$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33333a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a33333a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: e6LAdhivgSxFYEjIYD2WIRUYkX5rBxCVb66Ag4VCxfk= Subject key identifier: 2F:7C:83:AE:5A:05:18:F7:12:EB:30:7E:C9:B5:6B:3F:55:3A:15:28 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 4E4B9881FDACD99B8ECEDDA2A837E0E51AA45BF6 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33333a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:00:59 +0000 ROA not before: Thu 09 May 2024 03:55:59 +0000 ROA not after: Thu 08 May 2025 04:00:59 +0000 asID: 55701 IP address blocks: 2405:b900:33::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4b:98:81:fd:ac:d9:9b:8e:ce:dd:a2:a8:37:e0:e5:1a:a4:5b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:55:59 2024 GMT Not After : May 8 04:00:59 2025 GMT Subject: CN=2F7C83AE5A0518F712EB307EC9B56B3F553A1528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:17:84:45:51:cd:d4:5a:f5:41:54:3a:83: d9:c2:3c:23:69:7b:75:b9:c5:3f:90:c9:92:d4:a7: a5:b8:d0:10:d1:f9:0d:ef:4c:57:28:8e:52:8c:8c: 75:26:56:d7:ef:ac:c7:3b:38:ed:05:c4:df:a6:14: 7a:dc:93:11:91:c1:7e:2a:31:92:c5:50:b4:89:08: e3:79:f3:51:23:c0:47:de:98:f4:d3:58:d6:e4:a6: dc:eb:bc:d0:61:04:d8:73:5d:c2:03:a3:0a:44:dc: 6f:5d:e8:67:b3:df:74:46:10:b7:08:e2:f9:37:39: 85:85:36:92:40:a4:67:a6:84:18:34:13:1f:b1:3a: 3d:28:4f:60:d0:c1:48:ed:72:7c:38:2f:3a:f7:ff: fb:a7:8d:f9:55:db:dc:34:c6:59:19:1a:9f:04:3b: 27:23:4c:7a:29:0c:0a:c7:5a:4a:5e:92:69:23:99: dd:5b:86:4c:62:94:5d:a0:cf:7d:d2:04:f4:75:f2: 08:fd:af:91:7e:28:42:30:ba:81:75:76:7a:df:80: 85:b2:39:c6:61:90:08:f9:98:c8:57:9f:dd:9a:60: 94:aa:92:7b:d1:4c:bc:b9:2f:d8:1d:41:be:85:0d: 5a:b6:59:10:5d:3b:96:79:78:a8:af:15:ee:4c:5f: 41:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7C:83:AE:5A:05:18:F7:12:EB:30:7E:C9:B5:6B:3F:55:3A:15:28 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33333a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:33::/48 Signature Algorithm: sha256WithRSAEncryption 09:eb:58:72:0f:5a:bb:a0:c8:eb:41:e9:5e:7c:95:5d:8e:22: 3c:2a:ea:7d:30:35:4e:b7:61:8e:b5:2d:80:71:7f:65:40:d6: d9:ea:1c:62:48:38:00:a3:ee:e3:f9:e3:63:b7:aa:48:1c:35: c5:71:43:e3:81:90:f7:c6:69:8e:80:63:01:87:8a:28:50:1a: 56:a9:5f:98:f7:09:48:58:b2:3e:1b:84:9f:a5:6c:08:58:d7: 52:9b:08:47:bf:57:5e:61:c8:c7:ac:06:56:b6:0e:a7:94:59: a6:c8:d8:79:96:b5:81:0a:d9:e0:a6:37:13:72:1e:a1:3f:d7: 70:ca:4f:71:67:02:06:bd:43:62:42:d9:16:cb:c2:ff:bf:dd: 1e:0c:48:92:ac:e2:85:91:80:ec:dc:8d:9c:bf:2f:2b:12:53: 8e:31:6e:2b:7a:04:df:4a:69:44:ed:b6:87:e0:76:8c:af:c9: 16:57:52:57:9a:bb:63:1f:4a:f0:80:9b:f3:07:aa:1b:bf:8a: ae:42:5b:fd:bb:84:ce:3b:93:11:a8:22:a1:5d:44:44:f8:5a: 9a:e7:cd:c5:99:0d:f0:e3:4e:d3:26:0b:c0:d1:9e:14:46:ef: 9d:3d:7d:29:a0:2d:d1:2b:dd:dd:79:2a:c4:bc:ed:8a:ef:7a: 22:f1:9d:99 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUTkuYgf2s2ZuOzt2iqDfg5RqkW/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU1NTlaFw0yNTA1MDgwNDAwNTlaMDMxMTAvBgNV BAMTKDJGN0M4M0FFNUEwNTE4RjcxMkVCMzA3RUM5QjU2QjNGNTUzQTE1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaTBeERVHN1Fr1QVQ6g9nCPCNp e3W5xT+QyZLUp6W40BDR+Q3vTFcojlKMjHUmVtfvrMc7OO0FxN+mFHrckxGRwX4q MZLFULSJCON581EjwEfemPTTWNbkptzrvNBhBNhzXcIDowpE3G9d6Gez33RGELcI 4vk3OYWFNpJApGemhBg0Ex+xOj0oT2DQwUjtcnw4Lzr3//unjflV29w0xlkZGp8E OycjTHopDArHWkpekmkjmd1bhkxilF2gz33SBPR18gj9r5F+KEIwuoF1dnrfgIWy OcZhkAj5mMhXn92aYJSqknvRTLy5L9gdQb6FDVq2WRBdO5Z5eKivFe5MX0F7AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUL3yDrloFGPcS6zB+ybVrP1U6FSgwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzMzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAADMw DQYJKoZIhvcNAQELBQADggEBAAnrWHIPWrugyOtB6V58lV2OIjwq6n0wNU63YY61 LYBxf2VA1tnqHGJIOACj7uP542O3qkgcNcVxQ+OBkPfGaY6AYwGHiihQGlapX5j3 CUhYsj4bhJ+lbAhY11KbCEe/V15hyMesBla2DqeUWabI2HmWtYEK2eCmNxNyHqE/ 13DKT3FnAga9Q2JC2RbLwv+/3R4MSJKs4oWRgOzcjZy/LysSU44xbit6BN9KaUTt tofgdoyvyRZXUleau2MfSvCAm/MHqhu/iq5CW/27hM47kxGoIqFdRET4WprnzcWZ DfDjTtMmC8DRnhRG7509fSmgLdEr3d15KsS87YrveiLxnZk= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org