$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa File: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (raw, json) Hash identifier: ofbvTdfOxM/XJn9ei0JIzGhej7sLaY5dsj1BDY0yT88= Subject key identifier: A1:0A:51:A8:86:44:7B:FA:4F:95:BA:DF:08:F2:69:27:32:88:7E:53 Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Certificate serial: 6E7A776C91441430182DBFFC8F42922D848DD746 Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa Signing time: Tue 28 Jan 2025 05:01:06 +0000 ROA not before: Tue 28 Jan 2025 04:56:06 +0000 ROA not after: Tue 27 Jan 2026 05:01:06 +0000 asID: 141937 IP address blocks: 2001:df2:22c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 19:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7a:77:6c:91:44:14:30:18:2d:bf:fc:8f:42:92:2d:84:8d:d7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Validity Not Before: Jan 28 04:56:06 2025 GMT Not After : Jan 27 05:01:06 2026 GMT Subject: CN=A10A51A886447BFA4F95BADF08F2692732887E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:99:5e:0d:08:d0:b3:08:87:e0:a9:9b:47:1a: 78:f6:14:8b:50:04:42:a9:b3:c9:a7:c4:e4:7d:52: 0f:b5:e9:97:8d:e5:3e:1a:c1:dc:ec:45:64:2c:c8: 12:5d:02:e2:51:f5:10:d3:a5:36:fb:9c:42:b0:6d: f3:b6:b3:8d:80:a0:4f:fd:81:c9:e4:b2:c7:29:67: 84:ed:66:42:74:99:fb:bd:fa:fb:82:48:d5:2e:fe: 5a:84:1a:54:4e:b7:4f:52:ee:01:77:6c:d9:47:13: d3:51:c4:d9:ef:25:c9:bd:cb:0c:b3:47:24:60:07: 99:62:27:31:0e:2b:89:59:88:bb:b6:4b:79:62:0f: 3e:4c:cf:79:74:3f:53:d9:cc:a5:f3:d3:af:5c:15: 88:5b:43:d4:8d:b1:1e:87:7f:d7:55:31:fb:d8:0a: 91:25:38:1b:50:db:47:c7:04:2d:f1:0c:3c:57:28: 3a:05:77:7b:19:e3:27:9c:db:4e:5a:a6:cb:03:e9: b3:57:4f:f3:55:d5:ba:d5:f6:bd:79:cd:38:41:78: 71:e5:57:15:8f:49:8d:ef:53:2e:1e:a8:62:36:7e: a2:98:8d:f0:ce:bd:20:57:97:c4:4a:6c:20:34:f2: 8e:f4:6a:53:4d:ad:26:f3:dc:b0:96:5f:a1:32:2d: 3f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0A:51:A8:86:44:7B:FA:4F:95:BA:DF:08:F2:69:27:32:88:7E:53 X509v3 Authority Key Identifier: keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:22c0::/48 Signature Algorithm: sha256WithRSAEncryption 11:7f:7b:ee:25:36:62:a0:ce:51:12:a1:93:de:0e:81:05:78: 3b:07:90:6d:87:a7:3d:ba:01:93:65:02:ff:80:bb:43:1b:18: 84:f0:4e:86:71:97:b5:53:f5:5e:71:fe:25:0e:d8:d0:dc:52: 92:cf:80:2d:68:a4:c7:75:13:a3:19:3d:cb:d8:5d:1d:9e:57: 11:18:63:d1:b0:78:cf:c5:41:30:62:ee:b8:ec:6f:a5:14:a4: 84:a8:a0:98:d6:db:c7:41:04:ce:03:5e:5a:bb:fe:51:df:d0: be:77:08:5a:aa:53:cc:0f:d2:e1:96:dd:fb:88:23:e6:6a:46: 3e:54:ae:fd:ab:82:b2:00:68:ab:ec:c0:75:e1:6c:c3:30:f4: cc:d6:6d:5c:7f:3f:7a:cb:e2:48:09:d3:90:aa:1b:f5:42:fd: 03:f4:62:43:f4:f9:68:49:c5:12:b2:65:60:d9:01:8c:3b:f7: e6:94:f1:f6:d2:55:7d:85:68:9d:41:69:fb:b0:03:40:90:e6: c7:10:83:25:f5:7c:50:47:3c:4d:73:93:60:e4:72:b4:71:f3: 9f:5d:a8:ab:e5:e6:d3:bf:4e:84:56:9e:93:bc:08:01:5e:29: c9:62:d2:93:bc:6a:2d:5c:11:6a:44:a6:4d:fb:2f:06:f1:90: a9:aa:8e:e9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbnp3bJFEFDAYLb/8j0KSLYSN10YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2 OTFCODhGMzAeFw0yNTAxMjgwNDU2MDZaFw0yNjAxMjcwNTAxMDZaMDMxMTAvBgNV BAMTKEExMEE1MUE4ODY0NDdCRkE0Rjk1QkFERjA4RjI2OTI3MzI4ODdFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDimV4NCNCzCIfgqZtHGnj2FItQ BEKps8mnxOR9Ug+16ZeN5T4awdzsRWQsyBJdAuJR9RDTpTb7nEKwbfO2s42AoE/9 gcnksscpZ4TtZkJ0mfu9+vuCSNUu/lqEGlROt09S7gF3bNlHE9NRxNnvJcm9ywyz RyRgB5liJzEOK4lZiLu2S3liDz5Mz3l0P1PZzKXz069cFYhbQ9SNsR6Hf9dVMfvY CpElOBtQ20fHBC3xDDxXKDoFd3sZ4yec205apssD6bNXT/NV1brV9r15zThBeHHl VxWPSY3vUy4eqGI2fqKYjfDOvSBXl8RKbCA08o70alNNrSbz3LCWX6EyLT/TAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUoQpRqIZEe/pPlbrfCPJpJzKIflMwHwYDVR0j BBgwFoAUYB0SNDDa+SiKff1ij4kttWkbiPMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGFhZTNmMC05YzcwLTQyZmMtYWUzZS1iYjU5MDA0NmIwZmUvMC82MDFEMTIzNDMw REFGOTI4OEE3REZENjI4Rjg5MkRCNTY5MUI4OEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2OTFC ODhGMy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0YWFlM2YwLTljNzAtNDJmYy1h ZTNlLWJiNTkwMDQ2YjBmZS8wLzMyMzAzMDMxM2E2NDY2MzIzYTMyMzI2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzkzMzM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8iLAMA0GCSqGSIb3DQEBCwUAA4IBAQARf3vuJTZioM5REqGT3g6BBXg7B5Bth6c9 ugGTZQL/gLtDGxiE8E6GcZe1U/Vecf4lDtjQ3FKSz4AtaKTHdROjGT3L2F0dnlcR GGPRsHjPxUEwYu647G+lFKSEqKCY1tvHQQTOA15au/5R39C+dwhaqlPMD9Lhlt37 iCPmakY+VK79q4KyAGir7MB14WzDMPTM1m1cfz96y+JICdOQqhv1Qv0D9GJD9Plo ScUSsmVg2QGMO/fmlPH20lV9hWidQWn7sANAkObHEIMl9XxQRzxNc5Ng5HK0cfOf Xair5ebTv06EVp6TvAgBXinJYtKTvGotXBFqRKZN+y8G8ZCpqo7p -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:41 2025 by rpki-client on console.sobornost.net