$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31393a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a31393a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: sAcqWc71k8jx7uN9A1y0MLDHKStnRX9MWJsEf6yekTo= Subject key identifier: B1:FA:ED:DE:17:41:5E:D0:33:45:C8:1B:89:BF:C5:CE:63:AA:F3:01 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 0653E4605D2264B749EF539FF5D8630109C607A1 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31393a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:01 +0000 ROA not before: Thu 09 May 2024 03:56:01 +0000 ROA not after: Thu 08 May 2025 04:01:01 +0000 asID: 55701 IP address blocks: 2405:b900:19::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:53:e4:60:5d:22:64:b7:49:ef:53:9f:f5:d8:63:01:09:c6:07:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:01 2024 GMT Not After : May 8 04:01:01 2025 GMT Subject: CN=B1FAEDDE17415ED03345C81B89BFC5CE63AAF301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6b:14:67:cd:04:14:86:4d:d2:f9:a0:12:5c: 14:c6:b0:37:05:f3:cf:5f:a4:8a:57:9f:32:92:5e: 5c:ad:5b:89:0b:0c:8d:27:e2:4f:68:7c:9b:92:51: fc:e0:af:c0:6b:38:7b:cb:80:a4:3e:bd:7d:5b:bc: 7a:b7:64:ea:be:83:e3:26:87:b4:f8:5d:f5:60:a6: 79:66:dc:82:0d:aa:10:a7:91:1d:20:05:a1:8e:0d: 6c:03:24:c8:ed:7f:bb:a6:29:07:8d:29:ff:f7:ce: 3a:48:4e:87:12:d4:ef:bb:26:87:5b:c2:98:59:1f: 53:b2:7d:17:67:bc:8f:f9:21:42:a8:62:41:a2:48: cd:13:55:4b:ef:2b:96:d0:4a:40:13:c7:3b:85:82: be:73:f3:e1:e4:b8:30:fc:99:a6:8d:09:cc:1f:c1: ed:ba:c4:0a:9f:7a:10:03:3c:16:c8:6e:da:b7:85: ea:46:48:78:0e:31:54:5b:4e:27:5b:c1:99:1c:1c: fb:d7:a5:e0:6a:f8:a3:23:42:ac:66:60:e9:c5:c5: ba:c0:a3:88:87:2e:95:39:96:97:3d:d3:52:d9:5f: b9:3f:28:2e:44:6a:92:8c:d9:95:a9:ac:de:34:3d: ac:d2:23:bb:6b:b0:90:52:cc:90:04:30:6f:4a:c0: 0d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FA:ED:DE:17:41:5E:D0:33:45:C8:1B:89:BF:C5:CE:63:AA:F3:01 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31393a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:19::/48 Signature Algorithm: sha256WithRSAEncryption 99:7b:b0:3a:69:ab:3d:9e:f7:82:11:05:17:7b:6f:a8:ed:7c: 57:80:17:0b:83:ed:e9:71:6e:61:b9:4f:ac:aa:1e:7a:8a:4e: fa:f4:1d:43:a4:84:f7:36:48:a4:39:53:03:ae:67:0a:73:30: df:2a:a3:df:5e:65:14:d0:05:4d:d1:65:d3:a0:a0:17:a9:b5: 0d:25:9e:9a:2b:7b:1d:8d:2e:0c:57:0b:f6:91:e8:f1:9e:78: 56:84:0a:03:88:3e:5e:fa:f1:ae:a9:67:f3:59:f9:72:6b:5f: f2:47:2d:83:a0:0b:6b:64:4b:b2:00:07:99:05:71:c7:35:c4: c6:24:58:5c:b7:1b:6f:19:ba:95:89:a3:e0:3b:c4:b3:e9:e3: e2:de:28:13:1d:6c:40:18:8c:d6:dc:0b:51:e9:86:f8:0d:bf: 6e:a9:c5:46:05:c4:71:24:88:38:3a:da:9a:d2:fc:cf:52:97: 96:ff:d7:66:6a:95:ce:a7:5a:d0:33:d0:63:7e:1f:a8:65:53: 88:aa:cd:2d:6c:3e:70:c2:4f:1c:94:de:f3:62:2c:0e:5b:c1: 7b:0d:9b:8e:31:e1:ff:fc:6e:05:c3:5a:f1:35:15:68:f9:c0: dd:41:86:04:a4:18:1f:d6:a7:18:02:72:79:b3:44:c2:ff:72: 7c:ba:5d:e7 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUBlPkYF0iZLdJ71Of9dhjAQnGB6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDFaFw0yNTA1MDgwNDAxMDFaMDMxMTAvBgNV BAMTKEIxRkFFRERFMTc0MTVFRDAzMzQ1QzgxQjg5QkZDNUNFNjNBQUYzMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnaxRnzQQUhk3S+aASXBTGsDcF 889fpIpXnzKSXlytW4kLDI0n4k9ofJuSUfzgr8BrOHvLgKQ+vX1bvHq3ZOq+g+Mm h7T4XfVgpnlm3IINqhCnkR0gBaGODWwDJMjtf7umKQeNKf/3zjpITocS1O+7Jodb wphZH1OyfRdnvI/5IUKoYkGiSM0TVUvvK5bQSkATxzuFgr5z8+HkuDD8maaNCcwf we26xAqfehADPBbIbtq3hepGSHgOMVRbTidbwZkcHPvXpeBq+KMjQqxmYOnFxbrA o4iHLpU5lpc901LZX7k/KC5EapKM2ZWprN40PazSI7trsJBSzJAEMG9KwA3nAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUsfrt3hdBXtAzRcgbib/FzmOq8wEwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzEzOTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAABkw DQYJKoZIhvcNAQELBQADggEBAJl7sDppqz2e94IRBRd7b6jtfFeAFwuD7elxbmG5 T6yqHnqKTvr0HUOkhPc2SKQ5UwOuZwpzMN8qo99eZRTQBU3RZdOgoBeptQ0lnpor ex2NLgxXC/aR6PGeeFaECgOIPl768a6pZ/NZ+XJrX/JHLYOgC2tkS7IAB5kFccc1 xMYkWFy3G28ZupWJo+A7xLPp4+LeKBMdbEAYjNbcC1HphvgNv26pxUYFxHEkiDg6 2prS/M9Sl5b/12Zqlc6nWtAz0GN+H6hlU4iqzS1sPnDCTxyU3vNiLA5bwXsNm44x 4f/8bgXDWvE1FWj5wN1BhgSkGB/WpxgCcnmzRML/cny6Xec= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org