$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33323a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a33323a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: h8mEQq3kqk+hGiDA9a7xST4dIFFDUZqT0VFMLSnhq0U= Subject key identifier: 85:40:90:67:63:FB:D6:94:12:CA:D7:DA:1D:48:41:33:A6:E8:B5:3B Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 2DB65E9F35203A242A1E0B24CE8FAD4F35C15621 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33323a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:00 +0000 ROA not before: Thu 09 May 2024 03:56:00 +0000 ROA not after: Thu 08 May 2025 04:01:00 +0000 asID: 55701 IP address blocks: 2405:b900:32::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b6:5e:9f:35:20:3a:24:2a:1e:0b:24:ce:8f:ad:4f:35:c1:56:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:00 2024 GMT Not After : May 8 04:01:00 2025 GMT Subject: CN=8540906763FBD69412CAD7DA1D484133A6E8B53B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bb:4d:67:00:4f:5c:8a:19:4a:60:e3:cd:19: 07:7b:8a:94:3b:07:ab:3b:f7:99:db:48:7a:6b:b9: 9d:51:6a:27:c8:48:e5:da:b0:9e:15:2f:dc:d2:51: d3:ec:0f:02:9f:4b:21:90:90:b4:19:9d:eb:1a:54: 70:84:d7:36:41:80:e7:9c:51:02:f2:df:08:c3:db: 85:f9:30:69:e5:f8:93:ad:fd:8c:b8:9c:b0:29:86: 49:09:ac:1e:ba:b4:ef:81:c1:57:43:83:ae:a6:b3: b1:43:cc:b0:44:e5:e1:1d:30:8b:ca:22:b8:7e:ba: 65:bb:19:52:c6:04:66:fe:87:15:4f:20:0b:da:11: 61:98:a2:a3:df:26:c4:d2:a1:92:fd:d8:f1:46:94: 36:c5:0b:6a:f3:f9:2a:b4:85:bf:50:65:83:8f:61: e3:f0:1c:eb:69:55:53:7c:76:db:14:5a:ba:1c:2a: 0b:b0:fd:bb:7c:45:5a:da:d4:95:ae:4e:de:4e:f1: 07:90:1e:2b:64:5e:70:6f:9b:14:4d:84:07:ec:5c: 09:17:47:9b:41:dc:55:f0:50:c2:d0:55:bc:4a:25: 79:42:93:22:6f:f2:a2:d1:90:23:42:80:c3:8d:d8: c3:33:7d:06:ac:f8:04:0f:5c:22:37:ad:f2:41:7e: fe:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:40:90:67:63:FB:D6:94:12:CA:D7:DA:1D:48:41:33:A6:E8:B5:3B X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33323a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:32::/48 Signature Algorithm: sha256WithRSAEncryption 9f:61:9c:90:fb:81:ba:34:2a:69:89:63:2e:34:1b:6a:d2:db: 88:1d:a6:3f:0c:55:29:e8:f9:59:a3:e9:fc:69:ab:4d:9e:dc: 38:5c:c7:cc:e9:d8:8b:e4:9a:35:5a:c8:de:ab:dc:95:7d:86: a6:f1:ce:1b:6f:0b:76:ba:60:c4:e7:27:b6:df:5b:7f:c3:3f: 4e:99:d4:09:d9:d9:db:2f:91:a9:5f:98:b5:05:0a:ff:75:61: 3a:79:78:3b:70:23:71:1d:4d:ca:43:c0:a7:73:c7:f1:8f:87: ef:e9:59:a5:f0:d4:02:f9:39:77:fe:12:c4:9a:43:31:d8:43: b4:5d:02:07:dc:f7:2d:61:ab:06:99:f3:cf:f3:32:52:79:1e: 89:d8:57:c9:6a:dd:75:6e:8a:20:99:25:a7:e3:22:7e:2c:30: ee:67:5d:99:2c:df:7b:16:b3:57:ca:37:63:ce:4b:3b:b1:ba: d4:51:bb:21:72:b1:a2:df:36:a4:d1:b7:2e:5e:ac:74:7c:b4: 28:3f:45:3e:26:c2:fb:b4:2c:8f:95:cf:14:90:88:ea:68:8c: 9e:91:d0:68:4f:42:87:84:09:bd:dc:66:75:48:23:07:67:23: 95:ee:12:d9:47:e5:1e:59:7d:2c:a8:23:9a:e9:b6:43:e0:6d: b5:03:05:84 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIULbZenzUgOiQqHgskzo+tTzXBViEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDBaFw0yNTA1MDgwNDAxMDBaMDMxMTAvBgNV BAMTKDg1NDA5MDY3NjNGQkQ2OTQxMkNBRDdEQTFENDg0MTMzQTZFOEI1M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSu01nAE9cihlKYOPNGQd7ipQ7 B6s795nbSHpruZ1RaifISOXasJ4VL9zSUdPsDwKfSyGQkLQZnesaVHCE1zZBgOec UQLy3wjD24X5MGnl+JOt/Yy4nLAphkkJrB66tO+BwVdDg66ms7FDzLBE5eEdMIvK Irh+umW7GVLGBGb+hxVPIAvaEWGYoqPfJsTSoZL92PFGlDbFC2rz+Sq0hb9QZYOP YePwHOtpVVN8dtsUWrocKguw/bt8RVra1JWuTt5O8QeQHitkXnBvmxRNhAfsXAkX R5tB3FXwUMLQVbxKJXlCkyJv8qLRkCNCgMON2MMzfQas+AQPXCI3rfJBfv77AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUhUCQZ2P71pQSytfaHUhBM6botTswHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzMzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAADIw DQYJKoZIhvcNAQELBQADggEBAJ9hnJD7gbo0KmmJYy40G2rS24gdpj8MVSno+Vmj 6fxpq02e3Dhcx8zp2IvkmjVayN6r3JV9hqbxzhtvC3a6YMTnJ7bfW3/DP06Z1AnZ 2dsvkalfmLUFCv91YTp5eDtwI3EdTcpDwKdzx/GPh+/pWaXw1AL5OXf+EsSaQzHY Q7RdAgfc9y1hqwaZ88/zMlJ5HonYV8lq3XVuiiCZJafjIn4sMO5nXZks33sWs1fK N2POSzuxutRRuyFysaLfNqTRty5erHR8tCg/RT4mwvu0LI+VzxSQiOpojJ6R0GhP QoeECb3cZnVIIwdnI5XuEtlH5R5ZfSyoI5rptkPgbbUDBYQ= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org