$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36363a3a2f34382d3438203d3e20313431383932.roa File: 323430353a623930303a36363a3a2f34382d3438203d3e20313431383932.roa (raw, json) Hash identifier: rA2F5zxlw3kegIV8sbEwhBvLj3BbA1SaVPfyPF/xEGo= Subject key identifier: 7F:FF:D7:9B:A3:10:B7:E3:AB:AE:B1:15:5F:DD:9D:66:DF:39:C8:9C Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 0B93ABF0782BDC847BECB8391EBC6979EAF60A1B Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36363a3a2f34382d3438203d3e20313431383932.roa Signing time: Thu 09 May 2024 04:01:04 +0000 ROA not before: Thu 09 May 2024 03:56:04 +0000 ROA not after: Thu 08 May 2025 04:01:04 +0000 asID: 141892 IP address blocks: 2405:b900:66::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:93:ab:f0:78:2b:dc:84:7b:ec:b8:39:1e:bc:69:79:ea:f6:0a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:04 2024 GMT Not After : May 8 04:01:04 2025 GMT Subject: CN=7FFFD79BA310B7E3ABAEB1155FDD9D66DF39C89C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:4f:20:39:d9:f0:80:0e:4c:86:c5:cd:6f: d1:64:7c:d2:d5:60:07:98:b4:bf:07:59:41:2e:44: 1b:f7:f4:8f:5e:d5:a1:80:37:6a:c6:86:00:93:19: 13:f1:96:f8:5d:a9:ec:94:a6:ac:2d:b4:4e:06:eb: e7:26:6e:b1:a1:c1:43:6a:9b:72:b6:89:43:ab:da: 92:84:05:2c:d3:e4:a4:d8:b7:4d:37:00:5a:bf:e0: ac:87:ef:0b:1b:30:5c:81:58:b2:33:d7:39:d9:02: 49:ec:2d:e6:dc:20:76:f0:70:a3:15:d0:ab:ec:04: cb:9b:be:73:e6:bd:3b:df:a0:52:9a:c7:13:4b:3e: 9a:79:9c:e1:e7:bb:c4:9b:2e:2e:9d:b4:d0:1c:4a: ea:3e:12:8c:b0:bc:87:bc:3f:ed:19:89:fb:56:48: a8:26:2e:91:f9:d7:00:0e:07:ad:21:c6:f3:d3:92: 89:eb:1b:56:b4:28:34:14:3a:5c:8d:5f:f7:f3:0a: f5:e3:73:00:82:75:90:4c:9d:f9:4a:54:9f:d2:96: 4b:c1:41:97:e5:06:98:3d:48:4d:ea:60:38:91:74: 61:68:e5:bf:1b:24:7d:0a:71:9a:2a:c6:66:7f:e7: d7:b3:91:58:70:8d:fa:69:b0:d9:94:f6:97:f4:ae: 66:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FF:D7:9B:A3:10:B7:E3:AB:AE:B1:15:5F:DD:9D:66:DF:39:C8:9C X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36363a3a2f34382d3438203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:66::/48 Signature Algorithm: sha256WithRSAEncryption 52:a8:74:81:ef:3f:05:7d:69:09:dc:51:e2:a2:6b:34:3f:80: e0:ac:9a:d1:d2:f5:6c:99:1a:28:33:91:98:f6:e2:e2:5e:88: 3f:1c:bb:22:83:ba:97:10:c7:44:88:16:02:8b:e4:0d:20:4b: 9e:59:17:75:77:03:d3:38:2e:9e:bd:a3:57:f7:cb:de:48:1d: b7:4b:15:34:bb:d2:38:ad:1c:af:f6:5e:63:b0:5f:e3:6b:9f: 31:3d:df:b5:64:f4:4f:d8:1e:c2:5e:62:0a:41:1e:f8:96:48: 2b:18:20:c0:3b:13:2b:42:8c:67:af:c2:35:eb:5f:a6:b0:0a: 60:d8:65:68:b7:cb:4f:26:92:30:06:61:c2:9e:24:88:15:5c: 3d:c0:df:43:b3:52:08:c9:ec:66:74:a7:d3:0c:58:38:a0:00: 35:8a:89:44:20:b7:f2:d2:c5:3b:32:f7:e7:42:67:43:59:c8: 0a:e5:57:9e:1f:e3:99:6a:2e:d0:b6:a0:7f:04:38:bf:70:da: 79:cb:57:b6:a3:c9:71:3d:8d:9f:05:41:a6:9e:bf:92:57:d7: 40:e0:6a:73:61:6c:f5:6b:19:7c:20:69:0d:63:5c:eb:d8:8c: cb:13:1c:48:28:51:61:5a:9d:e2:33:61:d7:2c:4a:28:54:65: e9:d8:e3:da -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUC5Or8Hgr3IR77Lg5Hrxpeer2ChswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDRaFw0yNTA1MDgwNDAxMDRaMDMxMTAvBgNV BAMTKDdGRkZENzlCQTMxMEI3RTNBQkFFQjExNTVGREQ5RDY2REYzOUM4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJ08gOdnwgA5MhsXNb9FkfNLV YAeYtL8HWUEuRBv39I9e1aGAN2rGhgCTGRPxlvhdqeyUpqwttE4G6+cmbrGhwUNq m3K2iUOr2pKEBSzT5KTYt003AFq/4KyH7wsbMFyBWLIz1znZAknsLebcIHbwcKMV 0KvsBMubvnPmvTvfoFKaxxNLPpp5nOHnu8SbLi6dtNAcSuo+EoywvIe8P+0ZiftW SKgmLpH51wAOB60hxvPTkonrG1a0KDQUOlyNX/fzCvXjcwCCdZBMnflKVJ/SlkvB QZflBpg9SE3qYDiRdGFo5b8bJH0KcZoqxmZ/59ezkVhwjfppsNmU9pf0rmYxAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUf//Xm6MQt+OrrrEVX92dZt85yJwwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzYzNjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFuQAA ZjANBgkqhkiG9w0BAQsFAAOCAQEAUqh0ge8/BX1pCdxR4qJrND+A4Kya0dL1bJka KDORmPbi4l6IPxy7IoO6lxDHRIgWAovkDSBLnlkXdXcD0zgunr2jV/fL3kgdt0sV NLvSOK0cr/ZeY7Bf42ufMT3ftWT0T9gewl5iCkEe+JZIKxggwDsTK0KMZ6/CNetf prAKYNhlaLfLTyaSMAZhwp4kiBVcPcDfQ7NSCMnsZnSn0wxYOKAANYqJRCC38tLF OzL350JnQ1nICuVXnh/jmWou0LagfwQ4v3DaectXtqPJcT2NnwVBpp6/klfXQOBq c2Fs9WsZfCBpDWNc69iMyxMcSChRYVqd4jNh1yxKKFRl6djj2g== -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org