$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34353a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a34353a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: /A+CRb1aSSoAW61E3NZHxoxAGDMLdErGWFDI1GfaVt8= Subject key identifier: B0:46:FA:32:A0:0B:8E:7D:DA:0D:71:03:CC:20:27:9D:C7:41:58:03 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 587493C49CC4DDC2BC0F1939890D4DAE87522033 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34353a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:03 +0000 ROA not before: Thu 09 May 2024 03:56:03 +0000 ROA not after: Thu 08 May 2025 04:01:03 +0000 asID: 55701 IP address blocks: 2405:b900:45::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:74:93:c4:9c:c4:dd:c2:bc:0f:19:39:89:0d:4d:ae:87:52:20:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:03 2024 GMT Not After : May 8 04:01:03 2025 GMT Subject: CN=B046FA32A00B8E7DDA0D7103CC20279DC7415803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:29:95:eb:b2:a1:e1:ff:2b:95:9e:12:54: a3:08:fd:58:04:35:50:46:8c:b9:f8:64:51:39:b3: 0e:0f:72:e3:b0:00:8f:c1:35:aa:2f:71:89:a0:5f: 59:97:85:58:45:09:12:a9:df:00:ea:db:eb:ea:ba: f2:dc:67:98:5f:95:6d:81:79:1f:15:f6:de:cd:0c: 44:39:d5:3c:1f:12:81:d3:e2:d7:bf:fe:f7:39:0a: 78:ba:39:29:74:e0:35:0c:bb:a9:ac:24:30:d2:2a: 18:60:d5:a9:e1:7f:4d:6e:db:01:1c:b2:d5:0a:02: ad:fd:02:f0:01:ae:17:1f:5a:7f:72:fc:5e:e9:80: 96:d2:30:ec:ac:13:cc:3c:67:ce:a9:52:eb:e2:92: 4a:c8:4b:bf:c4:11:01:5e:2d:ec:e2:ad:7f:42:a4: 5a:a5:bf:70:89:25:5a:63:60:d8:dc:d3:0c:32:10: 65:32:03:3d:67:9d:8d:d5:0e:f9:b4:15:1b:a3:e6: b9:60:c8:03:65:1c:19:52:3b:1e:96:5f:d6:9e:23: 24:15:6c:5f:63:de:dd:ec:25:85:d2:c2:de:29:5f: 55:80:52:42:7f:8d:80:83:e6:8e:48:b4:cc:7a:75: 72:ff:1a:d9:2f:09:4f:3a:be:ad:23:4b:ae:5d:47: 40:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:46:FA:32:A0:0B:8E:7D:DA:0D:71:03:CC:20:27:9D:C7:41:58:03 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34353a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:45::/48 Signature Algorithm: sha256WithRSAEncryption 74:af:05:01:f2:2e:ed:5c:e6:6d:ff:d0:5a:40:74:31:7c:bd: e1:c0:46:e8:5c:45:92:05:4d:c6:f1:7b:b8:a4:ff:f1:81:9a: 1c:19:ff:49:e6:0c:db:00:6c:71:f9:fa:91:d9:b1:c4:dd:02: 72:86:34:4f:d7:5a:60:93:e1:5d:ee:d0:a5:9d:cd:32:f2:ae: 7b:05:96:ff:e7:e4:12:d0:fe:9e:ee:47:35:a3:6a:e3:70:74: 31:4e:9b:38:6b:80:ee:da:66:cd:d4:69:11:df:9d:2f:68:e2: b2:d1:dc:84:1f:e3:67:88:53:23:3d:ec:10:95:35:b2:7e:a2: 02:8d:1e:23:0f:68:26:80:00:d8:7b:e6:7a:f3:0d:80:dc:2f: ce:52:43:ee:52:20:f5:5f:5f:2e:3b:18:91:2f:89:57:45:31: d9:88:1d:c5:ca:7c:79:53:06:0d:32:4d:4f:d3:50:6e:04:91: 50:8c:3f:f1:d2:df:d7:eb:fb:52:d0:e8:47:f6:70:fc:fc:64: e4:20:99:53:b6:c6:f7:62:fc:dd:fb:41:4f:71:ef:66:28:7e: ed:28:4b:2a:05:2d:48:60:a0:c7:6a:2e:10:83:55:15:56:47: c8:7d:1b:4b:ae:ef:b0:44:21:40:2c:98:75:46:b4:45:f8:36: cd:c1:5e:f1 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUWHSTxJzE3cK8Dxk5iQ1NrodSIDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDNaFw0yNTA1MDgwNDAxMDNaMDMxMTAvBgNV BAMTKEIwNDZGQTMyQTAwQjhFN0REQTBENzEwM0NDMjAyNzlEQzc0MTU4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXymV67Kh4f8rlZ4SVKMI/VgE NVBGjLn4ZFE5sw4PcuOwAI/BNaovcYmgX1mXhVhFCRKp3wDq2+vquvLcZ5hflW2B eR8V9t7NDEQ51TwfEoHT4te//vc5Cni6OSl04DUMu6msJDDSKhhg1anhf01u2wEc stUKAq39AvABrhcfWn9y/F7pgJbSMOysE8w8Z86pUuvikkrIS7/EEQFeLezirX9C pFqlv3CJJVpjYNjc0wwyEGUyAz1nnY3VDvm0FRuj5rlgyANlHBlSOx6WX9aeIyQV bF9j3t3sJYXSwt4pX1WAUkJ/jYCD5o5ItMx6dXL/GtkvCU86vq0jS65dR0BbAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUsEb6MqALjn3aDXEDzCAnncdBWAMwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAEUw DQYJKoZIhvcNAQELBQADggEBAHSvBQHyLu1c5m3/0FpAdDF8veHARuhcRZIFTcbx e7ik//GBmhwZ/0nmDNsAbHH5+pHZscTdAnKGNE/XWmCT4V3u0KWdzTLyrnsFlv/n 5BLQ/p7uRzWjauNwdDFOmzhrgO7aZs3UaRHfnS9o4rLR3IQf42eIUyM97BCVNbJ+ ogKNHiMPaCaAANh75nrzDYDcL85SQ+5SIPVfXy47GJEviVdFMdmIHcXKfHlTBg0y TU/TUG4EkVCMP/HS39fr+1LQ6Ef2cPz8ZOQgmVO2xvdi/N37QU9x72Yofu0oSyoF LUhgoMdqLhCDVRVWR8h9G0uu77BEIUAsmHVGtEX4Ns3BXvE= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org