$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32383a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a32383a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: 6bhTfm/nBb7KpjjtxWVO27P6qu9BnpIIv7Ehdbxy7W0= Subject key identifier: C1:03:31:F5:65:17:B8:1A:A8:9C:FB:E7:96:E9:66:DA:37:98:2B:68 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 60CE0BE2DC28010C4C3BCA835586FCAFB427A6F9 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32383a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:07 +0000 ROA not before: Thu 09 May 2024 03:56:07 +0000 ROA not after: Thu 08 May 2025 04:01:07 +0000 asID: 55701 IP address blocks: 2405:b900:28::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ce:0b:e2:dc:28:01:0c:4c:3b:ca:83:55:86:fc:af:b4:27:a6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:07 2024 GMT Not After : May 8 04:01:07 2025 GMT Subject: CN=C10331F56517B81AA89CFBE796E966DA37982B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8c:03:04:32:00:b7:a7:78:95:e8:46:6f:14: b6:1a:4f:97:17:35:95:c0:a8:30:4f:4e:4b:ae:85: 48:26:f0:a1:86:45:e6:b5:b9:1e:2c:01:80:1c:c2: 16:7a:c3:0c:fc:bd:6b:d9:67:36:80:6f:70:22:ad: de:0d:02:29:81:6b:5d:ef:8f:3f:1f:a7:b1:49:29: 95:bf:1d:c0:6c:1f:17:28:da:65:45:85:2f:8f:43: 01:4c:b1:fe:16:80:ef:40:09:9b:a7:67:da:1f:c1: 96:8d:aa:19:3a:f2:e1:9e:0e:90:8a:1c:80:95:ff: 28:1f:69:1c:24:e1:a1:4e:32:5a:37:58:47:0e:ee: 70:85:ea:f5:3e:ff:86:cc:3b:40:22:99:ca:83:9b: 77:6f:5c:12:1a:2f:17:2d:af:cd:38:3f:18:a8:ad: 04:c1:89:68:ce:99:55:d6:e1:3c:f6:96:3b:8c:bf: 96:1e:cb:bd:6d:11:18:d8:d9:3f:df:89:1c:9b:82: ec:ee:5d:2a:17:43:9e:bf:fd:a4:b7:76:ea:90:04: 36:2f:6e:3b:25:64:85:df:43:f3:cb:87:6d:43:1f: 19:10:87:5f:21:5c:8d:e0:86:6e:39:28:4a:f7:aa: f1:59:b3:b5:e3:a8:51:39:ce:01:fa:b6:aa:8a:ff: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:03:31:F5:65:17:B8:1A:A8:9C:FB:E7:96:E9:66:DA:37:98:2B:68 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a32383a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:28::/48 Signature Algorithm: sha256WithRSAEncryption 64:08:a9:d4:8e:67:01:43:d4:8a:94:db:a8:97:4e:e5:f7:d4: f6:d0:35:4c:b5:fe:d5:46:21:2d:31:ea:02:02:c6:b6:e4:24: c5:df:48:79:7a:4e:7a:59:ac:0c:32:c5:97:07:f4:ad:b3:5e: 36:aa:8c:36:65:a4:b4:a3:2a:2e:7d:92:f6:5f:2b:24:42:3b: da:e2:f4:d2:ce:c3:69:b8:6c:d7:83:08:95:39:ef:84:f7:76: b6:79:2a:a1:4e:1a:1e:ac:f1:7a:c7:94:eb:89:6a:b2:f6:93: 2e:81:47:30:67:a4:78:70:56:a9:98:dc:22:e5:db:04:e2:09: 5e:ba:42:12:22:4f:08:5d:10:39:68:99:dd:a9:a4:e5:bc:40: 9e:bf:5a:d1:e1:90:73:30:c2:13:ff:97:ad:7e:66:d0:d3:c4: c7:4c:74:e9:62:09:97:5b:cd:29:b4:68:56:bc:73:3f:af:11: 7a:1c:b1:e5:05:61:fa:7b:49:05:1c:11:e5:ad:cc:c9:72:85: d7:4e:7e:14:d4:d0:bf:de:a5:a0:9b:dc:7e:1c:c7:f9:aa:bd: 78:ea:fd:6c:59:d3:2b:14:ae:85:5c:e8:fe:f1:33:3d:35:15: ad:f4:e1:b2:61:09:52:b9:0d:d7:7b:31:59:44:e8:aa:81:c0: 33:f2:ce:dd -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYM4L4twoAQxMO8qDVYb8r7QnpvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDdaFw0yNTA1MDgwNDAxMDdaMDMxMTAvBgNV BAMTKEMxMDMzMUY1NjUxN0I4MUFBODlDRkJFNzk2RTk2NkRBMzc5ODJCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijAMEMgC3p3iV6EZvFLYaT5cX NZXAqDBPTkuuhUgm8KGGRea1uR4sAYAcwhZ6wwz8vWvZZzaAb3Aird4NAimBa13v jz8fp7FJKZW/HcBsHxco2mVFhS+PQwFMsf4WgO9ACZunZ9ofwZaNqhk68uGeDpCK HICV/ygfaRwk4aFOMlo3WEcO7nCF6vU+/4bMO0AimcqDm3dvXBIaLxctr804Pxio rQTBiWjOmVXW4Tz2ljuMv5Yey71tERjY2T/fiRybguzuXSoXQ56//aS3duqQBDYv bjslZIXfQ/PLh21DHxkQh18hXI3ghm45KEr3qvFZs7XjqFE5zgH6tqqK/1jpAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUwQMx9WUXuBqonPvnlulm2jeYK2gwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzIzODNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAACgw DQYJKoZIhvcNAQELBQADggEBAGQIqdSOZwFD1IqU26iXTuX31PbQNUy1/tVGIS0x 6gICxrbkJMXfSHl6TnpZrAwyxZcH9K2zXjaqjDZlpLSjKi59kvZfKyRCO9ri9NLO w2m4bNeDCJU574T3drZ5KqFOGh6s8XrHlOuJarL2ky6BRzBnpHhwVqmY3CLl2wTi CV66QhIiTwhdEDlomd2ppOW8QJ6/WtHhkHMwwhP/l61+ZtDTxMdMdOliCZdbzSm0 aFa8cz+vEXocseUFYfp7SQUcEeWtzMlyhddOfhTU0L/epaCb3H4cx/mqvXjq/WxZ 0ysUroVc6P7xMz01Fa304bJhCVK5Ddd7MVlE6KqBwDPyzt0= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org