$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa File: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (raw, json) Hash identifier: vw3nmxARpsfp0COH4lfcs/BBgNYvJ56RcTx3ubbpe6c= Subject key identifier: 22:3B:1F:BB:4A:43:C9:11:53:5E:8A:9A:D6:87:20:28:87:33:9E:4C Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 10D8599A64C19DFDC2FDF7799CA3FDD36C214A78 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa Signing time: Wed 16 Apr 2025 10:00:00 +0000 ROA not before: Wed 16 Apr 2025 09:55:00 +0000 ROA not after: Wed 15 Apr 2026 10:00:00 +0000 asID: 139419 IP address blocks: 2405:6740:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d8:59:9a:64:c1:9d:fd:c2:fd:f7:79:9c:a3:fd:d3:6c:21:4a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Apr 16 09:55:00 2025 GMT Not After : Apr 15 10:00:00 2026 GMT Subject: CN=223B1FBB4A43C911535E8A9AD687202887339E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:33:a4:c8:e1:ba:2d:10:ea:ba:7b:e6:a4: d5:18:42:98:af:3f:d6:57:8c:ff:f0:79:57:47:ea: b4:81:f9:43:c7:d2:6b:b6:79:8e:b7:57:e3:c3:68: 55:c2:b9:77:08:92:0c:27:82:08:fb:74:63:e4:45: 2b:bd:a6:1f:c8:be:a1:23:fb:bd:ac:72:14:ea:57: cb:35:fe:d3:4a:db:0c:5c:f4:aa:75:b1:aa:b7:34: 0b:c2:d2:2e:9d:08:d5:a5:10:eb:9b:54:e1:fc:cf: d2:88:10:e7:14:c5:91:3c:5f:e9:59:c0:01:da:70: ee:da:56:ff:0b:f1:d1:7e:ae:69:eb:c7:b9:76:24: 42:4d:73:39:0f:19:c6:57:79:d2:28:cc:46:8b:d6: b0:d2:8a:52:56:9a:38:17:fc:08:7f:5d:70:7b:9e: 59:80:04:0a:f1:e5:89:0f:fa:16:9a:8a:34:76:34: 25:d0:b4:f2:37:d4:aa:ad:29:c1:a2:ef:17:cf:37: 93:ad:4d:3e:bf:57:42:f2:85:66:4e:da:38:cb:bd: dc:4c:46:d9:e1:9a:19:b0:c2:a2:6c:a7:66:87:6e: 5f:b2:05:74:45:84:5a:68:31:d3:63:77:e4:04:e1: 77:2d:d4:6c:e0:74:69:8f:67:13:8c:ac:ec:d6:b6: 7e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3B:1F:BB:4A:43:C9:11:53:5E:8A:9A:D6:87:20:28:87:33:9E:4C X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:6740:a0::/48 Signature Algorithm: sha256WithRSAEncryption 5c:e3:2c:d2:04:c9:95:98:8d:40:c9:26:02:78:3c:b5:d6:69: 34:f6:44:aa:f0:57:31:ad:eb:68:89:1b:4b:8e:a9:59:28:b3: f7:83:4d:99:51:37:9d:a2:94:40:c5:04:7e:a9:74:b2:af:e0: d2:46:63:69:c6:f7:1c:51:e9:5d:3b:98:6d:5b:e5:ff:89:95: b1:1a:87:2b:1e:97:91:83:ec:79:d3:66:41:20:a2:2b:93:94: 21:2a:25:68:e7:4e:48:c3:19:ad:e8:d1:36:ad:6e:5a:6e:ef: 63:10:34:e9:13:79:56:04:6f:fc:b0:32:3e:d0:9d:1a:9d:2e: e0:7d:5a:3e:37:c4:c1:70:a0:6d:fa:2e:22:a1:50:95:72:91: 08:c7:41:45:d5:fc:30:e3:32:80:fe:d5:f3:4d:fe:b4:2c:9b: 26:26:15:b9:9c:66:7a:f7:f4:53:da:a6:fa:30:ca:0d:6d:c4: 17:61:84:2b:5f:43:e6:fa:f3:3c:da:18:5e:18:f3:bc:d5:46: c5:70:02:4f:d0:29:4d:3a:23:7f:80:1e:7a:ef:72:6b:ff:16: 6a:2b:2f:91:c0:96:1b:79:7d:6d:47:c7:94:43:e9:9b:16:58: 3c:64:d0:d5:70:54:5b:9b:52:92:96:71:21:ba:cd:6a:af:2c: 25:53:0b:0f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUENhZmmTBnf3C/fd5nKP902whSngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNTA0MTYwOTU1MDBaFw0yNjA0MTUxMDAwMDBaMDMxMTAvBgNV BAMTKDIyM0IxRkJCNEE0M0M5MTE1MzVFOEE5QUQ2ODcyMDI4ODczMzlFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PjOkyOG6LRDqunvmpNUYQpiv P9ZXjP/weVdH6rSB+UPH0mu2eY63V+PDaFXCuXcIkgwnggj7dGPkRSu9ph/IvqEj +72schTqV8s1/tNK2wxc9Kp1saq3NAvC0i6dCNWlEOubVOH8z9KIEOcUxZE8X+lZ wAHacO7aVv8L8dF+rmnrx7l2JEJNczkPGcZXedIozEaL1rDSilJWmjgX/Ah/XXB7 nlmABArx5YkP+haaijR2NCXQtPI31KqtKcGi7xfPN5OtTT6/V0LyhWZO2jjLvdxM RtnhmhmwwqJsp2aHbl+yBXRFhFpoMdNjd+QE4Xct1GzgdGmPZxOMrOzWtn7RAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUIjsfu0pDyRFTXoqa1ocgKIcznkwwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3MTNmYzE3LTU3ZjEtNDY3MS04 YTE2LWY4NThkZGQ3ZGE0My8wLzMyMzQzMDM1M2EzNjM3MzQzMDNhNjEzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzOTM0MzEzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFZ0AA oDANBgkqhkiG9w0BAQsFAAOCAQEAXOMs0gTJlZiNQMkmAng8tdZpNPZEqvBXMa3r aIkbS46pWSiz94NNmVE3naKUQMUEfql0sq/g0kZjacb3HFHpXTuYbVvl/4mVsRqH Kx6XkYPsedNmQSCiK5OUISolaOdOSMMZrejRNq1uWm7vYxA06RN5VgRv/LAyPtCd Gp0u4H1aPjfEwXCgbfouIqFQlXKRCMdBRdX8MOMygP7V803+tCybJiYVuZxmevf0 U9qm+jDKDW3EF2GEK19D5vrzPNoYXhjzvNVGxXACT9ApTTojf4Aeeu9ya/8Waisv kcCWG3l9bUfHlEPpmxZYPGTQ1XBUW5tSkpZxIbrNaq8sJVMLDw== -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net