$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: HdTX530ngqjf8cWTUcL6hG9DUH8dGSMuS3PyqZl8vd4= Subject key identifier: A8:DE:00:76:BE:D9:53:F0:10:38:EB:80:A5:1F:5A:89:8E:DC:C9:23 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 33051F1B9314794BA2B2E61188ED5F1591082A56 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 10 Jan 2025 12:00:02 +0000 ROA not before: Fri 10 Jan 2025 11:55:02 +0000 ROA not after: Fri 09 Jan 2026 12:00:02 +0000 asID: 140423 IP address blocks: 2406:20c0:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 13:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:05:1f:1b:93:14:79:4b:a2:b2:e6:11:88:ed:5f:15:91:08:2a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Jan 10 11:55:02 2025 GMT Not After : Jan 9 12:00:02 2026 GMT Subject: CN=A8DE0076BED953F01038EB80A51F5A898EDCC923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7c:a1:d8:37:ba:a0:56:6f:93:0c:f0:1e:1a: 09:12:69:c1:40:29:da:f1:c5:3e:ab:76:02:e3:91: 1c:c2:1d:00:6a:70:18:45:95:46:0a:5c:51:60:56: 06:ac:18:c1:6f:3e:b8:f4:03:4d:63:71:2b:ad:37: 90:7b:db:51:4f:75:3f:bd:8f:48:83:be:b3:43:4a: 70:c7:d9:55:2e:0f:c9:b1:e9:3b:98:54:4b:7c:0e: 6c:c9:04:2c:22:0c:4c:91:fd:63:99:1b:1c:47:24: 27:f2:46:14:0c:4f:01:ec:64:e5:d6:da:ae:e5:8c: f9:9a:84:e8:c6:19:fa:b2:5f:7c:d1:2b:25:4e:62: b7:80:33:aa:32:9d:9e:92:bc:da:41:43:c3:ac:62: cc:72:d3:3f:d3:d8:eb:d1:39:c4:09:75:7c:2a:37: 88:4f:64:67:2c:af:83:36:11:4a:f5:6e:23:ba:74: 76:b4:d3:60:78:6f:7a:b4:41:e1:81:57:b7:5a:23: a3:5d:dc:8b:d3:c4:0c:12:de:cf:ea:22:b5:df:fd: b8:75:f3:ab:2e:bb:f1:4f:93:7b:66:3e:9e:34:56: cc:4a:d9:8a:1e:cf:ff:ec:d1:85:a0:07:09:e2:73: 63:e5:d8:6a:93:d1:a4:47:df:91:69:54:75:35:50: 24:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DE:00:76:BE:D9:53:F0:10:38:EB:80:A5:1F:5A:89:8E:DC:C9:23 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:8000::/36 Signature Algorithm: sha256WithRSAEncryption 70:d0:17:b3:5f:14:bb:bc:67:4f:5e:56:3d:b1:c2:d1:e6:37: 79:66:be:ed:fb:60:29:e0:f5:ab:72:d1:fb:99:8a:7f:27:6d: 9e:ab:45:1c:b7:7c:80:a2:7f:0e:08:c6:d2:e4:7f:e6:13:25: c2:7e:1f:a5:6c:e2:e4:a5:ce:af:21:f1:0b:f1:cd:f9:86:a3: f2:08:a8:19:e8:81:90:3f:82:04:9a:2e:bb:1d:20:ce:f5:a1: ba:fa:fb:bc:69:5f:e6:0b:0c:bf:a3:2b:78:5d:8e:90:5f:18: 27:1a:28:f8:d7:25:ca:c8:61:95:7d:f0:81:f7:fe:29:3b:f1: 95:59:15:a9:37:cc:cb:2d:cf:83:40:c3:cc:6d:a9:f8:0b:1a: 0e:0c:8b:3e:50:fa:ca:2d:08:3d:82:73:d8:a4:f1:83:50:91: f3:c0:47:bc:8c:24:00:43:32:c6:0c:85:01:0a:f1:3f:f2:54: 41:8d:3c:66:56:38:84:13:ec:4e:47:2d:54:63:9c:fe:88:d3: 3d:65:d7:b9:27:5e:60:91:3e:be:5c:e3:ef:3a:da:82:71:ad: ea:c6:d2:23:23:f9:a7:17:55:2a:9d:b2:0b:53:ad:d5:b5:88: 8c:54:bb:d4:bb:8c:a2:a4:3c:ee:f3:28:9b:0a:e4:9f:d5:5b: 9b:63:25:30 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUMwUfG5MUeUuisuYRiO1fFZEIKlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTAxMTAxMTU1MDJaFw0yNjAxMDkxMjAwMDJaMDMxMTAvBgNV BAMTKEE4REUwMDc2QkVEOTUzRjAxMDM4RUI4MEE1MUY1QTg5OEVEQ0M5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdfKHYN7qgVm+TDPAeGgkSacFA KdrxxT6rdgLjkRzCHQBqcBhFlUYKXFFgVgasGMFvPrj0A01jcSutN5B721FPdT+9 j0iDvrNDSnDH2VUuD8mx6TuYVEt8DmzJBCwiDEyR/WOZGxxHJCfyRhQMTwHsZOXW 2q7ljPmahOjGGfqyX3zRKyVOYreAM6oynZ6SvNpBQ8OsYsxy0z/T2OvROcQJdXwq N4hPZGcsr4M2EUr1biO6dHa002B4b3q0QeGBV7daI6Nd3IvTxAwS3s/qIrXf/bh1 86suu/FPk3tmPp40VsxK2Yoez//s0YWgBwnic2Pl2GqT0aRH35FpVHU1UCR5AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUqN4Adr7ZU/AQOOuApR9aiY7cySMwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzgzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAgDANBgkqhkiG9w0BAQsFAAOCAQEAcNAXs18Uu7xnT15WPbHC0eY3eWa+7ftg KeD1q3LR+5mKfydtnqtFHLd8gKJ/DgjG0uR/5hMlwn4fpWzi5KXOryHxC/HN+Yaj 8gioGeiBkD+CBJouux0gzvWhuvr7vGlf5gsMv6MreF2OkF8YJxoo+NclyshhlX3w gff+KTvxlVkVqTfMyy3Pg0DDzG2p+AsaDgyLPlD6yi0IPYJz2KTxg1CR88BHvIwk AEMyxgyFAQrxP/JUQY08ZlY4hBPsTkctVGOc/ojTPWXXuSdeYJE+vlzj7zragnGt 6sbSIyP5pxdVKp2yC1Ot1bWIjFS71LuMoqQ87vMomwrkn9Vbm2MlMA== -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:48 2025 by rpki-client on console.sobornost.net