$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32353a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a32353a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: qM3g9gtXBC79FBBqb90tUUPvTrRw3yg3KCexEXaBEhs= Subject key identifier: 88:A1:94:08:C6:99:98:7C:45:E7:0C:AF:20:13:EA:1C:EA:58:38:2B Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 25415EC1CE3696FA0013CEAA24C9D8BD0D4B207E Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32353a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:00:57 +0000 ROA not before: Thu 09 May 2024 03:55:57 +0000 ROA not after: Thu 08 May 2025 04:00:57 +0000 asID: 55701 IP address blocks: 2405:b900:25::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:41:5e:c1:ce:36:96:fa:00:13:ce:aa:24:c9:d8:bd:0d:4b:20:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:55:57 2024 GMT Not After : May 8 04:00:57 2025 GMT Subject: CN=88A19408C699987C45E70CAF2013EA1CEA58382B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:e3:71:b2:aa:c6:08:3d:bd:08:d6:b2:d4: c6:06:eb:14:3b:2a:bb:f2:23:75:59:e9:fc:83:55: 10:ca:e4:f7:7d:57:34:69:b2:0b:fc:21:44:6b:df: f2:3b:4f:a6:ac:75:19:13:f2:7f:9f:15:73:21:18: e8:94:e6:28:4a:39:60:9e:d8:d7:38:8d:70:e8:a5: 84:83:bf:f8:1a:b9:64:7c:ac:59:cd:72:d5:33:fe: 46:9f:00:0f:1a:89:54:73:14:01:48:65:3f:fe:b6: 7c:9c:5e:97:94:bf:ef:80:d5:cd:9e:6a:8d:cb:51: 57:6a:f4:64:a9:6a:b8:46:a2:f3:f2:ec:fb:60:c7: 5f:76:76:a7:4d:b7:50:15:27:0e:86:4c:73:8c:0e: c0:4a:b8:76:1b:08:cd:d5:3f:37:4d:60:75:ad:08: c2:43:32:9c:83:b8:d6:1a:83:45:20:31:38:b0:be: 05:4a:b1:59:e6:88:2b:14:49:a2:c5:b4:1b:b7:7a: 8f:a5:75:3d:03:98:b6:ec:8b:df:c1:6e:11:cb:fd: 17:92:3d:4e:fc:0e:42:0b:27:94:a6:86:01:21:8f: 17:52:4b:77:75:f5:6c:56:ad:2d:1f:1a:49:6c:a8: e2:78:87:09:a5:60:6f:56:d9:23:f7:47:16:29:fb: 84:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A1:94:08:C6:99:98:7C:45:E7:0C:AF:20:13:EA:1C:EA:58:38:2B X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32353a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:25::/48 Signature Algorithm: sha256WithRSAEncryption 8e:2b:5d:23:1d:80:ec:0a:d3:ab:4b:7e:23:1f:a6:8a:ba:d3: fc:f4:0c:63:f4:e1:0d:0b:e8:34:e2:5b:e8:e4:f8:8a:ec:43: 1c:25:d1:11:74:72:ee:17:1a:fc:f2:0d:ac:b5:db:ad:de:94: d2:04:47:46:78:fe:67:d4:7d:64:b2:fd:1d:c1:4d:7a:7a:a9: 49:3e:11:50:04:20:aa:2e:13:f8:b6:35:af:71:c5:d1:b7:02: 7e:33:12:d8:ed:86:50:65:12:8b:a6:9f:59:ed:a6:90:c1:c3: 7c:17:7e:6c:cc:cc:99:bb:28:50:70:89:8c:69:a0:12:7e:d3: c4:ba:90:29:e5:ee:51:dd:30:6e:2d:08:d2:16:06:b2:23:13: cb:6a:9f:b8:12:c7:de:9f:b7:7f:c4:65:5e:c0:1b:5f:3b:96: 0a:df:59:d2:7b:4b:f7:49:24:56:79:18:ff:f1:fb:91:c0:31: cb:29:0a:13:19:54:5f:ab:77:2c:48:36:dc:e1:47:41:9b:b4: 17:d6:46:d0:64:94:8c:69:79:f4:73:db:d0:c4:f4:6c:7f:20: a2:23:c6:ee:f0:28:71:22:fc:f8:74:d1:bd:9a:bf:7b:e2:73: 0b:da:f8:cb:eb:9c:f9:d8:97:e7:c3:41:df:13:a5:6f:22:1a: c3:ff:bb:5f -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUJUFewc42lvoAE86qJMnYvQ1LIH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU1NTdaFw0yNTA1MDgwNDAwNTdaMDMxMTAvBgNV BAMTKDg4QTE5NDA4QzY5OTk4N0M0NUU3MENBRjIwMTNFQTFDRUE1ODM4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyeNxsqrGCD29CNay1MYG6xQ7 KrvyI3VZ6fyDVRDK5Pd9VzRpsgv8IURr3/I7T6asdRkT8n+fFXMhGOiU5ihKOWCe 2Nc4jXDopYSDv/gauWR8rFnNctUz/kafAA8aiVRzFAFIZT/+tnycXpeUv++A1c2e ao3LUVdq9GSparhGovPy7Ptgx192dqdNt1AVJw6GTHOMDsBKuHYbCM3VPzdNYHWt CMJDMpyDuNYag0UgMTiwvgVKsVnmiCsUSaLFtBu3eo+ldT0DmLbsi9/BbhHL/ReS PU78DkILJ5SmhgEhjxdSS3d19WxWrS0fGklsqOJ4hwmlYG9W2SP3RxYp+4TRAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUiKGUCMaZmHxF5wyvIBPqHOpYOCswHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzIzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAACUw DQYJKoZIhvcNAQELBQADggEBAI4rXSMdgOwK06tLfiMfpoq60/z0DGP04Q0L6DTi W+jk+IrsQxwl0RF0cu4XGvzyDay1263elNIER0Z4/mfUfWSy/R3BTXp6qUk+EVAE IKouE/i2Na9xxdG3An4zEtjthlBlEoumn1ntppDBw3wXfmzMzJm7KFBwiYxpoBJ+ 08S6kCnl7lHdMG4tCNIWBrIjE8tqn7gSx96ft3/EZV7AG187lgrfWdJ7S/dJJFZ5 GP/x+5HAMcspChMZVF+rdyxINtzhR0GbtBfWRtBklIxpefRz29DE9Gx/IKIjxu7w KHEi/Ph00b2av3vicwva+MvrnPnYl+fDQd8TpW8iGsP/u18= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org