$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc= Subject key identifier: A2:81:95:A9:DE:F8:49:7E:7E:1E:D5:61:75:79:A7:B4:5C:74:0A:94 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 47B19E68CCE4C03F52936075C962F9FA0E47F8AC Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 10 Apr 2025 05:00:01 +0000 ROA not before: Thu 10 Apr 2025 04:55:01 +0000 ROA not after: Thu 09 Apr 2026 05:00:01 +0000 asID: 137330 IP address blocks: 2402:aa40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b1:9e:68:cc:e4:c0:3f:52:93:60:75:c9:62:f9:fa:0e:47:f8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Apr 10 04:55:01 2025 GMT Not After : Apr 9 05:00:01 2026 GMT Subject: CN=A28195A9DEF8497E7E1ED5617579A7B45C740A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:28:8c:29:54:eb:98:2f:0b:8e:25:4c:dd:34: ac:fd:89:80:5b:55:0a:04:ab:9d:08:2f:4c:06:9a: 9c:d7:df:3a:33:78:44:bc:81:a9:64:4a:42:c2:50: ad:2a:2b:41:4c:e7:c4:63:11:0f:cb:ba:ee:e9:10: af:95:cb:bf:90:0e:87:2c:11:8e:3a:9f:b2:de:35: 34:b1:90:ec:6f:04:c8:aa:32:bf:d4:cf:e7:da:62: 32:3f:60:0f:3f:6e:30:a3:fc:14:70:af:f4:07:01: 55:07:67:cf:f6:cf:5c:03:3c:21:40:52:e3:d0:b5: a1:df:37:fa:67:5a:c8:94:7f:6b:8a:5b:cf:75:a7: 1b:ba:00:c8:a8:2f:c9:fb:be:02:8c:ac:fe:e1:46: 11:05:49:bc:c9:4c:94:c2:83:a2:a3:4c:6e:68:0b: 6d:33:95:4a:1b:75:a3:e1:66:74:5d:c5:51:64:79: f8:e2:b9:4f:25:6f:35:3e:eb:56:88:05:8f:fa:9d: 2e:8d:49:9d:8f:f9:aa:e3:f0:85:62:b0:69:97:2f: 77:4a:59:c1:c1:01:80:74:82:75:d2:14:88:b1:6f: c9:81:fa:fd:18:de:b8:52:f0:7f:08:55:59:e9:7e: 89:33:32:dc:64:20:d3:e5:b3:9e:a3:c9:f6:60:fc: fd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:81:95:A9:DE:F8:49:7E:7E:1E:D5:61:75:79:A7:B4:5C:74:0A:94 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:3::/48 Signature Algorithm: sha256WithRSAEncryption 96:ec:b3:37:10:8f:71:4d:27:7a:e3:52:a4:bc:d5:58:14:9f: 7f:18:e5:85:15:f1:52:8f:da:48:99:26:42:49:5c:f1:4b:60: 70:40:30:b1:8d:c6:51:75:e4:54:ba:db:ec:8a:a8:a8:14:83: d0:11:bb:2b:f7:a6:e7:f4:9e:cb:d6:90:51:f5:22:93:34:99: f8:82:a7:06:8e:db:b0:56:db:a8:56:be:be:45:32:91:cd:ef: 69:24:73:d5:ef:e1:ba:6a:f9:bb:6e:bd:6c:1b:27:21:bc:ef: 3f:bb:9e:02:f2:9b:e6:a1:a7:a4:cb:57:78:3a:d9:e9:1b:85: 24:0f:79:b5:c9:cd:cb:38:c0:bb:18:8a:14:e1:cb:b8:3f:dc: f3:18:76:2e:ed:9b:75:11:fe:e4:8c:c6:7a:f9:94:a1:0d:dc: f3:55:b7:52:92:52:2c:76:71:f9:dc:0a:48:f6:3d:dc:07:61: a7:07:65:d5:e6:f6:60:4c:4e:71:90:28:9c:cd:0f:01:46:11: b0:78:84:7b:69:7b:1c:3f:8f:0c:92:53:11:53:6c:5d:71:5d: 68:58:51:57:56:34:3d:41:9e:b4:2c:35:0a:ef:56:5b:82:1b: 54:a7:c2:b3:04:69:cc:19:a3:1f:1c:05:53:27:f8:7e:bf:87: 03:cf:da:94 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUR7GeaMzkwD9Sk2B1yWL5+g5H+KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA0MTAwNDU1MDFaFw0yNjA0MDkwNTAwMDFaMDMxMTAvBgNV BAMTKEEyODE5NUE5REVGODQ5N0U3RTFFRDU2MTc1NzlBN0I0NUM3NDBBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvKIwpVOuYLwuOJUzdNKz9iYBb VQoEq50IL0wGmpzX3zozeES8galkSkLCUK0qK0FM58RjEQ/Luu7pEK+Vy7+QDocs EY46n7LeNTSxkOxvBMiqMr/Uz+faYjI/YA8/bjCj/BRwr/QHAVUHZ8/2z1wDPCFA UuPQtaHfN/pnWsiUf2uKW891pxu6AMioL8n7vgKMrP7hRhEFSbzJTJTCg6KjTG5o C20zlUobdaPhZnRdxVFkefjiuU8lbzU+61aIBY/6nS6NSZ2P+arj8IVisGmXL3dK WcHBAYB0gnXSFIixb8mB+v0Y3rhS8H8IVVnpfokzMtxkINPls56jyfZg/P0TAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUooGVqd74SX5+HtVhdXmntFx0CpQwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAMw DQYJKoZIhvcNAQELBQADggEBAJbsszcQj3FNJ3rjUqS81VgUn38Y5YUV8VKP2kiZ JkJJXPFLYHBAMLGNxlF15FS62+yKqKgUg9ARuyv3puf0nsvWkFH1IpM0mfiCpwaO 27BW26hWvr5FMpHN72kkc9Xv4bpq+btuvWwbJyG87z+7ngLym+ahp6TLV3g62ekb hSQPebXJzcs4wLsYihThy7g/3PMYdi7tm3UR/uSMxnr5lKEN3PNVt1KSUix2cfnc Ckj2PdwHYacHZdXm9mBMTnGQKJzNDwFGEbB4hHtpexw/jwySUxFTbF1xXWhYUVdW ND1BnrQsNQrvVluCG1SnwrMEacwZox8cBVMn+H6/hwPP2pQ= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net