$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a363a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a363a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: gR8TS6MArt/cxR0mQZ/fXQsWfOT08Ov0cbQgZ1dRuNM= Subject key identifier: 96:97:13:5B:CF:ED:DF:A1:9D:C3:49:FE:F7:5C:91:71:60:50:D5:AE Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 1106948184B96B25D54AFC4DA454901DC526BBB2 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a363a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:00:57 +0000 ROA not before: Thu 09 May 2024 03:55:57 +0000 ROA not after: Thu 08 May 2025 04:00:57 +0000 asID: 55701 IP address blocks: 2405:b900:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:06:94:81:84:b9:6b:25:d5:4a:fc:4d:a4:54:90:1d:c5:26:bb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:55:57 2024 GMT Not After : May 8 04:00:57 2025 GMT Subject: CN=9697135BCFEDDFA19DC349FEF75C91716050D5AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:40:a5:7e:11:7b:a7:4b:8e:c9:63:07:90: 2f:60:80:d2:05:db:60:fd:4f:fe:bf:88:c1:b3:9f: d4:17:06:6b:4e:8d:37:a5:86:70:1b:29:03:00:f3: 10:09:5e:21:0f:63:36:4d:13:09:72:4d:4e:56:04: 29:87:ed:1f:c9:38:17:a5:28:61:f4:71:15:69:35: 34:0c:20:33:29:59:ef:3b:cd:74:31:ff:85:f7:40: ca:9c:4a:62:99:4b:9d:65:00:af:bc:1e:a0:69:17: d8:7f:de:0c:d5:60:26:c7:9f:47:15:56:93:50:52: 6a:68:bb:b9:c5:db:90:48:c5:eb:5e:37:07:4d:cc: b7:ed:95:34:51:ee:e5:d6:17:2b:07:f7:3b:03:77: cd:18:30:d6:75:30:fa:49:2e:0b:cd:e2:71:16:84: 73:da:a8:3b:da:5a:0f:85:8c:4b:73:3d:5c:6f:d7: ea:67:59:d2:ec:08:68:d2:d8:97:c4:49:7f:81:80: df:aa:6f:1c:a8:e5:3e:69:df:80:0c:e4:8d:b1:17: 6d:25:9f:3d:b7:12:da:39:2c:c1:e4:1f:47:9e:fd: 40:94:38:d6:24:bd:00:f9:63:e3:44:8d:37:cd:da: 57:e6:a2:c3:e1:00:4c:6c:57:fc:69:bc:6f:fd:6c: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:97:13:5B:CF:ED:DF:A1:9D:C3:49:FE:F7:5C:91:71:60:50:D5:AE X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a363a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:6::/48 Signature Algorithm: sha256WithRSAEncryption 53:34:74:e0:16:05:b6:88:cd:c7:26:d3:cb:75:50:2a:cb:e3: 24:5b:1a:ab:8f:44:9c:aa:b4:80:d2:a1:98:89:98:36:3d:26: a3:44:cb:40:5e:a9:6b:82:61:11:18:b2:9b:60:b0:e4:ce:7d: 8a:b4:12:f6:d3:66:6d:7f:f1:b6:1d:b7:ee:f6:cf:a7:ee:21: 90:46:65:b6:5f:ef:0d:d4:d4:08:86:d2:3a:02:a6:7e:45:09: cd:79:66:0d:f6:cd:1f:4d:63:8c:93:8a:86:14:ba:e7:c9:ac: 69:fa:25:eb:94:88:5d:48:ea:11:64:ef:28:40:0c:41:0f:87: fb:32:72:96:4b:83:a5:e1:b9:fe:b3:76:6c:86:d4:96:94:21: ed:79:13:df:28:01:64:4f:77:24:15:04:3e:88:e7:91:04:8b: d3:2c:a1:76:eb:27:5f:b8:04:b0:cc:dd:74:9d:7f:0f:f4:95: 8d:e3:a3:8b:04:3f:87:0e:16:bd:62:85:28:a4:83:03:55:8d: 7f:a1:12:c3:c9:3c:5c:de:bb:56:d8:27:f3:a0:00:f2:f5:ad: 58:df:13:e9:cb:92:65:6b:29:f0:89:3e:05:23:76:bd:bd:e9: ce:b7:5e:e0:2f:3a:5b:a1:f9:55:35:84:46:98:bc:3f:e8:d8: a6:b8:aa:17 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUEQaUgYS5ayXVSvxNpFSQHcUmu7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU1NTdaFw0yNTA1MDgwNDAwNTdaMDMxMTAvBgNV BAMTKDk2OTcxMzVCQ0ZFRERGQTE5REMzNDlGRUY3NUM5MTcxNjA1MEQ1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpu0ClfhF7p0uOyWMHkC9ggNIF 22D9T/6/iMGzn9QXBmtOjTelhnAbKQMA8xAJXiEPYzZNEwlyTU5WBCmH7R/JOBel KGH0cRVpNTQMIDMpWe87zXQx/4X3QMqcSmKZS51lAK+8HqBpF9h/3gzVYCbHn0cV VpNQUmpou7nF25BIxeteNwdNzLftlTRR7uXWFysH9zsDd80YMNZ1MPpJLgvN4nEW hHPaqDvaWg+FjEtzPVxv1+pnWdLsCGjS2JfESX+BgN+qbxyo5T5p34AM5I2xF20l nz23Eto5LMHkH0ee/UCUONYkvQD5Y+NEjTfN2lfmosPhAExsV/xpvG/9bFLLAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUlpcTW8/t36Gdw0n+91yRcWBQ1a4wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5AAAGMA0G CSqGSIb3DQEBCwUAA4IBAQBTNHTgFgW2iM3HJtPLdVAqy+MkWxqrj0ScqrSA0qGY iZg2PSajRMtAXqlrgmERGLKbYLDkzn2KtBL202Ztf/G2Hbfu9s+n7iGQRmW2X+8N 1NQIhtI6AqZ+RQnNeWYN9s0fTWOMk4qGFLrnyaxp+iXrlIhdSOoRZO8oQAxBD4f7 MnKWS4Ol4bn+s3ZshtSWlCHteRPfKAFkT3ckFQQ+iOeRBIvTLKF26ydfuASwzN10 nX8P9JWN46OLBD+HDha9YoUopIMDVY1/oRLDyTxc3rtW2CfzoADy9a1Y3xPpy5Jl aynwiT4FI3a9venOt17gLzpboflVNYRGmLw/6NimuKoX -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org