$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383838383a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a383838383a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: sjxCrcV0LVEJsP1CASc4T1d0ITiALXg6Wmc0qHqgo9I= Subject key identifier: 9F:11:BB:18:E7:B0:3B:2A:0C:D3:20:73:57:A9:25:84:85:1F:3F:E4 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 24C34813A6C7DBB8F5F30970A713E547EBEC6616 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383838383a3a2f34382d3438203d3e203233363739.roa Signing time: Wed 01 Jan 2025 04:00:39 +0000 ROA not before: Wed 01 Jan 2025 03:55:39 +0000 ROA not after: Wed 31 Dec 2025 04:00:39 +0000 asID: 23679 IP address blocks: 2401:2900:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 07:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c3:48:13:a6:c7:db:b8:f5:f3:09:70:a7:13:e5:47:eb:ec:66:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Jan 1 03:55:39 2025 GMT Not After : Dec 31 04:00:39 2025 GMT Subject: CN=9F11BB18E7B03B2A0CD3207357A92584851F3FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:9e:c3:1a:28:ec:82:76:79:5d:b1:20:85: 58:c8:2c:4b:db:c8:c3:cb:59:a0:6a:3e:8b:4b:a6: 63:5b:86:01:5f:12:31:37:81:6b:5d:4a:c6:ed:0d: 5b:0d:45:80:6d:1f:03:cc:e4:70:a2:3a:2a:03:27: 9b:ad:d6:da:8c:24:d7:9c:6a:22:34:4f:8a:89:a2: b6:46:33:b9:09:44:c7:ef:75:d4:67:c1:45:12:16: 08:b9:0d:a3:e1:30:01:b8:0a:17:ea:ec:0f:c6:30: d3:f5:86:2a:15:43:38:b5:93:ac:e9:72:be:0f:1f: 6a:7b:4d:d6:58:7f:87:01:97:e2:53:78:88:ed:85: 7c:97:67:1c:48:c7:5e:f2:03:12:a9:23:f3:fd:e5: f7:4c:2f:8f:c0:2a:cf:09:d7:e8:9e:54:86:09:5d: 7d:3d:a9:d2:d6:de:fc:4a:0e:25:27:89:31:63:2a: fc:b4:d1:2a:2a:e5:50:74:15:13:40:5b:ad:a0:05: 9d:c3:d7:3f:05:f2:05:71:f9:d5:42:ed:d2:04:d6: 30:c1:db:25:1b:9b:d2:38:e3:b7:f5:3c:30:be:76: 20:b7:9e:6a:3b:a0:3e:01:06:b8:f5:3c:e4:9b:14: 7f:58:f8:e9:b8:2a:85:cb:5a:09:aa:af:8d:43:86: 09:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:11:BB:18:E7:B0:3B:2A:0C:D3:20:73:57:A9:25:84:85:1F:3F:E4 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383838383a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8888::/48 Signature Algorithm: sha256WithRSAEncryption 3c:12:48:ed:01:76:63:6f:5d:81:c5:cc:30:dd:f9:6d:75:bb: df:3a:7b:dd:6e:51:b6:ce:ed:e0:35:71:ce:b4:3f:16:ab:db: 22:c2:4c:65:1c:a9:43:f6:3c:f7:b3:67:0d:94:d4:96:9b:9b: 69:20:05:93:f0:2b:5b:76:f8:f5:85:77:81:46:95:28:a8:c6: 8f:82:8e:3c:29:6b:f1:db:f6:c9:c6:b3:16:d4:de:8b:29:80: ca:92:4b:de:4e:a1:96:8e:35:18:e0:c1:54:ef:8d:4b:8c:7f: 46:7c:12:19:b0:34:6c:e2:4a:8f:c8:23:b3:72:e8:89:0e:d7: 2a:24:b2:34:1f:67:99:c1:64:1f:9a:95:05:7f:57:00:f0:27: 6c:b1:6e:22:00:11:75:40:26:b5:75:c2:1e:9b:42:da:67:20: e7:cf:97:47:08:62:3d:95:b9:05:ef:f8:ae:1b:8e:eb:9c:7b: 15:e3:2c:21:a7:c1:c5:5c:11:8f:2c:6d:97:70:a9:ef:45:db: de:5d:90:13:63:92:cc:a7:62:d9:aa:f1:99:3b:69:1a:fc:68: 06:ea:3e:38:3a:85:91:b2:a2:64:fd:49:a8:0a:d0:7a:ec:8c: d7:f1:f4:d5:6d:82:2c:5c:d5:1b:c0:a9:85:c1:64:23:e1:51: b6:85:23:b6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJMNIE6bH27j18wlwpxPlR+vsZhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTAxMDEwMzU1MzlaFw0yNTEyMzEwNDAwMzlaMDMxMTAvBgNV BAMTKDlGMTFCQjE4RTdCMDNCMkEwQ0QzMjA3MzU3QTkyNTg0ODUxRjNGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtk57DGijsgnZ5XbEghVjILEvb yMPLWaBqPotLpmNbhgFfEjE3gWtdSsbtDVsNRYBtHwPM5HCiOioDJ5ut1tqMJNec aiI0T4qJorZGM7kJRMfvddRnwUUSFgi5DaPhMAG4Chfq7A/GMNP1hioVQzi1k6zp cr4PH2p7TdZYf4cBl+JTeIjthXyXZxxIx17yAxKpI/P95fdML4/AKs8J1+ieVIYJ XX09qdLW3vxKDiUniTFjKvy00Soq5VB0FRNAW62gBZ3D1z8F8gVx+dVC7dIE1jDB 2yUbm9I447f1PDC+diC3nmo7oD4BBrj1POSbFH9Y+Om4KoXLWgmqr41DhgkJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUnxG7GOewOyoM0yBzV6klhIUfP+QwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzODM4Mzgz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AIiIMA0GCSqGSIb3DQEBCwUAA4IBAQA8EkjtAXZjb12Bxcww3fltdbvfOnvdblG2 zu3gNXHOtD8Wq9siwkxlHKlD9jz3s2cNlNSWm5tpIAWT8Ctbdvj1hXeBRpUoqMaP go48KWvx2/bJxrMW1N6LKYDKkkveTqGWjjUY4MFU741LjH9GfBIZsDRs4kqPyCOz cuiJDtcqJLI0H2eZwWQfmpUFf1cA8CdssW4iABF1QCa1dcIem0LaZyDnz5dHCGI9 lbkF7/iuG47rnHsV4ywhp8HFXBGPLG2XcKnvRdveXZATY5LMp2LZqvGZO2ka/GgG 6j44OoWRsqJk/UmoCtB67IzX8fTVbYIsXNUbwKmFwWQj4VG2hSO2 -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net