$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/323430303a393134303a3a2f33322d3332203d3e203535363632.roa File: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (raw, json) Hash identifier: mRt9s8dx5XONYgjndKwlbR6KAKE0HJjdy6sOgUCnV5I= Subject key identifier: 6C:E0:61:4B:57:9E:04:95:9A:A0:C0:52:FA:1B:51:E5:10:C9:94:62 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 0133FBEC3B7C4769052DC4F4AAF8D28CBAAFD8C9 Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/323430303a393134303a3a2f33322d3332203d3e203535363632.roa Signing time: Tue 15 Apr 2025 08:02:23 +0000 ROA not before: Tue 15 Apr 2025 07:57:23 +0000 ROA not after: Tue 14 Apr 2026 08:02:23 +0000 asID: 55662 IP address blocks: 2400:9140::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:33:fb:ec:3b:7c:47:69:05:2d:c4:f4:aa:f8:d2:8c:ba:af:d8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Apr 15 07:57:23 2025 GMT Not After : Apr 14 08:02:23 2026 GMT Subject: CN=6CE0614B579E04959AA0C052FA1B51E510C99462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:9e:78:04:67:5d:e5:3e:56:6e:d9:22:32: 2f:e1:2c:bb:df:31:2f:da:ea:81:5a:5b:6b:97:1b: 8c:b3:8e:d7:a5:c2:23:41:4f:35:36:64:c5:d2:b5: 3b:64:7a:fd:a3:02:cf:6f:cf:8f:f6:44:48:b5:a9: f7:a6:aa:fb:3c:01:43:66:32:02:67:4b:69:13:27: 58:15:4b:6e:5e:e2:13:cd:d0:9f:fb:27:38:da:73: f2:00:be:54:87:c7:9e:13:60:31:ab:31:84:f8:e3: ef:ee:2c:81:9f:db:dd:cf:ad:eb:65:73:fd:fa:8c: 09:19:74:09:ac:f2:5b:a1:bf:3c:15:3e:80:d6:8b: d0:d0:1f:bc:0e:a8:1f:04:15:79:2b:b5:b3:45:37: 71:42:73:9e:0c:a0:72:67:3b:26:2b:45:aa:d5:04: d2:06:00:62:3f:41:3f:67:23:08:77:6a:9e:66:4f: 94:97:15:47:78:af:28:ca:b4:b5:eb:94:c9:93:95: 83:b5:55:84:aa:1d:3d:ef:dd:80:06:cd:0c:3e:63: d9:3d:eb:9b:bd:50:6d:1c:2a:1e:76:89:89:6f:8d: d4:54:c8:a3:91:51:54:54:dc:48:ee:ec:72:32:39: 82:14:fb:88:5b:40:21:c1:10:37:94:52:1d:d8:c5: cc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E0:61:4B:57:9E:04:95:9A:A0:C0:52:FA:1B:51:E5:10:C9:94:62 X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/323430303a393134303a3a2f33322d3332203d3e203535363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9140::/32 Signature Algorithm: sha256WithRSAEncryption 1f:76:1b:e0:65:be:94:1f:1e:c8:07:4d:46:cb:cb:35:ca:f0: b2:de:62:71:65:ae:6d:95:e5:86:b0:4f:3b:e1:d5:7f:96:f2: cb:92:12:87:51:d2:7c:5c:f5:df:69:a4:95:8b:b2:22:a9:56: d8:74:98:7d:07:a7:5e:c8:a0:d3:0e:c2:f0:42:5b:10:bd:8d: e9:31:84:39:39:c3:75:07:c1:00:94:3c:c5:89:04:d7:9d:0e: af:91:9a:3b:ec:22:0a:15:61:bb:87:45:e4:c7:72:46:5a:cc: 28:46:f3:c4:91:61:4d:81:72:d0:65:4a:f1:56:d9:64:f9:01: 39:4b:6a:bd:1f:9a:6c:4e:c5:6e:63:1d:b5:f7:35:00:27:bc: 98:81:4e:d7:c3:2e:0e:10:f3:26:6b:b9:1f:3f:b5:9b:7e:01: 4a:b3:7e:15:7e:fd:35:95:f4:4d:85:27:e3:cb:32:b7:c9:9a: b9:45:7d:9b:05:c1:07:e7:6f:05:19:54:a2:99:c5:64:2d:31: 91:23:17:93:e0:58:d6:eb:8d:2a:c6:e1:d6:0d:1c:35:fb:04: bd:ed:d4:83:f8:d8:0e:9c:02:52:c1:2e:0c:da:3a:05:fd:dd: 86:04:1f:bb:19:a9:cf:57:d7:ca:f7:8c:b6:cf:f2:8d:46:e2: 2d:a9:20:f0 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUATP77Dt8R2kFLcT0qvjSjLqv2MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNTA0MTUwNzU3MjNaFw0yNjA0MTQwODAyMjNaMDMxMTAvBgNV BAMTKDZDRTA2MTRCNTc5RTA0OTU5QUEwQzA1MkZBMUI1MUU1MTBDOTk0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFeJ54BGdd5T5WbtkiMi/hLLvf MS/a6oFaW2uXG4yzjtelwiNBTzU2ZMXStTtkev2jAs9vz4/2REi1qfemqvs8AUNm MgJnS2kTJ1gVS25e4hPN0J/7Jzjac/IAvlSHx54TYDGrMYT44+/uLIGf293Pretl c/36jAkZdAms8luhvzwVPoDWi9DQH7wOqB8EFXkrtbNFN3FCc54MoHJnOyYrRarV BNIGAGI/QT9nIwh3ap5mT5SXFUd4ryjKtLXrlMmTlYO1VYSqHT3v3YAGzQw+Y9k9 65u9UG0cKh52iYlvjdRUyKORUVRU3Eju7HIyOYIU+4hbQCHBEDeUUh3YxcyXAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUbOBhS1eeBJWaoMBS+htR5RDJlGIwHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhNDk2MDgyLWEwYWEtNDgzNi1i NTg3LTk3M2RkN2UyOTdhZi8wLzMyMzQzMDMwM2EzOTMxMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM1MzUzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAJFAMA0GCSqGSIb3 DQEBCwUAA4IBAQAfdhvgZb6UHx7IB01Gy8s1yvCy3mJxZa5tleWGsE874dV/lvLL khKHUdJ8XPXfaaSVi7IiqVbYdJh9B6deyKDTDsLwQlsQvY3pMYQ5OcN1B8EAlDzF iQTXnQ6vkZo77CIKFWG7h0Xkx3JGWswoRvPEkWFNgXLQZUrxVtlk+QE5S2q9H5ps TsVuYx219zUAJ7yYgU7Xwy4OEPMma7kfP7WbfgFKs34Vfv01lfRNhSfjyzK3yZq5 RX2bBcEH528FGVSimcVkLTGRIxeT4FjW640qxuHWDRw1+wS97dSD+NgOnAJSwS4M 2joF/d2GBB+7GanPV9fK94y2z/KNRuItqSDw -----END CERTIFICATE-----Generated at Sat Apr 26 13:37:03 2025 by rpki-client on console.sobornost.net