$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32333a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a32333a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: ApqtT67ENUk1iz/tTF+E57N/r4jhwE7xoted7YWRAu8= Subject key identifier: 02:25:E0:96:CD:50:CB:57:B4:56:A4:1B:C4:DB:70:71:DC:DE:86:C7 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 4C0D6E2BB18585E262B20190C89987B773ED3612 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32333a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:00:57 +0000 ROA not before: Thu 09 May 2024 03:55:57 +0000 ROA not after: Thu 08 May 2025 04:00:57 +0000 asID: 55701 IP address blocks: 2405:b900:23::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0d:6e:2b:b1:85:85:e2:62:b2:01:90:c8:99:87:b7:73:ed:36:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:55:57 2024 GMT Not After : May 8 04:00:57 2025 GMT Subject: CN=0225E096CD50CB57B456A41BC4DB7071DCDE86C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:be:fc:61:cd:7c:2c:48:b0:6f:b9:f5:3a: a7:34:5c:76:bc:d6:b3:0c:9d:8d:1a:68:b0:cf:90: f8:13:93:58:ba:c0:48:e3:ee:fa:3e:ad:6e:a1:1d: b1:b0:5b:26:bf:3a:06:76:ba:07:3b:15:89:98:f5: 9d:63:d1:c8:af:51:eb:f3:64:23:8c:51:85:48:2b: 15:06:5f:18:cd:2c:4b:ec:c2:88:a8:87:10:be:13: 35:34:28:22:6b:75:00:0b:f4:00:25:00:b1:c7:09: 59:0d:61:58:6c:f4:fc:61:df:1e:32:34:93:d1:c7: e5:b3:f5:dc:12:2e:4e:c0:24:a2:05:b0:ba:76:a8: 48:e4:6f:07:16:ed:81:69:27:ed:2d:5e:49:7d:e1: 08:39:41:41:3d:50:cb:3b:f5:e6:de:7d:d6:f8:f4: 11:e7:31:a7:8c:d6:db:a8:57:7a:f1:24:28:1d:7a: b7:6f:75:77:0e:d8:7e:b5:6f:e3:35:8a:a1:b9:50: 4b:7b:3c:d1:ee:fa:80:9e:2e:18:65:fa:5b:a0:e3: 16:c5:a7:06:bb:61:95:5f:92:43:01:bf:69:64:45: b3:8a:78:3f:cf:f2:35:89:df:c5:7d:54:03:c8:c7: 28:9e:3e:07:1a:f3:d6:13:52:51:fa:a5:4f:0b:2a: 9d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:25:E0:96:CD:50:CB:57:B4:56:A4:1B:C4:DB:70:71:DC:DE:86:C7 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32333a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:23::/48 Signature Algorithm: sha256WithRSAEncryption 27:89:f4:16:2c:c3:f3:10:2b:da:ca:4a:51:f8:86:27:1e:fa: a8:c4:7a:9b:cc:d9:2c:3a:ae:0d:16:81:af:28:2d:59:77:b1: b7:19:61:1b:5a:47:2c:e8:85:f1:3b:dc:38:3b:ad:15:d6:fd: 59:cf:ec:ae:f6:cb:ab:1f:3d:63:c6:78:56:fe:7d:a3:71:b1: f3:a6:b7:9f:0b:f0:71:a3:1b:34:77:e2:d0:be:e3:0a:71:c2: a2:b4:f2:f6:e1:4c:55:2e:db:21:c3:2d:e4:d8:32:2e:cd:e6: 2d:02:60:4f:84:b8:1d:f0:ad:e0:ba:05:06:ec:cc:4e:7c:c8: 43:36:1b:f2:c6:22:52:53:be:74:0e:0e:52:41:b2:73:8a:22: 2d:95:f7:bf:cf:5f:76:a0:43:46:38:f4:8e:56:d9:43:46:3a: fb:ae:e3:ee:50:c6:94:b0:74:b1:6c:28:e3:2c:d8:3a:14:e5: 93:54:94:e5:68:18:54:04:3a:ae:e6:bf:b9:ab:ca:8f:cd:50: 54:97:17:f2:13:67:02:78:fd:af:dd:a3:b9:f9:5f:46:88:b0: d4:3a:5e:f4:87:da:9a:35:2a:17:27:30:2b:ef:ac:93:2c:6d: 12:ca:26:97:de:6f:b6:92:b9:24:3b:f9:68:b2:06:0e:6c:ab: 51:f4:86:69 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUTA1uK7GFheJisgGQyJmHt3PtNhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU1NTdaFw0yNTA1MDgwNDAwNTdaMDMxMTAvBgNV BAMTKDAyMjVFMDk2Q0Q1MENCNTdCNDU2QTQxQkM0REI3MDcxRENERTg2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVb78Yc18LEiwb7n1Oqc0XHa8 1rMMnY0aaLDPkPgTk1i6wEjj7vo+rW6hHbGwWya/OgZ2ugc7FYmY9Z1j0civUevz ZCOMUYVIKxUGXxjNLEvswoiohxC+EzU0KCJrdQAL9AAlALHHCVkNYVhs9Pxh3x4y NJPRx+Wz9dwSLk7AJKIFsLp2qEjkbwcW7YFpJ+0tXkl94Qg5QUE9UMs79ebefdb4 9BHnMaeM1tuoV3rxJCgderdvdXcO2H61b+M1iqG5UEt7PNHu+oCeLhhl+lug4xbF pwa7YZVfkkMBv2lkRbOKeD/P8jWJ38V9VAPIxyiePgca89YTUlH6pU8LKp3tAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUAiXgls1Qy1e0VqQbxNtwcdzehscwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzIzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAACMw DQYJKoZIhvcNAQELBQADggEBACeJ9BYsw/MQK9rKSlH4hice+qjEepvM2Sw6rg0W ga8oLVl3sbcZYRtaRyzohfE73Dg7rRXW/VnP7K72y6sfPWPGeFb+faNxsfOmt58L 8HGjGzR34tC+4wpxwqK08vbhTFUu2yHDLeTYMi7N5i0CYE+EuB3wreC6BQbszE58 yEM2G/LGIlJTvnQODlJBsnOKIi2V97/PX3agQ0Y49I5W2UNGOvuu4+5QxpSwdLFs KOMs2DoU5ZNUlOVoGFQEOq7mv7mryo/NUFSXF/ITZwJ4/a/do7n5X0aIsNQ6XvSH 2po1KhcnMCvvrJMsbRLKJpfeb7aSuSQ7+WiyBg5sq1H0hmk= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org