$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33353a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a33353a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: ZQyhHzu8Sp9CSwDE3Bv2Ehobwq2IPMrQEclQqJsgAVk= Subject key identifier: 7F:E1:A4:07:12:DE:70:33:4E:A6:5D:B9:2D:76:1B:E8:9B:D6:00:48 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 249315903152B3FA38296CF7DE82D232E2A36D3C Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33353a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:02 +0000 ROA not before: Thu 09 May 2024 03:56:02 +0000 ROA not after: Thu 08 May 2025 04:01:02 +0000 asID: 55701 IP address blocks: 2405:b900:35::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:93:15:90:31:52:b3:fa:38:29:6c:f7:de:82:d2:32:e2:a3:6d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:02 2024 GMT Not After : May 8 04:01:02 2025 GMT Subject: CN=7FE1A40712DE70334EA65DB92D761BE89BD60048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:da:9d:f1:fa:ae:77:79:f0:44:2b:9c:4e: f5:84:f7:31:58:58:77:1e:ae:0d:de:3e:37:22:71: 11:aa:d8:65:c2:bf:c7:3f:4c:d3:cc:b5:63:f5:bf: 59:99:a2:25:28:14:dc:bb:f2:4a:1e:1a:b8:6e:f0: 8d:80:39:e5:e3:9a:53:d9:9e:73:fd:95:4d:35:38: b0:22:b0:a6:95:1a:cc:ab:36:6f:dc:e2:62:b3:9d: 52:db:24:a4:ca:83:2d:f8:ea:2e:87:9b:7a:1e:be: 88:cc:d8:28:4e:31:18:da:d6:78:0c:ef:94:0f:a5: 41:52:ff:40:c3:89:81:5e:47:01:6d:ce:ca:fa:bf: 96:08:7d:c5:6d:eb:fd:59:85:34:3e:ac:64:e3:e3: 28:8b:90:55:c0:de:eb:fd:e6:c7:9a:8b:7e:1c:9a: 77:21:60:45:48:14:76:63:d0:6c:b0:52:a4:ef:d0: 9e:f8:14:e6:83:98:1e:3d:0a:35:b3:94:3b:00:0f: e1:b2:c1:be:f9:a2:f9:5b:92:f3:f6:77:2e:6d:06: 71:e5:11:0f:1f:04:f3:95:fa:cb:a3:1a:03:3a:af: cd:16:b3:dc:9c:b3:48:4f:55:c5:ef:66:32:29:34: f9:a1:b8:48:a5:46:dc:d0:b3:0a:da:9b:0c:84:a3: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E1:A4:07:12:DE:70:33:4E:A6:5D:B9:2D:76:1B:E8:9B:D6:00:48 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33353a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:35::/48 Signature Algorithm: sha256WithRSAEncryption 42:3d:bd:96:b3:9e:80:33:00:9a:8c:fd:da:7d:9a:44:2a:f0: 3b:6b:79:71:c4:ce:74:45:59:de:64:cb:0b:f5:c5:cd:3b:3b: d7:21:ff:34:ac:9a:54:24:08:f0:61:f6:d8:d6:c3:45:50:47: dc:10:e2:e3:9e:85:8f:13:26:60:10:08:cb:cb:f3:0f:82:7c: e8:39:dd:cd:43:ab:b2:63:91:c8:28:7e:73:89:81:e6:e2:ff: 43:91:7e:44:07:14:94:91:5b:93:a0:9d:e9:56:f2:63:a3:2c: f8:5d:3f:48:3a:c1:42:27:38:44:f1:49:d3:96:20:be:92:19: dd:64:fc:4c:44:54:0e:73:83:e6:c4:14:c8:fc:a1:fe:58:c4: d3:c7:91:bf:16:2b:73:18:6a:ca:3c:9a:c8:c7:93:3b:a3:c6: 02:b3:57:19:74:4f:a6:21:28:5b:4e:f3:28:af:76:2d:42:49: 00:48:b3:7e:12:04:91:61:f3:94:65:f2:f2:e2:3c:85:57:2c: b8:b7:6d:07:48:8f:05:f9:6d:96:8d:99:5f:83:a5:35:4f:16: 9a:6f:92:8d:1b:b5:38:13:b8:32:1b:ea:65:ff:f4:5d:99:cd: 71:7f:11:7a:cf:9a:a4:3d:af:2d:4c:34:f0:31:20:d1:e1:39: 0b:ab:80:ab -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUJJMVkDFSs/o4KWz33oLSMuKjbTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDJaFw0yNTA1MDgwNDAxMDJaMDMxMTAvBgNV BAMTKDdGRTFBNDA3MTJERTcwMzM0RUE2NURCOTJENzYxQkU4OUJENjAwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAndqd8fqud3nwRCucTvWE9zFY WHcerg3ePjcicRGq2GXCv8c/TNPMtWP1v1mZoiUoFNy78koeGrhu8I2AOeXjmlPZ nnP9lU01OLAisKaVGsyrNm/c4mKznVLbJKTKgy346i6Hm3oevojM2ChOMRja1ngM 75QPpUFS/0DDiYFeRwFtzsr6v5YIfcVt6/1ZhTQ+rGTj4yiLkFXA3uv95seai34c mnchYEVIFHZj0GywUqTv0J74FOaDmB49CjWzlDsAD+Gywb75ovlbkvP2dy5tBnHl EQ8fBPOV+sujGgM6r80Ws9ycs0hPVcXvZjIpNPmhuEilRtzQswramwyEowefAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUf+GkBxLecDNOpl25LXYb6JvWAEgwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzMzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAADUw DQYJKoZIhvcNAQELBQADggEBAEI9vZaznoAzAJqM/dp9mkQq8DtreXHEznRFWd5k ywv1xc07O9ch/zSsmlQkCPBh9tjWw0VQR9wQ4uOehY8TJmAQCMvL8w+CfOg53c1D q7JjkcgofnOJgebi/0ORfkQHFJSRW5OgnelW8mOjLPhdP0g6wUInOETxSdOWIL6S Gd1k/ExEVA5zg+bEFMj8of5YxNPHkb8WK3MYaso8msjHkzujxgKzVxl0T6YhKFtO 8yivdi1CSQBIs34SBJFh85Rl8vLiPIVXLLi3bQdIjwX5bZaNmV+DpTVPFppvko0b tTgTuDIb6mX/9F2ZzXF/EXrPmqQ9ry1MNPAxINHhOQurgKs= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org