$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a343a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a343a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: iUmRbLgPs070qwFlJCBR/EvE3t0qdGw2mC5X+ur4u3k= Subject key identifier: 64:F3:E1:9B:25:46:41:3A:38:CD:A1:8F:A0:CB:9F:D8:CA:04:21:1C Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 3C37595916F56A181C39B98AEC50310D4F35FB36 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a343a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:08 +0000 ROA not before: Thu 09 May 2024 03:56:08 +0000 ROA not after: Thu 08 May 2025 04:01:08 +0000 asID: 55701 IP address blocks: 2405:b900:4::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:37:59:59:16:f5:6a:18:1c:39:b9:8a:ec:50:31:0d:4f:35:fb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:08 2024 GMT Not After : May 8 04:01:08 2025 GMT Subject: CN=64F3E19B2546413A38CDA18FA0CB9FD8CA04211C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:31:30:a6:6b:b3:db:fb:b2:59:93:74:80: e9:dd:8d:45:64:81:e6:c8:95:b1:3b:51:a3:88:84: 1f:ef:85:9c:2a:2b:68:e8:7b:04:1c:39:4a:4d:de: 3a:ad:1a:4d:cc:af:78:68:03:e0:54:49:45:18:b9: cd:bf:bd:14:2b:f7:12:4c:7a:2d:53:92:44:59:ee: 86:b5:a2:e7:cd:fc:43:e6:6b:9b:09:a4:22:c8:43: df:17:41:85:c3:99:70:b4:c4:72:3f:87:ba:67:1d: 79:6e:ad:fc:3e:bf:ba:bf:be:a3:c6:53:e9:53:86: 4b:b5:7d:15:49:28:38:80:9d:83:d7:d7:02:8b:69: 39:a6:95:72:6c:8e:fc:3e:28:76:0e:f4:85:4b:43: c4:3a:20:f4:16:fa:53:21:9c:89:64:c9:ad:5a:d9: 92:5f:06:62:72:23:f7:8d:38:a2:45:1e:e5:09:f7: d6:2a:23:97:64:04:90:83:cc:de:9e:3d:35:81:01: e5:69:72:d6:52:74:e6:41:c7:24:81:7d:c0:16:05: 4e:2d:2d:86:a0:8c:07:3a:17:2e:7c:75:37:55:19: a3:f2:30:91:97:a3:36:f0:89:1d:ba:a0:0e:54:02: 8a:0f:7f:d7:d2:6c:b9:7b:b0:be:00:06:c0:42:13: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F3:E1:9B:25:46:41:3A:38:CD:A1:8F:A0:CB:9F:D8:CA:04:21:1C X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a343a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:4::/48 Signature Algorithm: sha256WithRSAEncryption 9f:2d:bc:ca:58:02:29:76:bc:b0:a7:b9:02:0c:4e:ba:34:2d: 9c:36:e9:36:68:09:82:cb:21:f7:8a:a8:4f:3c:33:e8:c6:bd: d2:f2:93:30:be:70:3a:4d:8e:e0:f4:05:18:21:29:a5:e7:28: 90:43:25:d4:b1:ae:7e:04:fb:3d:19:0b:3e:4c:13:7e:ba:c6: fb:6c:a2:56:0f:ff:8c:8c:ad:1e:76:fb:b5:ad:11:9f:0d:ae: cd:fa:0c:37:cd:f1:14:b2:d5:a0:4f:ee:49:43:e1:ad:25:36: a0:72:8b:b6:06:1e:e9:91:95:7a:f0:49:82:fb:51:32:3f:3f: 4b:b2:e7:8e:50:45:0c:b2:3d:cf:b4:7f:71:a6:9c:77:f9:de: 14:fd:96:d6:37:22:d6:f5:7b:4c:ce:49:9d:e7:4f:ae:04:1b: db:10:69:2b:34:50:99:5d:27:e5:13:57:af:8a:34:48:18:4b: 8d:41:7d:09:4d:51:cd:e8:c5:ae:00:af:2e:7f:f9:16:81:f8: eb:98:0f:8c:42:8a:d3:3a:45:ae:63:3b:29:e5:38:ba:07:13: a1:33:c6:24:25:63:7b:e0:dc:bc:54:8d:e7:9b:fa:7a:d8:8e: f7:90:68:9c:e4:e1:f3:dd:e0:d5:45:8d:a2:e1:6f:d3:9f:9f: ff:c3:08:b9 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUPDdZWRb1ahgcObmK7FAxDU81+zYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDhaFw0yNTA1MDgwNDAxMDhaMDMxMTAvBgNV BAMTKDY0RjNFMTlCMjU0NjQxM0EzOENEQTE4RkEwQ0I5RkQ4Q0EwNDIxMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiDEwpmuz2/uyWZN0gOndjUVk gebIlbE7UaOIhB/vhZwqK2joewQcOUpN3jqtGk3Mr3hoA+BUSUUYuc2/vRQr9xJM ei1TkkRZ7oa1oufN/EPma5sJpCLIQ98XQYXDmXC0xHI/h7pnHXlurfw+v7q/vqPG U+lThku1fRVJKDiAnYPX1wKLaTmmlXJsjvw+KHYO9IVLQ8Q6IPQW+lMhnIlkya1a 2ZJfBmJyI/eNOKJFHuUJ99YqI5dkBJCDzN6ePTWBAeVpctZSdOZBxySBfcAWBU4t LYagjAc6Fy58dTdVGaPyMJGXozbwiR26oA5UAooPf9fSbLl7sL4ABsBCEwVJAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUZPPhmyVGQTo4zaGPoMuf2MoEIRwwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzQzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5AAAEMA0G CSqGSIb3DQEBCwUAA4IBAQCfLbzKWAIpdrywp7kCDE66NC2cNuk2aAmCyyH3iqhP PDPoxr3S8pMwvnA6TY7g9AUYISml5yiQQyXUsa5+BPs9GQs+TBN+usb7bKJWD/+M jK0edvu1rRGfDa7N+gw3zfEUstWgT+5JQ+GtJTagcou2Bh7pkZV68EmC+1EyPz9L sueOUEUMsj3PtH9xppx3+d4U/ZbWNyLW9XtMzkmd50+uBBvbEGkrNFCZXSflE1ev ijRIGEuNQX0JTVHN6MWuAK8uf/kWgfjrmA+MQorTOkWuYzsp5Ti6BxOhM8YkJWN7 4Ny8VI3nm/p62I73kGic5OHz3eDVRY2i4W/Tn5//wwi5 -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org