$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34303a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a34303a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: 026P3BOUrlZmanv8FbPol2tbTm+Q3CBJahqNKS2XrDw= Subject key identifier: DB:0A:13:21:F5:F7:09:E6:D2:4D:DF:FA:34:3B:EA:7A:E4:47:8F:0A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 61A73CE651AD42A939B316255BA85777FEDF1113 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34303a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:06 +0000 ROA not before: Thu 09 May 2024 03:56:06 +0000 ROA not after: Thu 08 May 2025 04:01:06 +0000 asID: 55701 IP address blocks: 2405:b900:40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a7:3c:e6:51:ad:42:a9:39:b3:16:25:5b:a8:57:77:fe:df:11:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:06 2024 GMT Not After : May 8 04:01:06 2025 GMT Subject: CN=DB0A1321F5F709E6D24DDFFA343BEA7AE4478F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:ec:f2:66:82:3f:62:41:32:62:20:ac:1d: 50:9d:8d:e8:2d:57:26:a9:68:f5:ec:6f:ff:5f:cc: 9f:6c:27:12:ea:74:3e:61:b8:8a:7d:20:4b:6e:b7: eb:78:71:b6:c9:cc:5c:52:f0:67:c6:8f:b5:3c:ea: 56:28:d0:0c:e7:c6:58:b9:e5:31:b2:dc:4f:0d:89: 29:7f:a2:bb:f7:d1:90:da:43:77:40:0a:99:a5:fd: 40:f7:c7:af:11:de:15:ed:a4:2e:10:71:3c:f6:59: 20:05:30:6c:7f:33:49:43:ec:ef:db:0d:8b:ed:2f: 75:08:4d:28:1c:48:d0:c5:84:3b:b0:80:1d:d8:50: 45:2d:e0:f6:32:55:cc:58:bc:82:50:9f:2a:f9:3f: f4:99:77:02:0c:47:fe:90:e5:89:85:ee:97:49:be: 86:9a:24:11:90:ee:2a:ee:fc:9a:97:32:b0:94:87: 73:af:a1:ec:57:ad:b4:e8:08:f7:b7:a0:5b:3d:48: cf:be:e8:8f:6c:a6:85:91:75:40:76:a1:7e:40:fe: 90:d8:38:fd:fe:25:23:26:84:00:d9:d9:b8:10:e6: 04:b5:72:f7:5b:d4:aa:70:5c:d2:87:59:bd:a8:de: 4f:0e:bd:89:af:c2:be:2d:14:c3:b5:19:d1:74:cb: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0A:13:21:F5:F7:09:E6:D2:4D:DF:FA:34:3B:EA:7A:E4:47:8F:0A X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34303a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:40::/48 Signature Algorithm: sha256WithRSAEncryption cc:f3:9f:b2:96:f9:f2:1c:57:36:5f:23:62:b2:41:80:90:18: 9a:0a:b9:84:90:ae:5c:65:9d:de:09:35:94:33:7b:e3:b4:68: 5a:eb:5d:31:35:f6:a4:90:3a:75:d8:ea:a6:6a:48:e5:ba:28: 5b:b9:a1:12:46:3b:b6:3f:ad:e7:1f:0b:08:46:99:c5:1b:8f: 55:b5:1f:11:6a:4c:a6:99:1b:47:0e:c7:84:f2:cc:c5:f5:1c: 1a:ce:8e:5d:15:89:a6:6d:78:f0:32:52:a2:83:ec:fa:91:4d: ca:b5:fb:cc:a1:eb:9a:26:c5:60:b7:82:2e:9a:a7:cb:df:a8: b5:83:6f:d6:41:2b:45:43:0c:76:13:6d:39:4d:36:70:01:d8: 58:c6:db:1b:98:c8:7b:cd:8c:bf:97:1b:30:55:be:32:8e:63: 07:63:f5:ee:7f:43:fd:ec:fe:a9:e3:48:10:f4:9b:5d:71:19: ef:46:58:36:5c:7a:7c:e4:77:2b:50:3b:07:83:0f:e4:4d:66: 38:26:93:bb:c0:73:48:96:99:79:2f:5e:aa:d6:f1:02:b3:72: 38:60:cc:ea:16:8e:9d:83:fa:a7:fd:96:7b:f6:94:82:31:90: 61:8b:b5:f4:c0:78:34:d7:e2:a8:b6:cb:5c:0b:bf:c4:8e:ef: c1:51:87:00 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYac85lGtQqk5sxYlW6hXd/7fERMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDZaFw0yNTA1MDgwNDAxMDZaMDMxMTAvBgNV BAMTKERCMEExMzIxRjVGNzA5RTZEMjREREZGQTM0M0JFQTdBRTQ0NzhGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpuzyZoI/YkEyYiCsHVCdjegt VyapaPXsb/9fzJ9sJxLqdD5huIp9IEtut+t4cbbJzFxS8GfGj7U86lYo0Aznxli5 5TGy3E8NiSl/orv30ZDaQ3dACpml/UD3x68R3hXtpC4QcTz2WSAFMGx/M0lD7O/b DYvtL3UITSgcSNDFhDuwgB3YUEUt4PYyVcxYvIJQnyr5P/SZdwIMR/6Q5YmF7pdJ voaaJBGQ7iru/JqXMrCUh3OvoexXrbToCPe3oFs9SM++6I9spoWRdUB2oX5A/pDY OP3+JSMmhADZ2bgQ5gS1cvdb1KpwXNKHWb2o3k8OvYmvwr4tFMO1GdF0y4UDAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU2woTIfX3CebSTd/6NDvqeuRHjwowHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAEAw DQYJKoZIhvcNAQELBQADggEBAMzzn7KW+fIcVzZfI2KyQYCQGJoKuYSQrlxlnd4J NZQze+O0aFrrXTE19qSQOnXY6qZqSOW6KFu5oRJGO7Y/recfCwhGmcUbj1W1HxFq TKaZG0cOx4TyzMX1HBrOjl0ViaZtePAyUqKD7PqRTcq1+8yh65omxWC3gi6ap8vf qLWDb9ZBK0VDDHYTbTlNNnAB2FjG2xuYyHvNjL+XGzBVvjKOYwdj9e5/Q/3s/qnj SBD0m11xGe9GWDZcenzkdytQOweDD+RNZjgmk7vAc0iWmXkvXqrW8QKzcjhgzOoW jp2D+qf9lnv2lIIxkGGLtfTAeDTX4qi2y1wLv8SO78FRhwA= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org