$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32373a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a32373a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: TvssLr6Sm9sPvZlah859CF07BmdwxBxBYm3fZvj+GR4= Subject key identifier: A8:E5:86:EA:69:3F:DC:56:16:7F:8C:02:D8:BC:86:01:06:DB:FA:66 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 470407910F5372868FB5DE341FC3AA5710CDC093 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32373a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:09 +0000 ROA not before: Thu 09 May 2024 03:56:09 +0000 ROA not after: Thu 08 May 2025 04:01:09 +0000 asID: 55701 IP address blocks: 2405:b900:27::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:04:07:91:0f:53:72:86:8f:b5:de:34:1f:c3:aa:57:10:cd:c0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:09 2024 GMT Not After : May 8 04:01:09 2025 GMT Subject: CN=A8E586EA693FDC56167F8C02D8BC860106DBFA66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:5c:55:6e:63:b6:75:f4:8c:3d:e5:4c:08: 27:01:83:eb:d7:80:4d:63:e8:f0:76:e2:3d:10:6a: 37:5e:5b:d2:b2:74:82:b0:3c:a0:03:ea:40:9d:c6: 21:a9:a1:a5:5e:c9:50:5c:75:33:b3:24:dd:b8:da: 96:26:a3:9d:b3:76:60:34:f8:20:b0:e0:53:b4:13: c4:30:a2:d1:57:e3:fb:7f:c8:54:31:de:4d:73:f9: 49:9f:3e:06:38:25:b6:b6:55:a4:e1:38:2e:47:58: 9d:24:ed:95:e1:90:e2:37:23:34:c2:51:e3:b9:0c: fa:19:ff:86:09:06:1d:9d:41:cd:e2:99:17:38:09: 6c:4e:1e:a8:93:f2:fa:c6:49:9e:54:c6:bd:1b:64: 0b:66:a6:ff:d2:34:38:29:ed:0c:4f:34:70:81:4f: e9:4a:75:ca:0b:80:11:fe:a3:46:97:72:da:eb:18: 7b:76:98:54:ed:86:10:a3:6a:d9:2b:55:54:32:33: 51:a1:7b:f9:d3:4d:40:c1:61:55:54:ce:32:76:26: 5a:08:44:54:70:cd:00:fc:95:23:e1:3f:6a:88:a2: 23:ed:44:8b:e7:45:5c:2b:10:c8:a9:b0:7e:d2:d3: 6a:cf:76:cb:96:b1:1e:cf:9a:9c:b7:1f:08:a6:a3: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E5:86:EA:69:3F:DC:56:16:7F:8C:02:D8:BC:86:01:06:DB:FA:66 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32373a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:27::/48 Signature Algorithm: sha256WithRSAEncryption 41:11:7d:85:30:6d:1f:9e:e2:e6:03:ca:d2:aa:7c:12:51:ee: 91:8f:c9:70:bd:d4:63:12:e3:f1:99:39:71:e2:b9:ac:44:7a: c2:d0:da:16:1f:c2:94:49:1a:82:6c:90:3b:0e:bc:f4:ac:df: 09:67:ff:43:36:38:9b:da:0e:5c:30:e1:d3:bc:31:1a:f3:f5: c9:bf:97:fd:bc:4c:58:d0:9a:b9:48:65:b5:23:9d:ff:c6:98: c5:6f:39:ef:ea:f8:4c:bf:c0:e2:c9:9f:98:04:ae:19:a9:02: 90:71:75:bc:42:23:53:da:5d:7d:c3:94:50:b6:9f:a1:da:f8: aa:7b:29:f9:76:24:46:63:36:67:e6:81:7f:fb:0b:1b:77:dc: 6d:5b:df:00:0b:af:5c:f4:22:71:70:b4:1d:0f:66:75:e0:31: ad:dd:1d:d6:cb:16:2f:7c:5e:e2:e5:ee:c0:01:3f:76:45:fc: c0:c1:c3:16:2a:dd:e3:44:e6:a7:2d:29:ed:70:a4:01:f3:3f: 1d:71:57:c2:5d:3f:c1:76:31:fa:08:57:9a:23:eb:b3:f8:ca: 77:03:13:4b:42:de:06:2e:a7:18:a2:0a:cb:93:36:5d:6b:7f: a3:61:b8:ee:54:94:1c:f6:b0:66:ae:60:65:12:a0:bc:4b:10: 71:c6:6a:68 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIURwQHkQ9TcoaPtd40H8OqVxDNwJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDlaFw0yNTA1MDgwNDAxMDlaMDMxMTAvBgNV BAMTKEE4RTU4NkVBNjkzRkRDNTYxNjdGOEMwMkQ4QkM4NjAxMDZEQkZBNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNlxVbmO2dfSMPeVMCCcBg+vX gE1j6PB24j0QajdeW9KydIKwPKAD6kCdxiGpoaVeyVBcdTOzJN242pYmo52zdmA0 +CCw4FO0E8QwotFX4/t/yFQx3k1z+UmfPgY4Jba2VaThOC5HWJ0k7ZXhkOI3IzTC UeO5DPoZ/4YJBh2dQc3imRc4CWxOHqiT8vrGSZ5Uxr0bZAtmpv/SNDgp7QxPNHCB T+lKdcoLgBH+o0aXctrrGHt2mFTthhCjatkrVVQyM1Ghe/nTTUDBYVVUzjJ2JloI RFRwzQD8lSPhP2qIoiPtRIvnRVwrEMipsH7S02rPdsuWsR7Pmpy3Hwimo8bjAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUqOWG6mk/3FYWf4wC2LyGAQbb+mYwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzIzNzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAACcw DQYJKoZIhvcNAQELBQADggEBAEERfYUwbR+e4uYDytKqfBJR7pGPyXC91GMS4/GZ OXHiuaxEesLQ2hYfwpRJGoJskDsOvPSs3wln/0M2OJvaDlww4dO8MRrz9cm/l/28 TFjQmrlIZbUjnf/GmMVvOe/q+Ey/wOLJn5gErhmpApBxdbxCI1PaXX3DlFC2n6Ha +Kp7Kfl2JEZjNmfmgX/7Cxt33G1b3wALr1z0InFwtB0PZnXgMa3dHdbLFi98XuLl 7sABP3ZF/MDBwxYq3eNE5qctKe1wpAHzPx1xV8JdP8F2MfoIV5oj67P4yncDE0tC 3gYupxiiCsuTNl1rf6NhuO5UlBz2sGauYGUSoLxLEHHGamg= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org