cd:a3:ce:5b:2a:27: 0f:c1:d5:30:a6:70:dc:ad:5d:63:3e:17:00:d2:01:21:a3:b6: 18:3d:cf:2b -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUXSFdBrj55F/b5ufcs13SfD5T544wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDZaFw0yNTA1MDgwNDAxMDZaMDMxMTAvBgNV BAMTKDc2Mjg4QzdDMEUxNTEyMkRCNzVDODEzQTQ5QkUxNTNCOTJGMUQ3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EMN4OUmHt4oRUYnJHb3id9Zc FQ1Wy//P/2hQWl9C3N4jSl854CtJwMbkudlFLr8cVnqtG/0ZDx5x7YatLhsxhcMz BFc9LwgSbpdduj+Yh2lwv15jUUqDN/5XtEDm3QwzUpFWdmMCPUKG286cUHQlq3Ty fKAF63s878pUL/kXi6vPH5fi7EEvXHeKZOefbG+VlB6B9QUF2CGWZx4CrM8NnTMj IqCXwdbFKIb/kT/iReylHNl+UTWV1akel0iNivdgWWLSyvvSuLMTZkjWh696gT+9 WEbhTwRG+MjVTdLcuNd9ZYFKg6BOzI5E75rWckqoCbDIzv7KtTqM/layl5XfAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUdiiMfA4VEi23XIE6Sb4VO5Lx1xEwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzEzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAABUw DQYJKoZIhvcNAQELBQADggEBAInby6t45Zoob+A3OXBkV9fD9KLve1iergsqB6N9 fDlZRe5JZtVy/ncPO6t/Wf+OsDoPa2Fnn/beOB9VHHdzFjhNCVxsJGrHMnxni2Xb f7BbG8/i3iSUyEMjrj2xSM3b7CN9NGBb7TRYuHP5jqw+DUs3lp4g9f7dRwFj4YUJ zppjHb9wiLS2Dv71CDKqOuCJieRvMUhfKdsmWOlc5YGT8uDNhYs2qE0cYQCnF5+Z 0pJqTUIyyKQfVJHJ6moXeMhbMpZjWtRgPnY9MBr8ntZWulUXKGTqlt8jNU088zBT 6lQEqrQx/M2jzlsqJw/B1TCmcNytXWM+FwDSASGjthg9zys= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org