$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3a2f33322d3332203d3e20313333383237.roa File: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (raw, json) Hash identifier: X36QLgVhGJ49HLtt76O3IZYZ5R6XiQpbmzY9UR5vonE= Subject key identifier: 2A:94:40:2F:48:5E:8F:B8:4C:A7:80:9D:15:78:DB:2F:02:5D:5A:F9 Certificate issuer: /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F Certificate serial: 767AD9E161FDB171C969C19AA7EC763D02B2982F Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3a2f33322d3332203d3e20313333383237.roa Signing time: Tue 14 Jan 2025 03:00:02 +0000 ROA not before: Tue 14 Jan 2025 02:55:02 +0000 ROA not after: Tue 13 Jan 2026 03:00:02 +0000 asID: 133827 IP address blocks: 2404:a640::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7a:d9:e1:61:fd:b1:71:c9:69:c1:9a:a7:ec:76:3d:02:b2:98:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F Validity Not Before: Jan 14 02:55:02 2025 GMT Not After : Jan 13 03:00:02 2026 GMT Subject: CN=2A94402F485E8FB84CA7809D1578DB2F025D5AF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c2:ef:23:71:2b:fa:c4:95:3c:91:31:08:eb: 06:f1:d9:90:04:92:c5:48:fa:8a:32:6f:b8:0e:a0: b9:2a:d3:33:cd:1e:c9:24:4c:77:6d:2b:76:b6:24: c1:ba:eb:65:f6:88:90:96:ea:0c:cf:77:97:04:42: 31:06:d5:e8:e3:47:1f:70:8e:e7:0f:5b:41:f9:a9: 3a:ba:d8:e0:fa:5c:73:fe:39:d9:37:e7:86:93:d5: 1d:83:aa:9a:ea:2a:28:3b:64:1e:70:be:fe:27:26: c2:c9:67:43:22:e7:19:f8:c8:33:28:fc:f6:e7:96: c7:90:27:b0:d2:05:ed:23:1e:9c:c3:46:2b:de:51: 8a:3b:a9:ac:46:59:48:d6:51:52:19:fd:ad:82:3a: b4:48:00:a6:8f:8e:a3:c2:55:19:35:09:4b:2e:b8: ff:a2:02:03:fd:e7:ff:24:0d:39:e6:65:22:5c:8c: 66:dd:68:a2:4b:1d:53:a3:c7:23:f7:67:23:4b:d3: 4f:0f:ed:19:fb:90:73:cd:0c:7d:76:10:6b:40:72: 10:19:e6:5a:2b:2c:e4:e1:a5:91:9f:86:53:e4:95: 01:c6:f4:dd:b7:69:9b:27:69:da:1a:75:6b:b0:2f: 35:8e:77:ec:c4:ed:1b:16:09:78:ce:6c:4f:f5:98: e1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:94:40:2F:48:5E:8F:B8:4C:A7:80:9D:15:78:DB:2F:02:5D:5A:F9 X509v3 Authority Key Identifier: keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3a2f33322d3332203d3e20313333383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:a640::/32 Signature Algorithm: sha256WithRSAEncryption 99:66:f8:8f:4c:f1:11:6f:df:3c:80:cf:1d:54:70:be:4e:9f: de:b3:65:98:f6:b0:50:40:11:f0:fa:e4:87:8d:30:35:5a:b7: 1a:80:a8:88:73:eb:63:8a:84:18:35:95:91:df:cf:a0:6b:89: 7e:c9:07:59:8a:01:dc:2b:c8:e3:57:3c:aa:db:42:ce:a0:01: 76:1d:ae:2b:6e:4a:75:47:a9:86:97:26:81:ba:de:8f:bf:d1: 4a:89:a4:68:6f:72:02:e6:4f:21:1e:28:ec:44:16:68:ad:6a: 17:c5:54:06:21:fc:fc:41:20:f7:87:96:63:42:b7:be:64:19: 7a:fa:2f:0a:91:1c:50:ed:21:91:f6:0f:36:7b:bb:d0:75:f6: 9b:bd:6e:ae:01:0f:99:c0:c0:74:b6:01:7f:4f:cf:53:a9:dd: 59:6b:7e:c9:39:59:8c:0c:72:be:98:2b:d9:6c:f9:00:0f:1e: 37:6e:f6:b8:c6:99:99:71:48:f0:5c:26:66:1e:01:23:54:8c: e2:c6:1b:a6:34:e9:69:39:de:db:dd:1a:1f:12:3b:c9:0e:80: 5f:fc:91:f1:9e:2a:9f:6a:35:fc:3a:bb:8b:17:b1:76:69:d1: ec:27:6a:84:fd:5a:ef:ea:7c:1a:7d:f9:24:75:f0:14:e4:5c: ed:25:8e:b4 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUdnrZ4WH9sXHJacGap+x2PQKymC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1 NjlGODM2RjAeFw0yNTAxMTQwMjU1MDJaFw0yNjAxMTMwMzAwMDJaMDMxMTAvBgNV BAMTKDJBOTQ0MDJGNDg1RThGQjg0Q0E3ODA5RDE1NzhEQjJGMDI1RDVBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTwu8jcSv6xJU8kTEI6wbx2ZAE ksVI+ooyb7gOoLkq0zPNHskkTHdtK3a2JMG662X2iJCW6gzPd5cEQjEG1ejjRx9w jucPW0H5qTq62OD6XHP+Odk354aT1R2DqprqKig7ZB5wvv4nJsLJZ0Mi5xn4yDMo /PbnlseQJ7DSBe0jHpzDRiveUYo7qaxGWUjWUVIZ/a2COrRIAKaPjqPCVRk1CUsu uP+iAgP95/8kDTnmZSJcjGbdaKJLHVOjxyP3ZyNL008P7Rn7kHPNDH12EGtAchAZ 5lorLOThpZGfhlPklQHG9N23aZsnadoadWuwLzWOd+zE7RsWCXjObE/1mOFPAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUKpRAL0hej7hMp4CdFXjbLwJdWvkwHwYDVR0j BBgwFoAUDOannVPYKfKlViNnbo0qmlafg28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTk5MDEyNS02MDlhLTQ4YzgtYWM4Ni0xYzNiYzMxNWJhZDYvMC8wQ0U2QTc5RDUz RDgyOUYyQTU1NjIzNjc2RThEMkE5QTU2OUY4MzZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1NjlG ODM2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhOTkwMTI1LTYwOWEtNDhjOC1h Yzg2LTFjM2JjMzE1YmFkNi8wLzMyMzQzMDM0M2E2MTM2MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzMzM4MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEpkAwDQYJKoZI hvcNAQELBQADggEBAJlm+I9M8RFv3zyAzx1UcL5On96zZZj2sFBAEfD65IeNMDVa txqAqIhz62OKhBg1lZHfz6BriX7JB1mKAdwryONXPKrbQs6gAXYdrituSnVHqYaX JoG63o+/0UqJpGhvcgLmTyEeKOxEFmitahfFVAYh/PxBIPeHlmNCt75kGXr6LwqR HFDtIZH2DzZ7u9B19pu9bq4BD5nAwHS2AX9Pz1Op3Vlrfsk5WYwMcr6YK9ls+QAP Hjdu9rjGmZlxSPBcJmYeASNUjOLGG6Y06Wk53tvdGh8SO8kOgF/8kfGeKp9qNfw6 u4sXsXZp0ewnaoT9Wu/qfBp9+SR18BTkXO0ljrQ= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net