$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3438203d3e203538383230.roa File: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (raw, json) Hash identifier: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U= Subject key identifier: 98:67:6B:AD:3A:69:95:87:40:B2:D2:A9:9E:3C:F3:5F:92:F1:60:B2 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 4D3DD1A582FF593388B6E5505C5CE89741AC7FB3 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3438203d3e203538383230.roa Signing time: Thu 13 Feb 2025 16:01:50 +0000 ROA not before: Thu 13 Feb 2025 15:56:50 +0000 ROA not after: Thu 12 Feb 2026 16:01:50 +0000 asID: 58820 IP address blocks: 2407:7240::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3d:d1:a5:82:ff:59:33:88:b6:e5:50:5c:5c:e8:97:41:ac:7f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Feb 13 15:56:50 2025 GMT Not After : Feb 12 16:01:50 2026 GMT Subject: CN=98676BAD3A69958740B2D2A99E3CF35F92F160B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:b1:fd:7d:e2:20:6f:90:aa:49:44:6a:3a: ec:f4:26:91:28:eb:89:63:3d:af:72:91:85:17:e2: de:12:2b:3b:53:17:26:db:dd:72:db:d2:30:b6:1c: 33:65:ff:8f:44:b3:cd:89:ca:c2:27:2b:4f:d6:b8: 84:0a:f8:54:64:f7:a0:74:c4:97:af:63:eb:bd:ab: 1d:fd:6f:e2:41:d5:f5:81:da:a8:72:0d:d4:e5:1d: 1f:5f:7f:09:f3:89:61:46:0b:43:88:be:f6:0f:5b: cc:65:cb:bb:51:03:ca:ef:40:22:2b:e9:72:72:09: 0d:e0:98:f3:68:03:12:04:12:1d:53:6e:d2:19:63: 0b:93:59:a4:af:c7:02:06:06:17:dc:1c:0a:66:e6: 81:e6:50:f9:b9:9e:a4:e2:4e:30:41:58:00:37:1d: b7:de:09:6b:1a:f6:d7:65:fa:90:18:73:86:94:36: 8c:f6:04:8b:91:83:d0:25:29:bf:37:5e:22:8e:16: 9a:12:12:01:42:19:05:c8:85:56:1d:4f:3a:4f:c7: d3:0f:a8:91:05:12:f8:3d:ef:91:dc:2b:e9:c9:ed: 5a:28:40:a8:34:e2:2c:7b:89:76:9c:3a:21:a2:8b: e7:f9:be:3b:e8:bf:62:2c:7a:d6:1d:9e:87:e1:50: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:67:6B:AD:3A:69:95:87:40:B2:D2:A9:9E:3C:F3:5F:92:F1:60:B2 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3438203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:7240::/32 Signature Algorithm: sha256WithRSAEncryption 37:2b:a2:5a:32:47:b9:47:c3:ce:5d:7e:c4:4f:b5:9b:0c:33: 87:8c:c6:a0:ad:c1:c2:ad:e5:a3:1f:6a:50:0d:48:c1:0c:f8: c6:7a:8b:bc:bc:df:93:6a:37:a7:11:e7:75:e3:43:d2:23:f2: 1f:d2:39:30:f0:99:c5:df:64:ac:2d:8a:df:c4:c3:f4:02:92: 8b:61:72:8b:63:b0:51:94:93:6b:ae:da:67:83:70:a5:9c:a1: 11:e8:db:6c:8e:18:f3:1f:d2:de:52:b7:0f:a3:ff:5e:ac:77: a4:82:d2:7c:cd:e8:d7:2f:d6:3a:dc:51:ed:08:66:4e:b9:cd: d3:a3:7b:84:06:8d:64:47:eb:8e:b7:0d:23:60:05:69:b5:1b: 89:57:5d:05:1c:20:cb:3e:4f:99:f0:e4:b8:0e:3d:2e:fd:91: 22:e8:af:ff:d0:e9:34:01:5d:a2:92:83:3a:6a:6c:5c:f8:21: 15:dc:ee:e6:d1:37:94:d6:81:e5:a1:89:6b:c5:1a:cb:e8:eb: a4:54:2a:fe:6d:99:c5:4f:fa:40:ab:bc:0c:a3:ee:c3:f7:38: a4:24:5d:1c:9a:6b:e1:2a:bd:a8:83:4c:3a:82:65:9b:f1:df: ea:82:6b:af:1a:42:c1:e0:91:c7:59:12:87:af:49:49:53:e6: 13:a6:04:4f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUTT3RpYL/WTOItuVQXFzol0Gsf7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNTAyMTMxNTU2NTBaFw0yNjAyMTIxNjAxNTBaMDMxMTAvBgNV BAMTKDk4Njc2QkFEM0E2OTk1ODc0MEIyRDJBOTlFM0NGMzVGOTJGMTYwQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/bH9feIgb5CqSURqOuz0JpEo 64ljPa9ykYUX4t4SKztTFybb3XLb0jC2HDNl/49Es82JysInK0/WuIQK+FRk96B0 xJevY+u9qx39b+JB1fWB2qhyDdTlHR9ffwnziWFGC0OIvvYPW8xly7tRA8rvQCIr 6XJyCQ3gmPNoAxIEEh1TbtIZYwuTWaSvxwIGBhfcHApm5oHmUPm5nqTiTjBBWAA3 HbfeCWsa9tdl+pAYc4aUNoz2BIuRg9AlKb83XiKOFpoSEgFCGQXIhVYdTzpPx9MP qJEFEvg975HcK+nJ7VooQKg04ix7iXacOiGii+f5vjvov2IsetYdnofhULGXAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUmGdrrTpplYdAstKpnjzzX5LxYLIwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0YmE2Nzc4LWIxNmQtNGJhOC05 ODRmLTM0ZTQxOWZjOWM0OS8wLzMyMzQzMDM3M2EzNzMyMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB3JAMA0GCSqGSIb3 DQEBCwUAA4IBAQA3K6JaMke5R8POXX7ET7WbDDOHjMagrcHCreWjH2pQDUjBDPjG eou8vN+TajenEed140PSI/If0jkw8JnF32SsLYrfxMP0ApKLYXKLY7BRlJNrrtpn g3ClnKER6NtsjhjzH9LeUrcPo/9erHekgtJ8zejXL9Y63FHtCGZOuc3To3uEBo1k R+uOtw0jYAVptRuJV10FHCDLPk+Z8OS4Dj0u/ZEi6K//0Ok0AV2ikoM6amxc+CEV 3O7m0TeU1oHloYlrxRrL6OukVCr+bZnFT/pAq7wMo+7D9zikJF0cmmvhKr2og0w6 gmWb8d/qgmuvGkLB4JHHWRKHr0lJU+YTpgRP -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:10 2025 by rpki-client on console.sobornost.net