$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: lumVBGk+aw/9tORzynY/aiVJHvV2Bg6D5FpFWGyG99o= Subject key identifier: DC:3A:E2:B5:9D:F3:B4:19:F7:C6:A9:EF:F7:62:D0:D4:4D:EC:39:06 Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 117429DD7BEB01473D3A1A33898885FDE3CCD49F Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa Signing time: Tue 31 Dec 2024 05:00:00 +0000 ROA not before: Tue 31 Dec 2024 04:55:00 +0000 ROA not after: Tue 30 Dec 2025 05:00:00 +0000 asID: 139949 IP address blocks: 2405:aac0:221::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:74:29:dd:7b:eb:01:47:3d:3a:1a:33:89:88:85:fd:e3:cc:d4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: Dec 31 04:55:00 2024 GMT Not After : Dec 30 05:00:00 2025 GMT Subject: CN=DC3AE2B59DF3B419F7C6A9EFF762D0D44DEC3906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:cb:53:06:59:81:9f:18:44:df:0e:3a:35: 4c:93:ab:6f:9b:9a:56:53:36:20:67:de:1b:6b:17: f6:96:2b:a5:20:e1:9e:0d:18:5d:01:c9:60:b7:77: e4:ac:84:5d:b8:71:41:5b:60:42:be:a0:bf:4e:96: 80:29:a1:d0:ec:ab:51:5d:d2:01:9e:0a:fc:39:c4: a3:ec:1b:51:7c:23:10:96:b8:f2:3d:d9:e9:83:ca: 63:51:cf:c8:c3:c0:f7:6f:83:55:f9:31:9c:c8:e5: 2d:56:22:5b:e2:22:ab:de:57:76:38:29:bc:70:31: 9a:16:82:a1:95:de:0b:f6:f4:fb:52:32:bc:3a:1b: 22:66:03:36:07:9a:1b:a6:90:1c:79:26:cc:4b:c2: 3a:76:2f:0b:49:62:59:9e:32:1c:1f:3a:82:09:5c: 80:47:02:c1:ac:6c:32:64:55:e0:e5:86:7a:fb:d4: aa:a7:40:4a:d4:5c:ef:84:61:93:1d:2b:c9:00:8f: d4:1f:ce:ed:dc:29:6e:39:57:13:c3:bf:67:1b:26: 9c:3c:94:41:f0:74:77:92:06:2b:a9:17:dc:f0:64: eb:56:94:c4:80:a1:d6:af:be:e0:28:86:a7:20:e6: 88:f9:51:da:06:9d:cb:9c:94:d4:27:9c:c6:e1:3a: 00:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3A:E2:B5:9D:F3:B4:19:F7:C6:A9:EF:F7:62:D0:D4:4D:EC:39:06 X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:221::/48 Signature Algorithm: sha256WithRSAEncryption 55:48:e1:c2:b1:13:6e:fc:41:ff:46:5d:43:11:79:b6:1c:25: a3:af:fb:2d:2a:7f:e9:84:fb:a9:2d:1b:30:20:de:48:67:62: 50:16:43:d0:a0:24:3f:cb:a3:88:ea:d0:b0:a2:ce:cf:08:b4: aa:95:f0:1d:dc:ee:5b:58:07:2a:7e:de:8f:8a:23:b0:a8:92: f2:e9:8c:39:85:cd:48:96:52:ae:49:5e:ef:b0:da:22:d9:39: e8:02:ae:38:67:ed:0d:be:d6:d4:1f:5f:05:59:bd:f1:42:dc: 4e:a1:5f:7f:53:54:9f:e9:16:b9:61:a6:a8:29:66:bc:4d:ba: 54:91:07:91:42:fd:2c:35:13:39:11:16:87:37:76:e9:b4:09: d1:58:b0:64:e0:c2:6e:00:a9:d0:93:d0:94:e7:18:ea:d3:6d: 74:f5:cc:e1:e7:5d:e3:26:72:8d:33:93:9c:06:69:d9:40:48: 77:f5:52:62:7a:79:c9:f7:5f:52:f9:44:fd:4a:20:e3:78:ad: 56:0b:75:50:63:bb:44:1b:ae:a8:0f:8d:d3:43:6d:b2:81:7e: 5d:53:e4:92:57:11:4a:38:43:b6:c5:9a:19:42:b1:f8:87:3a: 09:80:fc:db:10:b8:c5:c7:ba:02:60:b7:8d:e6:d7:44:34:84: 75:83:77:f3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEXQp3XvrAUc9OhoziYiF/ePM1J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNDEyMzEwNDU1MDBaFw0yNTEyMzAwNTAwMDBaMDMxMTAvBgNV BAMTKERDM0FFMkI1OURGM0I0MTlGN0M2QTlFRkY3NjJEMEQ0NERFQzM5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBD8tTBlmBnxhE3w46NUyTq2+b mlZTNiBn3htrF/aWK6Ug4Z4NGF0ByWC3d+SshF24cUFbYEK+oL9OloApodDsq1Fd 0gGeCvw5xKPsG1F8IxCWuPI92emDymNRz8jDwPdvg1X5MZzI5S1WIlviIqveV3Y4 KbxwMZoWgqGV3gv29PtSMrw6GyJmAzYHmhumkBx5JsxLwjp2LwtJYlmeMhwfOoIJ XIBHAsGsbDJkVeDlhnr71KqnQErUXO+EYZMdK8kAj9Qfzu3cKW45VxPDv2cbJpw8 lEHwdHeSBiupF9zwZOtWlMSAodavvuAohqcg5oj5UdoGncuclNQnnMbhOgAHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU3DritZ3ztBn3xqnv92LQ1E3sOQYwHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzIzMjMxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWq wAIhMA0GCSqGSIb3DQEBCwUAA4IBAQBVSOHCsRNu/EH/Rl1DEXm2HCWjr/stKn/p hPupLRswIN5IZ2JQFkPQoCQ/y6OI6tCwos7PCLSqlfAd3O5bWAcqft6PiiOwqJLy 6Yw5hc1IllKuSV7vsNoi2TnoAq44Z+0NvtbUH18FWb3xQtxOoV9/U1Sf6Ra5Yaao KWa8TbpUkQeRQv0sNRM5ERaHN3bptAnRWLBk4MJuAKnQk9CU5xjq02109czh513j JnKNM5OcBmnZQEh39VJiennJ919S+UT9SiDjeK1WC3VQY7tEG66oD43TQ22ygX5d U+SSVxFKOEO2xZoZQrH4hzoJgPzbELjFx7oCYLeN5tdENIR1g3fz -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net