$ rpki-client -vvf repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa File: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (raw, json) Hash identifier: GTuqU908XLOZVb25rTIhV2IehkRk/dUQu2mWsLQyxpo= Subject key identifier: 5A:2A:7A:E2:BB:50:C5:36:5A:C4:7E:72:9A:F8:34:10:5B:9F:D2:7E Certificate issuer: /CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Certificate serial: 0DE583BF5B3D1045277AAA5ACF98DDD39C09CD11 Authority key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject info access: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa Signing time: Thu 10 Apr 2025 04:01:34 +0000 ROA not before: Thu 10 Apr 2025 03:56:34 +0000 ROA not after: Thu 09 Apr 2026 04:01:34 +0000 asID: 139447 IP address blocks: 2001:df2:1280::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 01:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e5:83:bf:5b:3d:10:45:27:7a:aa:5a:cf:98:dd:d3:9c:09:cd:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Validity Not Before: Apr 10 03:56:34 2025 GMT Not After : Apr 9 04:01:34 2026 GMT Subject: CN=5A2A7AE2BB50C5365AC47E729AF834105B9FD27E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:b6:8a:ee:e5:03:bb:34:2d:64:87:77:6e: b3:27:5d:7f:2e:8e:c6:53:66:a2:2d:67:07:c7:79: 87:67:da:8a:1f:75:f4:37:e4:96:e2:56:29:3b:2a: 74:1d:77:df:3f:d0:55:e2:48:34:51:17:5f:2e:89: 04:cc:ba:a2:91:0a:d6:06:15:22:fe:71:ca:e4:93: e6:f2:5f:10:f2:bc:27:5c:00:ab:f1:e6:f8:d9:af: 16:e1:a3:f7:64:98:f1:dd:80:c9:56:7d:8e:01:3e: ab:61:cf:ad:2c:f3:32:00:22:67:e1:d7:75:ef:6b: 58:6d:42:7f:b1:40:aa:f6:07:5b:ff:f2:9e:68:fc: 28:ce:72:1e:7e:58:b2:41:6b:72:9e:50:68:77:89: 6c:79:30:a2:8a:a8:95:b3:91:fc:19:78:62:72:c5: f7:92:03:00:8b:32:a9:d7:88:48:5a:a3:1a:c1:16: 2e:4e:62:1c:56:5b:89:8f:5c:45:21:64:64:34:1b: 7a:97:ad:f1:f9:78:c3:13:f0:46:49:a6:8d:90:fb: 43:25:7b:ed:fa:e3:a8:7b:6c:ed:9f:4c:dd:8b:47: 0a:c8:f3:94:5b:30:5d:4c:a9:00:f7:dd:f9:af:6b: 8f:7b:21:74:44:7c:d0:da:fc:e1:90:33:ea:72:1c: 08:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2A:7A:E2:BB:50:C5:36:5A:C4:7E:72:9A:F8:34:10:5B:9F:D2:7E X509v3 Authority Key Identifier: keyid:28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:1280::/48 Signature Algorithm: sha256WithRSAEncryption 36:4c:ac:c3:ab:30:a1:4f:ea:5f:8d:5e:9c:b7:98:b5:3a:11: 7f:19:86:db:7d:f9:30:9a:fc:1b:0a:0d:da:c8:b4:6f:5b:04: 6c:8e:d3:57:26:f9:83:7f:ab:0c:a2:85:6c:7b:dc:b1:07:b7: 74:ed:ad:32:e5:c1:11:97:db:f5:e5:d5:90:2d:54:2a:2e:d7: a8:2f:02:d1:51:7c:05:61:b3:27:78:8c:8e:50:94:ad:ff:1c: 1e:bb:f4:82:05:99:49:d3:90:07:e8:e2:35:5c:33:04:82:57: 8a:d0:64:e6:83:a3:f0:6c:0c:b3:2a:94:65:30:4e:5c:1d:a3: 7b:d4:b6:40:7f:f3:f8:34:9c:6e:79:a7:a1:43:e6:8f:a3:e0: 12:7c:ce:87:59:55:a9:fc:20:ac:20:d4:d1:8f:59:eb:bd:ae: 0f:26:8c:f5:9b:f0:a3:7a:3c:f7:8e:7c:ba:2c:df:24:4f:bc: 8c:a5:d3:df:ba:33:fa:75:97:4b:51:98:d3:ff:ce:dc:5b:6f: 43:34:c2:52:ce:65:84:ac:40:76:35:3d:61:0a:23:2a:a7:c1: 48:1d:ca:b5:69:7c:78:f9:7f:76:13:24:64:ba:44:76:24:a3: 00:e7:8a:40:35:ed:71:09:d5:5a:a0:a9:e7:fb:48:f2:1a:97: e4:da:a1:5e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUDeWDv1s9EEUneqpaz5jd05wJzREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNC QTcwQTgyMjAeFw0yNTA0MTAwMzU2MzRaFw0yNjA0MDkwNDAxMzRaMDMxMTAvBgNV BAMTKDVBMkE3QUUyQkI1MEM1MzY1QUM0N0U3MjlBRjgzNDEwNUI5RkQyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkY7aK7uUDuzQtZId3brMnXX8u jsZTZqItZwfHeYdn2oofdfQ35JbiVik7KnQdd98/0FXiSDRRF18uiQTMuqKRCtYG FSL+ccrkk+byXxDyvCdcAKvx5vjZrxbho/dkmPHdgMlWfY4BPqthz60s8zIAImfh 13Xva1htQn+xQKr2B1v/8p5o/CjOch5+WLJBa3KeUGh3iWx5MKKKqJWzkfwZeGJy xfeSAwCLMqnXiEhaoxrBFi5OYhxWW4mPXEUhZGQ0G3qXrfH5eMMT8EZJpo2Q+0Ml e+3646h7bO2fTN2LRwrI85RbMF1MqQD33fmva497IXREfNDa/OGQM+pyHAjBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWip64rtQxTZaxH5ymvg0EFuf0n4wHwYDVR0j BBgwFoAUKCiB5rQ9IG+vvRh57VZ47LpwqCIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMC8yODI4ODFFNkI0 M0QyMDZGQUZCRDE4NzlFRDU2NzhFQ0JBNzBBODIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNCQTcw QTgyMi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1N2Q0ZDgxLTNiZTgtNDIzMC04 OTU5LTJkYzJhZjlkMDg1ZS8wLzMyMzAzMDMxM2E2NDY2MzIzYTMxMzIzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzQzNDM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8hKAMA0GCSqGSIb3DQEBCwUAA4IBAQA2TKzDqzChT+pfjV6ct5i1OhF/GYbbffkw mvwbCg3ayLRvWwRsjtNXJvmDf6sMooVse9yxB7d07a0y5cERl9v15dWQLVQqLteo LwLRUXwFYbMneIyOUJSt/xweu/SCBZlJ05AH6OI1XDMEgleK0GTmg6PwbAyzKpRl ME5cHaN71LZAf/P4NJxueaehQ+aPo+ASfM6HWVWp/CCsINTRj1nrva4PJoz1m/Cj ejz3jny6LN8kT7yMpdPfujP6dZdLUZjT/87cW29DNMJSzmWErEB2NT1hCiMqp8FI Hcq1aXx4+X92EyRkukR2JKMA54pANe1xCdVaoKnn+0jyGpfk2qFe -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:40 2025 by rpki-client on console.sobornost.net