$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33393a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a33393a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: lgb678Zfh2u11uijM51hj3Qt5etoOJoo6gIt4JKO9Ww= Subject key identifier: AA:12:89:9F:2A:F8:03:E6:2C:C9:81:37:A2:71:54:6F:72:AB:E2:40 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 1C32A71AB20A706578BAF7E8E5F61901966F92FB Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33393a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:09 +0000 ROA not before: Thu 09 May 2024 03:56:09 +0000 ROA not after: Thu 08 May 2025 04:01:09 +0000 asID: 55701 IP address blocks: 2405:b900:39::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:32:a7:1a:b2:0a:70:65:78:ba:f7:e8:e5:f6:19:01:96:6f:92:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:09 2024 GMT Not After : May 8 04:01:09 2025 GMT Subject: CN=AA12899F2AF803E62CC98137A271546F72ABE240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:09:8b:2e:ea:4c:df:63:1a:2e:13:69:ce: 75:54:aa:1e:19:24:ec:6c:42:82:84:ab:8f:c6:99: e4:12:ac:2d:8f:6d:2b:b4:d8:4a:f9:59:61:f3:3f: 5d:01:c3:4f:d3:2e:f7:2e:ae:a0:ff:98:79:28:04: 3c:88:a2:da:ba:03:c0:5a:51:ab:ba:cf:8f:e0:72: 08:d0:25:32:9d:fe:7f:62:1c:d3:a7:18:91:57:67: 97:81:08:d0:f0:9e:01:56:32:0b:20:e0:f8:61:17: 69:ac:c5:9c:ad:01:b9:2e:2e:45:b0:5c:27:c4:f1: c5:9e:28:58:24:2d:5c:74:fb:51:b1:67:b5:3a:93: b6:7c:3c:59:e2:2f:2c:d6:4c:9a:8a:d3:ab:45:ba: de:5d:62:00:9b:e6:f7:1a:d3:88:b8:87:28:b1:22: 56:33:7b:35:2f:4d:43:2a:6f:b7:c4:f5:96:b3:c0: 9b:d9:c8:6b:cf:f2:dd:a4:3f:bc:ce:90:77:73:b2: 36:52:8f:30:05:58:5d:24:d4:9d:06:95:6a:70:74: 27:14:0a:79:db:15:48:b7:6d:fe:de:6e:b6:57:e1: cb:dc:f1:ff:d4:d5:bb:3c:52:f9:d3:c6:d6:d4:14: 5c:5c:2b:f7:8e:fd:3b:c7:e4:cc:87:0d:20:08:5c: 7e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:12:89:9F:2A:F8:03:E6:2C:C9:81:37:A2:71:54:6F:72:AB:E2:40 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33393a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:39::/48 Signature Algorithm: sha256WithRSAEncryption bf:75:1c:44:cc:a9:b4:38:60:6f:02:ad:88:45:19:17:fc:9a: c7:7e:5c:2f:ea:48:f9:0a:fb:55:b0:9d:f8:0b:81:c2:0e:ed: 72:25:07:ff:06:12:55:4f:0d:d5:78:1e:c4:39:10:9b:fb:23: ad:9b:b3:32:89:41:ab:db:1b:41:b4:d4:06:6a:68:21:dc:1d: a7:20:15:1a:a9:c8:ca:34:7d:6b:fd:7e:df:5f:fa:b6:f6:5c: e0:e2:8e:11:95:10:ea:93:55:e9:21:50:8a:d8:3b:1e:f7:fe: 91:9d:30:0d:04:7d:5d:fc:7a:d6:2d:ef:b3:95:97:b3:c9:20: a9:1d:70:02:32:16:68:53:7c:83:78:72:60:c3:a9:25:2b:ff: 49:c2:04:4a:05:af:9f:08:36:f7:0e:19:03:fb:43:6b:fe:09: 92:d7:c3:f6:21:5d:08:7b:32:be:8b:7b:f0:2e:d2:71:51:04: bc:e9:12:08:8c:82:ec:0a:6e:d8:93:08:fe:e7:23:64:31:ca: 30:d5:86:ac:a2:e5:06:d2:19:fa:25:47:6b:a0:c8:84:c5:63: 41:16:e4:60:b8:72:28:76:06:17:2f:7e:67:21:0e:2d:b3:59: 4b:3f:42:f7:e7:89:d8:30:91:28:f5:01:ae:58:8f:64:9e:6c: 5d:a5:0e:ce -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUHDKnGrIKcGV4uvfo5fYZAZZvkvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDlaFw0yNTA1MDgwNDAxMDlaMDMxMTAvBgNV BAMTKEFBMTI4OTlGMkFGODAzRTYyQ0M5ODEzN0EyNzE1NDZGNzJBQkUyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zQmLLupM32MaLhNpznVUqh4Z JOxsQoKEq4/GmeQSrC2PbSu02Er5WWHzP10Bw0/TLvcurqD/mHkoBDyIotq6A8Ba Uau6z4/gcgjQJTKd/n9iHNOnGJFXZ5eBCNDwngFWMgsg4PhhF2msxZytAbkuLkWw XCfE8cWeKFgkLVx0+1GxZ7U6k7Z8PFniLyzWTJqK06tFut5dYgCb5vca04i4hyix IlYzezUvTUMqb7fE9ZazwJvZyGvP8t2kP7zOkHdzsjZSjzAFWF0k1J0GlWpwdCcU CnnbFUi3bf7ebrZX4cvc8f/U1bs8UvnTxtbUFFxcK/eO/TvH5MyHDSAIXH5dAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUqhKJnyr4A+YsyYE3onFUb3Kr4kAwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzMzOTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAADkw DQYJKoZIhvcNAQELBQADggEBAL91HETMqbQ4YG8CrYhFGRf8msd+XC/qSPkK+1Ww nfgLgcIO7XIlB/8GElVPDdV4HsQ5EJv7I62bszKJQavbG0G01AZqaCHcHacgFRqp yMo0fWv9ft9f+rb2XODijhGVEOqTVekhUIrYOx73/pGdMA0EfV38etYt77OVl7PJ IKkdcAIyFmhTfIN4cmDDqSUr/0nCBEoFr58INvcOGQP7Q2v+CZLXw/YhXQh7Mr6L e/Au0nFRBLzpEgiMguwKbtiTCP7nI2QxyjDVhqyi5QbSGfolR2ugyITFY0EW5GC4 cih2BhcvfmchDi2zWUs/QvfnidgwkSj1Aa5Yj2SebF2lDs4= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org