$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a323030303a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a323030303a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: sXeIAkQpiYFyjnrfznxJBQNjcgW5QvGs+GzUDfpsxzE= Subject key identifier: FD:B0:9B:AB:EF:B4:6E:08:EF:4F:56:2B:FF:04:FE:2D:8C:46:3D:4D Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 3C76AD048D55AA4297C66B1C944849321E5484FC Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a323030303a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:09 +0000 ROA not before: Thu 09 May 2024 03:56:09 +0000 ROA not after: Thu 08 May 2025 04:01:09 +0000 asID: 55701 IP address blocks: 2405:b900:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:76:ad:04:8d:55:aa:42:97:c6:6b:1c:94:48:49:32:1e:54:84:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:09 2024 GMT Not After : May 8 04:01:09 2025 GMT Subject: CN=FDB09BABEFB46E08EF4F562BFF04FE2D8C463D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:11:26:57:d6:17:1c:6a:7f:67:77:e2:3a: ea:ea:2c:e0:94:e0:8b:48:45:63:bc:33:a4:dd:76: 7b:b0:02:7d:3d:b1:5b:04:2d:aa:22:f9:28:51:12: f9:bd:8b:67:f6:f7:18:54:4a:15:db:9b:d2:cc:63: d3:f7:cc:1d:8d:9d:d5:6f:0b:56:a5:91:ac:d8:c5: 53:c4:b9:50:1b:e0:b9:02:21:a4:f9:af:5a:59:e6: 02:36:ff:b7:f8:de:4f:97:9c:22:e4:c3:9a:82:10: 24:6d:10:d9:3f:d6:ba:38:49:8b:c5:a5:39:f5:37: d6:2f:cb:13:a6:43:6a:5d:fc:6b:05:2e:21:7a:b5: a8:28:a1:78:88:dd:12:be:6c:cd:7d:81:38:de:c0: 5c:b3:17:46:ee:44:af:57:c5:ea:89:f3:ee:00:6c: f9:cf:63:22:4b:6f:c4:15:e6:d1:5b:ae:d7:31:0c: 42:07:f2:f0:99:de:59:dc:5a:49:51:73:86:05:94: 86:57:e0:d4:9d:cc:fe:90:ac:5f:44:32:f6:ae:3e: ca:29:b3:7a:db:94:8f:62:44:78:0c:cd:c6:17:eb: c6:1a:25:4a:50:1a:44:cb:c0:dc:cb:fd:3d:29:53: 31:7d:62:b4:0b:6a:1b:69:f8:5a:d2:2a:08:64:b8: 0c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B0:9B:AB:EF:B4:6E:08:EF:4F:56:2B:FF:04:FE:2D:8C:46:3D:4D X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a323030303a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:2000::/48 Signature Algorithm: sha256WithRSAEncryption 0f:ac:ba:6e:62:d2:34:a7:e8:24:32:7d:11:2b:b0:fb:e9:ec: 96:eb:e9:27:ae:fe:25:af:da:ee:c0:0c:16:80:0e:30:27:fb: 8a:b6:05:53:c8:67:7a:15:56:e8:44:40:63:1c:e3:45:99:cb: 75:8f:6d:0a:48:3b:e4:ba:f3:07:3b:50:1f:d5:46:c8:d5:f8: e8:fa:9f:54:cc:3e:c9:ab:ab:88:73:2c:3c:92:78:f0:75:79: 23:4e:d2:a8:10:3d:23:b6:ae:82:52:c3:31:db:16:50:cb:a8: 08:9f:98:b4:e6:a1:ec:92:f1:0d:f8:66:7c:f0:51:30:89:13: c3:1f:32:ba:03:d2:dd:ee:ca:a4:30:6c:60:74:1f:b1:48:e9: e8:41:cf:cf:f9:ee:6e:00:ab:e2:b5:16:a6:1b:13:34:bf:ff: 03:1d:f2:70:18:5b:f9:91:09:d4:64:b9:53:ae:41:2d:37:1d: 63:98:f2:4c:a1:02:ab:20:40:83:4f:c3:b1:d0:f7:ce:01:77: 98:37:73:ba:0b:58:f7:8d:a1:d0:2d:1d:ba:21:62:a2:4d:42: d3:4b:c0:bf:f8:a4:e3:40:a9:7f:66:de:c4:c4:49:1c:66:a7: d5:6a:50:bf:bb:4a:17:35:dd:fe:ba:c1:e0:76:65:d3:09:fa: 55:72:65:48 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPHatBI1VqkKXxmsclEhJMh5UhPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDlaFw0yNTA1MDgwNDAxMDlaMDMxMTAvBgNV BAMTKEZEQjA5QkFCRUZCNDZFMDhFRjRGNTYyQkZGMDRGRTJEOEM0NjNENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvxEmV9YXHGp/Z3fiOurqLOCU 4ItIRWO8M6TddnuwAn09sVsELaoi+ShREvm9i2f29xhUShXbm9LMY9P3zB2NndVv C1alkazYxVPEuVAb4LkCIaT5r1pZ5gI2/7f43k+XnCLkw5qCECRtENk/1ro4SYvF pTn1N9YvyxOmQ2pd/GsFLiF6tagooXiI3RK+bM19gTjewFyzF0buRK9XxeqJ8+4A bPnPYyJLb8QV5tFbrtcxDEIH8vCZ3lncWklRc4YFlIZX4NSdzP6QrF9EMvauPsop s3rblI9iRHgMzcYX68YaJUpQGkTLwNzL/T0pUzF9YrQLahtp+FrSKghkuAzBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU/bCbq++0bgjvT1Yr/wT+LYxGPU0wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzIzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5 ACAAMA0GCSqGSIb3DQEBCwUAA4IBAQAPrLpuYtI0p+gkMn0RK7D76eyW6+knrv4l r9ruwAwWgA4wJ/uKtgVTyGd6FVboREBjHONFmct1j20KSDvkuvMHO1Af1UbI1fjo +p9UzD7Jq6uIcyw8knjwdXkjTtKoED0jtq6CUsMx2xZQy6gIn5i05qHskvEN+GZ8 8FEwiRPDHzK6A9Ld7sqkMGxgdB+xSOnoQc/P+e5uAKvitRamGxM0v/8DHfJwGFv5 kQnUZLlTrkEtNx1jmPJMoQKrIECDT8Ox0PfOAXeYN3O6C1j3jaHQLR26IWKiTULT S8C/+KTjQKl/Zt7ExEkcZqfValC/u0oXNd3+usHgdmXTCfpVcmVI -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org