$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: RKKD3GBglVl68bznX80kytr3DPvnjyvkYNH5hf4K2xc= Subject key identifier: 78:47:17:AF:7A:7B:C2:61:32:49:C9:E9:BF:2B:40:32:4F:16:26:6D Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 2022B4101B3A49DB39F33286F1E812D6BF94D8A8 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa Signing time: Wed 01 Jan 2025 04:00:38 +0000 ROA not before: Wed 01 Jan 2025 03:55:38 +0000 ROA not after: Wed 31 Dec 2025 04:00:38 +0000 asID: 23679 IP address blocks: 2401:2900:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 07:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:22:b4:10:1b:3a:49:db:39:f3:32:86:f1:e8:12:d6:bf:94:d8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Jan 1 03:55:38 2025 GMT Not After : Dec 31 04:00:38 2025 GMT Subject: CN=784717AF7A7BC2613249C9E9BF2B40324F16266D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0b:0d:55:7d:fb:28:4d:69:2f:5f:0b:aa:d9: 01:07:ca:a6:25:36:87:47:21:a6:1d:67:3a:6e:35: 1f:5c:fd:98:25:38:57:a9:54:4d:f1:95:ab:03:6b: 09:dc:57:fc:28:02:d8:0b:3b:6d:11:59:21:14:33: fc:1b:49:35:ad:84:f0:3e:08:19:a5:43:32:a8:6f: 24:09:8f:04:73:12:3e:e7:dc:ab:bd:16:1a:60:7d: e4:90:7c:0d:bc:aa:a4:17:ed:5b:a0:ab:fe:59:27: 2d:6a:37:96:e7:dd:0e:09:2e:a6:d6:c8:41:76:29: 84:77:f1:bf:9c:8a:8d:cf:77:44:45:3c:50:77:9f: 8e:6b:28:8f:73:3a:e1:5d:20:f3:5d:1d:e4:6d:b5: e2:9c:d7:96:9e:fb:46:3c:1e:ef:79:1d:a1:de:6e: 53:64:80:9e:e9:bd:3d:6c:1b:8f:a1:95:52:40:57: 02:bb:4d:b5:bf:98:95:04:59:28:fc:69:19:1f:af: 6f:cc:32:b7:ee:74:b2:fe:cb:90:be:6b:6f:4a:0f: ed:04:f1:9e:80:6a:06:cd:89:4c:14:c6:fc:d0:11: f4:d8:52:48:19:6a:e4:b5:d3:0e:d1:35:22:cf:99: 4f:2e:0c:b3:74:46:d9:ff:8f:02:36:08:d5:d5:ec: 70:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:47:17:AF:7A:7B:C2:61:32:49:C9:E9:BF:2B:40:32:4F:16:26:6D X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8002::/48 Signature Algorithm: sha256WithRSAEncryption 4b:ca:08:df:b1:ca:2a:01:de:d7:c7:cf:be:5a:23:5d:dd:c7: b1:46:3b:3e:19:80:ca:2e:f4:68:1d:9a:9c:ff:10:21:4f:1a: bf:8d:80:44:e7:f0:ed:9a:53:11:e7:0d:dd:84:9c:bf:36:83: db:cd:20:61:5c:8b:c0:f8:64:4c:09:c1:ce:41:10:76:cf:34: f9:5e:bf:e9:37:f9:6e:55:13:28:32:74:84:46:0f:4e:e0:43: 55:f3:89:2a:db:d7:de:3f:50:7c:a6:0c:e5:90:6a:ef:e2:b3: 0a:ad:9c:81:96:04:6a:45:2f:e0:3d:7a:a2:34:cf:08:20:40: a1:53:80:e2:ac:ca:fd:c3:38:bf:7f:d6:9a:75:d8:8d:51:70: 36:3b:b8:bf:bb:87:d2:b9:73:d4:e5:45:bb:fa:b7:50:84:d2: 72:35:df:25:8a:5c:b4:4d:17:6c:01:ad:01:11:7a:17:f6:9e: 00:ea:82:29:ae:ce:6f:e0:05:52:f9:f1:2a:f5:b6:48:9b:e4: e6:53:28:35:5a:d7:65:1f:cb:81:46:16:fe:d1:90:70:dc:1c: 3e:61:b8:14:f5:b4:86:c7:db:0c:40:df:4f:96:33:ef:10:dd: c1:ee:d3:ac:85:da:46:d1:f8:16:e2:1b:46:6d:a6:25:8a:55: f1:2b:e1:f6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUICK0EBs6Sds58zKG8egS1r+U2KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTAxMDEwMzU1MzhaFw0yNTEyMzEwNDAwMzhaMDMxMTAvBgNV BAMTKDc4NDcxN0FGN0E3QkMyNjEzMjQ5QzlFOUJGMkI0MDMyNEYxNjI2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2Cw1VffsoTWkvXwuq2QEHyqYl NodHIaYdZzpuNR9c/ZglOFepVE3xlasDawncV/woAtgLO20RWSEUM/wbSTWthPA+ CBmlQzKobyQJjwRzEj7n3Ku9FhpgfeSQfA28qqQX7Vugq/5ZJy1qN5bn3Q4JLqbW yEF2KYR38b+cio3Pd0RFPFB3n45rKI9zOuFdIPNdHeRtteKc15ae+0Y8Hu95HaHe blNkgJ7pvT1sG4+hlVJAVwK7TbW/mJUEWSj8aRkfr2/MMrfudLL+y5C+a29KD+0E 8Z6AagbNiUwUxvzQEfTYUkgZauS10w7RNSLPmU8uDLN0Rtn/jwI2CNXV7HCjAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUeEcXr3p7wmEyScnpvytAMk8WJm0wHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AIACMA0GCSqGSIb3DQEBCwUAA4IBAQBLygjfscoqAd7Xx8++WiNd3cexRjs+GYDK LvRoHZqc/xAhTxq/jYBE5/DtmlMR5w3dhJy/NoPbzSBhXIvA+GRMCcHOQRB2zzT5 Xr/pN/luVRMoMnSERg9O4ENV84kq29feP1B8pgzlkGrv4rMKrZyBlgRqRS/gPXqi NM8IIEChU4DirMr9wzi/f9aaddiNUXA2O7i/u4fSuXPU5UW7+rdQhNJyNd8lily0 TRdsAa0BEXoX9p4A6oIprs5v4AVS+fEq9bZIm+TmUyg1WtdlH8uBRhb+0ZBw3Bw+ YbgU9bSGx9sMQN9PljPvEN3B7tOshdpG0fgW4htGbaYlilXxK+H2 -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net