$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a393a3a2f34382d3438203d3e203535373031.roa File: 323430353a623930303a393a3a2f34382d3438203d3e203535373031.roa (raw, json) Hash identifier: NfMKxSVH+M9H5lcIzA6YvY5CZ3ZnAS5jds6Quwb+xWM= Subject key identifier: B4:AF:68:53:73:2E:CE:33:66:06:6F:38:CD:B6:4A:13:BC:11:19:73 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 1290260ED35E3EA8E7E161395D8A1E162D5BB7F7 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a393a3a2f34382d3438203d3e203535373031.roa Signing time: Thu 09 May 2024 04:01:02 +0000 ROA not before: Thu 09 May 2024 03:56:02 +0000 ROA not after: Thu 08 May 2025 04:01:02 +0000 asID: 55701 IP address blocks: 2405:b900:9::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:90:26:0e:d3:5e:3e:a8:e7:e1:61:39:5d:8a:1e:16:2d:5b:b7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: May 9 03:56:02 2024 GMT Not After : May 8 04:01:02 2025 GMT Subject: CN=B4AF6853732ECE3366066F38CDB64A13BC111973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6d:8f:ee:25:3d:c4:e5:8c:2e:58:2e:69:48: f5:b3:99:a9:d7:01:71:62:9f:13:a1:98:4f:c7:cc: 20:0c:ff:e9:11:15:9f:38:5b:85:de:2e:e0:d6:e4: e1:d4:c9:f6:42:1a:6f:20:bb:37:62:ff:bc:8d:6b: 5e:fc:fa:ce:5e:29:7d:a5:95:14:21:2a:fa:4a:0f: ac:73:0e:dd:e6:96:b8:7c:dd:01:fa:c6:08:ae:af: 26:ef:b2:73:c6:7b:6d:e3:8c:69:cb:c0:57:20:09: 6f:9c:3c:72:0a:d6:67:67:a7:2f:39:63:3a:40:63: ff:ed:b4:48:3d:30:38:df:a5:1a:da:df:da:d5:c9: 50:2b:09:80:98:16:06:03:57:86:37:8e:eb:24:82: d5:56:45:0b:80:04:58:c7:72:a3:0e:1c:af:cb:cc: 9a:57:0c:37:f8:ac:16:bf:e7:23:65:88:01:81:93: 3e:0a:ef:e7:52:b7:5b:71:9e:05:49:3a:ef:32:67: 6a:96:91:8f:83:98:34:db:64:f8:1a:a6:d5:a2:47: cd:41:4a:80:60:2d:53:e3:2c:4a:8a:dc:39:66:26: 89:a0:79:94:2c:04:a0:07:bb:25:8d:6e:72:5d:ef: b4:34:27:7b:e3:b3:d3:f5:f3:a2:25:bf:c9:da:d5: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AF:68:53:73:2E:CE:33:66:06:6F:38:CD:B6:4A:13:BC:11:19:73 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a393a3a2f34382d3438203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:b900:9::/48 Signature Algorithm: sha256WithRSAEncryption 06:2a:23:c4:74:3b:19:35:ca:7e:a8:3d:6c:7f:e2:31:3e:4a: 69:bd:fe:14:93:5f:f0:a4:b9:d0:76:30:e7:be:34:d5:69:cb: 2c:3c:d8:f2:07:e4:52:3b:5a:ee:ee:e3:f1:80:fc:c9:0c:ee: 90:62:1a:bf:89:0b:1c:d4:b6:df:73:aa:d0:1f:16:c5:d6:92: e5:ed:31:c5:5a:9a:3d:09:84:38:82:84:5b:13:3f:39:74:e6: 22:48:e8:87:cd:1c:d4:57:85:0d:80:21:cc:d4:d4:e8:6a:4e: c0:5f:d8:62:f9:86:78:e9:53:00:5b:af:20:64:e0:c0:10:6f: 3b:57:de:73:5b:75:42:98:d0:77:3a:72:49:af:5b:fa:c1:1b: a7:3a:81:43:ff:63:7d:3a:0a:a6:b5:f4:6c:84:8e:49:f3:81: 6d:02:64:f2:9f:f0:e0:32:76:d9:c5:66:b1:72:42:2f:14:1d: 57:75:f7:af:8a:31:ba:fe:e4:5e:e9:f4:d9:d1:5c:05:75:78: a0:4f:f7:29:7d:1f:d4:10:5e:7f:b5:63:ae:89:ae:8f:91:e2: 4a:b3:db:df:82:24:f8:77:34:4d:fd:e8:7f:82:30:a3:01:e3: 4e:c6:2f:53:20:95:df:03:07:ec:f0:9d:8a:a8:98:e2:29:cd: 15:72:a8:8b -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUEpAmDtNePqjn4WE5XYoeFi1bt/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA1MDkwMzU2MDJaFw0yNTA1MDgwNDAxMDJaMDMxMTAvBgNV BAMTKEI0QUY2ODUzNzMyRUNFMzM2NjA2NkYzOENEQjY0QTEzQkMxMTE5NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDibY/uJT3E5YwuWC5pSPWzmanX AXFinxOhmE/HzCAM/+kRFZ84W4XeLuDW5OHUyfZCGm8guzdi/7yNa178+s5eKX2l lRQhKvpKD6xzDt3mlrh83QH6xgiurybvsnPGe23jjGnLwFcgCW+cPHIK1mdnpy85 YzpAY//ttEg9MDjfpRra39rVyVArCYCYFgYDV4Y3juskgtVWRQuABFjHcqMOHK/L zJpXDDf4rBa/5yNliAGBkz4K7+dSt1txngVJOu8yZ2qWkY+DmDTbZPgaptWiR81B SoBgLVPjLEqK3DlmJomgeZQsBKAHuyWNbnJd77Q0J3vjs9P186Ilv8na1YDjAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUtK9oU3MuzjNmBm84zbZKE7wRGXMwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzkzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAW5AAAJMA0G CSqGSIb3DQEBCwUAA4IBAQAGKiPEdDsZNcp+qD1sf+IxPkppvf4Uk1/wpLnQdjDn vjTVacssPNjyB+RSO1ru7uPxgPzJDO6QYhq/iQsc1Lbfc6rQHxbF1pLl7THFWpo9 CYQ4goRbEz85dOYiSOiHzRzUV4UNgCHM1NToak7AX9hi+YZ46VMAW68gZODAEG87 V95zW3VCmNB3OnJJr1v6wRunOoFD/2N9OgqmtfRshI5J84FtAmTyn/DgMnbZxWax ckIvFB1XdfevijG6/uRe6fTZ0VwFdXigT/cpfR/UEF5/tWOuia6PkeJKs9vfgiT4 dzRN/eh/gjCjAeNOxi9TIJXfAwfs8J2KqJjiKc0VcqiL -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org