$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec= Subject key identifier: 02:D1:BD:A5:51:24:D5:68:61:0A:01:41:62:A5:DA:86:F6:A7:17:EB Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 3F7BAD4BF2B02B1DF7EE7A1627DCD75252BABF6D Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 10 Apr 2025 04:00:00 +0000 ROA not before: Thu 10 Apr 2025 03:55:00 +0000 ROA not after: Thu 09 Apr 2026 04:00:00 +0000 asID: 137330 IP address blocks: 2402:aa40:12::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:7b:ad:4b:f2:b0:2b:1d:f7:ee:7a:16:27:dc:d7:52:52:ba:bf:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Apr 10 03:55:00 2025 GMT Not After : Apr 9 04:00:00 2026 GMT Subject: CN=02D1BDA55124D568610A014162A5DA86F6A717EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:ec:ff:62:ea:58:64:e4:87:3c:6b:af:1d: a8:36:72:e6:67:dc:2e:01:6b:9f:23:6c:a5:da:7d: ec:12:db:8f:96:b7:39:e0:b4:6a:7e:32:e9:40:bd: b3:1e:7b:2e:cb:da:2e:af:d5:ac:69:74:a1:8b:b0: d9:e8:e8:d5:94:e4:df:e5:5a:ab:1d:0c:8a:f1:3f: 57:a4:fd:50:bb:69:0b:8b:c3:fc:96:79:bc:14:7b: 77:48:03:d6:ca:c5:8f:a5:b3:eb:0f:14:d8:74:2d: 42:e5:50:46:19:d8:75:0b:c8:8a:c4:3a:92:a1:dc: c1:4b:3e:ee:4c:5f:2d:84:9c:d0:05:7f:19:2f:27: 2d:a8:0d:b3:dd:43:fe:b8:7b:a2:af:15:a1:71:05: 25:20:a3:eb:cf:fb:83:96:e4:0c:0d:d4:0b:b7:b4: 5e:3d:8a:8f:c1:8c:90:a8:97:b5:b7:d5:d0:fe:de: a8:58:f1:af:61:d4:85:ff:07:b7:72:a4:85:0e:7b: e4:0c:19:88:69:1a:69:29:23:93:14:7a:9c:8f:a7: 23:4f:26:02:63:3e:80:c5:dc:d8:7d:3f:60:69:d6: 35:57:05:45:a2:75:7d:6a:b8:5b:61:89:ce:e3:b5: 49:a0:a4:1c:77:e7:db:aa:9c:90:fb:16:09:f1:0f: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D1:BD:A5:51:24:D5:68:61:0A:01:41:62:A5:DA:86:F6:A7:17:EB X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:12::/48 Signature Algorithm: sha256WithRSAEncryption 76:f1:15:b0:54:83:6b:d3:be:5b:74:2e:39:3b:4d:77:e2:3c: e0:6c:d7:ee:a0:94:1d:28:ee:1d:b1:66:ff:3c:22:e8:c9:75: 3c:12:51:61:41:13:0a:ba:a5:9d:e3:1a:61:a3:59:cc:d7:3a: fe:75:d7:2b:7a:7a:da:2c:b9:3b:77:86:c0:da:87:ed:26:f2: f0:96:cd:ec:19:27:d1:87:ed:30:b7:e8:ec:07:0e:3f:c7:2d: 6b:31:8b:f8:2f:d2:d5:60:c9:a1:77:95:34:fa:bf:1b:ec:e7: 18:02:f6:3a:0a:cd:a4:28:ac:67:fe:18:e1:ab:da:20:4c:b3: d3:97:2c:7b:fe:c1:ba:eb:a1:e0:15:2b:c0:7b:9f:e8:e4:67: dc:34:ec:82:01:61:20:3c:cf:cf:32:4d:d4:fd:57:d6:91:8a: 4d:cc:7d:06:ff:3f:c3:82:18:73:20:00:08:2c:1c:8f:8c:5e: 6c:a1:d9:34:e1:55:e7:87:30:22:f8:1c:06:4c:30:43:1b:86: 10:7f:f0:29:37:9c:d4:02:5f:2e:d6:f0:c2:86:7c:6e:cb:c2: 6b:00:cb:a4:28:0a:e6:80:9d:b1:8b:6f:40:5a:b4:41:59:bc: a9:27:ec:89:74:f1:f5:ea:a8:50:1d:30:d7:55:17:7d:27:1e: 0c:53:43:16 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUP3utS/KwKx337noWJ9zXUlK6v20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA0MTAwMzU1MDBaFw0yNjA0MDkwNDAwMDBaMDMxMTAvBgNV BAMTKDAyRDFCREE1NTEyNEQ1Njg2MTBBMDE0MTYyQTVEQTg2RjZBNzE3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0juz/YupYZOSHPGuvHag2cuZn 3C4Ba58jbKXafewS24+WtzngtGp+MulAvbMeey7L2i6v1axpdKGLsNno6NWU5N/l WqsdDIrxP1ek/VC7aQuLw/yWebwUe3dIA9bKxY+ls+sPFNh0LULlUEYZ2HULyIrE OpKh3MFLPu5MXy2EnNAFfxkvJy2oDbPdQ/64e6KvFaFxBSUgo+vP+4OW5AwN1Au3 tF49io/BjJCol7W31dD+3qhY8a9h1IX/B7dypIUOe+QMGYhpGmkpI5MUepyPpyNP JgJjPoDF3Nh9P2Bp1jVXBUWidX1quFthic7jtUmgpBx359uqnJD7FgnxD+RjAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUAtG9pVEk1WhhCgFBYqXahvanF+swHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCqkAA EjANBgkqhkiG9w0BAQsFAAOCAQEAdvEVsFSDa9O+W3QuOTtNd+I84GzX7qCUHSju HbFm/zwi6Ml1PBJRYUETCrqlneMaYaNZzNc6/nXXK3p62iy5O3eGwNqH7Sby8JbN 7Bkn0YftMLfo7AcOP8ctazGL+C/S1WDJoXeVNPq/G+znGAL2OgrNpCisZ/4Y4ava IEyz05cse/7Buuuh4BUrwHuf6ORn3DTsggFhIDzPzzJN1P1X1pGKTcx9Bv8/w4IY cyAACCwcj4xebKHZNOFV54cwIvgcBkwwQxuGEH/wKTec1AJfLtbwwoZ8bsvCawDL pCgK5oCdsYtvQFq0QVm8qSfsiXTx9eqoUB0w11UXfSceDFNDFg== -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net