$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa File: 323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa (raw, json) Hash identifier: 6/CFAgI9fYm2h+bpsbThjdmYrbI1a+tEsxm7cMbpBNY= Subject key identifier: 1A:BE:AC:8A:2A:1D:16:B7:88:ED:F6:F5:24:17:A9:77:FE:33:79:B6 Certificate issuer: /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Certificate serial: 22396EF05CE47641B09260A2492536B7F341D860 Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa Signing time: Mon 02 Dec 2024 11:00:01 +0000 ROA not before: Mon 02 Dec 2024 10:55:01 +0000 ROA not after: Mon 01 Dec 2025 11:00:01 +0000 asID: 150523 IP address blocks: 2001:df1:dfc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 15:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:39:6e:f0:5c:e4:76:41:b0:92:60:a2:49:25:36:b7:f3:41:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Validity Not Before: Dec 2 10:55:01 2024 GMT Not After : Dec 1 11:00:01 2025 GMT Subject: CN=1ABEAC8A2A1D16B788EDF6F52417A977FE3379B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:cd:3d:d0:f7:8d:19:51:ae:75:a3:d4:36: ea:f4:0a:25:0c:c9:8a:4f:54:ea:7f:1d:81:2c:73: 24:90:12:c8:e9:a7:25:80:0e:8d:47:fc:02:74:5e: 85:a7:e0:3d:51:2a:31:2d:a9:07:84:91:a7:33:68: ac:d2:70:6f:c1:6d:bc:79:68:f4:6c:9e:b9:2b:23: c5:7b:fd:fc:06:24:0c:ac:e5:17:e4:29:56:c9:c5: d2:0f:e8:13:fd:cc:95:22:b7:e6:11:f6:d1:6c:75: 6c:75:b9:28:c5:10:13:d4:bf:24:03:20:2f:dc:d4: 54:85:d4:93:18:f4:f9:35:9d:69:03:ca:fb:99:33: ef:cd:d5:31:e9:ba:dd:65:9d:ef:78:2c:bf:89:35: 15:34:c3:15:ed:e8:5c:6f:a6:94:51:bf:92:f1:67: 17:b1:33:ec:c6:13:bb:43:d0:7f:0e:38:af:fd:88: ba:6b:8f:f8:7f:df:6b:7d:83:26:8e:b4:89:8b:bd: 49:6a:ef:b3:26:a1:be:0b:31:b7:fc:ec:36:fe:f6: af:1b:79:4b:ff:38:81:67:7b:a2:c0:82:e7:1e:ef: 05:f3:79:cb:f6:7f:d9:35:7b:c8:70:2e:f2:fe:28: 47:de:92:27:fb:7f:86:3f:f1:c2:36:58:88:d4:f8: aa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BE:AC:8A:2A:1D:16:B7:88:ED:F6:F5:24:17:A9:77:FE:33:79:B6 X509v3 Authority Key Identifier: keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:dfc0::/48 Signature Algorithm: sha256WithRSAEncryption 18:d8:a3:f4:eb:91:46:19:f1:f0:ed:89:25:24:b0:7e:61:56: 4e:12:36:07:c0:be:ac:4c:2a:10:78:c3:0a:b5:23:d1:e4:95: 20:36:a3:93:d2:4d:53:09:d8:73:a6:28:74:f5:a3:52:09:09: 06:d4:cf:eb:de:c8:34:2d:6b:79:5d:93:bf:00:f7:67:c8:4a: b5:87:70:60:50:2e:18:0f:59:f9:e1:e1:39:56:2b:15:4c:c0: da:23:b5:75:3a:d4:2f:ec:3c:2b:12:dc:45:5b:a8:ed:4e:49: 37:5a:81:51:a1:df:8b:6d:0a:74:ec:14:7b:f6:65:e9:93:47: d3:3a:7b:c1:a1:c4:d2:53:d6:35:37:43:d4:61:1e:fc:24:e2: f7:9d:53:12:43:32:55:18:1d:ef:15:7f:ce:ea:10:ff:de:ca: 93:57:b8:a3:65:68:7e:ec:5a:f1:07:e1:c5:3f:74:5d:82:d6: b4:f9:31:41:f5:97:48:78:76:24:84:9a:61:fe:d3:06:28:95: 15:cf:8d:71:6a:b8:63:32:79:2d:00:8b:3e:98:db:e8:f0:76: 8f:ad:f3:e9:8a:9e:bb:0f:fb:a2:a5:02:95:cb:31:2b:7a:0f: a2:58:b2:91:02:b5:f9:22:02:77:15:bd:cd:c1:11:77:65:39: ab:11:a1:e7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIjlu8FzkdkGwkmCiSSU2t/NB2GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVF QzgyMUZGRDAeFw0yNDEyMDIxMDU1MDFaFw0yNTEyMDExMTAwMDFaMDMxMTAvBgNV BAMTKDFBQkVBQzhBMkExRDE2Qjc4OEVERjZGNTI0MTdBOTc3RkUzMzc5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJs090PeNGVGudaPUNur0CiUM yYpPVOp/HYEscySQEsjppyWADo1H/AJ0XoWn4D1RKjEtqQeEkaczaKzScG/Bbbx5 aPRsnrkrI8V7/fwGJAys5RfkKVbJxdIP6BP9zJUit+YR9tFsdWx1uSjFEBPUvyQD IC/c1FSF1JMY9Pk1nWkDyvuZM+/N1THput1lne94LL+JNRU0wxXt6FxvppRRv5Lx ZxexM+zGE7tD0H8OOK/9iLprj/h/32t9gyaOtImLvUlq77Mmob4LMbf87Db+9q8b eUv/OIFne6LAguce7wXzecv2f9k1e8hwLvL+KEfekif7f4Y/8cI2WIjU+Kq9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUGr6siiodFreI7fb1JBepd/4zebYwHwYDVR0j BBgwFoAU0Pedgm5D6rYaeoNOaid3xeyCH/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODQ2MzI4NS03YzI4LTQzNWEtODJiYi1mY2MzMmQ1ODAyMGUvMC9EMEY3OUQ4MjZF NDNFQUI2MUE3QTgzNEU2QTI3NzdDNUVDODIxRkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVFQzgy MUZGRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4NDYzMjg1LTdjMjgtNDM1YS04 MmJiLWZjYzMyZDU4MDIwZS8wLzMyMzAzMDMxM2E2NDY2MzEzYTY0NjY2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMwMzUzMjMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8d/AMA0GCSqGSIb3DQEBCwUAA4IBAQAY2KP065FGGfHw7YklJLB+YVZOEjYHwL6s TCoQeMMKtSPR5JUgNqOT0k1TCdhzpih09aNSCQkG1M/r3sg0LWt5XZO/APdnyEq1 h3BgUC4YD1n54eE5VisVTMDaI7V1OtQv7DwrEtxFW6jtTkk3WoFRod+LbQp07BR7 9mXpk0fTOnvBocTSU9Y1N0PUYR78JOL3nVMSQzJVGB3vFX/O6hD/3sqTV7ijZWh+ 7FrxB+HFP3Rdgta0+TFB9ZdIeHYkhJph/tMGKJUVz41xarhjMnktAIs+mNvo8HaP rfPpip67D/uipQKVyzEreg+iWLKRArX5IgJ3Fb3NwRF3ZTmrEaHn -----END CERTIFICATE-----Generated at Sun Apr 27 12:40:09 2025 by rpki-client on console.sobornost.net