$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40= Subject key identifier: E3:82:6F:92:D3:9F:1B:DE:59:D6:3E:2E:3F:2A:3B:F7:58:F1:02:1F Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 3C4FBF333E1B9505832DF6DDBA71256A17658D56 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 10 Apr 2025 05:00:00 +0000 ROA not before: Thu 10 Apr 2025 04:55:00 +0000 ROA not after: Thu 09 Apr 2026 05:00:00 +0000 asID: 137330 IP address blocks: 2402:aa40:11::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4f:bf:33:3e:1b:95:05:83:2d:f6:dd:ba:71:25:6a:17:65:8d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Apr 10 04:55:00 2025 GMT Not After : Apr 9 05:00:00 2026 GMT Subject: CN=E3826F92D39F1BDE59D63E2E3F2A3BF758F1021F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:e0:e7:f9:24:ca:5a:30:25:14:41:0b:f1: aa:f0:cb:da:7d:d8:9d:e0:bb:cc:96:f9:25:d0:89: 5a:f3:7b:e5:45:71:c7:4b:11:9f:49:01:8c:dc:14: 0f:82:96:9a:40:eb:f6:77:ef:4e:c0:b5:f4:1b:b2: a5:2d:75:47:98:70:8e:10:f0:d8:38:1d:d2:3d:a1: b2:fa:a2:2e:6e:62:7a:43:27:f4:36:26:1c:71:38: 69:de:b1:ca:e3:2e:13:a3:28:47:b1:8c:06:3a:ef: ff:7d:12:92:48:c5:d5:a8:59:dc:db:44:43:32:1b: a1:66:b2:63:f9:e9:01:93:17:43:b8:31:ad:5a:dd: fe:32:9e:c6:2f:0f:7f:d6:90:48:9c:c6:6e:df:2c: a2:1f:82:4a:ba:f3:6d:86:1a:fa:8e:6a:84:b7:16: 31:24:0e:59:71:37:bd:db:48:57:14:ae:fc:e8:10: 81:85:4a:6b:e4:c3:24:dd:a2:4a:e9:e3:fb:cc:a0: 8c:02:36:5b:82:7f:a3:29:f4:0a:b3:6e:64:4c:a4: 5a:21:ea:ba:f8:3c:91:8f:6d:bc:60:e5:6e:df:ec: 7a:a4:69:8a:42:da:e3:4d:34:a7:c2:8b:58:a1:7a: 87:9e:1c:de:33:5d:fa:c2:28:51:76:ed:39:3a:b1: 95:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:82:6F:92:D3:9F:1B:DE:59:D6:3E:2E:3F:2A:3B:F7:58:F1:02:1F X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:11::/48 Signature Algorithm: sha256WithRSAEncryption 10:72:71:e8:52:48:09:f7:21:e2:f0:ad:e0:ff:2b:e7:ed:0d: 24:40:5f:b4:ff:e5:04:60:53:d8:e7:43:cc:5b:e7:d1:09:46: 9a:be:3b:86:34:96:2c:df:13:1b:48:35:fc:64:ac:00:96:2c: 8f:43:a5:64:64:aa:a0:aa:6f:2a:26:a8:b2:a4:53:c8:8b:ae: 05:ed:45:38:e4:e6:6f:26:a0:cd:5b:b9:ca:fd:0d:37:5d:90: 02:6d:e8:30:23:ae:59:81:b6:bf:23:96:91:b5:72:b8:d4:36: 0a:55:4e:1c:78:81:8c:b6:f9:e7:bc:ed:63:8e:5c:6e:4b:be: bd:09:f7:63:e6:be:c3:19:df:ec:67:ca:64:86:48:e2:13:80: eb:8e:a1:3d:a7:16:8a:a6:d0:c3:56:44:14:2c:e4:3d:6f:d4: a0:f4:72:15:1c:34:06:5f:20:7a:4b:41:41:61:0e:f2:37:17: 1e:93:8d:e8:9b:fe:06:cf:df:c1:64:04:37:36:e2:fa:13:9d: 4c:66:52:6a:1a:fb:b9:94:ce:19:94:6c:ab:1c:6e:e0:b2:c2: 63:58:66:1d:46:4e:e2:e2:0a:fa:32:0e:1c:c2:5e:20:21:e2: 33:84:33:1b:da:5f:a2:a0:e3:47:ef:03:8e:54:91:2b:9a:6f: a7:6e:d2:d0 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPE+/Mz4blQWDLfbdunElahdljVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA0MTAwNDU1MDBaFw0yNjA0MDkwNTAwMDBaMDMxMTAvBgNV BAMTKEUzODI2RjkyRDM5RjFCREU1OUQ2M0UyRTNGMkEzQkY3NThGMTAyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLuDn+STKWjAlFEEL8arwy9p9 2J3gu8yW+SXQiVrze+VFccdLEZ9JAYzcFA+ClppA6/Z3707AtfQbsqUtdUeYcI4Q 8Ng4HdI9obL6oi5uYnpDJ/Q2JhxxOGnescrjLhOjKEexjAY67/99EpJIxdWoWdzb REMyG6FmsmP56QGTF0O4Ma1a3f4ynsYvD3/WkEicxm7fLKIfgkq6822GGvqOaoS3 FjEkDllxN73bSFcUrvzoEIGFSmvkwyTdokrp4/vMoIwCNluCf6Mp9AqzbmRMpFoh 6rr4PJGPbbxg5W7f7HqkaYpC2uNNNKfCi1iheoeeHN4zXfrCKFF27Tk6sZU1AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU44JvktOfG95Z1j4uPyo791jxAh8wHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCqkAA ETANBgkqhkiG9w0BAQsFAAOCAQEAEHJx6FJICfch4vCt4P8r5+0NJEBftP/lBGBT 2OdDzFvn0QlGmr47hjSWLN8TG0g1/GSsAJYsj0OlZGSqoKpvKiaosqRTyIuuBe1F OOTmbyagzVu5yv0NN12QAm3oMCOuWYG2vyOWkbVyuNQ2ClVOHHiBjLb557ztY45c bku+vQn3Y+a+wxnf7GfKZIZI4hOA646hPacWiqbQw1ZEFCzkPW/UoPRyFRw0Bl8g ektBQWEO8jcXHpON6Jv+Bs/fwWQENzbi+hOdTGZSahr7uZTOGZRsqxxu4LLCY1hm HUZO4uIK+jIOHMJeICHiM4QzG9pfoqDjR+8DjlSRK5pvp27S0A== -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net