$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34343a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a34343a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: T1gRMGhMLZQslpR1N2sBZdH+6D1T1w1H88Bnmx9hPGs= Subject key identifier: 71:7E:CB:65:97:29:D6:26:74:A0:F9:CD:C2:8E:76:64:8B:FE:38:BD Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 72BB6CED8DE28ABEA6EA51D201763430E58C24FF Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34343a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:00:57 +0000 ROA not before: Thu 09 May 2024 03:55:57 +0000 ROA not after: Thu 08 May 2025 04:00:57 +0000 asID: 55701 IP address blocks: 2405:b900:44::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:bb:6c:ed:8d:e2:8a:be:a6:ea:51:d2:01:76:34:30:e5:8c:24:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:55:57 2024 GMT Not After : May 8 04:00:57 2025 GMT Subject: CN=717ECB659729D62674A0F9CDC28E76648BFE38BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:56:8b:5f:5b:48:d5:71:2a:42:f2:b2:1f:01: eb:d8:1a:dc:79:46:6d:8f:e2:ce:5b:7c:31:86:23: b0:14:18:73:f2:0f:a0:18:06:90:8e:9d:f3:9e:f1: 1a:27:a9:68:e6:e6:e4:f4:92:a5:4c:ee:de:9c:7f: 85:ef:6b:24:64:d0:fe:96:d4:45:a7:99:2e:a0:d9: f9:f3:90:ab:a1:9c:09:74:88:a8:d2:63:13:21:c9: f0:a3:3b:ec:91:02:57:d7:c3:a0:c2:85:82:36:e9: 14:6d:00:ce:ac:58:ea:a2:b0:46:4f:f3:fd:e4:50: 7d:fc:45:e0:64:56:46:2b:e9:d6:d5:4c:d7:a4:63: 7b:db:45:6f:83:47:74:e8:4e:ee:32:ab:f0:02:b7: f6:89:57:ea:6c:e6:09:2d:bd:19:17:70:93:30:33: d8:71:a0:7c:af:69:76:39:8a:34:e4:c9:0f:b4:83: ab:ae:99:1a:7f:be:87:eb:b8:4d:9d:a5:b3:43:a8: 34:15:d6:cd:15:d5:7d:82:4d:39:47:10:e5:c9:3f: 87:35:e3:65:07:5f:08:98:ee:00:57:c3:43:97:e4: e2:77:82:a4:c3:bd:e3:41:06:b8:e4:c3:3a:59:b2: 43:81:48:8a:54:0e:e5:91:17:22:ac:8e:98:97:6b: 0a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7E:CB:65:97:29:D6:26:74:A0:F9:CD:C2:8E:76:64:8B:FE:38:BD X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34343a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:44::/48 Signature Algorithm: sha256WithRSAEncryption 48:16:3f:d8:9e:06:8e:79:04:fc:cf:a9:46:39:17:6a:33:47: 98:8f:e0:2d:11:9a:40:e7:11:6b:05:0b:74:e8:ea:9c:50:e5: 12:61:31:cf:3a:f9:f9:3b:3d:ee:1f:75:da:c7:2c:ef:a5:64: d6:38:7f:18:07:6c:f2:fa:65:7f:bf:0e:ce:bd:cd:2a:96:2b: 0e:c8:02:9e:5e:cc:9a:18:43:2e:26:d7:41:dc:eb:60:82:7f: 20:ec:03:a5:ad:d4:ed:64:c1:20:5a:e0:27:7d:cf:21:0d:67: a8:ca:f7:c9:23:18:9f:8c:25:46:1f:b6:9a:eb:65:e4:e3:ca: e3:0e:7d:3b:04:01:3e:b5:f2:75:5f:93:86:c4:a9:16:79:fc: d8:46:14:be:f2:d1:a3:a5:e3:6a:73:fb:5c:42:0e:03:31:6f: c0:2f:fb:db:7b:14:4e:ec:0c:57:d2:7c:34:6c:4f:25:40:23: de:11:ec:d0:56:3d:4a:99:19:7c:2c:85:a3:8f:c5:af:2b:d6: 1a:9c:5e:67:58:9e:dc:5f:30:1f:c3:b6:37:d7:bb:e0:c4:16: c3:9a:92:de:c7:22:20:9d:c3:f8:61:84:53:0c:fe:d9:c3:84: 0d:09:34:f7:15:96:89:25:13:13:14:15:b0:7e:ba:35:65:81: f1:fa:af:d2 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUcrts7Y3iir6m6lHSAXY0MOWMJP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU1NTdaFw0yNTA1MDgwNDAwNTdaMDMxMTAvBgNV BAMTKDcxN0VDQjY1OTcyOUQ2MjY3NEEwRjlDREMyOEU3NjY0OEJGRTM4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVotfW0jVcSpC8rIfAevYGtx5 Rm2P4s5bfDGGI7AUGHPyD6AYBpCOnfOe8RonqWjm5uT0kqVM7t6cf4XvayRk0P6W 1EWnmS6g2fnzkKuhnAl0iKjSYxMhyfCjO+yRAlfXw6DChYI26RRtAM6sWOqisEZP 8/3kUH38ReBkVkYr6dbVTNekY3vbRW+DR3ToTu4yq/ACt/aJV+ps5gktvRkXcJMw M9hxoHyvaXY5ijTkyQ+0g6uumRp/vofruE2dpbNDqDQV1s0V1X2CTTlHEOXJP4c1 42UHXwiY7gBXw0OX5OJ3gqTDveNBBrjkwzpZskOBSIpUDuWRFyKsjpiXawrtAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUcX7LZZcp1iZ0oPnNwo52ZIv+OL0wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAEQw DQYJKoZIhvcNAQELBQADggEBAEgWP9ieBo55BPzPqUY5F2ozR5iP4C0RmkDnEWsF C3To6pxQ5RJhMc86+fk7Pe4fddrHLO+lZNY4fxgHbPL6ZX+/Ds69zSqWKw7IAp5e zJoYQy4m10Hc62CCfyDsA6Wt1O1kwSBa4Cd9zyENZ6jK98kjGJ+MJUYftprrZeTj yuMOfTsEAT618nVfk4bEqRZ5/NhGFL7y0aOl42pz+1xCDgMxb8Av+9t7FE7sDFfS fDRsTyVAI94R7NBWPUqZGXwshaOPxa8r1hqcXmdYntxfMB/DtjfXu+DEFsOakt7H IiCdw/hhhFMM/tnDhA0JNPcVloklExMUFbB+ujVlgfH6r9I= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org