$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa File: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (raw, json) Hash identifier: uNvfe2ZCHzFGvzYFtsLF+sYRLp4842+xlOIuBK7yD8w= Subject key identifier: 11:1F:BB:1A:12:70:16:6A:68:AB:2C:4B:61:D2:80:10:25:4E:9D:33 Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 345074C2F5BFB46749072A1A8E07CE47B4608515 Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa Signing time: Fri 18 Apr 2025 10:02:21 +0000 ROA not before: Fri 18 Apr 2025 09:57:21 +0000 ROA not after: Fri 17 Apr 2026 10:02:21 +0000 asID: 59133 IP address blocks: 2001:df3:9540::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 00:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:50:74:c2:f5:bf:b4:67:49:07:2a:1a:8e:07:ce:47:b4:60:85:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Apr 18 09:57:21 2025 GMT Not After : Apr 17 10:02:21 2026 GMT Subject: CN=111FBB1A1270166A68AB2C4B61D28010254E9D33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:5b:27:b6:51:6e:fe:85:ac:87:25:66:fd: 8c:38:d0:93:e2:b8:5a:31:9e:17:e3:9a:6a:83:a9: e9:63:6e:05:f5:46:aa:ed:eb:eb:a6:fa:de:13:f5: e0:06:1a:ca:d3:e4:f4:68:8c:a5:c4:c9:05:d5:5d: 96:55:46:6d:25:18:78:6d:4c:6c:b1:3c:0c:9c:9c: 88:6f:d7:5d:28:a8:2b:23:6f:e4:e9:77:78:fc:af: 75:78:ef:34:b6:74:d0:64:21:99:a0:18:8e:65:7e: 23:b5:0c:9f:58:2a:7e:33:4f:7e:21:9a:f8:6c:1d: fe:1f:e9:eb:d5:bd:73:06:59:34:99:fc:9e:19:ea: 3f:59:59:9b:5d:7d:24:ef:70:58:27:e9:87:39:aa: ce:26:04:6f:e6:d1:10:69:9a:7c:84:26:bd:57:60: 1c:04:da:71:2e:a4:5d:ce:91:63:cc:3e:97:fa:e9: 17:a9:83:0b:9b:25:f6:1d:a5:8e:8e:fc:f5:11:fc: 80:e6:f8:e6:8c:26:c1:2d:8c:a9:97:ca:96:a9:a0: 80:ac:6f:13:3c:be:16:0d:ea:a1:86:fb:dd:27:e3: 41:d8:70:b6:7b:ee:56:2c:3a:eb:15:19:6b:c3:f6: 72:a3:45:63:e9:d2:ba:ea:01:fa:e3:69:0d:44:2d: 9f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1F:BB:1A:12:70:16:6A:68:AB:2C:4B:61:D2:80:10:25:4E:9D:33 X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:9540::/48 Signature Algorithm: sha256WithRSAEncryption 5f:e2:b3:8a:bc:4a:2b:2f:82:37:a1:83:d1:86:a4:b8:d6:af: d9:c1:e7:8a:b3:71:d6:8c:fe:ee:f0:f9:12:b5:fc:56:a3:08: 8d:c0:bc:fe:66:45:3b:6c:38:6f:95:4b:1c:69:70:ba:02:c2: 7f:10:07:ba:ca:c9:5f:94:bc:16:da:d5:f7:69:8c:fa:f8:f0: cb:13:fd:72:7a:de:47:dc:ff:83:de:bc:89:95:41:14:3f:95: 66:2e:ab:83:8d:3a:13:8b:8b:6e:f9:71:ce:2b:af:9f:e9:34: 40:07:73:87:8b:cd:3b:20:c9:23:da:02:12:a4:38:a3:0a:70: 99:69:c8:e1:87:4b:c8:d0:48:30:63:fc:a1:b9:2a:80:ef:bc: fa:dc:4d:6e:e4:ab:e8:a4:07:b0:a0:28:cc:95:c5:b9:fb:b9: 43:e2:5c:b8:f3:9d:3b:f1:2d:d3:50:15:15:12:06:3f:36:47: a6:11:3c:cf:db:d8:41:53:35:24:68:7e:de:d0:a0:49:47:46: c9:71:79:3c:b1:74:15:b1:9e:cf:bc:69:b5:61:61:83:0f:6a: 3e:44:ba:7e:c1:47:22:a6:d8:36:e4:2f:2b:2a:08:d7:b5:7d: c5:fe:2c:80:d3:46:29:ba:a8:3b:bb:6f:e7:6e:9c:4c:34:56: 70:7a:36:cc -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNFB0wvW/tGdJByoajgfOR7RghRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNTA0MTgwOTU3MjFaFw0yNjA0MTcxMDAyMjFaMDMxMTAvBgNV BAMTKDExMUZCQjFBMTI3MDE2NkE2OEFCMkM0QjYxRDI4MDEwMjU0RTlEMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+lsntlFu/oWshyVm/Yw40JPi uFoxnhfjmmqDqeljbgX1Rqrt6+um+t4T9eAGGsrT5PRojKXEyQXVXZZVRm0lGHht TGyxPAycnIhv110oqCsjb+Tpd3j8r3V47zS2dNBkIZmgGI5lfiO1DJ9YKn4zT34h mvhsHf4f6evVvXMGWTSZ/J4Z6j9ZWZtdfSTvcFgn6Yc5qs4mBG/m0RBpmnyEJr1X YBwE2nEupF3OkWPMPpf66RepgwubJfYdpY6O/PUR/IDm+OaMJsEtjKmXypapoICs bxM8vhYN6qGG+90n40HYcLZ77lYsOusVGWvD9nKjRWPp0rrqAfrjaQ1ELZ9zAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUER+7GhJwFmpoqyxLYdKAECVOnTMwHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMGVjNDNiLTQzM2QtNDA3ZC1i ZGVlLWVlYTYyMTZhNmZmNC8wLzMyMzAzMDMxM2E2NDY2MzMzYTM5MzUzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMxMzMzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfOV QDANBgkqhkiG9w0BAQsFAAOCAQEAX+KzirxKKy+CN6GD0YakuNav2cHnirNx1oz+ 7vD5ErX8VqMIjcC8/mZFO2w4b5VLHGlwugLCfxAHusrJX5S8FtrV92mM+vjwyxP9 cnreR9z/g968iZVBFD+VZi6rg406E4uLbvlxziuvn+k0QAdzh4vNOyDJI9oCEqQ4 owpwmWnI4YdLyNBIMGP8obkqgO+8+txNbuSr6KQHsKAozJXFufu5Q+JcuPOdO/Et 01AVFRIGPzZHphE8z9vYQVM1JGh+3tCgSUdGyXF5PLF0FbGez7xptWFhgw9qPkS6 fsFHIqbYNuQvKyoI17V9xf4sgNNGKbqoO7tv526cTDRWcHo2zA== -----END CERTIFICATE-----Generated at Sun Apr 27 19:11:47 2025 by rpki-client on console.sobornost.net