$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34392e302e302e302f32322d3234203d3e203535373031.roa File: 34392e302e302e302f32322d3234203d3e203535373031.roa (raw, json) Hash identifier: CIKF/Fw0Ap6BtwgzZYjFf40b08yVIUE3B3sbR49sYjM= Subject key identifier: 6C:F1:83:9E:BC:CD:00:6F:3C:95:F1:2B:A1:92:4E:A9:0A:28:C1:4A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 5AF8D3BEB33577BD80122527E43C20E3997C416A Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34392e302e302e302f32322d3234203d3e203535373031.roa Signing time: Mon 01 Jul 2024 01:05:58 +0000 ROA not before: Mon 01 Jul 2024 01:00:58 +0000 ROA not after: Mon 30 Jun 2025 01:05:58 +0000 asID: 55701 IP address blocks: 49.0.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f8:d3:be:b3:35:77:bd:80:12:25:27:e4:3c:20:e3:99:7c:41:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jul 1 01:00:58 2024 GMT Not After : Jun 30 01:05:58 2025 GMT Subject: CN=6CF1839EBCCD006F3C95F12BA1924EA90A28C14A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f9:21:10:d4:a8:74:62:fa:83:b2:78:ea:5f: 80:aa:be:5a:7c:39:1e:01:06:19:02:66:bc:ef:b2: 20:e4:e2:07:3e:18:94:19:ba:d4:5c:7e:48:8d:7f: d7:42:b9:63:1e:42:d9:81:a5:3e:41:4e:2c:15:c0: a5:e5:d8:5b:0a:8b:fd:6b:78:2e:1d:33:f8:a5:ca: 10:a3:0b:74:fb:20:9a:ce:dd:af:ea:6b:80:a1:2e: 0f:ab:2d:ba:94:02:5c:9c:8d:3f:56:d7:6a:f4:6a: e8:f6:dd:02:38:59:2c:b9:25:f9:86:ee:c8:86:35: 51:de:51:4b:db:76:68:69:0a:d1:1b:40:6f:c2:87: db:f6:03:bd:d5:91:59:25:04:de:51:2f:e6:b0:d1: 92:f6:70:54:81:4b:e5:01:71:96:03:bc:fe:be:be: 7e:7e:42:14:f9:87:41:8c:49:40:31:7d:57:37:9b: 30:db:a2:d4:38:68:9b:be:94:af:1f:bd:01:56:03: 17:b4:ea:60:c5:c7:8d:ba:d2:20:79:7b:37:57:2c: 7d:bc:34:19:96:cf:cf:39:03:98:49:da:6e:3b:f7: b9:f5:92:25:35:ed:4c:1f:aa:b1:39:27:95:f1:6d: e6:86:0f:c3:e1:5d:53:6b:c5:17:e2:d5:57:f2:d0: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F1:83:9E:BC:CD:00:6F:3C:95:F1:2B:A1:92:4E:A9:0A:28:C1:4A X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34392e302e302e302f32322d3234203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.0.0.0/22 Signature Algorithm: sha256WithRSAEncryption 23:db:21:52:4f:47:94:55:3a:79:b6:f3:ab:b2:b2:74:38:72: 3b:a8:ea:df:b1:12:d3:cc:c0:8f:27:2c:05:32:ae:31:bc:d9: f4:f4:be:83:df:49:17:8f:7b:64:b9:a7:73:e2:8d:3d:2a:73: a3:31:cc:d0:39:0c:87:22:90:ea:fc:31:69:af:18:99:4b:48: 6d:aa:92:2e:14:cd:c0:1d:1f:3e:af:61:ad:ca:be:10:40:5d: 72:49:50:59:a0:86:57:c8:08:dd:75:36:c3:14:c0:85:08:de: cb:d2:c2:18:3a:53:82:7b:cd:09:ed:7f:08:3b:66:bf:c1:f7: 21:91:db:01:72:b1:6e:e3:82:56:ef:6a:e6:0b:00:46:f2:96: b3:fe:7f:68:93:08:c7:8a:9c:0a:45:a5:9f:a8:11:36:bb:3f: 86:11:a8:73:82:82:2b:18:00:37:5b:0a:f1:06:96:1d:6f:03: 19:aa:69:e0:82:14:8b:a3:fe:ef:fb:8c:d1:a9:5a:87:d7:b8: 0d:f9:c0:37:30:d5:9b:cb:e0:3d:2e:ca:2a:a2:e8:a0:a7:4f: 37:d4:96:7b:22:43:07:e7:33:82:95:8c:34:c4:4c:f7:45:eb: 62:12:d1:7f:bc:f8:b4:8c:71:63:e7:69:bd:44:d4:28:48:dc: 32:52:29:fc -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgIUWvjTvrM1d72AEiUn5Dwg45l8QWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA3MDEwMTAwNThaFw0yNTA2MzAwMTA1NThaMDMxMTAvBgNV BAMTKDZDRjE4MzlFQkNDRDAwNkYzQzk1RjEyQkExOTI0RUE5MEEyOEMxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0+SEQ1Kh0YvqDsnjqX4Cqvlp8 OR4BBhkCZrzvsiDk4gc+GJQZutRcfkiNf9dCuWMeQtmBpT5BTiwVwKXl2FsKi/1r eC4dM/ilyhCjC3T7IJrO3a/qa4ChLg+rLbqUAlycjT9W12r0auj23QI4WSy5JfmG 7siGNVHeUUvbdmhpCtEbQG/Ch9v2A73VkVklBN5RL+aw0ZL2cFSBS+UBcZYDvP6+ vn5+QhT5h0GMSUAxfVc3mzDbotQ4aJu+lK8fvQFWAxe06mDFx4260iB5ezdXLH28 NBmWz885A5hJ2m4797n1kiU17UwfqrE5J5XxbeaGD8PhXVNrxRfi1Vfy0DZHAgMB AAGjggIpMIICJTAdBgNVHQ4EFgQUbPGDnrzNAG88lfEroZJOqQoowUowHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvMzQzOTJlMzAyZTMwMmUzMDJmMzIzMjJkMzIzNDIw M2QzZTIwMzUzNTM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjEAADANBgkqhkiG9w0BAQsFAAOC AQEAI9shUk9HlFU6ebbzq7KydDhyO6jq37ES08zAjycsBTKuMbzZ9PS+g99JF497 ZLmnc+KNPSpzozHM0DkMhyKQ6vwxaa8YmUtIbaqSLhTNwB0fPq9hrcq+EEBdcklQ WaCGV8gI3XU2wxTAhQjey9LCGDpTgnvNCe1/CDtmv8H3IZHbAXKxbuOCVu9q5gsA RvKWs/5/aJMIx4qcCkWln6gRNrs/hhGoc4KCKxgAN1sK8QaWHW8DGapp4IIUi6P+ 7/uM0alah9e4DfnANzDVm8vgPS7KKqLooKdPN9SWeyJDB+czgpWMNMRM90XrYhLR f7z4tIxxY+dpvUTUKEjcMlIp/A== -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org