$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130343a3a2f34372d3437203d3e203233363739.roa File: 323430313a323930303a3130343a3a2f34372d3437203d3e203233363739.roa (raw, json) Hash identifier: doOqHpl6HiPUsJkxq2lFFkJDLXTgvD+fz1seRfCKy6o= Subject key identifier: 60:A1:AE:E7:A4:6F:93:5A:FE:C9:49:45:D0:14:B7:EC:7C:4E:AE:FE Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 70C383BDA9529D175E8FDE32720463171BB1A6DA Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130343a3a2f34372d3437203d3e203233363739.roa Signing time: Fri 10 Jan 2025 08:21:22 +0000 ROA not before: Fri 10 Jan 2025 08:16:22 +0000 ROA not after: Fri 09 Jan 2026 08:21:22 +0000 asID: 23679 IP address blocks: 2401:2900:104::/47 maxlen: 47 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 07:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c3:83:bd:a9:52:9d:17:5e:8f:de:32:72:04:63:17:1b:b1:a6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Jan 10 08:16:22 2025 GMT Not After : Jan 9 08:21:22 2026 GMT Subject: CN=60A1AEE7A46F935AFEC94945D014B7EC7C4EAEFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7b:20:d5:99:4c:49:82:a1:1f:e4:81:ff:97: 0d:6c:d1:36:53:a9:11:5a:37:9c:ef:3b:d2:30:3b: b6:57:c1:85:51:a1:2d:a3:69:06:91:96:0b:4b:71: 68:f8:a5:6a:0d:3b:5a:d9:e0:f6:7a:7a:ec:01:34: cf:74:7d:2f:ba:e0:89:a5:8e:40:54:dc:f5:72:7b: e0:97:f3:24:d2:f5:80:0d:98:7b:6c:4b:cf:7d:31: 6f:24:c3:8f:e0:10:7f:ce:85:bb:fa:ed:a9:aa:9c: 19:1a:e8:f7:82:22:b5:49:e1:ad:48:1b:50:11:0c: d9:ce:ed:ac:85:77:00:3c:87:5d:bd:d9:e4:06:f5: 49:09:ca:e2:59:c8:fd:b2:c6:f0:e3:84:4f:99:4e: b5:c2:5f:e3:55:86:6f:b9:44:cc:eb:19:03:11:c3: f1:96:e6:43:52:54:af:81:fc:60:aa:92:96:83:0f: 0f:64:82:80:62:ee:88:3e:f5:d2:de:d0:17:e3:73: 60:17:a2:9d:e9:31:2e:25:18:c1:4c:ec:ca:99:e1: f6:cc:5a:2d:f1:fa:c4:53:a0:26:40:28:e9:69:f7: 5e:73:80:5c:2b:e4:70:fb:2c:38:ed:99:b7:e0:53: 00:c3:52:02:c9:ff:6d:a1:89:42:df:03:f3:bd:b2: 5c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A1:AE:E7:A4:6F:93:5A:FE:C9:49:45:D0:14:B7:EC:7C:4E:AE:FE X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130343a3a2f34372d3437203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:104::/47 Signature Algorithm: sha256WithRSAEncryption c7:87:69:d2:d4:54:30:09:10:26:f1:78:4e:f4:88:9a:b0:80: 17:b5:a8:b6:c3:45:14:c8:49:86:0b:cd:7e:9e:52:50:6f:30: 5f:70:30:6a:7b:fb:48:b1:89:e2:2e:93:3a:45:85:4e:4d:c0: 1b:5d:5a:bf:75:12:4e:80:f6:10:c7:13:88:d9:50:0a:ab:c1: 81:a3:ac:e3:e4:8e:97:51:69:f2:93:23:3e:4d:dc:00:02:92: 94:b0:91:d3:d9:32:e8:59:e6:3c:a2:5d:31:d8:46:f0:c9:75: 23:2d:ec:49:23:c5:0f:26:12:9e:4e:20:86:52:d0:e5:c0:03: aa:1d:bb:73:be:2c:82:cd:e7:9a:47:9a:f4:02:37:38:f1:1b: 29:85:98:36:7f:64:b3:0e:0f:fc:be:c3:52:2a:b5:10:d0:ab: c7:6b:b9:40:ee:19:da:2d:19:43:c3:5c:a8:09:8c:db:e3:de: 42:c7:b5:5e:76:04:2b:0f:bc:86:1b:88:f1:47:f8:b8:75:c0: 2b:30:9e:b7:6d:01:9f:6c:c9:c9:c8:73:f2:20:77:91:88:80: 9c:12:f6:d0:22:93:ac:37:37:0d:3e:20:34:23:56:ba:12:14: c5:c3:b1:45:17:49:4c:80:7b:1a:31:a0:bf:1e:fa:69:b6:cb: 86:b2:17:80 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUcMODvalSnRdej94ycgRjFxuxptowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTAxMTAwODE2MjJaFw0yNjAxMDkwODIxMjJaMDMxMTAvBgNV BAMTKDYwQTFBRUU3QTQ2RjkzNUFGRUM5NDk0NUQwMTRCN0VDN0M0RUFFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCceyDVmUxJgqEf5IH/lw1s0TZT qRFaN5zvO9IwO7ZXwYVRoS2jaQaRlgtLcWj4pWoNO1rZ4PZ6euwBNM90fS+64Iml jkBU3PVye+CX8yTS9YANmHtsS899MW8kw4/gEH/Ohbv67amqnBka6PeCIrVJ4a1I G1ARDNnO7ayFdwA8h1292eQG9UkJyuJZyP2yxvDjhE+ZTrXCX+NVhm+5RMzrGQMR w/GW5kNSVK+B/GCqkpaDDw9kgoBi7og+9dLe0Bfjc2AXop3pMS4lGMFM7MqZ4fbM Wi3x+sRToCZAKOlp915zgFwr5HD7LDjtmbfgUwDDUgLJ/22hiULfA/O9slwhAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUYKGu56Rvk1r+yUlF0BS37HxOrv4wHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzEzMDM0M2Ez YTJmMzQzNzJkMzQzNzIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASQBKQAB BDANBgkqhkiG9w0BAQsFAAOCAQEAx4dp0tRUMAkQJvF4TvSImrCAF7WotsNFFMhJ hgvNfp5SUG8wX3Awanv7SLGJ4i6TOkWFTk3AG11av3USToD2EMcTiNlQCqvBgaOs 4+SOl1Fp8pMjPk3cAAKSlLCR09ky6FnmPKJdMdhG8Ml1Iy3sSSPFDyYSnk4ghlLQ 5cADqh27c74sgs3nmkea9AI3OPEbKYWYNn9ksw4P/L7DUiq1ENCrx2u5QO4Z2i0Z Q8NcqAmM2+PeQse1XnYEKw+8hhuI8Uf4uHXAKzCet20Bn2zJychz8iB3kYiAnBL2 0CKTrDc3DT4gNCNWuhIUxcOxRRdJTIB7GjGgvx76abbLhrIXgA== -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net