$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa File: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (raw, json) Hash identifier: /RbGQNrG5f2b5xUZmbLZIUIJCT8zlW48+GUxpa/P1BY= Subject key identifier: AD:8F:41:7D:78:A4:31:66:F7:67:34:78:14:A5:95:CA:9B:FD:A8:0C Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 65629F256D3BA7834B06A5519FA5384813A4FC21 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa Signing time: Tue 10 Dec 2024 06:05:18 +0000 ROA not before: Tue 10 Dec 2024 06:00:18 +0000 ROA not after: Tue 09 Dec 2025 06:05:18 +0000 asID: 153087 IP address blocks: 2404:97c0:2230::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 05:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:62:9f:25:6d:3b:a7:83:4b:06:a5:51:9f:a5:38:48:13:a4:fc:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Dec 10 06:00:18 2024 GMT Not After : Dec 9 06:05:18 2025 GMT Subject: CN=AD8F417D78A43166F767347814A595CA9BFDA80C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:98:4e:39:28:11:4b:98:f0:f1:b6:3e:03: d4:5b:94:57:1b:b4:6f:6e:fe:73:3e:90:cb:b6:40: c2:26:2d:fe:70:98:1f:34:af:9a:84:91:0f:37:85: 6e:ee:b2:2d:bf:ed:57:69:f5:fb:93:74:f6:34:30: 34:2d:30:9a:37:51:71:f0:84:7a:48:a9:f0:f6:f6: 67:0c:11:58:6c:73:6a:50:8b:d0:cd:6c:e5:a9:35: a0:ad:bd:fc:59:f4:a5:ea:9d:91:f3:83:9d:83:0a: 19:a4:39:52:75:bf:27:bc:43:80:1a:1a:ac:81:7d: 55:d3:7d:da:f9:c8:62:ec:97:c9:ac:70:d3:44:c7: 93:6e:9e:e5:b8:7b:15:a0:16:d8:be:80:42:cf:dc: 53:59:73:89:8f:28:d6:75:65:85:ca:aa:ed:35:50: 11:d1:e7:6a:81:60:b1:6b:52:b8:14:05:8a:34:92: c2:c5:87:81:06:c1:10:dc:12:37:c5:d9:e3:51:5e: 3c:cc:c6:6d:f6:49:1d:1c:c5:bc:f6:d2:ef:27:2d: 45:b5:f5:21:58:f6:96:8c:0f:5b:29:bf:cf:0b:4a: bb:f5:80:33:69:1e:9c:8b:3c:40:e6:64:8d:20:05: b6:0c:f7:0b:04:ce:f4:15:a9:55:ea:27:a9:d9:ca: 91:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8F:41:7D:78:A4:31:66:F7:67:34:78:14:A5:95:CA:9B:FD:A8:0C X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:2230::/44 Signature Algorithm: sha256WithRSAEncryption 93:42:09:d2:7a:96:ca:0a:f8:93:fa:2f:35:0a:b4:79:05:2e: 34:69:34:2f:da:40:eb:96:c9:bf:a9:55:85:dc:3a:47:66:f0: 8b:9b:dd:dc:f4:55:52:2d:ba:bd:5c:22:43:ac:bd:34:e5:e1: 39:5a:4a:75:fe:3a:7d:7c:47:cd:58:29:95:3b:f3:49:e0:71: 2a:fa:1c:34:55:d2:4a:5c:5f:47:be:fe:69:43:bb:9b:ff:73: 4f:c7:99:8c:05:42:d1:0f:50:cb:e6:8b:87:8b:41:f0:e7:39: 59:26:94:45:c9:4d:83:14:e0:74:96:6a:34:de:cd:d7:1e:1b: d3:ba:42:8c:1a:a8:8e:dc:e7:6d:c4:ba:3a:80:de:f0:cf:90: 51:55:2c:44:26:ed:88:8d:5f:ce:f5:86:c9:32:0e:80:32:ff: 9f:7a:f6:7b:84:50:db:03:c7:d1:93:e1:26:d9:d9:52:a3:27: 63:54:02:f0:75:52:fb:f1:b1:8f:e7:5d:4d:24:65:03:6f:7d: 7e:d9:ba:4b:eb:37:6a:f8:f9:f7:f0:28:49:fe:83:4a:a5:2d: df:b8:5d:e1:fc:4e:10:5f:9b:88:fa:e6:c0:b2:a5:43:7a:43: b4:a5:5f:45:33:52:af:74:13:f9:55:f8:e9:ef:51:b0:88:d5: 5e:f2:17:df -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUZWKfJW07p4NLBqVRn6U4SBOk/CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNDEyMTAwNjAwMThaFw0yNTEyMDkwNjA1MThaMDMxMTAvBgNV BAMTKEFEOEY0MTdENzhBNDMxNjZGNzY3MzQ3ODE0QTU5NUNBOUJGREE4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7JhOOSgRS5jw8bY+A9RblFcb tG9u/nM+kMu2QMImLf5wmB80r5qEkQ83hW7usi2/7Vdp9fuTdPY0MDQtMJo3UXHw hHpIqfD29mcMEVhsc2pQi9DNbOWpNaCtvfxZ9KXqnZHzg52DChmkOVJ1vye8Q4Aa GqyBfVXTfdr5yGLsl8mscNNEx5NunuW4exWgFti+gELP3FNZc4mPKNZ1ZYXKqu01 UBHR52qBYLFrUrgUBYo0ksLFh4EGwRDcEjfF2eNRXjzMxm32SR0cxbz20u8nLUW1 9SFY9paMD1spv88LSrv1gDNpHpyLPEDmZI0gBbYM9wsEzvQVqVXqJ6nZypE5AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUrY9BfXikMWb3ZzR4FKWVypv9qAwwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMjMzMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk BJfAIjAwDQYJKoZIhvcNAQELBQADggEBAJNCCdJ6lsoK+JP6LzUKtHkFLjRpNC/a QOuWyb+pVYXcOkdm8Iub3dz0VVItur1cIkOsvTTl4TlaSnX+On18R81YKZU780ng cSr6HDRV0kpcX0e+/mlDu5v/c0/HmYwFQtEPUMvmi4eLQfDnOVkmlEXJTYMU4HSW ajTezdceG9O6QowaqI7c523EujqA3vDPkFFVLEQm7YiNX871hskyDoAy/5969nuE UNsDx9GT4SbZ2VKjJ2NUAvB1UvvxsY/nXU0kZQNvfX7ZukvrN2r4+ffwKEn+g0ql Ld+4XeH8ThBfm4j65sCypUN6Q7SlX0UzUq90E/lV+OnvUbCI1V7yF98= -----END CERTIFICATE-----Generated at Sun Apr 27 05:32:53 2025 by rpki-client on console.sobornost.net