$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33313a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a33313a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: DKiHrc0kJJXWXct57L6aj0P+62tYPYzLJ5fVEYWYqLQ= Subject key identifier: 6B:9D:4F:2F:22:7E:29:CF:F9:E0:11:B2:1D:BB:D8:E5:94:EC:3D:DC Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 3003A422638A8669037E6C174ECF6944D2B4A89D Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33313a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:01 +0000 ROA not before: Thu 09 May 2024 03:56:01 +0000 ROA not after: Thu 08 May 2025 04:01:01 +0000 asID: 55701 IP address blocks: 2405:b900:31::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:03:a4:22:63:8a:86:69:03:7e:6c:17:4e:cf:69:44:d2:b4:a8:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:01 2024 GMT Not After : May 8 04:01:01 2025 GMT Subject: CN=6B9D4F2F227E29CFF9E011B21DBBD8E594EC3DDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ad:55:4e:ac:79:44:59:06:f1:c7:9e:26:20: a7:e1:ca:63:02:d7:e7:c1:0c:b4:dc:2e:35:ed:2d: 65:2c:a6:66:6f:c4:70:0a:7b:96:0d:02:16:ba:5a: b4:b2:23:7e:35:5d:5b:18:4d:6a:1b:c0:42:12:45: 0b:58:b1:64:28:78:a1:18:8d:2c:d3:7f:2f:3b:45: d4:df:0e:8f:64:9f:e7:b6:36:d2:1c:1a:66:0f:f6: f4:b1:83:7c:26:c3:80:16:fb:4f:fe:9f:9b:ff:94: 60:aa:f0:2d:03:a6:dc:af:00:85:45:72:83:80:33: 8a:04:53:e1:30:9e:4e:0f:af:d7:2d:90:93:52:fa: 4f:de:f9:10:06:d9:4c:b9:c0:b5:30:20:43:d5:7b: 56:0a:c6:73:76:9d:08:97:d4:76:03:f4:0b:f9:5a: 6e:a8:3c:6b:58:84:52:3f:80:19:4b:e9:e2:f2:85: fb:78:6b:35:6b:9e:85:68:b8:e0:a4:63:1d:12:46: 83:35:f6:2f:9b:38:37:a4:83:9c:f9:f4:62:13:98: a8:8e:08:7e:fe:af:2c:87:50:ef:1f:c1:f3:3d:c3: af:cc:4d:67:bc:8d:42:60:3e:71:61:be:29:1b:f6: 79:6b:a7:e9:a9:20:c3:4b:81:7b:4b:b7:4d:53:36: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9D:4F:2F:22:7E:29:CF:F9:E0:11:B2:1D:BB:D8:E5:94:EC:3D:DC X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33313a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:31::/48 Signature Algorithm: sha256WithRSAEncryption 92:c2:f9:1a:43:cc:3a:15:05:dc:76:9b:69:52:71:48:89:42: 3f:ad:12:1a:66:85:f2:e9:cc:d1:ec:09:e3:7a:f6:75:77:9f: 29:6b:55:3a:48:1f:e6:de:9d:0a:99:e9:c1:36:1e:4d:9c:31: b5:c5:cf:00:7c:e5:f6:cd:12:c0:68:cd:87:c5:44:56:4c:2f: 02:9e:cb:ef:db:00:75:1d:cd:da:ae:97:ef:19:41:9e:0c:90: 82:87:7e:72:9d:46:44:41:81:7a:96:4a:d7:83:20:b5:db:1c: d7:67:91:ad:f3:51:62:32:44:8a:4b:81:2c:47:79:64:a5:b6: e9:29:86:5f:aa:26:6c:49:fd:f7:77:13:f9:90:12:d0:be:da: d5:3e:59:56:be:80:7f:02:59:6f:3d:7b:28:98:9e:c9:9e:54: 54:73:f4:fb:24:a7:be:fa:8d:e8:a7:65:d9:5e:b6:c0:77:21: 0d:4a:fe:8c:de:39:d9:c0:95:e9:52:75:b1:eb:c4:f6:4f:66: 56:2c:12:91:d9:40:5f:74:59:0f:c2:09:cd:bd:09:7a:3a:e0: b5:4f:aa:c1:2e:76:f9:72:3c:19:6f:55:bc:86:d0:5a:a5:05: 6d:e1:30:12:85:3c:7f:73:a5:39:2a:48:94:42:89:3c:54:a0: 8f:ef:ff:e8 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUMAOkImOKhmkDfmwXTs9pRNK0qJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDFaFw0yNTA1MDgwNDAxMDFaMDMxMTAvBgNV BAMTKDZCOUQ0RjJGMjI3RTI5Q0ZGOUUwMTFCMjFEQkJEOEU1OTRFQzNEREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwrVVOrHlEWQbxx54mIKfhymMC 1+fBDLTcLjXtLWUspmZvxHAKe5YNAha6WrSyI341XVsYTWobwEISRQtYsWQoeKEY jSzTfy87RdTfDo9kn+e2NtIcGmYP9vSxg3wmw4AW+0/+n5v/lGCq8C0DptyvAIVF coOAM4oEU+Ewnk4Pr9ctkJNS+k/e+RAG2Uy5wLUwIEPVe1YKxnN2nQiX1HYD9Av5 Wm6oPGtYhFI/gBlL6eLyhft4azVrnoVouOCkYx0SRoM19i+bODekg5z59GITmKiO CH7+ryyHUO8fwfM9w6/MTWe8jUJgPnFhvikb9nlrp+mpIMNLgXtLt01TNi/vAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUa51PLyJ+Kc/54BGyHbvY5ZTsPdwwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzMzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAADEw DQYJKoZIhvcNAQELBQADggEBAJLC+RpDzDoVBdx2m2lScUiJQj+tEhpmhfLpzNHs CeN69nV3nylrVTpIH+benQqZ6cE2Hk2cMbXFzwB85fbNEsBozYfFRFZMLwKey+/b AHUdzdqul+8ZQZ4MkIKHfnKdRkRBgXqWSteDILXbHNdnka3zUWIyRIpLgSxHeWSl tukphl+qJmxJ/fd3E/mQEtC+2tU+WVa+gH8CWW89eyiYnsmeVFRz9Pskp776jein ZdletsB3IQ1K/ozeOdnAlelSdbHrxPZPZlYsEpHZQF90WQ/CCc29CXo64LVPqsEu dvlyPBlvVbyG0FqlBW3hMBKFPH9zpTkqSJRCiTxUoI/v/+g= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org