$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a35323a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a35323a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: s9Z1/BGEffkge/QbQgbrTwJ2HT2WeMwQvbI0QxSubRs= Subject key identifier: 61:DD:32:A2:17:D8:9E:30:5A:31:4C:44:FE:20:C0:9C:DD:22:F4:D4 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 19E45B9B72E287A3EB9052A595EE26ECFB4FC99B Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a35323a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:02 +0000 ROA not before: Thu 09 May 2024 03:56:02 +0000 ROA not after: Thu 08 May 2025 04:01:02 +0000 asID: 55701 IP address blocks: 2405:b900:52::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e4:5b:9b:72:e2:87:a3:eb:90:52:a5:95:ee:26:ec:fb:4f:c9:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:02 2024 GMT Not After : May 8 04:01:02 2025 GMT Subject: CN=61DD32A217D89E305A314C44FE20C09CDD22F4D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:65:94:fa:33:29:24:8c:3e:ea:ca:f4:ef:e3: a6:3c:e2:66:b1:16:a2:a2:9a:9f:17:98:ae:b9:7e: 62:bb:3f:71:ee:83:41:d1:7e:d4:38:67:49:97:29: f6:8b:1b:be:c1:a7:c7:aa:78:ae:a4:db:7c:f6:20: 61:a1:32:6f:33:80:a0:37:dc:b6:6f:2d:e4:f4:8e: 5b:0d:f5:31:60:99:78:e2:e0:58:c7:8b:44:28:e4: 94:be:f7:e4:a8:fb:9c:4c:59:81:f1:b3:91:bb:51: 90:45:e9:4f:73:9b:1c:07:32:a0:5e:5f:bc:2e:77: c4:9f:18:49:e8:78:44:a6:59:49:56:22:f1:fd:61: 37:6e:45:4a:a9:a6:85:24:1f:81:71:c8:98:c8:8d: b7:de:d7:4b:03:41:06:e3:b8:5c:e1:c8:85:cd:83: 62:c6:1b:c3:6c:89:bc:dc:ba:0c:73:d3:76:04:d2: 49:09:0f:76:f6:cb:64:06:4d:21:36:44:ca:10:eb: 04:bb:ab:89:a6:8f:fa:19:a9:29:5c:48:ef:8a:d8: 6e:e9:a3:31:22:84:b9:19:db:13:64:42:90:30:fa: 4d:e9:33:22:57:6d:ad:de:b4:34:05:70:ed:00:ea: b0:f7:9b:1c:25:48:7f:2f:93:eb:8c:37:af:5b:a0: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DD:32:A2:17:D8:9E:30:5A:31:4C:44:FE:20:C0:9C:DD:22:F4:D4 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a35323a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:52::/48 Signature Algorithm: sha256WithRSAEncryption 2f:56:3c:61:be:ce:01:66:f5:0a:55:16:27:e8:e4:0b:b0:4a: d3:09:78:c4:8c:d2:a8:db:d3:33:64:cd:61:cb:08:a8:b8:11: c2:3f:7c:67:ab:65:7d:5a:0d:75:b7:46:13:89:28:2e:b9:46: 07:52:20:54:47:47:92:2c:39:7e:94:8c:a8:ed:79:ad:27:70: fc:4e:35:fa:b6:5b:03:cb:39:bc:82:00:d9:23:f9:5b:2e:27: 10:91:5d:06:02:d7:bc:aa:db:32:b6:2c:15:79:08:ec:b0:d5: 21:83:00:01:54:b7:a0:61:8f:78:aa:70:1b:a9:57:32:10:92: 90:27:cd:76:58:65:01:c8:56:f7:60:32:fd:f1:39:b0:38:d7: 01:9e:a5:d0:86:7e:3a:8b:21:35:ee:b0:39:32:29:9f:c8:ba: 4a:76:14:a7:b8:10:4e:2e:c2:d2:3a:73:3f:5e:b5:8f:7c:8a: 61:d6:56:35:fe:aa:d8:ec:6d:68:38:df:e7:d0:58:13:2a:e7: ed:a1:1a:cb:47:22:7d:29:e7:85:71:75:e7:66:98:d5:8e:fb: 9a:b2:37:ee:73:c7:ae:e1:e4:60:97:fb:d8:10:3f:a6:d7:e7: ee:89:ab:7c:11:a9:f0:4e:1a:88:1c:48:b5:88:96:bb:c8:48: e6:e0:49:2e -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUGeRbm3Lih6PrkFKlle4m7PtPyZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDJaFw0yNTA1MDgwNDAxMDJaMDMxMTAvBgNV BAMTKDYxREQzMkEyMTdEODlFMzA1QTMxNEM0NEZFMjBDMDlDREQyMkY0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZZT6MykkjD7qyvTv46Y84max FqKimp8XmK65fmK7P3Hug0HRftQ4Z0mXKfaLG77Bp8eqeK6k23z2IGGhMm8zgKA3 3LZvLeT0jlsN9TFgmXji4FjHi0Qo5JS+9+So+5xMWYHxs5G7UZBF6U9zmxwHMqBe X7wud8SfGEnoeESmWUlWIvH9YTduRUqppoUkH4FxyJjIjbfe10sDQQbjuFzhyIXN g2LGG8Nsibzcugxz03YE0kkJD3b2y2QGTSE2RMoQ6wS7q4mmj/oZqSlcSO+K2G7p ozEihLkZ2xNkQpAw+k3pMyJXba3etDQFcO0A6rD3mxwlSH8vk+uMN69boCVjAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUYd0yohfYnjBaMUxE/iDAnN0i9NQwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzUzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAFIw DQYJKoZIhvcNAQELBQADggEBAC9WPGG+zgFm9QpVFifo5AuwStMJeMSM0qjb0zNk zWHLCKi4EcI/fGerZX1aDXW3RhOJKC65RgdSIFRHR5IsOX6UjKjtea0ncPxONfq2 WwPLObyCANkj+VsuJxCRXQYC17yq2zK2LBV5COyw1SGDAAFUt6Bhj3iqcBupVzIQ kpAnzXZYZQHIVvdgMv3xObA41wGepdCGfjqLITXusDkyKZ/Iukp2FKe4EE4uwtI6 cz9etY98imHWVjX+qtjsbWg43+fQWBMq5+2hGstHIn0p54VxdedmmNWO+5qyN+5z x67h5GCX+9gQP6bX5+6Jq3wRqfBOGogcSLWIlrvISObgSS4= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org