$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33383a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a33383a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: vMjn0oEzrV9wm6u0GPq3dvlPmc1HsAP4l/ycZHeFAXE= Subject key identifier: C9:B7:CE:6D:B1:88:09:7E:5F:18:86:62:F4:C5:56:38:1D:B3:2F:F1 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 397EC4F8D6766694C50B76FC0C273349929876A8 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33383a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:00:58 +0000 ROA not before: Thu 09 May 2024 03:55:58 +0000 ROA not after: Thu 08 May 2025 04:00:58 +0000 asID: 55701 IP address blocks: 2405:b900:38::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7e:c4:f8:d6:76:66:94:c5:0b:76:fc:0c:27:33:49:92:98:76:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:55:58 2024 GMT Not After : May 8 04:00:58 2025 GMT Subject: CN=C9B7CE6DB188097E5F188662F4C556381DB32FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:97:80:f3:64:02:b8:c7:7a:e8:01:3c:5c: c6:81:ef:0f:0e:44:5e:13:c4:4d:f6:93:c9:a1:81: ae:78:56:12:41:71:c1:cb:72:a3:ec:33:b2:0a:9f: f9:67:70:a1:60:48:be:19:4c:23:3c:06:3e:1e:29: ef:4d:ba:3a:37:df:db:2b:6b:f4:ec:8f:03:df:47: 97:01:ed:09:0c:fb:ed:ca:cb:b8:e1:b1:d8:63:51: 90:3e:f3:d8:8c:da:0c:6b:bd:b3:fa:42:93:64:89: b0:1f:db:19:4c:44:bf:d2:ad:71:ad:36:1a:8d:d7: 7a:63:51:34:ba:ba:66:1b:70:96:1d:3c:23:38:1d: 2e:ae:61:97:d4:5c:eb:70:e2:3b:0f:ca:ad:af:a4: d8:6b:ef:4d:b5:ec:fd:12:67:3e:ae:c1:2e:03:23: e4:20:ae:00:62:a3:4e:c7:6c:ba:55:a3:22:26:ab: 75:49:07:10:ba:87:90:b0:26:fd:02:df:43:2d:97: 72:dd:e5:b0:12:90:64:a5:91:f3:c9:1a:e8:0d:5e: 0b:91:f9:10:2f:13:0c:ee:5d:e9:4a:b0:94:a1:b5: a8:0e:fe:86:0b:b7:8c:c1:47:67:74:ae:8c:7c:c1: 0f:9a:70:64:fc:f4:28:60:a7:c5:aa:58:91:7f:fb: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B7:CE:6D:B1:88:09:7E:5F:18:86:62:F4:C5:56:38:1D:B3:2F:F1 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33383a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:38::/48 Signature Algorithm: sha256WithRSAEncryption 0d:7a:f9:d9:e4:44:f5:62:9b:2c:b5:8e:5d:10:9f:79:b0:dc: 68:7e:a9:64:f8:9b:82:04:37:c5:79:74:1c:7f:9c:cc:7c:99: b2:d9:03:47:28:3b:13:d2:4e:99:28:46:ce:d6:8b:57:d0:98: b1:09:fb:9f:3b:33:11:c9:d3:b2:c3:b2:5f:38:c1:1e:90:b0: f3:71:ba:df:0e:e2:ec:cd:6d:3b:26:4f:a1:ca:af:5c:85:92: 5d:0f:27:8a:ef:65:aa:92:67:ae:14:aa:56:b8:3e:20:0f:49: 56:22:0c:47:d2:50:7e:53:01:4f:d1:44:59:74:14:d0:b5:76: c8:23:71:06:90:4a:05:f1:80:63:50:91:0c:58:80:43:ce:b0: 87:45:62:91:ca:d1:7c:21:41:ee:fd:06:91:7b:7b:91:b6:75: aa:33:1b:2c:97:07:dc:78:1a:bf:a1:05:e6:96:6f:38:cf:79: 73:38:9c:04:67:06:92:3f:34:e3:0e:79:77:02:e1:df:bb:84: cc:b0:93:71:19:c9:3b:13:22:8b:77:59:1e:69:47:25:a8:3e: d4:ca:ef:66:c5:0a:49:e0:9c:64:85:82:02:d3:a9:4e:43:aa: 8b:a1:df:9e:30:13:b0:7b:d3:c9:91:21:10:fa:3c:0a:07:8f: e9:fa:3f:8b -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUOX7E+NZ2ZpTFC3b8DCczSZKYdqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU1NThaFw0yNTA1MDgwNDAwNThaMDMxMTAvBgNV BAMTKEM5QjdDRTZEQjE4ODA5N0U1RjE4ODY2MkY0QzU1NjM4MURCMzJGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChr5eA82QCuMd66AE8XMaB7w8O RF4TxE32k8mhga54VhJBccHLcqPsM7IKn/lncKFgSL4ZTCM8Bj4eKe9Nujo339sr a/TsjwPfR5cB7QkM++3Ky7jhsdhjUZA+89iM2gxrvbP6QpNkibAf2xlMRL/SrXGt NhqN13pjUTS6umYbcJYdPCM4HS6uYZfUXOtw4jsPyq2vpNhr70217P0SZz6uwS4D I+QgrgBio07HbLpVoyImq3VJBxC6h5CwJv0C30Mtl3Ld5bASkGSlkfPJGugNXguR +RAvEwzuXelKsJShtagO/oYLt4zBR2d0rox8wQ+acGT89Chgp8WqWJF/+44LAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUybfObbGICX5fGIZi9MVWOB2zL/EwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzMzODNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAADgw DQYJKoZIhvcNAQELBQADggEBAA16+dnkRPVimyy1jl0Qn3mw3Gh+qWT4m4IEN8V5 dBx/nMx8mbLZA0coOxPSTpkoRs7Wi1fQmLEJ+587MxHJ07LDsl84wR6QsPNxut8O 4uzNbTsmT6HKr1yFkl0PJ4rvZaqSZ64Uqla4PiAPSVYiDEfSUH5TAU/RRFl0FNC1 dsgjcQaQSgXxgGNQkQxYgEPOsIdFYpHK0XwhQe79BpF7e5G2daozGyyXB9x4Gr+h BeaWbzjPeXM4nARnBpI/NOMOeXcC4d+7hMywk3EZyTsTIot3WR5pRyWoPtTK72bF CkngnGSFggLTqU5Dqouh354wE7B708mRIRD6PAoHj+n6P4s= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org