$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa File: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (raw, json) Hash identifier: TtLF2mCHfSEfxKosRTbgY2pYRo+Ox0NN2gzHDI6VY/0= Subject key identifier: 05:1E:5B:58:33:42:CB:43:7F:8C:99:80:A0:7B:4C:80:45:72:32:AD Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 61CB250850B6EF6481A4A21FC0B90CE8E118C3C1 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa Signing time: Wed 04 Dec 2024 07:49:06 +0000 ROA not before: Wed 04 Dec 2024 07:44:06 +0000 ROA not after: Wed 03 Dec 2025 07:49:06 +0000 asID: 153149 IP address blocks: 2001:df4:9a40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cb:25:08:50:b6:ef:64:81:a4:a2:1f:c0:b9:0c:e8:e1:18:c3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Dec 4 07:44:06 2024 GMT Not After : Dec 3 07:49:06 2025 GMT Subject: CN=051E5B583342CB437F8C9980A07B4C80457232AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:f6:5f:b5:e6:0c:d3:57:79:42:ad:a4:43: 01:10:0b:9e:4b:ad:29:e3:d5:85:1b:df:79:3b:30: ca:76:5b:cd:0e:39:62:8a:0d:a1:42:c4:f4:55:7e: ab:a8:30:69:c1:e9:47:8d:13:03:a4:29:7b:88:35: be:13:e9:4c:87:fb:e6:d4:72:da:c9:b5:34:61:37: 40:3c:ec:c4:9b:dc:9e:e8:ec:3a:e5:ce:5f:03:48: a5:6e:25:00:47:f2:19:4c:d5:e0:2a:97:c6:13:e4: e2:e7:12:c6:98:0e:c6:c0:f1:10:97:c9:c4:ec:94: d1:78:c1:be:4c:19:af:c1:bf:3a:38:fd:66:df:6d: 82:cb:31:95:06:23:69:47:8a:01:ad:57:6c:b5:3f: 40:3c:04:84:0c:cb:53:d8:21:22:39:d8:3a:3b:ac: e9:72:11:d4:3e:00:9c:f1:ec:3e:b9:5d:78:9e:ed: e1:9d:d5:7f:a4:1d:3c:de:e1:05:3a:19:43:60:78: 29:1d:45:e8:61:b5:fa:f5:b9:db:32:8f:16:da:04: 3b:ca:64:7d:b5:69:15:60:97:37:23:93:cc:e7:60: 02:17:d3:07:c3:64:b0:a0:af:11:bf:47:ac:7c:4e: 48:b2:c2:d8:71:73:16:5c:2f:26:03:17:65:c4:b0: 85:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1E:5B:58:33:42:CB:43:7F:8C:99:80:A0:7B:4C:80:45:72:32:AD X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:9a40::/48 Signature Algorithm: sha256WithRSAEncryption d3:f8:a8:9a:9c:72:fb:c5:b1:99:1f:93:b2:7c:fa:11:01:6f: e1:a2:86:d7:f8:57:29:ac:fe:ac:d1:8c:04:de:48:ec:39:65: 32:d7:ec:f9:a4:04:6b:0a:86:5a:a8:18:d8:ef:8e:f1:fb:24: 77:44:5d:63:44:8f:df:2b:ea:f5:b8:4f:d1:e6:ff:33:70:a5: d8:8c:3c:f4:91:47:c8:6e:c4:c8:ff:7d:cc:2a:c1:af:82:db: e2:a3:f0:ee:8b:84:52:4c:ac:4e:15:ff:22:4a:04:f4:36:0c: 0a:f7:6a:56:bf:33:2c:a5:b2:01:81:f5:10:38:a2:c7:c8:b3: 0e:c2:f6:2e:09:1c:8b:e0:91:cc:b6:72:64:d7:c6:a9:c0:24: 90:96:f4:4c:1c:c6:3d:f7:b9:1c:68:be:e6:81:b0:6c:a2:cb: 82:b2:6a:54:f4:29:8b:39:fe:3a:75:bb:72:83:52:db:df:f0: ae:59:2e:d9:80:78:fc:79:21:ed:94:6b:bd:ea:24:fb:6d:3d: 4c:e4:e3:2c:f6:d3:f3:c0:6a:7e:eb:1e:7e:5d:7a:71:b4:78: b9:ba:5b:ae:f2:9a:7f:08:ca:a8:3c:c4:02:40:b2:2f:dd:97: 32:3e:38:8a:61:8a:c0:57:e4:d3:20:7f:e6:9a:b9:0e:51:92: ff:54:4b:d5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYcslCFC272SBpKIfwLkM6OEYw8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNDEyMDQwNzQ0MDZaFw0yNTEyMDMwNzQ5MDZaMDMxMTAvBgNV BAMTKDA1MUU1QjU4MzM0MkNCNDM3RjhDOTk4MEEwN0I0QzgwNDU3MjMyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxn/ZfteYM01d5Qq2kQwEQC55L rSnj1YUb33k7MMp2W80OOWKKDaFCxPRVfquoMGnB6UeNEwOkKXuINb4T6UyH++bU ctrJtTRhN0A87MSb3J7o7Drlzl8DSKVuJQBH8hlM1eAql8YT5OLnEsaYDsbA8RCX ycTslNF4wb5MGa/Bvzo4/WbfbYLLMZUGI2lHigGtV2y1P0A8BIQMy1PYISI52Do7 rOlyEdQ+AJzx7D65XXie7eGd1X+kHTze4QU6GUNgeCkdRehhtfr1udsyjxbaBDvK ZH21aRVglzcjk8znYAIX0wfDZLCgrxG/R6x8TkiywthxcxZcLyYDF2XEsIWTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUBR5bWDNCy0N/jJmAoHtMgEVyMq0wHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzZGMwMzRmLTM4MjMtNDhhZi05 NTNkLWFhYTg3M2IwZmI2YS8xLzMyMzAzMDMxM2E2NDY2MzQzYTM5NjEzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMzMzEzNDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9JpAMA0GCSqGSIb3DQEBCwUAA4IBAQDT+KianHL7xbGZH5OyfPoRAW/hoobX+Fcp rP6s0YwE3kjsOWUy1+z5pARrCoZaqBjY747x+yR3RF1jRI/fK+r1uE/R5v8zcKXY jDz0kUfIbsTI/33MKsGvgtvio/Dui4RSTKxOFf8iSgT0NgwK92pWvzMspbIBgfUQ OKLHyLMOwvYuCRyL4JHMtnJk18apwCSQlvRMHMY997kcaL7mgbBsosuCsmpU9CmL Of46dbtyg1Lb3/CuWS7ZgHj8eSHtlGu96iT7bT1M5OMs9tPzwGp+6x5+XXpxtHi5 uluu8pp/CMqoPMQCQLIv3ZcyPjiKYYrAV+TTIH/mmrkOUZL/VEvV -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net