$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34313a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a34313a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: EJrsKErLGQEMzExC2rSvWWAXy+dGekjeSDzKn1Bg4sk= Subject key identifier: E3:86:31:85:99:38:54:AE:9F:7D:1C:51:DB:E7:B4:78:61:81:E5:14 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 09D2AE5F088061F0746B31475A0272EACF280B15 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34313a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:01 +0000 ROA not before: Thu 09 May 2024 03:56:01 +0000 ROA not after: Thu 08 May 2025 04:01:01 +0000 asID: 55701 IP address blocks: 2405:b900:41::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d2:ae:5f:08:80:61:f0:74:6b:31:47:5a:02:72:ea:cf:28:0b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:01 2024 GMT Not After : May 8 04:01:01 2025 GMT Subject: CN=E3863185993854AE9F7D1C51DBE7B4786181E514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:93:17:35:cb:bd:44:ac:b6:5f:55:60:5f: 9a:d6:a8:95:3b:dc:67:f6:2d:d2:5a:d5:87:ff:a2: ea:b7:dc:75:cd:a2:c4:cb:e5:b7:ae:6c:74:dc:f3: d4:2f:74:c5:a8:71:7a:8f:af:d8:36:48:ab:3e:aa: fd:d1:75:6a:bf:26:83:19:93:54:16:e2:95:3a:07: a1:ae:9c:87:9e:a5:cd:71:55:e5:ec:5d:05:e4:ed: ad:e6:40:c7:f1:d1:1d:2d:b9:b2:a3:3f:f2:2b:79: 93:cc:de:49:0c:2d:70:10:46:2a:85:62:14:3a:d0: f2:db:fc:21:56:ac:ea:70:65:b5:c6:ba:07:f0:42: 2f:0e:cd:a3:28:a1:95:5e:6c:00:df:15:4f:85:64: d1:89:b6:e6:8e:17:56:41:96:a8:33:2d:d7:a6:06: 0a:2b:d6:34:1d:24:ae:b9:ed:cd:18:2d:82:61:3b: db:d0:04:95:34:fb:3b:6f:08:bf:e8:36:fe:74:05: a0:96:c7:01:a9:3c:f0:bc:a3:e5:29:96:12:95:1e: d9:82:c7:ab:5a:aa:ed:07:1b:b9:8c:c4:b4:1e:4b: 99:69:39:27:27:19:c3:68:66:cd:23:83:e7:f3:77: 41:7e:0b:76:04:5e:3c:2b:25:42:78:20:63:af:52: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:86:31:85:99:38:54:AE:9F:7D:1C:51:DB:E7:B4:78:61:81:E5:14 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34313a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:41::/48 Signature Algorithm: sha256WithRSAEncryption 49:4c:33:96:83:aa:94:07:e4:64:f7:c1:fe:64:e2:13:d9:09: ae:17:ea:31:02:dd:73:5a:21:68:b4:b8:bd:5e:61:6f:99:8c: 8d:02:6d:04:97:7d:fb:25:f3:c8:01:e1:31:9a:94:7b:4e:43: 71:ed:82:23:2e:32:40:b8:87:6c:4b:b7:97:08:d8:2b:25:c5: 5b:81:fc:11:09:99:8c:a0:de:1f:54:0d:78:1d:0a:ae:95:7a: 11:af:8c:17:b2:4a:df:b2:ed:42:03:36:46:3a:5b:37:6f:e0: f4:06:18:7c:2f:af:dd:70:b4:79:72:42:02:34:ce:76:ca:08: 5a:9f:3d:f2:e7:d2:7c:b8:7b:87:ee:8b:79:2a:06:cd:23:d3: 29:ba:10:31:58:b0:e4:76:49:b1:5a:c5:35:02:0f:b2:4b:0e: 48:5a:74:8a:9b:d4:f9:cc:8d:8f:c3:4b:b0:6e:2f:1a:08:3d: 42:60:71:e5:e4:84:7b:ac:3f:ca:19:d6:71:0a:68:2d:dc:9e: 3d:ff:74:f3:43:12:ec:19:43:9b:d2:0c:ed:ca:0d:54:8a:9c: 27:0c:41:8e:b2:b3:1b:0f:fb:da:ca:25:eb:14:dd:2a:d8:36: 45:70:11:94:3e:c5:86:03:1a:01:57:d3:e2:ed:2e:c0:db:c4: be:87:16:db -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUCdKuXwiAYfB0azFHWgJy6s8oCxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDFaFw0yNTA1MDgwNDAxMDFaMDMxMTAvBgNV BAMTKEUzODYzMTg1OTkzODU0QUU5RjdEMUM1MURCRTdCNDc4NjE4MUU1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1X5MXNcu9RKy2X1VgX5rWqJU7 3Gf2LdJa1Yf/ouq33HXNosTL5beubHTc89QvdMWocXqPr9g2SKs+qv3RdWq/JoMZ k1QW4pU6B6GunIeepc1xVeXsXQXk7a3mQMfx0R0tubKjP/IreZPM3kkMLXAQRiqF YhQ60PLb/CFWrOpwZbXGugfwQi8OzaMooZVebADfFU+FZNGJtuaOF1ZBlqgzLdem Bgor1jQdJK657c0YLYJhO9vQBJU0+ztvCL/oNv50BaCWxwGpPPC8o+UplhKVHtmC x6taqu0HG7mMxLQeS5lpOScnGcNoZs0jg+fzd0F+C3YEXjwrJUJ4IGOvUhufAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU44YxhZk4VK6ffRxR2+e0eGGB5RQwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAEEw DQYJKoZIhvcNAQELBQADggEBAElMM5aDqpQH5GT3wf5k4hPZCa4X6jEC3XNaIWi0 uL1eYW+ZjI0CbQSXffsl88gB4TGalHtOQ3HtgiMuMkC4h2xLt5cI2CslxVuB/BEJ mYyg3h9UDXgdCq6VehGvjBeySt+y7UIDNkY6Wzdv4PQGGHwvr91wtHlyQgI0znbK CFqfPfLn0ny4e4fui3kqBs0j0ym6EDFYsOR2SbFaxTUCD7JLDkhadIqb1PnMjY/D S7BuLxoIPUJgceXkhHusP8oZ1nEKaC3cnj3/dPNDEuwZQ5vSDO3KDVSKnCcMQY6y sxsP+9rKJesU3SrYNkVwEZQ+xYYDGgFX0+LtLsDbxL6HFts= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org