$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a353537303a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a353537303a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: 5HN8pX8IzyWHafPLHjt4mGx4viLItPmwjjhib49JtCY= Subject key identifier: AC:BB:4D:F0:8F:A4:77:38:9C:C5:D9:E0:B9:78:79:EA:B6:EE:B8:05 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 54BAC9761995580E9E502F6AC3F59B167AF89F1B Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a353537303a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:00:57 +0000 ROA not before: Thu 09 May 2024 03:55:57 +0000 ROA not after: Thu 08 May 2025 04:00:57 +0000 asID: 55701 IP address blocks: 2405:b900:5570::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ba:c9:76:19:95:58:0e:9e:50:2f:6a:c3:f5:9b:16:7a:f8:9f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:55:57 2024 GMT Not After : May 8 04:00:57 2025 GMT Subject: CN=ACBB4DF08FA477389CC5D9E0B97879EAB6EEB805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:74:73:12:c5:10:12:60:77:cd:76:2c:3b: b4:bd:3b:9b:60:01:72:fe:5f:12:15:67:b0:40:16: c9:c9:3f:70:d7:7a:b7:cc:b1:80:2a:b9:c5:22:a0: b5:76:de:f0:64:3b:a0:3d:2f:64:98:9f:14:44:94: 34:ed:6a:c1:bc:3a:91:13:84:5f:f8:b7:0e:24:d3: 8f:bd:75:44:5b:e6:c9:74:ee:ba:81:24:45:c4:eb: 57:c4:16:6b:83:59:09:38:72:11:1c:82:c1:6e:51: db:9e:60:0f:0d:f4:17:cc:cd:80:80:0b:9b:f5:76: 70:24:9f:cf:0b:db:7d:91:0f:26:4b:5d:1d:65:a0: 6b:21:c6:74:d7:a6:0f:e8:05:40:77:fc:28:6f:6a: aa:09:9f:e2:d0:6b:b9:60:40:c6:68:da:5a:0c:63: 12:ce:5e:ef:ce:c6:1d:aa:e1:6c:fe:c7:6e:7c:4f: eb:11:d0:f3:c6:85:58:6f:2c:63:ac:69:73:16:31: d5:73:85:fc:ca:ef:2a:bd:c0:f9:f4:e8:e6:16:9b: 6b:9f:e6:4b:d6:66:49:df:7f:94:77:f7:95:47:8d: e3:3d:e7:bf:47:87:2d:f4:b7:a1:9a:28:8b:09:57: 1d:20:48:f8:d8:97:bd:cc:ef:ce:c2:57:47:f4:9b: 53:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BB:4D:F0:8F:A4:77:38:9C:C5:D9:E0:B9:78:79:EA:B6:EE:B8:05 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a353537303a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:5570::/48 Signature Algorithm: sha256WithRSAEncryption 18:94:be:2f:31:3c:5b:b3:b8:c1:52:09:df:d2:36:10:c6:ea: ed:96:bc:a5:58:44:bc:44:17:aa:bc:7d:a4:4e:cd:81:c0:8f: 82:6a:1d:9d:1a:ea:10:bc:7b:8e:54:83:c9:96:f0:15:43:57: 4d:46:56:3b:25:58:f5:30:51:93:d7:69:a5:6f:e7:05:e5:f9: b6:c8:fb:d1:88:ca:3e:a3:d0:af:ae:be:5d:fb:54:7d:d0:db: 77:b6:8f:f5:9e:5d:c5:94:49:71:e6:98:76:56:16:93:4d:64: 9c:f8:cd:70:c8:15:e1:ef:b4:01:da:5c:51:c8:ed:8c:1c:a4: 3f:84:1f:47:67:90:ac:ba:68:b8:48:58:76:4f:24:56:69:29: 70:66:a7:21:db:ba:a8:65:e9:ef:31:54:6c:ec:68:a6:e0:ee: 79:31:27:9c:8b:cf:18:b0:bf:fe:72:64:93:57:2a:20:bf:d4: f7:66:39:41:05:d2:48:89:7d:2d:c6:f9:d1:56:ac:8c:de:cf: 9c:fa:70:8a:f8:0f:7c:7d:eb:5f:32:0b:e4:06:f2:8b:31:07: 10:f7:62:ca:df:cb:6a:2e:54:0a:7d:6b:e7:5b:b3:24:c8:18: b7:64:9a:86:02:5d:8f:4c:0c:1d:8f:40:e6:f8:d6:5e:49:36: da:d0:49:dd -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVLrJdhmVWA6eUC9qw/WbFnr4nxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU1NTdaFw0yNTA1MDgwNDAwNTdaMDMxMTAvBgNV BAMTKEFDQkI0REYwOEZBNDc3Mzg5Q0M1RDlFMEI5Nzg3OUVBQjZFRUI4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCHRzEsUQEmB3zXYsO7S9O5tg AXL+XxIVZ7BAFsnJP3DXerfMsYAqucUioLV23vBkO6A9L2SYnxRElDTtasG8OpET hF/4tw4k04+9dURb5sl07rqBJEXE61fEFmuDWQk4chEcgsFuUdueYA8N9BfMzYCA C5v1dnAkn88L232RDyZLXR1loGshxnTXpg/oBUB3/ChvaqoJn+LQa7lgQMZo2loM YxLOXu/Oxh2q4Wz+x258T+sR0PPGhVhvLGOsaXMWMdVzhfzK7yq9wPn06OYWm2uf 5kvWZknff5R395VHjeM9579Hhy30t6GaKIsJVx0gSPjYl73M787CV0f0m1NDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrLtN8I+kdzicxdnguXh56rbuuAUwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzUzNTM3MzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5 AFVwMA0GCSqGSIb3DQEBCwUAA4IBAQAYlL4vMTxbs7jBUgnf0jYQxurtlrylWES8 RBeqvH2kTs2BwI+Cah2dGuoQvHuOVIPJlvAVQ1dNRlY7JVj1MFGT12mlb+cF5fm2 yPvRiMo+o9Cvrr5d+1R90Nt3to/1nl3FlElx5ph2VhaTTWSc+M1wyBXh77QB2lxR yO2MHKQ/hB9HZ5Csumi4SFh2TyRWaSlwZqch27qoZenvMVRs7Gim4O55MSeci88Y sL/+cmSTVyogv9T3ZjlBBdJIiX0txvnRVqyM3s+c+nCK+A98fetfMgvkBvKLMQcQ 92LK38tqLlQKfWvnW7MkyBi3ZJqGAl2PTAwdj0Dm+NZeSTba0End -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org