$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0= Subject key identifier: E2:7E:CF:2E:6D:76:00:BF:DF:5A:91:55:D4:0F:22:21:89:C9:7C:7F Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 54A1334B9438F8F2940609E09BC7B77C3FC551C9 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 10 Apr 2025 05:00:01 +0000 ROA not before: Thu 10 Apr 2025 04:55:01 +0000 ROA not after: Thu 09 Apr 2026 05:00:01 +0000 asID: 137330 IP address blocks: 2402:aa40:10::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a1:33:4b:94:38:f8:f2:94:06:09:e0:9b:c7:b7:7c:3f:c5:51:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Apr 10 04:55:01 2025 GMT Not After : Apr 9 05:00:01 2026 GMT Subject: CN=E27ECF2E6D7600BFDF5A9155D40F222189C97C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:7e:a0:0d:b9:61:9b:e2:17:3b:b9:a8:9b: c0:65:20:cc:8e:b8:4b:a4:b4:37:f9:c2:e3:c0:0e: eb:fe:42:ef:49:79:36:7e:82:70:4d:d5:dd:9f:8b: a7:d9:66:a6:50:cd:76:a0:9c:d7:3f:e9:9e:22:cb: 77:94:6c:fe:76:92:10:50:86:85:8c:80:f9:f6:5a: 28:a4:d8:1a:7b:f2:8f:3b:bb:31:f0:ce:cc:9a:a0: 01:3f:e5:cf:e7:25:ac:b0:d8:fb:da:9f:23:ae:8c: 45:99:3a:4f:28:4d:29:57:10:93:8d:7f:de:df:25: 5b:d0:6b:5d:06:5c:3b:44:a8:b9:db:e9:aa:33:63: 30:75:00:88:4b:56:4e:12:79:b2:f2:43:01:34:63: 6f:ec:fa:2c:88:a1:fe:fa:79:e4:f9:b6:1f:50:b6: 9b:be:f4:e4:53:d6:2d:de:f5:29:4a:ed:05:68:5b: e0:e1:80:8e:ad:fd:01:4d:de:d8:91:18:4b:a0:76: 83:3b:52:09:19:0b:1c:82:52:4a:d5:4f:d0:72:78: 73:a5:1a:6d:ef:25:f0:75:e1:7f:76:28:2f:60:8b: ad:e1:c7:02:5f:81:32:d7:47:15:39:77:7f:fc:a8: e6:ba:a7:91:5c:2f:6f:61:c3:28:6a:52:55:28:67: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7E:CF:2E:6D:76:00:BF:DF:5A:91:55:D4:0F:22:21:89:C9:7C:7F X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:10::/48 Signature Algorithm: sha256WithRSAEncryption 83:a8:6f:3b:3a:4f:e4:41:5f:53:d5:d4:87:a7:c9:13:1f:85: 50:c8:4f:1e:34:19:0b:99:d7:8c:14:d1:b6:8a:46:90:04:f4: 44:3c:1c:d3:61:75:b1:b8:63:41:a5:f4:89:26:cb:4c:4c:3c: c2:95:c4:8f:3b:01:a0:0d:0b:c0:2a:89:52:3c:06:ff:30:4f: ee:f5:b7:ab:9d:6c:68:1f:6c:33:aa:10:04:19:bb:b9:07:db: 0e:0a:67:37:fe:d0:88:f2:42:ca:00:70:92:6d:61:13:a9:e6: 6b:7b:89:30:c5:e8:82:1f:1b:e8:19:dc:1b:56:40:b6:bd:46: 8c:7b:eb:ac:79:9c:72:a7:8e:8f:ed:d6:d6:bb:18:48:93:7a: fd:d6:fd:6d:c9:aa:59:7a:c8:36:6e:a9:58:ce:d7:08:7d:8b: 1c:0c:ff:92:06:c3:b0:b7:1b:d7:fb:63:84:fd:27:24:75:94: 8d:09:05:a7:b2:86:0d:2b:76:a7:a9:52:a4:38:30:67:59:de: 67:bd:f5:53:90:51:25:63:16:bf:e6:ca:a9:6a:bd:55:b6:ff: 9d:48:8a:cb:2e:59:90:9f:0b:2a:4e:58:b7:e5:ab:7e:38:5b: db:f2:aa:ac:77:9b:bd:df:3d:c8:0d:cf:07:bd:53:cd:5f:90: 5a:93:f2:af -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUVKEzS5Q4+PKUBgngm8e3fD/FUckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA0MTAwNDU1MDFaFw0yNjA0MDkwNTAwMDFaMDMxMTAvBgNV BAMTKEUyN0VDRjJFNkQ3NjAwQkZERjVBOTE1NUQ0MEYyMjIxODlDOTdDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnH6gDblhm+IXO7mom8BlIMyO uEuktDf5wuPADuv+Qu9JeTZ+gnBN1d2fi6fZZqZQzXagnNc/6Z4iy3eUbP52khBQ hoWMgPn2Wiik2Bp78o87uzHwzsyaoAE/5c/nJayw2PvanyOujEWZOk8oTSlXEJON f97fJVvQa10GXDtEqLnb6aozYzB1AIhLVk4SebLyQwE0Y2/s+iyIof76eeT5th9Q tpu+9ORT1i3e9SlK7QVoW+DhgI6t/QFN3tiRGEugdoM7UgkZCxyCUkrVT9ByeHOl Gm3vJfB14X92KC9gi63hxwJfgTLXRxU5d3/8qOa6p5FcL29hwyhqUlUoZ7VjAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU4n7PLm12AL/fWpFV1A8iIYnJfH8wHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCqkAA EDANBgkqhkiG9w0BAQsFAAOCAQEAg6hvOzpP5EFfU9XUh6fJEx+FUMhPHjQZC5nX jBTRtopGkAT0RDwc02F1sbhjQaX0iSbLTEw8wpXEjzsBoA0LwCqJUjwG/zBP7vW3 q51saB9sM6oQBBm7uQfbDgpnN/7QiPJCygBwkm1hE6nma3uJMMXogh8b6BncG1ZA tr1GjHvrrHmccqeOj+3W1rsYSJN6/db9bcmqWXrINm6pWM7XCH2LHAz/kgbDsLcb 1/tjhP0nJHWUjQkFp7KGDSt2p6lSpDgwZ1neZ731U5BRJWMWv+bKqWq9Vbb/nUiK yy5ZkJ8LKk5Yt+Wrfjhb2/KqrHebvd89yA3PB71TzV+QWpPyrw== -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net