$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31373a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a31373a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: 7SsOD6QWmWj9YFKe87kxnxJcnNkHCqrpnuIoBP+zdT4= Subject key identifier: 40:DE:BC:B3:C0:01:FA:F2:0C:5B:B2:89:E6:AD:3A:58:CA:B9:64:DB Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 09E66BFF03AF0118E7D7403A346CB392E18B040B Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31373a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:00:58 +0000 ROA not before: Thu 09 May 2024 03:55:58 +0000 ROA not after: Thu 08 May 2025 04:00:58 +0000 asID: 55701 IP address blocks: 2405:b900:17::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e6:6b:ff:03:af:01:18:e7:d7:40:3a:34:6c:b3:92:e1:8b:04:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:55:58 2024 GMT Not After : May 8 04:00:58 2025 GMT Subject: CN=40DEBCB3C001FAF20C5BB289E6AD3A58CAB964DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:b7:44:84:43:91:1c:b0:df:b6:7e:34:5c: 42:7d:20:72:15:92:99:0e:32:69:ba:b0:4d:ca:9a: 61:3f:c8:37:0a:3b:77:f0:fa:78:d2:f6:dd:20:db: 45:c8:35:df:44:44:aa:a8:93:06:79:ad:41:83:21: 12:61:0d:74:a7:85:24:23:2e:e4:92:74:70:f5:2a: 23:04:44:26:ca:25:a6:14:06:f9:31:d2:95:9c:e7: 2a:a1:74:26:c3:47:38:b8:56:28:65:6c:7b:b8:e6: 20:0d:c4:db:a7:d0:6a:6d:34:75:83:22:1d:db:a2: 57:94:ed:df:65:be:35:74:fd:2e:ca:53:f0:1b:90: dd:0a:35:81:4b:7e:62:66:df:47:f7:b5:b9:26:1a: 88:7b:63:83:11:1d:96:d5:49:6b:c2:1b:ed:ed:ca: 40:95:0a:1a:b6:14:21:5b:53:33:b0:07:48:dc:f4: e8:ab:c1:57:01:e4:81:98:0e:d3:2c:78:c7:70:21: b0:d0:8c:e0:e0:5b:00:53:f5:bf:11:8a:b3:d2:de: af:9c:64:ee:2a:1e:94:9b:1b:9c:03:67:21:a5:34: 87:1f:46:e8:cb:06:48:94:df:d6:c1:8b:90:1b:77: 76:42:07:8e:92:2b:c0:b3:87:53:7c:7b:ae:54:c0: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DE:BC:B3:C0:01:FA:F2:0C:5B:B2:89:E6:AD:3A:58:CA:B9:64:DB X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31373a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:17::/48 Signature Algorithm: sha256WithRSAEncryption 52:94:58:f0:c4:86:77:e1:24:4c:8b:3c:e4:c6:13:aa:b2:a7: 13:56:92:66:71:a4:55:67:80:d4:39:a2:dd:be:5e:f6:e0:a3: b1:41:0f:bc:f1:08:a0:fc:e3:2d:fa:8f:23:d8:6e:57:16:5e: ec:71:9c:9c:d4:92:b8:04:9e:32:06:41:d3:f2:93:26:4f:b1: 39:a0:ab:df:0a:30:ee:1d:1d:ab:10:40:af:b6:5e:bd:c7:2d: 50:e4:28:7e:fc:93:57:44:bf:0a:df:27:d9:1b:35:3f:99:06: 5d:d9:cc:af:1b:d4:3a:aa:70:52:84:50:09:2a:06:e3:58:ac: 36:8a:d8:e1:31:9c:6c:f3:8e:79:47:e1:d9:32:59:a4:52:bb: a4:ab:34:d6:b5:c6:c9:10:bf:5e:7f:4e:02:61:6a:0f:4c:16: ad:06:2c:c6:68:3a:d9:49:88:6c:46:36:22:86:ad:1e:4d:4a: c6:e2:9e:d4:4f:86:1d:de:d3:a3:11:57:85:67:bf:50:42:f0: c3:58:88:8f:5f:a6:c7:fc:18:b3:17:48:85:07:63:63:b2:a2: 99:e8:f9:cd:b2:d2:6c:55:fb:1a:8c:e7:65:85:cc:23:97:46: 75:d0:28:d0:ff:af:0a:23:d8:41:b0:9a:2c:20:c2:8a:01:92: 53:34:d6:6e -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUCeZr/wOvARjn10A6NGyzkuGLBAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU1NThaFw0yNTA1MDgwNDAwNThaMDMxMTAvBgNV BAMTKDQwREVCQ0IzQzAwMUZBRjIwQzVCQjI4OUU2QUQzQTU4Q0FCOTY0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSbdEhEORHLDftn40XEJ9IHIV kpkOMmm6sE3KmmE/yDcKO3fw+njS9t0g20XINd9ERKqokwZ5rUGDIRJhDXSnhSQj LuSSdHD1KiMERCbKJaYUBvkx0pWc5yqhdCbDRzi4VihlbHu45iANxNun0GptNHWD Ih3boleU7d9lvjV0/S7KU/AbkN0KNYFLfmJm30f3tbkmGoh7Y4MRHZbVSWvCG+3t ykCVChq2FCFbUzOwB0jc9OirwVcB5IGYDtMseMdwIbDQjODgWwBT9b8RirPS3q+c ZO4qHpSbG5wDZyGlNIcfRujLBkiU39bBi5Abd3ZCB46SK8Czh1N8e65UwKp1AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUQN68s8AB+vIMW7KJ5q06WMq5ZNswHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzEzNzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAABcw DQYJKoZIhvcNAQELBQADggEBAFKUWPDEhnfhJEyLPOTGE6qypxNWkmZxpFVngNQ5 ot2+Xvbgo7FBD7zxCKD84y36jyPYblcWXuxxnJzUkrgEnjIGQdPykyZPsTmgq98K MO4dHasQQK+2Xr3HLVDkKH78k1dEvwrfJ9kbNT+ZBl3ZzK8b1DqqcFKEUAkqBuNY rDaK2OExnGzzjnlH4dkyWaRSu6SrNNa1xskQv15/TgJhag9MFq0GLMZoOtlJiGxG NiKGrR5NSsbintRPhh3e06MRV4Vnv1BC8MNYiI9fpsf8GLMXSIUHY2Oyopno+c2y 0mxV+xqM52WFzCOXRnXQKND/rwoj2EGwmiwgwooBklM01m4= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org