$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34323a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a34323a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: Sd16NilQoqdJro/hI8NdrIAj72f5JRBer10bDqNdJ9s= Subject key identifier: FF:2A:7D:B6:74:AF:52:69:E1:8B:79:87:46:B0:99:1A:8C:24:9A:CF Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 456767DD57C4F7772B8928835258214B869302EE Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34323a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:00 +0000 ROA not before: Thu 09 May 2024 03:56:00 +0000 ROA not after: Thu 08 May 2025 04:01:00 +0000 asID: 55701 IP address blocks: 2405:b900:42::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:67:67:dd:57:c4:f7:77:2b:89:28:83:52:58:21:4b:86:93:02:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:00 2024 GMT Not After : May 8 04:01:00 2025 GMT Subject: CN=FF2A7DB674AF5269E18B798746B0991A8C249ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:f3:a0:1e:7b:84:41:53:66:66:de:de:39: ec:c8:51:dd:1b:2c:0d:37:ba:73:a1:86:a5:0d:b2: 17:d0:17:93:17:e6:4c:a2:b8:ce:8f:29:a0:7a:af: 07:9b:ee:ce:09:54:37:77:da:9a:10:63:d2:3e:e4: ef:8c:bd:a3:8a:4d:e1:07:15:28:ad:09:9f:3e:4c: 27:5d:7a:0e:3c:46:18:99:d6:0f:75:4e:1b:5c:46: 9f:4d:02:d0:8d:f1:64:54:71:29:17:9d:4c:5f:cd: 61:50:f4:0e:2c:4d:bd:97:42:45:cb:9c:d8:ee:aa: 9b:6e:03:d4:49:75:70:a7:25:f9:65:79:db:19:92: f2:eb:3a:0f:3a:3e:06:3a:78:72:4f:9b:87:f0:dc: bf:1d:ba:c8:f7:f0:29:bc:ab:2b:3e:eb:2b:cb:78: 8a:3d:21:b4:33:84:82:29:53:37:70:65:45:61:d9: 38:6a:66:8f:09:54:62:b8:21:fb:d5:0f:3f:6d:49: f1:28:c1:d1:19:fe:7d:09:3f:cf:f5:ea:e7:06:2e: f3:89:86:7f:ca:93:b3:71:34:d9:e8:c0:13:a8:2a: 14:1a:25:48:62:91:c8:de:87:63:b2:4c:79:3f:fe: b2:61:be:44:45:b7:38:da:f2:06:d1:80:9c:ed:23: 7b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2A:7D:B6:74:AF:52:69:E1:8B:79:87:46:B0:99:1A:8C:24:9A:CF X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34323a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:42::/48 Signature Algorithm: sha256WithRSAEncryption d8:5c:88:63:9e:7c:dc:4e:cb:af:e1:ed:aa:92:1e:01:74:8f: ce:4d:1d:ea:ae:78:42:80:ca:b6:16:bd:df:62:18:65:86:06: 9e:c6:d9:da:59:6e:b7:64:f1:c7:06:5a:b9:78:68:31:91:86: 54:81:5a:27:17:da:9b:2a:c8:6d:42:48:51:f8:69:9d:44:46: 71:da:cf:f9:64:f7:f2:32:19:ce:5a:43:86:42:95:89:10:2e: ae:60:7b:e8:48:6f:ab:a8:ed:4c:5b:54:dd:aa:c1:b2:2a:4f: 9a:2e:13:45:ce:7d:b3:64:c0:ec:63:ff:fd:cf:93:c8:a3:49: 58:25:70:e4:0b:6f:21:65:8b:51:82:ca:18:0b:6b:35:71:15: ce:c9:00:b5:a0:37:ab:ed:b1:f6:6e:bf:0b:95:32:cc:a3:8e: c5:e0:85:11:98:7f:12:13:65:60:ff:27:da:07:67:00:b3:44: 01:34:b7:d4:83:37:95:68:99:d9:28:51:3d:25:80:bd:0c:75: c5:b4:30:6e:81:f1:5a:46:03:b9:5d:c5:a7:78:c9:c6:50:db: 08:3c:86:1f:c8:79:66:c8:67:76:69:87:85:34:db:c2:5f:ef: 47:bb:3e:35:9e:b3:57:23:4f:92:e6:0f:ee:e4:d9:aa:4f:d8: 32:5c:29:f8 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIURWdn3VfE93criSiDUlghS4aTAu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDBaFw0yNTA1MDgwNDAxMDBaMDMxMTAvBgNV BAMTKEZGMkE3REI2NzRBRjUyNjlFMThCNzk4NzQ2QjA5OTFBOEMyNDlBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HPOgHnuEQVNmZt7eOezIUd0b LA03unOhhqUNshfQF5MX5kyiuM6PKaB6rweb7s4JVDd32poQY9I+5O+MvaOKTeEH FSitCZ8+TCddeg48RhiZ1g91ThtcRp9NAtCN8WRUcSkXnUxfzWFQ9A4sTb2XQkXL nNjuqptuA9RJdXCnJflledsZkvLrOg86PgY6eHJPm4fw3L8dusj38Cm8qys+6yvL eIo9IbQzhIIpUzdwZUVh2ThqZo8JVGK4IfvVDz9tSfEowdEZ/n0JP8/16ucGLvOJ hn/Kk7NxNNnowBOoKhQaJUhikcjeh2OyTHk//rJhvkRFtzja8gbRgJztI3vPAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU/yp9tnSvUmnhi3mHRrCZGowkms8wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAEIw DQYJKoZIhvcNAQELBQADggEBANhciGOefNxOy6/h7aqSHgF0j85NHequeEKAyrYW vd9iGGWGBp7G2dpZbrdk8ccGWrl4aDGRhlSBWicX2psqyG1CSFH4aZ1ERnHaz/lk 9/IyGc5aQ4ZClYkQLq5ge+hIb6uo7UxbVN2qwbIqT5ouE0XOfbNkwOxj//3Pk8ij SVglcOQLbyFli1GCyhgLazVxFc7JALWgN6vtsfZuvwuVMsyjjsXghRGYfxITZWD/ J9oHZwCzRAE0t9SDN5VomdkoUT0lgL0MdcW0MG6B8VpGA7ldxad4ycZQ2wg8hh/I eWbIZ3Zph4U028Jf70e7PjWes1cjT5LmD+7k2apP2DJcKfg= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org