$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f34382d3438203d3e20313530323638.roa File: 323430363a323063303a653030303a3a2f34382d3438203d3e20313530323638.roa (raw, json) Hash identifier: 2J7Kg5pypv2OXEsXlqI2JE5Pk92nelQZ8tHqt5XNGFs= Subject key identifier: 3D:E4:F6:79:BF:BF:6E:99:C9:51:03:2E:7B:FA:9C:01:53:92:8E:C4 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 3BEC2234C4669157E81AF3982A22705676F2132A Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f34382d3438203d3e20313530323638.roa Signing time: Fri 10 Jan 2025 12:00:01 +0000 ROA not before: Fri 10 Jan 2025 11:55:01 +0000 ROA not after: Fri 09 Jan 2026 12:00:01 +0000 asID: 150268 IP address blocks: 2406:20c0:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 13:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ec:22:34:c4:66:91:57:e8:1a:f3:98:2a:22:70:56:76:f2:13:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Jan 10 11:55:01 2025 GMT Not After : Jan 9 12:00:01 2026 GMT Subject: CN=3DE4F679BFBF6E99C951032E7BFA9C0153928EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:9e:20:01:0f:e5:c1:85:6b:ab:b5:51:f3: 67:f9:40:33:f6:50:77:50:dd:f6:90:07:29:60:7e: 21:07:ad:0e:55:77:cf:54:40:0b:86:34:37:b3:58: 53:a0:27:3d:fe:b9:3e:69:3c:04:d8:2b:b7:c1:75: 26:a3:4f:82:1e:89:ce:53:d7:33:ea:72:0c:df:23: b6:32:76:e9:18:da:05:f2:72:2e:5c:c9:d7:96:c6: 28:90:79:83:b0:b6:c7:75:ce:6e:83:bd:f0:43:44: e0:08:4d:30:e6:47:bf:5c:d9:92:60:28:f2:b5:ca: bf:06:dd:7a:3b:f4:fc:c4:ba:91:e8:a0:b3:a3:e9: 9b:d2:71:9b:86:d4:01:9d:e3:2c:79:b1:43:c6:1d: f7:32:08:a5:69:07:47:39:a6:22:3a:88:dc:fa:ad: 3c:62:76:0d:c3:e3:bc:50:8f:d3:06:29:a0:fa:9f: 8e:f7:b0:4c:66:28:b3:25:e6:44:e6:5a:61:82:d4: d2:a2:5b:e8:02:74:e1:05:6c:c8:42:66:fe:d2:b4: 2a:65:f0:b3:4b:18:e5:aa:a5:3c:16:fc:e1:da:e5: 6e:48:6c:aa:a5:e6:9f:91:20:5a:5c:00:85:d9:b3: d8:25:78:f2:04:56:40:49:32:28:f8:45:79:24:78: 89:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E4:F6:79:BF:BF:6E:99:C9:51:03:2E:7B:FA:9C:01:53:92:8E:C4 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f34382d3438203d3e20313530323638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:e000::/48 Signature Algorithm: sha256WithRSAEncryption 86:98:34:f5:44:b7:97:22:67:c8:b8:0f:c5:35:1a:77:23:b7: 8e:40:8b:83:ff:6b:aa:89:1b:0d:8b:1a:ba:f1:27:2c:1a:a9: 57:5f:d4:de:92:31:97:f6:f3:cf:21:0f:5b:92:c9:66:93:b5: 59:18:be:f1:b2:16:dc:91:32:7e:a9:30:4a:94:12:cd:f6:0c: 39:0c:a1:a5:ac:81:f2:78:1e:91:34:d3:85:67:a8:f2:d1:d8: 6e:5c:6c:9f:93:44:98:49:a2:9b:65:3d:53:8e:0a:59:aa:5f: 75:48:18:c4:9e:14:89:e4:8d:3f:13:ef:a4:ec:b8:96:5d:ea: 88:7d:17:e7:6a:53:91:ce:1a:85:29:e7:b6:18:79:ce:97:1f: 41:4d:4c:34:5d:5a:d2:79:75:98:43:1a:ef:35:e8:87:b0:24: e3:cf:c1:6a:22:e1:5f:39:16:bf:45:72:0c:ef:0d:f0:9c:7c: 8d:76:44:fd:7a:d6:75:41:7c:ad:93:de:ad:b7:d1:ea:7f:f6: 38:45:98:5c:e6:2b:23:a7:a7:c8:cd:1d:e1:51:5d:98:ee:f7: 84:50:8f:d5:f2:bd:a7:e8:f7:84:27:ed:9b:83:8b:7e:db:a4: 4e:47:4d:b6:25:08:ad:de:45:7a:18:02:f7:51:dc:4a:a8:a9: 97:55:f8:28 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUO+wiNMRmkVfoGvOYKiJwVnbyEyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTAxMTAxMTU1MDFaFw0yNjAxMDkxMjAwMDFaMDMxMTAvBgNV BAMTKDNERTRGNjc5QkZCRjZFOTlDOTUxMDMyRTdCRkE5QzAxNTM5MjhFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrPZ4gAQ/lwYVrq7VR82f5QDP2 UHdQ3faQBylgfiEHrQ5Vd89UQAuGNDezWFOgJz3+uT5pPATYK7fBdSajT4Ieic5T 1zPqcgzfI7YydukY2gXyci5cydeWxiiQeYOwtsd1zm6DvfBDROAITTDmR79c2ZJg KPK1yr8G3Xo79PzEupHooLOj6ZvScZuG1AGd4yx5sUPGHfcyCKVpB0c5piI6iNz6 rTxidg3D47xQj9MGKaD6n473sExmKLMl5kTmWmGC1NKiW+gCdOEFbMhCZv7StCpl 8LNLGOWqpTwW/OHa5W5IbKql5p+RIFpcAIXZs9glePIEVkBJMij4RXkkeImZAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUPeT2eb+/bpnJUQMue/qcAVOSjsQwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjUzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzAzMjM2Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BiDA4AAwDQYJKoZIhvcNAQELBQADggEBAIaYNPVEt5ciZ8i4D8U1Gncjt45Ai4P/ a6qJGw2LGrrxJywaqVdf1N6SMZf2888hD1uSyWaTtVkYvvGyFtyRMn6pMEqUEs32 DDkMoaWsgfJ4HpE004VnqPLR2G5cbJ+TRJhJoptlPVOOClmqX3VIGMSeFInkjT8T 76TsuJZd6oh9F+dqU5HOGoUp57YYec6XH0FNTDRdWtJ5dZhDGu816IewJOPPwWoi 4V85Fr9FcgzvDfCcfI12RP161nVBfK2T3q230ep/9jhFmFzmKyOnp8jNHeFRXZju 94RQj9Xyvafo94Qn7ZuDi37bpE5HTbYlCK3eRXoYAvdR3EqoqZdV+Cg= -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:48 2025 by rpki-client on console.sobornost.net