$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32343a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a32343a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: dLo6/4a/xU6GBKOTvYzGKAh81iKGfcZp4BGavs8784o= Subject key identifier: 95:40:3C:EE:DE:00:F5:06:1F:EB:E2:43:30:C7:87:48:A8:7B:1D:26 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 253C5BD45CCDAA4210A8A09167324A9F63EBA599 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32343a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:07 +0000 ROA not before: Thu 09 May 2024 03:56:07 +0000 ROA not after: Thu 08 May 2025 04:01:07 +0000 asID: 55701 IP address blocks: 2405:b900:24::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:3c:5b:d4:5c:cd:aa:42:10:a8:a0:91:67:32:4a:9f:63:eb:a5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:07 2024 GMT Not After : May 8 04:01:07 2025 GMT Subject: CN=95403CEEDE00F5061FEBE24330C78748A87B1D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:f5:a2:43:16:14:0f:ee:1c:df:67:4c:1d: d1:10:1f:c3:60:19:98:36:d8:8b:6d:be:d0:22:92: 91:d8:ac:5a:f3:54:83:14:93:21:77:ce:9a:bc:a3: 54:3f:dc:9c:f6:b5:c2:83:6c:f0:44:58:f5:fe:35: 20:a1:79:2f:bd:09:c3:8b:3e:24:91:4a:71:8a:ee: 31:39:9d:14:70:75:78:a1:a8:de:f6:5c:aa:fa:f3: d5:7d:59:7b:23:a1:c3:9a:cc:9c:a3:86:b4:b1:ad: b0:21:ca:af:54:9a:f6:33:d7:18:1d:6a:69:9d:19: 1a:5f:f5:fa:40:89:92:37:0f:2a:29:2f:14:b4:49: 87:fc:98:65:47:62:55:06:6a:59:3f:be:8d:84:3c: 85:8c:83:8e:79:32:e6:1d:b1:f7:5f:61:a0:aa:62: 33:87:58:8f:e4:9f:0e:cd:08:a6:ad:21:13:7e:81: 46:63:81:d6:4b:fc:de:db:6b:a0:85:66:89:9b:ca: 51:e8:35:aa:7b:b7:52:7e:31:16:4c:ef:68:60:c2: 0d:6c:65:ad:c8:c9:f0:e7:52:0f:88:79:7b:13:77: f6:e0:fb:a4:c2:eb:31:0e:f7:c5:47:df:a1:6e:4a: b4:75:28:fc:c1:5b:08:4f:89:44:3b:12:c6:86:74: 3d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:40:3C:EE:DE:00:F5:06:1F:EB:E2:43:30:C7:87:48:A8:7B:1D:26 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32343a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:24::/48 Signature Algorithm: sha256WithRSAEncryption b4:65:d4:b4:22:24:06:2f:3d:8b:4d:71:a2:e0:7f:cf:12:1e: 31:93:1b:59:49:37:cb:39:56:30:29:a6:44:de:7d:ca:73:1c: 07:78:cc:de:83:ff:48:c1:65:06:c5:ce:a6:ee:30:d5:6d:42: e4:65:da:06:11:07:6e:7f:d5:3c:82:62:bd:de:99:95:9f:4d: 47:19:e4:0e:24:4c:23:60:d2:3a:09:e9:af:a9:f4:74:6c:de: 88:b2:73:4a:68:50:7e:ab:d3:bc:42:5f:52:fc:ec:f5:45:9e: dc:8e:7f:02:67:10:be:3b:48:73:bb:53:53:8b:5d:e0:65:4d: fd:a5:c6:01:77:a4:7b:f1:ab:ed:7e:db:da:12:00:71:f6:ab: bd:6e:f6:9c:85:8c:6f:eb:79:c1:36:72:e7:58:85:93:d8:1e: cb:ff:b8:5d:dc:66:e7:e9:b1:5d:aa:95:e8:85:06:89:fe:13: b2:f6:08:96:e4:94:a3:21:00:04:e0:9b:48:31:7f:5a:39:76: e3:c5:e4:30:5e:01:fb:4e:08:e2:7e:63:a7:bb:ee:a7:93:37: 83:7a:f8:63:3e:f6:7d:08:b1:3e:43:b9:3c:42:93:84:0a:fd: c4:e1:f8:bc:fc:f9:c6:e5:c1:f3:f8:c4:03:07:3c:ae:1a:e3: 65:98:99:5b -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUJTxb1FzNqkIQqKCRZzJKn2PrpZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDdaFw0yNTA1MDgwNDAxMDdaMDMxMTAvBgNV BAMTKDk1NDAzQ0VFREUwMEY1MDYxRkVCRTI0MzMwQzc4NzQ4QTg3QjFEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiT/WiQxYUD+4c32dMHdEQH8Ng GZg22IttvtAikpHYrFrzVIMUkyF3zpq8o1Q/3Jz2tcKDbPBEWPX+NSCheS+9CcOL PiSRSnGK7jE5nRRwdXihqN72XKr689V9WXsjocOazJyjhrSxrbAhyq9UmvYz1xgd ammdGRpf9fpAiZI3DyopLxS0SYf8mGVHYlUGalk/vo2EPIWMg455MuYdsfdfYaCq YjOHWI/knw7NCKatIRN+gUZjgdZL/N7ba6CFZombylHoNap7t1J+MRZM72hgwg1s Za3IyfDnUg+IeXsTd/bg+6TC6zEO98VH36FuSrR1KPzBWwhPiUQ7EsaGdD2vAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUlUA87t4A9QYf6+JDMMeHSKh7HSYwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzIzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAACQw DQYJKoZIhvcNAQELBQADggEBALRl1LQiJAYvPYtNcaLgf88SHjGTG1lJN8s5VjAp pkTefcpzHAd4zN6D/0jBZQbFzqbuMNVtQuRl2gYRB25/1TyCYr3emZWfTUcZ5A4k TCNg0joJ6a+p9HRs3oiyc0poUH6r07xCX1L87PVFntyOfwJnEL47SHO7U1OLXeBl Tf2lxgF3pHvxq+1+29oSAHH2q71u9pyFjG/recE2cudYhZPYHsv/uF3cZufpsV2q leiFBon+E7L2CJbklKMhAATgm0gxf1o5duPF5DBeAftOCOJ+Y6e77qeTN4N6+GM+ 9n0IsT5DuTxCk4QK/cTh+Lz8+cblwfP4xAMHPK4a42WYmVs= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org