$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37333a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a37333a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: x33ZTIoMzzMftG35Gqo35j2qDPpLs2SpDKfM6AItZWc= Subject key identifier: 69:8B:17:58:20:36:F9:64:1F:07:A6:D7:CF:19:9E:3B:64:CD:8A:66 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 19F6F83742A89561516C53A4872485BBA53B47A5 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37333a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 18 Jul 2024 02:00:02 +0000 ROA not before: Thu 18 Jul 2024 01:55:02 +0000 ROA not after: Thu 17 Jul 2025 02:00:02 +0000 asID: 55701 IP address blocks: 2405:b900:73::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f6:f8:37:42:a8:95:61:51:6c:53:a4:87:24:85:bb:a5:3b:47:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jul 18 01:55:02 2024 GMT Not After : Jul 17 02:00:02 2025 GMT Subject: CN=698B17582036F9641F07A6D7CF199E3B64CD8A66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:db:99:41:2b:41:d6:35:49:31:3a:c6:77: dc:bb:a2:2f:0d:5d:e1:cd:55:bd:bc:07:d5:fd:ec: 62:48:18:a6:c5:8b:fa:59:83:e6:b9:eb:c2:9c:6c: aa:68:c5:1c:e3:56:24:7a:58:62:57:5d:d9:d8:b8: 4e:67:8f:a3:bc:01:7c:af:36:a2:66:a3:86:60:af: 48:74:53:09:d6:b6:9c:14:72:82:c6:53:0b:2c:d2: 41:1d:0a:d2:84:38:eb:2e:86:64:ee:17:3a:55:cb: 40:5f:b0:af:57:13:94:56:d4:ec:b2:be:c2:7e:af: 0e:36:7e:58:5e:0a:e7:92:5d:ca:e3:00:69:29:3e: 0a:0b:af:9e:72:76:6a:2a:35:a8:1b:df:de:8a:65: 11:51:6a:69:d1:ea:14:c5:df:bc:d5:05:f9:66:39: 7f:51:14:93:a0:60:43:77:94:eb:86:da:99:b2:c8: 31:70:17:37:be:e0:2e:90:ff:fc:83:f8:33:ba:53: 99:70:96:69:51:bb:67:b1:c4:54:0b:2c:3a:d2:32: 57:a6:c7:28:bb:ee:84:ce:51:b8:58:53:ba:c8:b2: da:ab:cf:44:3c:b8:6d:9f:a1:e7:2b:23:0b:42:6f: 79:9e:77:7b:96:f6:8e:6b:b2:59:ca:8b:f5:5a:75: 1b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8B:17:58:20:36:F9:64:1F:07:A6:D7:CF:19:9E:3B:64:CD:8A:66 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37333a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:73::/48 Signature Algorithm: sha256WithRSAEncryption 0b:b6:c4:9a:5d:41:f9:75:62:5e:8e:82:fa:63:73:cc:57:fd: 26:61:44:10:19:b2:33:c8:05:9d:3f:6c:f5:f3:ec:b3:db:c2: c3:5b:31:a7:7a:3a:25:f0:44:9a:a5:b1:5b:19:88:d6:41:34: c3:55:c7:90:a8:99:69:65:12:ff:62:99:43:38:73:94:c6:60: 4c:48:b4:15:39:e8:e8:41:c2:98:e2:f6:f1:0f:34:44:e8:45: 3e:9c:c5:cc:b5:d4:cd:7c:c4:36:e2:b8:4b:50:f1:6c:a7:cf: 0f:bf:45:4f:bf:4b:0b:c8:d1:c3:2a:f1:bf:f6:d5:1d:00:9d: 5e:c3:5f:bf:60:19:fa:81:8b:3f:af:2c:35:13:a7:c1:07:a2: 4e:d0:69:87:29:22:81:5b:b3:6a:bf:20:82:30:7a:74:4b:61: 49:cf:de:30:1d:99:98:83:1e:95:a3:c5:e4:e5:e1:1f:19:1d: d8:16:78:3b:1c:a6:5b:b8:51:4a:59:8f:3c:b9:33:26:63:f3: 92:a2:b1:55:b2:ab:4a:df:40:d2:99:5d:3c:97:86:2a:8b:9e: b7:38:06:1d:0a:76:b7:e8:1a:89:5d:c7:01:d9:b0:0e:aa:4d: a3:71:9f:3e:2d:3c:49:35:66:97:ca:94:9b:9c:40:5a:a1:9c: fd:4c:48:3d -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUGfb4N0KolWFRbFOkhySFu6U7R6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA3MTgwMTU1MDJaFw0yNTA3MTcwMjAwMDJaMDMxMTAvBgNV BAMTKDY5OEIxNzU4MjAzNkY5NjQxRjA3QTZEN0NGMTk5RTNCNjRDRDhBNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcNuZQStB1jVJMTrGd9y7oi8N XeHNVb28B9X97GJIGKbFi/pZg+a568KcbKpoxRzjViR6WGJXXdnYuE5nj6O8AXyv NqJmo4Zgr0h0UwnWtpwUcoLGUwss0kEdCtKEOOsuhmTuFzpVy0BfsK9XE5RW1Oyy vsJ+rw42flheCueSXcrjAGkpPgoLr55ydmoqNagb396KZRFRamnR6hTF37zVBflm OX9RFJOgYEN3lOuG2pmyyDFwFze+4C6Q//yD+DO6U5lwlmlRu2exxFQLLDrSMlem xyi77oTOUbhYU7rIstqrz0Q8uG2foecrIwtCb3med3uW9o5rslnKi/VadRuLAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUaYsXWCA2+WQfB6bXzxmeO2TNimYwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzczMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBbkAAHMw DQYJKoZIhvcNAQELBQADggEBAAu2xJpdQfl1Yl6Ogvpjc8xX/SZhRBAZsjPIBZ0/ bPXz7LPbwsNbMad6OiXwRJqlsVsZiNZBNMNVx5ComWllEv9imUM4c5TGYExItBU5 6OhBwpji9vEPNEToRT6cxcy11M18xDbiuEtQ8Wynzw+/RU+/SwvI0cMq8b/21R0A nV7DX79gGfqBiz+vLDUTp8EHok7QaYcpIoFbs2q/IIIwenRLYUnP3jAdmZiDHpWj xeTl4R8ZHdgWeDscplu4UUpZjzy5MyZj85KisVWyq0rfQNKZXTyXhiqLnrc4Bh0K drfoGoldxwHZsA6qTaNxnz4tPEk1ZpfKlJucQFqhnP1MSD0= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org