$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34363a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a34363a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: OojEen4r6tMEwiCq2hd8BKOPRnWHJh4szwwsbkBr6A8= Subject key identifier: 08:15:AF:87:97:67:77:01:19:A1:2E:83:E1:EB:E2:F3:4C:6B:EA:63 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 14E07EC7BAE0F8F27BB02A32480CEA081CA1E659 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34363a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:00 +0000 ROA not before: Thu 09 May 2024 03:56:00 +0000 ROA not after: Thu 08 May 2025 04:01:00 +0000 asID: 55701 IP address blocks: 2405:b900:46::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e0:7e:c7:ba:e0:f8:f2:7b:b0:2a:32:48:0c:ea:08:1c:a1:e6:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:00 2024 GMT Not After : May 8 04:01:00 2025 GMT Subject: CN=0815AF879767770119A12E83E1EBE2F34C6BEA63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:05:37:29:f7:81:68:f3:42:51:30:32:20: 81:c3:db:4f:49:65:ff:cc:be:ed:a7:14:c3:c8:47: 4c:39:82:bd:5f:fb:3b:e3:2a:db:ac:4c:23:b0:57: 85:f5:6a:e9:8e:3e:f9:f8:a5:a5:5f:80:b5:75:f8: c3:bf:45:9a:b7:cc:3e:ef:44:5c:9e:68:bd:f3:f5: 45:a4:94:09:71:fd:fd:97:66:48:88:9b:00:69:b1: 4e:6e:ac:77:33:75:73:3a:12:36:6a:d6:6c:cd:bb: c6:75:3e:fc:eb:9b:7a:80:22:7b:24:30:ab:51:79: c1:bd:6b:46:43:b4:a4:ed:c5:1f:71:37:e4:d9:48: 86:67:27:b7:c7:da:68:78:a8:19:ac:ca:a6:4b:45: eb:73:1b:ab:e3:80:7f:d2:73:40:33:4b:36:80:1e: 19:6a:1e:a8:73:19:08:d5:75:40:98:94:f1:b2:f4: 35:1b:39:af:cf:4e:06:64:2d:61:0d:5e:24:e1:e5: c2:3e:46:74:80:37:94:85:59:3f:31:cf:be:fe:8a: 58:49:98:27:62:94:aa:87:04:b5:5c:dd:34:01:b2: 7b:6f:0d:aa:25:ef:53:4c:1b:89:19:13:2c:24:7d: 89:25:ac:16:0d:5d:45:9a:2c:a1:94:b8:c0:02:00: e5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:15:AF:87:97:67:77:01:19:A1:2E:83:E1:EB:E2:F3:4C:6B:EA:63 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a34363a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:46::/48 Signature Algorithm: sha256WithRSAEncryption 56:dc:13:f9:c2:c0:f6:3a:0a:9e:6e:fe:3f:81:f8:32:7f:3d: ef:87:ca:8b:19:05:db:f1:e7:b6:50:49:59:fb:39:c9:10:8a: ab:75:be:5d:48:db:4e:88:ae:e8:21:bf:85:30:e2:f7:38:d4: 90:66:21:b2:35:0e:23:63:fa:a0:b2:8a:d3:0f:53:71:4d:54: 58:ef:ca:07:34:3f:45:93:0d:ad:2a:64:e9:d0:a5:d9:57:b4: 29:d2:4c:d0:78:f6:6f:8c:42:ba:4f:ec:0f:3d:d7:9a:f1:25: ad:6c:8c:bd:c2:6d:b7:3c:7a:3b:cb:a7:39:17:40:bc:10:14: 28:bf:f8:80:31:b7:6c:ca:38:44:b2:a6:5a:49:ab:02:2a:89: 7f:8f:3c:e1:80:65:bd:6d:a2:a9:38:58:77:45:09:61:6e:b6: c9:b3:7e:53:a0:0f:24:94:6d:87:b5:ef:a0:88:91:0e:14:1e: 2e:e3:1d:cf:44:40:2d:22:d4:6c:87:aa:a1:cd:88:a0:0f:f4: bb:e3:a0:dd:4d:02:95:85:bd:23:11:08:eb:87:46:9a:2a:52: af:00:a0:07:82:fc:45:1c:14:e1:34:2f:c3:d0:3d:57:73:fa: 27:ef:37:c5:44:1a:12:a2:d8:e9:69:23:da:46:13:c2:4e:19: 0c:50:60:4f -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUFOB+x7rg+PJ7sCoySAzqCByh5lkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDBaFw0yNTA1MDgwNDAxMDBaMDMxMTAvBgNV BAMTKDA4MTVBRjg3OTc2Nzc3MDExOUExMkU4M0UxRUJFMkYzNEM2QkVBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiQU3KfeBaPNCUTAyIIHD209J Zf/Mvu2nFMPIR0w5gr1f+zvjKtusTCOwV4X1aumOPvn4paVfgLV1+MO/RZq3zD7v RFyeaL3z9UWklAlx/f2XZkiImwBpsU5urHczdXM6EjZq1mzNu8Z1Pvzrm3qAInsk MKtRecG9a0ZDtKTtxR9xN+TZSIZnJ7fH2mh4qBmsyqZLRetzG6vjgH/Sc0AzSzaA HhlqHqhzGQjVdUCYlPGy9DUbOa/PTgZkLWENXiTh5cI+RnSAN5SFWT8xz77+ilhJ mCdilKqHBLVc3TQBsntvDaol71NMG4kZEywkfYklrBYNXUWaLKGUuMACAOWdAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUCBWvh5dndwEZoS6D4evi80xr6mMwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzNjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAEYw DQYJKoZIhvcNAQELBQADggEBAFbcE/nCwPY6Cp5u/j+B+DJ/Pe+HyosZBdvx57ZQ SVn7OckQiqt1vl1I206Irughv4Uw4vc41JBmIbI1DiNj+qCyitMPU3FNVFjvygc0 P0WTDa0qZOnQpdlXtCnSTNB49m+MQrpP7A8915rxJa1sjL3Cbbc8ejvLpzkXQLwQ FCi/+IAxt2zKOESyplpJqwIqiX+PPOGAZb1toqk4WHdFCWFutsmzflOgDySUbYe1 76CIkQ4UHi7jHc9EQC0i1GyHqqHNiKAP9LvjoN1NApWFvSMRCOuHRpoqUq8AoAeC /EUcFOE0L8PQPVdz+ifvN8VEGhKi2OlpI9pGE8JOGQxQYE8= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org