$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36353a3a2f34382d3438203d3e20313431383932.roa File: 323430353a623930303a36353a3a2f34382d3438203d3e20313431383932.roa (raw, json) Hash identifier: Bd5TUQGDq1I9uMo5xUTF3mxCM7PYpTwuXK97Uy71jVU= Subject key identifier: F2:3F:92:16:3D:F4:C4:FF:01:25:26:34:75:AB:CD:0B:CE:72:C5:0B Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 1438523A3F7B9B47894A6AF208FEF071413D5DD1 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36353a3a2f34382d3438203d3e20313431383932.roa Signing time: Thu 09 May 2024 04:01:01 +0000 ROA not before: Thu 09 May 2024 03:56:01 +0000 ROA not after: Thu 08 May 2025 04:01:01 +0000 asID: 141892 IP address blocks: 2405:b900:65::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:38:52:3a:3f:7b:9b:47:89:4a:6a:f2:08:fe:f0:71:41:3d:5d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:01 2024 GMT Not After : May 8 04:01:01 2025 GMT Subject: CN=F23F92163DF4C4FF0125263475ABCD0BCE72C50B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:45:a0:c1:14:e4:16:37:03:14:dd:38:e1: 90:b8:a3:3a:1d:49:cb:35:a6:2f:09:e5:28:ec:3a: 2e:c7:b6:f6:5d:9f:40:06:1a:43:a1:2d:72:e5:fd: dd:e3:16:ad:56:ee:5c:36:27:3f:38:e6:50:2b:b6: 7d:75:6f:56:6a:af:6c:77:62:9b:41:12:0c:58:3f: 7d:fd:59:5d:76:80:b9:e8:be:b4:40:48:bf:59:9e: 91:a0:67:a2:6e:1f:5f:a7:3b:3d:cd:35:d0:ad:05: be:66:87:4f:8c:f3:61:92:b6:5d:e7:33:fc:37:55: 86:5a:b7:39:f4:27:ea:cf:1a:e0:6c:ea:1b:8a:f6: c0:6b:98:24:ad:f2:0b:bf:33:cf:0e:2b:c1:1c:5e: 67:06:f7:46:8d:74:50:bc:5d:96:48:a7:4c:52:55: 6f:e9:e4:96:76:ef:fe:91:07:b0:37:81:51:53:8f: 42:f7:1f:55:11:28:8d:54:89:b2:9c:d1:88:67:24: cb:d5:8b:b2:96:2c:7b:40:84:27:38:77:2d:3c:09: 47:e1:e9:81:f7:da:2c:06:8e:c5:1c:2a:b2:aa:07: 02:44:c0:cc:f4:b8:94:ab:0c:ff:29:d7:a9:3e:be: 5d:ce:08:31:df:f0:92:81:46:d4:cf:ba:bc:d0:08: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3F:92:16:3D:F4:C4:FF:01:25:26:34:75:AB:CD:0B:CE:72:C5:0B X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36353a3a2f34382d3438203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:65::/48 Signature Algorithm: sha256WithRSAEncryption 3f:0d:df:1c:5f:27:62:4e:7f:aa:4e:e0:97:3b:9f:78:b3:ed: dd:e2:cd:c0:3c:bd:b3:21:f9:74:3c:5b:43:a1:d3:cd:2e:c2: 08:a1:0e:1d:2a:5c:81:19:75:2e:c2:dc:d1:03:2d:c9:41:a1: b2:64:44:8e:4d:17:ef:90:f6:54:63:1a:8c:20:e1:df:a0:a4: e9:96:70:74:7a:ac:21:c4:09:ee:89:03:5b:1c:e8:a3:4d:1c: 5f:a2:ff:27:ca:0c:d3:5e:43:02:77:89:41:73:23:54:c9:7e: e5:3c:12:80:93:e5:61:47:53:34:b3:44:c8:3f:95:26:b0:78: 08:e4:30:32:f4:aa:1f:1f:d8:ec:82:6a:6f:f8:2b:23:a5:47: 16:90:2f:f2:a2:e0:53:48:ed:b0:0e:7b:91:ec:de:b1:9f:bf: 29:b0:af:91:3f:47:39:7c:b3:3e:19:5b:27:d8:67:2d:66:06: 9f:d2:3b:46:bd:65:6a:b9:d2:b5:0e:32:cd:b6:b8:ec:d6:a6: 6e:5f:54:80:8e:f5:d0:e9:12:ca:48:13:23:82:50:bd:b4:b4: 76:4c:3f:54:25:8b:f9:38:6c:4f:94:77:00:92:d3:e7:07:69: 4c:08:f3:59:bc:ca:a1:5f:fe:13:1d:f8:d3:0e:ee:18:38:79: 08:a6:5e:20 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUFDhSOj97m0eJSmryCP7wcUE9XdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDFaFw0yNTA1MDgwNDAxMDFaMDMxMTAvBgNV BAMTKEYyM0Y5MjE2M0RGNEM0RkYwMTI1MjYzNDc1QUJDRDBCQ0U3MkM1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+UWgwRTkFjcDFN044ZC4ozod Scs1pi8J5SjsOi7HtvZdn0AGGkOhLXLl/d3jFq1W7lw2Jz845lArtn11b1Zqr2x3 YptBEgxYP339WV12gLnovrRASL9ZnpGgZ6JuH1+nOz3NNdCtBb5mh0+M82GStl3n M/w3VYZatzn0J+rPGuBs6huK9sBrmCSt8gu/M88OK8EcXmcG90aNdFC8XZZIp0xS VW/p5JZ27/6RB7A3gVFTj0L3H1URKI1UibKc0YhnJMvVi7KWLHtAhCc4dy08CUfh 6YH32iwGjsUcKrKqBwJEwMz0uJSrDP8p16k+vl3OCDHf8JKBRtTPurzQCIoJAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU8j+SFj30xP8BJSY0davNC85yxQswHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzYzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFuQAA ZTANBgkqhkiG9w0BAQsFAAOCAQEAPw3fHF8nYk5/qk7glzufeLPt3eLNwDy9syH5 dDxbQ6HTzS7CCKEOHSpcgRl1LsLc0QMtyUGhsmREjk0X75D2VGMajCDh36Ck6ZZw dHqsIcQJ7okDWxzoo00cX6L/J8oM015DAneJQXMjVMl+5TwSgJPlYUdTNLNEyD+V JrB4COQwMvSqHx/Y7IJqb/grI6VHFpAv8qLgU0jtsA57kezesZ+/KbCvkT9HOXyz PhlbJ9hnLWYGn9I7Rr1larnStQ4yzba47Nambl9UgI710OkSykgTI4JQvbS0dkw/ VCWL+ThsT5R3AJLT5wdpTAjzWbzKoV/+Ex340w7uGDh5CKZeIA== -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org