$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a313a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a313a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: 3I2tSVcoJkIGQVsfKMuBz9QzwTFTPuWr1MWYZmH0Czo= Subject key identifier: 99:FB:6D:A0:13:74:51:94:1E:6E:DA:FE:1F:EC:A1:B2:D3:A5:03:AF Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 5A65E38C3B8CBD1272335FA8B2735AD6D229B9DF Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a313a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:05 +0000 ROA not before: Thu 09 May 2024 03:56:05 +0000 ROA not after: Thu 08 May 2025 04:01:05 +0000 asID: 55701 IP address blocks: 2405:b900:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:65:e3:8c:3b:8c:bd:12:72:33:5f:a8:b2:73:5a:d6:d2:29:b9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:05 2024 GMT Not After : May 8 04:01:05 2025 GMT Subject: CN=99FB6DA0137451941E6EDAFE1FECA1B2D3A503AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:5c:8e:94:a3:88:00:3e:03:bb:51:c6:fa: fc:3e:7b:43:99:6b:b4:73:d4:4a:26:85:9b:59:a1: f2:bc:20:b3:de:d2:9a:24:88:99:2a:e7:45:73:2a: a0:32:61:16:56:4f:8c:a2:ec:93:ca:09:44:67:6e: 72:da:51:4b:92:35:7e:5c:61:c8:08:bd:e6:df:cb: 7a:68:15:5a:ea:5f:bf:e3:9b:51:5e:90:0d:b4:56: f4:1e:09:ce:b3:94:40:84:10:f2:02:9e:b5:fc:3d: f1:c3:1b:b7:6e:d5:b2:00:45:1d:e8:f5:01:01:4d: 88:00:63:9d:8e:fc:c8:15:fc:8f:b2:7b:c8:56:ea: 5d:7f:5d:b4:97:89:45:f3:d2:0f:6e:d9:cd:f5:80: ac:44:79:b6:bd:c5:03:a2:66:69:e4:c5:2d:bd:68: d8:0d:00:0e:86:5b:3d:c3:2f:85:77:47:91:aa:43: 46:24:8f:2c:ea:e4:6e:12:4b:88:c0:fb:51:e9:12: 0f:de:09:71:26:ed:ce:05:56:54:a3:a2:a0:c2:56: 62:93:00:e0:68:5b:30:d0:20:7e:38:6c:93:5f:e8: 81:f2:ae:76:7c:ca:50:7e:d8:a7:d6:76:a5:bb:03: 1f:c5:ce:a7:b7:d9:54:b0:d5:2f:bd:4f:0c:01:2c: 8a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FB:6D:A0:13:74:51:94:1E:6E:DA:FE:1F:EC:A1:B2:D3:A5:03:AF X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a313a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:1::/48 Signature Algorithm: sha256WithRSAEncryption 30:4b:5f:fd:53:a3:cc:0d:1b:fe:80:17:99:b9:10:32:be:7b: c9:85:8b:19:47:4f:23:c8:16:0c:b1:39:bf:c7:7d:03:8a:d7: 6d:b7:df:71:4b:48:7f:54:9b:36:18:79:ac:c8:b4:dd:89:cc: 7c:43:a5:2a:a2:88:e0:35:a4:fc:34:05:d2:af:d5:00:fd:03: c7:2b:87:0e:89:ab:b9:95:44:b6:e4:5f:c4:97:aa:61:fa:bb: b7:2a:1e:3f:b1:14:10:8a:08:a2:95:bd:8a:f4:bf:b3:01:ec: 6e:5c:02:0a:98:3d:34:4d:fd:f8:b9:83:85:33:ce:fc:6a:2f: a8:66:39:6b:0e:9f:18:b2:74:cc:73:14:f4:f7:73:28:2c:56: ce:44:f7:9b:13:32:84:9f:9b:30:d0:4c:ce:03:91:86:ec:a6: 59:7c:c4:42:14:3e:91:1a:ed:0b:0c:14:c0:ae:cb:77:7c:b8: 08:44:90:5d:c4:4a:f0:48:16:d3:1b:1f:a9:48:b9:cb:af:04: c1:14:38:be:fd:9d:cf:e2:02:c7:d3:ee:4d:85:6b:70:8c:b6: 4e:b9:97:3c:33:32:0d:e7:c2:9d:78:f7:43:a0:81:43:7d:3a: 79:f0:cb:cc:3b:ef:4e:57:57:d7:69:08:8b:c5:2c:85:0f:0c: 4c:33:e8:60 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUWmXjjDuMvRJyM1+osnNa1tIpud8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDVaFw0yNTA1MDgwNDAxMDVaMDMxMTAvBgNV BAMTKDk5RkI2REEwMTM3NDUxOTQxRTZFREFGRTFGRUNBMUIyRDNBNTAzQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBm1yOlKOIAD4Du1HG+vw+e0OZ a7Rz1EomhZtZofK8ILPe0pokiJkq50VzKqAyYRZWT4yi7JPKCURnbnLaUUuSNX5c YcgIvebfy3poFVrqX7/jm1FekA20VvQeCc6zlECEEPICnrX8PfHDG7du1bIARR3o 9QEBTYgAY52O/MgV/I+ye8hW6l1/XbSXiUXz0g9u2c31gKxEeba9xQOiZmnkxS29 aNgNAA6GWz3DL4V3R5GqQ0Ykjyzq5G4SS4jA+1HpEg/eCXEm7c4FVlSjoqDCVmKT AOBoWzDQIH44bJNf6IHyrnZ8ylB+2KfWdqW7Ax/Fzqe32VSw1S+9TwwBLIofAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUmfttoBN0UZQebtr+H+yhstOlA68wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5AAABMA0G CSqGSIb3DQEBCwUAA4IBAQAwS1/9U6PMDRv+gBeZuRAyvnvJhYsZR08jyBYMsTm/ x30Ditdtt99xS0h/VJs2GHmsyLTdicx8Q6UqoojgNaT8NAXSr9UA/QPHK4cOiau5 lUS25F/El6ph+ru3Kh4/sRQQigiilb2K9L+zAexuXAIKmD00Tf34uYOFM878ai+o ZjlrDp8YsnTMcxT093MoLFbORPebEzKEn5sw0EzOA5GG7KZZfMRCFD6RGu0LDBTA rst3fLgIRJBdxErwSBbTGx+pSLnLrwTBFDi+/Z3P4gLH0+5NhWtwjLZOuZc8MzIN 58KdePdDoIFDfTp58MvMO+9OV1fXaQiLxSyFDwxMM+hg -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org