$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a353a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a353a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: ru6r+GgaY8Tv11MA+upxlA3567tAha/SMOaXbIoZTmw= Subject key identifier: D3:EC:2D:71:D8:2E:68:BB:31:B1:24:D9:36:43:2A:07:48:4B:CB:A0 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 1A40FCF6F9BE0E7531A561C8A7ACCCDB2026C560 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a353a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:00:57 +0000 ROA not before: Thu 09 May 2024 03:55:57 +0000 ROA not after: Thu 08 May 2025 04:00:57 +0000 asID: 55701 IP address blocks: 2405:b900:5::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:40:fc:f6:f9:be:0e:75:31:a5:61:c8:a7:ac:cc:db:20:26:c5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:55:57 2024 GMT Not After : May 8 04:00:57 2025 GMT Subject: CN=D3EC2D71D82E68BB31B124D936432A07484BCBA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:12:9c:2a:0b:e8:98:87:8c:ae:ee:c1:ef: 4b:d3:3a:b6:77:e1:10:3d:21:e5:55:39:a0:37:a0: 38:ee:ae:e5:8e:bb:65:38:5a:0f:70:38:4b:60:40: 70:76:53:b1:27:4e:ac:ae:7e:b7:d4:ef:34:45:71: 1c:1d:51:bd:4c:b7:ec:b0:da:71:9d:c7:20:f3:d2: 8a:12:19:66:67:fa:c0:2e:2a:bf:9b:10:3d:95:e9: 65:2f:32:0e:2b:66:f6:56:6a:27:c3:08:08:ce:0d: b8:af:22:1c:ee:ec:b9:11:41:83:1c:df:5d:98:59: 13:5e:0c:6b:b2:67:80:36:d7:09:1a:07:7d:24:7a: e1:83:ef:7d:96:f0:87:ae:10:61:b9:4e:d7:ed:9d: b6:2f:3e:40:47:7c:e7:a2:70:cc:b5:76:ce:ae:45: e3:94:c0:c3:85:82:68:a7:69:9e:29:5a:7a:f6:76: 3c:dd:d3:df:1f:46:60:22:f9:36:51:07:d6:6b:d1: d6:64:7f:31:55:33:0c:b4:53:1e:41:01:8a:e3:24: c2:1e:06:cb:bf:b3:43:dc:75:c8:ae:e8:a9:da:3b: 74:05:78:84:cf:e6:94:10:c1:87:e8:e9:05:2c:3e: a9:ba:70:39:4f:97:10:ea:59:8b:13:05:72:32:7d: 43:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EC:2D:71:D8:2E:68:BB:31:B1:24:D9:36:43:2A:07:48:4B:CB:A0 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a353a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:5::/48 Signature Algorithm: sha256WithRSAEncryption 5d:a3:8c:7b:06:b1:85:b4:74:9d:fe:43:81:f3:dc:c1:64:b2: f9:8e:94:cc:d7:74:c8:4b:d6:8a:52:8f:4d:21:b7:5b:f6:be: 33:fb:04:61:50:67:98:05:f8:6e:9c:9c:52:c2:f1:8f:e9:6d: e7:1f:a3:5e:47:3e:77:16:88:34:70:6c:84:50:45:32:3d:29: 1b:e6:04:da:86:20:e7:66:63:3c:12:f4:be:5e:f9:ba:1a:c5: de:c2:ea:39:7d:23:77:8f:58:d7:9b:f7:07:cb:03:5e:a8:9d: 0a:97:4e:54:75:b9:54:db:52:7b:41:21:df:f8:62:1e:52:de: de:f7:16:56:0f:3f:e5:d0:15:34:1e:90:4a:66:b0:0c:39:45: e0:c2:26:33:72:da:2e:8d:43:db:4e:3b:0b:03:47:ce:ab:6c: 69:46:8c:e5:29:73:ae:3e:de:51:e1:c8:0c:94:23:c6:c3:02: 80:34:3a:07:e3:b0:94:f6:ee:fd:6c:ff:d2:40:d2:5e:79:a5: ef:5b:c1:f2:25:59:61:f1:ab:37:1a:09:9b:24:c1:06:97:d8: 70:12:2b:e5:ba:7d:06:f5:44:95:57:13:6e:88:2d:d6:31:68: 4b:42:6d:4c:b2:69:17:56:7d:16:07:f1:9f:c9:2b:fe:fc:41: 33:32:da:15 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUGkD89vm+DnUxpWHIp6zM2yAmxWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU1NTdaFw0yNTA1MDgwNDAwNTdaMDMxMTAvBgNV BAMTKEQzRUMyRDcxRDgyRTY4QkIzMUIxMjREOTM2NDMyQTA3NDg0QkNCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsrhKcKgvomIeMru7B70vTOrZ3 4RA9IeVVOaA3oDjuruWOu2U4Wg9wOEtgQHB2U7EnTqyufrfU7zRFcRwdUb1Mt+yw 2nGdxyDz0ooSGWZn+sAuKr+bED2V6WUvMg4rZvZWaifDCAjODbivIhzu7LkRQYMc 312YWRNeDGuyZ4A21wkaB30keuGD732W8IeuEGG5TtftnbYvPkBHfOeicMy1ds6u ReOUwMOFgminaZ4pWnr2djzd098fRmAi+TZRB9Zr0dZkfzFVMwy0Ux5BAYrjJMIe Bsu/s0Pcdciu6KnaO3QFeITP5pQQwYfo6QUsPqm6cDlPlxDqWYsTBXIyfUOlAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU0+wtcdguaLsxsSTZNkMqB0hLy6AwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzUzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5AAAFMA0G CSqGSIb3DQEBCwUAA4IBAQBdo4x7BrGFtHSd/kOB89zBZLL5jpTM13TIS9aKUo9N Ibdb9r4z+wRhUGeYBfhunJxSwvGP6W3nH6NeRz53Fog0cGyEUEUyPSkb5gTahiDn ZmM8EvS+Xvm6GsXewuo5fSN3j1jXm/cHywNeqJ0Kl05UdblU21J7QSHf+GIeUt7e 9xZWDz/l0BU0HpBKZrAMOUXgwiYzctoujUPbTjsLA0fOq2xpRozlKXOuPt5R4cgM lCPGwwKANDoH47CU9u79bP/SQNJeeaXvW8HyJVlh8as3GgmbJMEGl9hwEivlun0G 9USVVxNuiC3WMWhLQm1MsmkXVn0WB/GfySv+/EEzMtoV -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org