$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33342d3334203d3e203233363739.roa File: 323430313a323930303a383030303a3a2f33342d3334203d3e203233363739.roa (raw, json) Hash identifier: hT75fsM1tC6dLqPEd+Ch5ub9hw5XBn7S1Nh1F5vHxbE= Subject key identifier: D1:45:E3:E0:81:75:DB:3B:C5:FA:43:4A:E3:54:84:DD:22:11:0C:EB Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 4B5AD168197E0B9386A03FBB3528BD20F1F47630 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33342d3334203d3e203233363739.roa Signing time: Wed 01 Jan 2025 04:00:39 +0000 ROA not before: Wed 01 Jan 2025 03:55:39 +0000 ROA not after: Wed 31 Dec 2025 04:00:39 +0000 asID: 23679 IP address blocks: 2401:2900:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 07:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5a:d1:68:19:7e:0b:93:86:a0:3f:bb:35:28:bd:20:f1:f4:76:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Jan 1 03:55:39 2025 GMT Not After : Dec 31 04:00:39 2025 GMT Subject: CN=D145E3E08175DB3BC5FA434AE35484DD22110CEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:fd:8f:a6:32:e0:79:27:00:55:31:d5:24: 59:f1:83:e6:74:83:56:32:cd:d8:d2:33:ef:66:81: 88:ad:51:b6:7f:6f:ed:03:7d:55:a9:62:55:0e:61: c4:5c:1b:eb:1a:37:a9:da:55:6c:be:80:99:dd:a7: 35:90:a8:d3:c2:3b:33:34:b5:0e:74:3f:d7:58:5f: 1d:0a:9c:51:db:23:a0:99:e6:73:6a:12:3b:3e:4a: 6a:32:a3:8b:51:16:1f:fb:3f:af:02:a4:0a:43:5b: 4d:91:70:7d:a4:19:46:c6:d9:34:d5:d9:2b:15:6d: 1b:d6:c0:44:da:7c:ed:a0:49:ea:b8:00:94:35:1b: 4e:41:b5:5d:74:24:3b:31:5a:09:74:d2:15:c6:82: a9:7b:15:53:6b:76:a1:1f:45:bc:40:1b:22:e6:48: 14:75:72:05:b7:27:e2:9a:41:a8:08:fd:12:ca:b0: f4:19:23:52:08:05:1f:9a:80:de:9c:ed:98:39:c5: 23:7d:b7:1a:21:84:93:54:50:4a:fc:4a:82:df:d1: 2e:d9:4c:fa:06:34:13:4c:e9:16:76:64:a9:21:5d: e0:3c:1e:c7:62:61:14:21:11:1a:25:2c:81:29:3f: 99:1e:d4:ca:7f:f5:4a:ad:34:03:c9:f3:b2:73:0e: 75:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:45:E3:E0:81:75:DB:3B:C5:FA:43:4A:E3:54:84:DD:22:11:0C:EB X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33342d3334203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8000::/34 Signature Algorithm: sha256WithRSAEncryption ac:9d:3c:dc:5a:22:f5:fa:32:bd:3a:45:35:55:d6:bb:d0:80: 21:fa:03:29:03:59:03:02:4e:40:35:96:13:12:d3:15:e2:0e: 0f:d6:e3:77:8a:78:87:fc:b4:2c:e9:50:53:a7:8f:02:f5:a1: 72:22:b7:d1:bf:97:72:2b:e7:68:ec:95:3a:c5:12:d1:33:5d: 40:cd:dc:b5:1b:53:2d:76:ab:18:96:2f:22:52:f8:c3:55:7a: 16:8d:79:de:29:c1:7f:bf:28:ad:1c:5b:ae:6f:3b:f6:d5:2b: e4:7a:b5:22:5a:35:5f:ce:60:65:26:21:a8:94:58:03:ec:00: 94:35:ae:b3:13:3e:f3:20:29:5d:b3:49:f6:25:40:a2:d7:f4: eb:c5:4e:c4:cc:d0:fd:ee:e3:e4:f5:43:87:35:49:40:30:62: 35:22:40:38:29:40:d3:fa:6b:61:ae:b9:23:91:30:a5:fe:b8: d4:6e:d5:79:65:fa:7f:4f:0c:fb:1a:03:2f:33:d1:c6:38:3b: 12:fb:b9:ee:df:2e:6e:ff:ef:fb:20:3c:6f:d7:4e:e4:aa:9c: d7:37:3b:b2:05:d3:e4:78:26:f9:61:0d:0b:78:52:2e:8d:b0: 11:f4:a5:de:51:18:25:4c:76:b8:ee:7f:a5:f2:70:96:03:3b: c2:c5:44:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS1rRaBl+C5OGoD+7NSi9IPH0djAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTAxMDEwMzU1MzlaFw0yNTEyMzEwNDAwMzlaMDMxMTAvBgNV BAMTKEQxNDVFM0UwODE3NURCM0JDNUZBNDM0QUUzNTQ4NEREMjIxMTBDRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFav2PpjLgeScAVTHVJFnxg+Z0 g1YyzdjSM+9mgYitUbZ/b+0DfVWpYlUOYcRcG+saN6naVWy+gJndpzWQqNPCOzM0 tQ50P9dYXx0KnFHbI6CZ5nNqEjs+Smoyo4tRFh/7P68CpApDW02RcH2kGUbG2TTV 2SsVbRvWwETafO2gSeq4AJQ1G05BtV10JDsxWgl00hXGgql7FVNrdqEfRbxAGyLm SBR1cgW3J+KaQagI/RLKsPQZI1IIBR+agN6c7Zg5xSN9txohhJNUUEr8SoLf0S7Z TPoGNBNM6RZ2ZKkhXeA8HsdiYRQhERolLIEpP5ke1Mp/9UqtNAPJ87JzDnUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0UXj4IF12zvF+kNK41SE3SIRDOswHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzAz YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJAEp AIAwDQYJKoZIhvcNAQELBQADggEBAKydPNxaIvX6Mr06RTVV1rvQgCH6AykDWQMC TkA1lhMS0xXiDg/W43eKeIf8tCzpUFOnjwL1oXIit9G/l3Ir52jslTrFEtEzXUDN 3LUbUy12qxiWLyJS+MNVehaNed4pwX+/KK0cW65vO/bVK+R6tSJaNV/OYGUmIaiU WAPsAJQ1rrMTPvMgKV2zSfYlQKLX9OvFTsTM0P3u4+T1Q4c1SUAwYjUiQDgpQNP6 a2GuuSORMKX+uNRu1Xll+n9PDPsaAy8z0cY4OxL7ue7fLm7/7/sgPG/XTuSqnNc3 O7IF0+R4JvlhDQt4Ui6NsBH0pd5RGCVMdrjuf6XycJYDO8LFRKg= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net