$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33303a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a33303a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: TfVndBG8zEb+FAVlioOMkyIiXoyRpGVAKp5keYWfsr0= Subject key identifier: 8C:C0:38:A7:F0:F4:7B:78:70:8D:F0:45:57:08:03:04:DC:58:B8:29 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 6EA1AE20A04A60B6C7B2818CB7C91317E6D2BCE8 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33303a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:00:58 +0000 ROA not before: Thu 09 May 2024 03:55:58 +0000 ROA not after: Thu 08 May 2025 04:00:58 +0000 asID: 55701 IP address blocks: 2405:b900:30::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a1:ae:20:a0:4a:60:b6:c7:b2:81:8c:b7:c9:13:17:e6:d2:bc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:55:58 2024 GMT Not After : May 8 04:00:58 2025 GMT Subject: CN=8CC038A7F0F47B78708DF04557080304DC58B829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:8f:1e:06:ef:e3:26:63:69:4d:98:41:c0: 10:82:73:31:80:48:14:11:00:ab:f2:13:5c:f3:da: bd:83:eb:79:97:f3:9f:27:e0:fd:f3:00:3e:63:17: 85:22:b7:88:fb:76:41:73:f0:4e:c8:7e:10:b3:b3: a8:5e:1f:d1:a3:1c:00:93:4f:1e:05:ca:6c:31:84: b6:2f:85:57:11:59:34:b3:04:06:d9:4f:00:7c:63: c2:c6:9b:d2:88:40:7c:ec:43:83:3a:d2:e0:f2:69: b3:61:50:f0:58:80:24:f3:3c:29:b2:ad:0d:5a:bd: 14:05:0b:f3:cf:49:98:3a:6a:d7:1d:33:bb:6e:ac: 7d:5b:9b:93:d8:57:5a:69:51:bc:42:38:33:65:bd: 13:65:a1:a6:48:18:4b:ad:91:9e:d2:73:e7:99:74: ac:06:73:34:ff:48:61:f0:5d:f4:0f:96:83:39:82: af:ba:76:19:d6:dc:59:f1:18:cc:ff:ce:d4:ce:22: fe:4e:07:d9:1d:24:d9:53:ee:69:7e:6a:b8:d6:31: 41:99:a9:20:6b:14:24:cd:fd:91:f5:42:05:d1:c1: 36:f6:5e:1f:45:75:46:bc:e0:fa:f4:22:e7:a5:fb: 80:d6:41:c6:ea:8e:4e:f2:e4:85:6d:d0:27:c1:44: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C0:38:A7:F0:F4:7B:78:70:8D:F0:45:57:08:03:04:DC:58:B8:29 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33303a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:30::/48 Signature Algorithm: sha256WithRSAEncryption 6d:4a:7f:fa:c0:59:56:77:21:97:9e:45:90:37:d7:ea:b7:d7: 40:ff:b3:ae:a8:bb:27:d9:a4:55:ee:e7:96:e1:b4:a6:68:6a: ab:bc:0f:2d:a9:17:ca:e3:ce:f0:c1:a7:d6:89:55:6e:1e:9c: 52:f0:ee:75:ea:1b:2b:6f:1d:55:c9:4d:c9:0f:94:5b:f2:30: 2c:d0:7b:fa:ee:d9:d7:ea:84:fe:f9:8d:67:19:e0:f1:ec:5d: 07:c9:f0:c5:c1:95:27:ad:89:1b:57:eb:10:6f:8a:a6:9c:3c: 4e:70:a7:8f:60:a0:7a:fa:a6:24:8e:fb:96:d4:33:81:62:cf: 81:11:0d:64:ce:6b:23:f8:70:0c:d6:06:f6:56:e5:18:0d:6b: bd:c3:41:0c:c4:42:54:21:40:e9:56:29:8a:8b:94:c5:33:40: 00:75:98:c8:df:ba:f6:e0:32:b2:4b:c6:e3:61:21:47:69:9e: f9:56:76:3e:0a:1b:32:39:6c:26:29:ae:5c:ef:78:5e:7a:5a: 22:dc:43:1c:28:50:25:d2:7c:b9:02:4f:41:d8:4e:5a:14:ba: 96:43:80:ec:5f:a5:87:55:00:0c:fe:be:7d:0b:aa:7f:21:ec: 3e:2a:e2:ac:1a:69:a6:af:9c:c1:46:cb:c4:82:a8:aa:8a:14: b5:e6:83:8b -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUbqGuIKBKYLbHsoGMt8kTF+bSvOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU1NThaFw0yNTA1MDgwNDAwNThaMDMxMTAvBgNV BAMTKDhDQzAzOEE3RjBGNDdCNzg3MDhERjA0NTU3MDgwMzA0REM1OEI4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXI8eBu/jJmNpTZhBwBCCczGA SBQRAKvyE1zz2r2D63mX858n4P3zAD5jF4Uit4j7dkFz8E7IfhCzs6heH9GjHACT Tx4FymwxhLYvhVcRWTSzBAbZTwB8Y8LGm9KIQHzsQ4M60uDyabNhUPBYgCTzPCmy rQ1avRQFC/PPSZg6atcdM7turH1bm5PYV1ppUbxCODNlvRNloaZIGEutkZ7Sc+eZ dKwGczT/SGHwXfQPloM5gq+6dhnW3FnxGMz/ztTOIv5OB9kdJNlT7ml+arjWMUGZ qSBrFCTN/ZH1QgXRwTb2Xh9FdUa84Pr0Iuel+4DWQcbqjk7y5IVt0CfBRBJRAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUjMA4p/D0e3hwjfBFVwgDBNxYuCkwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzMzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAADAw DQYJKoZIhvcNAQELBQADggEBAG1Kf/rAWVZ3IZeeRZA31+q310D/s66ouyfZpFXu 55bhtKZoaqu8Dy2pF8rjzvDBp9aJVW4enFLw7nXqGytvHVXJTckPlFvyMCzQe/ru 2dfqhP75jWcZ4PHsXQfJ8MXBlSetiRtX6xBviqacPE5wp49goHr6piSO+5bUM4Fi z4ERDWTOayP4cAzWBvZW5RgNa73DQQzEQlQhQOlWKYqLlMUzQAB1mMjfuvbgMrJL xuNhIUdpnvlWdj4KGzI5bCYprlzveF56WiLcQxwoUCXSfLkCT0HYTloUupZDgOxf pYdVAAz+vn0Lqn8h7D4q4qwaaaavnMFGy8SCqKqKFLXmg4s= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org