$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37303a3a2f34382d3438203d3e20313431383932.roa File: 323430353a623930303a37303a3a2f34382d3438203d3e20313431383932.roa (raw, json) Hash identifier: lp8tkjNv2kpob2tSgzibRvAisIv/azcF4Q0sOq2Cq5E= Subject key identifier: 00:8D:3F:83:18:E4:C1:10:9A:4F:79:F7:2D:5C:90:07:F0:D2:FD:4F Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 21633E2151BECCC59947EAC7A65EACDE62E2B9D8 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37303a3a2f34382d3438203d3e20313431383932.roa Signing time: Thu 09 May 2024 04:01:04 +0000 ROA not before: Thu 09 May 2024 03:56:04 +0000 ROA not after: Thu 08 May 2025 04:01:04 +0000 asID: 141892 IP address blocks: 2405:b900:70::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:63:3e:21:51:be:cc:c5:99:47:ea:c7:a6:5e:ac:de:62:e2:b9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:04 2024 GMT Not After : May 8 04:01:04 2025 GMT Subject: CN=008D3F8318E4C1109A4F79F72D5C9007F0D2FD4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:4d:03:21:3d:8a:de:75:e7:1f:ea:01:f7: 1d:aa:8a:4c:22:69:31:25:70:af:53:35:1b:5c:c9: 47:43:58:6f:3a:2c:a7:5d:2d:79:fe:c1:53:a9:59: 76:1e:09:e2:5c:cc:91:21:53:7a:95:7b:32:a1:1e: e5:87:b9:e4:bc:7f:3c:44:03:e1:fb:09:e6:bf:88: 9d:af:04:80:fa:42:8e:30:fc:7a:ff:9d:49:55:b5: f8:20:42:b3:78:14:3a:05:e0:e9:ec:ab:02:4c:9d: c8:6e:90:5c:7c:fb:ba:fe:b9:e7:f1:80:fe:d9:5f: 73:fc:ac:b1:3a:97:be:85:29:6a:ad:fc:a4:4f:8d: 58:db:09:35:72:ba:2c:e2:21:31:19:b6:0a:58:47: b3:dd:30:76:3c:21:bd:71:da:7e:d2:b9:f8:e6:bf: f2:56:ce:48:6c:9e:91:a2:43:4c:e2:29:0e:7b:f5: dd:9f:ad:06:91:d6:be:7b:16:10:ed:34:a5:72:7f: 69:0f:74:53:71:ac:de:50:2a:15:f1:89:7d:86:b4: 04:d6:c3:c6:61:94:10:13:40:53:e4:cd:87:46:1d: 5b:47:1e:3f:e4:c2:4e:30:cf:65:21:c4:ad:b9:c2: a9:cc:4c:84:39:32:4f:1d:22:0a:89:5c:7b:bb:2c: f0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8D:3F:83:18:E4:C1:10:9A:4F:79:F7:2D:5C:90:07:F0:D2:FD:4F X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37303a3a2f34382d3438203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:70::/48 Signature Algorithm: sha256WithRSAEncryption af:39:cf:63:a4:89:00:9a:cc:a2:8d:65:a7:6b:27:02:a8:81: 24:ce:7e:bb:90:96:d8:dc:02:59:8d:50:6b:a5:0d:5b:48:fc: 0f:e6:5f:f9:15:90:a8:fe:89:a7:35:bf:23:42:7b:1e:51:81: e3:b6:8d:c4:16:d6:11:69:42:05:46:b8:32:66:63:a7:29:28: 70:56:7d:39:31:18:77:b5:87:37:82:a1:0a:81:40:63:d0:35: 0f:8d:12:4e:81:7b:4e:f5:75:ef:98:58:1b:e7:f9:9c:5c:fd: fb:e7:44:03:19:2c:2f:61:3e:12:90:ba:86:02:5f:54:b8:40: 00:a4:b7:10:fa:f5:0f:db:5c:c7:c5:e8:f8:cb:d1:8c:7d:9d: 03:9a:88:b0:79:14:55:5f:53:a1:e0:08:11:18:88:d8:18:04: 1f:14:b8:87:0d:0b:e6:52:66:90:94:cc:91:1f:f1:1a:9f:2e: 2a:a0:36:f0:e9:a5:05:3f:d3:b8:d9:0b:d7:37:4f:3b:3f:34: 1d:0e:17:77:50:ec:10:77:72:d2:27:8a:12:51:a2:63:69:9b: 94:05:81:07:cc:f9:2e:e6:74:47:f3:bf:e7:17:6d:90:37:42: 08:93:09:4c:c2:d7:2d:95:a3:0f:46:66:d3:06:16:e2:4a:17: 6f:e6:a7:2b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUIWM+IVG+zMWZR+rHpl6s3mLiudgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDRaFw0yNTA1MDgwNDAxMDRaMDMxMTAvBgNV BAMTKDAwOEQzRjgzMThFNEMxMTA5QTRGNzlGNzJENUM5MDA3RjBEMkZENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2r00DIT2K3nXnH+oB9x2qikwi aTElcK9TNRtcyUdDWG86LKddLXn+wVOpWXYeCeJczJEhU3qVezKhHuWHueS8fzxE A+H7Cea/iJ2vBID6Qo4w/Hr/nUlVtfggQrN4FDoF4OnsqwJMnchukFx8+7r+uefx gP7ZX3P8rLE6l76FKWqt/KRPjVjbCTVyuiziITEZtgpYR7PdMHY8Ib1x2n7Sufjm v/JWzkhsnpGiQ0ziKQ579d2frQaR1r57FhDtNKVyf2kPdFNxrN5QKhXxiX2GtATW w8ZhlBATQFPkzYdGHVtHHj/kwk4wz2UhxK25wqnMTIQ5Mk8dIgqJXHu7LPCjAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUAI0/gxjkwRCaT3n3LVyQB/DS/U8wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzczMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFuQAA cDANBgkqhkiG9w0BAQsFAAOCAQEArznPY6SJAJrMoo1lp2snAqiBJM5+u5CW2NwC WY1Qa6UNW0j8D+Zf+RWQqP6JpzW/I0J7HlGB47aNxBbWEWlCBUa4MmZjpykocFZ9 OTEYd7WHN4KhCoFAY9A1D40SToF7TvV175hYG+f5nFz9++dEAxksL2E+EpC6hgJf VLhAAKS3EPr1D9tcx8Xo+MvRjH2dA5qIsHkUVV9ToeAIERiI2BgEHxS4hw0L5lJm kJTMkR/xGp8uKqA28OmlBT/TuNkL1zdPOz80HQ4Xd1DsEHdy0ieKElGiY2mblAWB B8z5LuZ0R/O/5xdtkDdCCJMJTMLXLZWjD0Zm0wYW4koXb+anKw== -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org