$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4= Subject key identifier: A4:B6:6A:AD:43:52:E8:AC:BA:70:D1:9F:CB:B2:B7:7C:6B:3E:72:F0 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 347CD255000A90844A845F405728263E49D30AB8 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 10 Apr 2025 04:00:01 +0000 ROA not before: Thu 10 Apr 2025 03:55:01 +0000 ROA not after: Thu 09 Apr 2026 04:00:01 +0000 asID: 137330 IP address blocks: 2402:aa40:9::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7c:d2:55:00:0a:90:84:4a:84:5f:40:57:28:26:3e:49:d3:0a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Apr 10 03:55:01 2025 GMT Not After : Apr 9 04:00:01 2026 GMT Subject: CN=A4B66AAD4352E8ACBA70D19FCBB2B77C6B3E72F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:74:e9:4b:eb:dd:cb:62:4b:ff:03:dd:cd: 4a:c7:1e:c6:b0:d9:c2:a2:ef:ff:ee:c8:d9:d6:ff: 66:11:04:4a:e2:32:30:68:f8:6f:6b:c1:17:d3:a1: e7:ff:e0:97:79:cd:73:c5:d0:db:81:9d:b6:fe:45: a7:37:fc:a8:68:18:63:67:18:95:b0:36:a1:21:1b: d8:55:18:f0:8d:fb:73:39:42:b8:8f:8b:51:be:e0: cb:76:cb:03:eb:c5:84:cc:81:13:67:11:18:2a:80: 06:f3:e1:b0:1b:47:37:1d:f1:a0:59:12:26:09:25: 1f:ac:65:e6:a2:79:46:97:99:e1:d6:12:be:5f:23: 14:e6:89:b7:0f:a6:49:01:15:ec:4a:68:ba:dd:6a: 6c:b0:30:8c:9f:1d:23:47:57:7c:ca:f9:8b:0c:9f: 8a:85:4a:a5:97:9f:4a:34:c4:ab:79:3e:a3:e5:7f: 2f:51:89:6f:6b:34:a9:9d:46:cb:64:99:90:48:7c: 92:25:d1:ef:e2:d1:01:38:42:58:ac:66:ee:45:41: 13:54:42:a3:04:d4:b0:97:05:40:5c:21:11:f5:9f: 81:1f:43:fe:3c:43:c7:62:8a:25:63:e4:ce:cc:c8: c3:b4:d7:b7:5e:07:2c:28:ce:23:65:82:4a:10:14: a1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B6:6A:AD:43:52:E8:AC:BA:70:D1:9F:CB:B2:B7:7C:6B:3E:72:F0 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:9::/48 Signature Algorithm: sha256WithRSAEncryption 1c:db:f4:17:db:0a:c3:61:ce:ed:fc:09:b1:36:89:28:d7:a1: fd:57:c2:5a:d4:a7:30:78:2f:58:00:51:fc:05:84:39:19:dc: 27:8b:ae:08:88:42:3b:f4:3d:a2:8e:75:18:d6:85:e8:18:b3: 1e:f0:e4:55:99:49:03:ea:e6:10:60:a1:ae:6a:52:02:ca:a2: 1b:01:ed:39:da:8d:aa:47:c1:41:08:0b:25:4e:7d:9d:84:2e: 87:ef:95:93:ca:d5:7c:6a:46:8b:aa:2c:57:ef:38:75:c4:d8: b4:09:d3:2e:4f:ee:eb:e2:a9:bb:99:28:3a:6a:9d:e5:28:d2: 2d:c8:fc:c9:73:ce:c6:a4:3e:e3:5e:79:e3:8e:cd:8a:c5:60: a4:61:c7:cb:f2:6b:b0:b7:ea:f1:5c:9b:45:ef:63:d4:17:c3: d1:17:1d:49:77:af:90:df:05:ca:df:81:33:ec:c1:b9:e9:8c: 39:fa:62:a1:f1:af:74:73:cf:2c:33:82:31:22:3a:60:c7:a2: c5:31:c1:8a:6f:a4:2d:23:f2:6a:f2:e1:a8:d9:50:37:a4:0d: 1b:29:d9:44:2f:05:59:b0:b5:62:e6:d5:c9:ad:23:71:ae:31: 06:b7:98:7a:56:2f:ab:2a:2d:86:e0:a5:ac:3c:32:5b:af:b2: a4:52:64:ee -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUNHzSVQAKkIRKhF9AVygmPknTCrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA0MTAwMzU1MDFaFw0yNjA0MDkwNDAwMDFaMDMxMTAvBgNV BAMTKEE0QjY2QUFENDM1MkU4QUNCQTcwRDE5RkNCQjJCNzdDNkIzRTcyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmv3TpS+vdy2JL/wPdzUrHHsaw 2cKi7//uyNnW/2YRBEriMjBo+G9rwRfToef/4Jd5zXPF0NuBnbb+Rac3/KhoGGNn GJWwNqEhG9hVGPCN+3M5QriPi1G+4Mt2ywPrxYTMgRNnERgqgAbz4bAbRzcd8aBZ EiYJJR+sZeaieUaXmeHWEr5fIxTmibcPpkkBFexKaLrdamywMIyfHSNHV3zK+YsM n4qFSqWXn0o0xKt5PqPlfy9RiW9rNKmdRstkmZBIfJIl0e/i0QE4QlisZu5FQRNU QqME1LCXBUBcIRH1n4EfQ/48Q8diiiVj5M7MyMO017deBywoziNlgkoQFKFHAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUpLZqrUNS6Ky6cNGfy7K3fGs+cvAwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzkzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAkw DQYJKoZIhvcNAQELBQADggEBABzb9BfbCsNhzu38CbE2iSjXof1XwlrUpzB4L1gA UfwFhDkZ3CeLrgiIQjv0PaKOdRjWhegYsx7w5FWZSQPq5hBgoa5qUgLKohsB7Tna japHwUEICyVOfZ2ELofvlZPK1XxqRouqLFfvOHXE2LQJ0y5P7uviqbuZKDpqneUo 0i3I/MlzzsakPuNeeeOOzYrFYKRhx8vya7C36vFcm0XvY9QXw9EXHUl3r5DfBcrf gTPswbnpjDn6YqHxr3RzzywzgjEiOmDHosUxwYpvpC0j8mry4ajZUDekDRsp2UQv BVmwtWLm1cmtI3GuMQa3mHpWL6sqLYbgpaw8MluvsqRSZO4= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net