$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030313a3a2f34382d3438203d3e20313333383430.roa File: 323430343a653130303a333030313a3a2f34382d3438203d3e20313333383430.roa (raw, json) Hash identifier: y1fyWuipYPoEV92aBrzyBVx9+9+Jw4MgGOxvIvLJ2Oo= Subject key identifier: A1:C4:70:33:B0:29:62:B7:FB:2A:D7:E9:31:8A:2E:43:7D:CF:22:57 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 2688DD10CEECFFDE7E5A19D46A9591A1BD5A6E11 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030313a3a2f34382d3438203d3e20313333383430.roa Signing time: Sat 28 Dec 2024 09:00:02 +0000 ROA not before: Sat 28 Dec 2024 08:55:02 +0000 ROA not after: Sat 27 Dec 2025 09:00:02 +0000 asID: 133840 IP address blocks: 2404:e100:3001::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:88:dd:10:ce:ec:ff:de:7e:5a:19:d4:6a:95:91:a1:bd:5a:6e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Dec 28 08:55:02 2024 GMT Not After : Dec 27 09:00:02 2025 GMT Subject: CN=A1C47033B02962B7FB2AD7E9318A2E437DCF2257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:2a:26:82:22:fa:2e:73:b2:d3:cf:4c:17: 39:66:68:22:0f:8d:98:33:f4:00:0d:0f:1f:23:30: 7e:a7:9f:2c:d0:5f:2e:11:be:8e:b4:2d:9c:ce:01: 67:97:d8:73:92:65:b5:3e:56:d6:6e:62:a5:c0:f1: 26:45:13:8d:6f:a3:7e:f2:a0:b5:4a:84:77:13:5f: ab:b2:2a:ce:04:e7:dd:c4:11:3d:6c:95:2b:dc:b4: af:20:d7:87:a2:ec:de:a3:94:4d:7b:b1:bb:7c:50: bc:27:68:7d:ac:c9:03:a8:71:92:cb:14:4c:e8:2c: 91:6d:fb:f0:77:21:99:5e:c5:61:8a:ce:15:2d:a5: 70:29:05:f0:52:fc:04:84:b1:32:f9:44:09:eb:e3: 33:d3:78:86:85:7e:63:a9:16:02:30:c4:02:03:ae: c8:63:f4:b3:e8:04:66:42:9b:06:04:35:6a:57:c4: c1:f1:28:cb:8c:30:79:26:0b:07:d9:4f:fb:4b:29: d4:f0:89:d6:b7:c5:c0:7b:92:d3:d0:d0:6b:51:a1: f4:63:86:40:bc:a1:5f:a9:05:7b:a9:b3:42:a7:ff: d2:34:05:47:93:d8:6c:ec:d6:07:b3:3f:9e:40:56: 06:d9:e0:3c:06:f7:53:60:fa:f5:61:dc:b3:55:af: 5a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C4:70:33:B0:29:62:B7:FB:2A:D7:E9:31:8A:2E:43:7D:CF:22:57 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030313a3a2f34382d3438203d3e20313333383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:3001::/48 Signature Algorithm: sha256WithRSAEncryption 94:df:32:9b:97:3f:4f:1b:fa:bd:4d:a9:c0:9d:32:ff:57:25: b0:3b:02:5e:a4:7c:45:e8:db:f1:f6:8a:43:dd:d9:1c:33:dd: d5:57:b0:75:42:ff:d4:33:88:8b:76:99:e2:b3:f5:b1:af:27: 95:6c:b7:45:de:b6:fe:8b:90:cf:7b:e9:75:c1:fb:35:89:cb: e8:c7:49:c1:d5:c6:6b:1a:a9:7d:c0:94:23:4f:e2:43:19:56: f5:1c:fc:f2:78:69:db:a1:e4:d7:00:1a:3e:48:95:8d:ad:69: 21:4a:6b:d7:4f:22:3a:b2:4e:30:51:54:12:ea:01:60:7a:b3: 3b:4d:89:93:a3:0d:2a:2b:e3:cd:21:d5:ac:e2:d1:c6:bf:a5: d5:86:25:df:79:6e:3a:5e:dd:94:b4:10:82:22:f4:df:89:f3: 02:0d:4d:f4:78:f9:b0:2f:cc:1e:72:cf:c0:aa:19:7a:bb:43: 03:24:fe:56:01:e7:63:4c:f0:b2:43:7f:19:3c:97:b7:e6:af: 99:01:5b:a6:96:04:0e:21:9e:82:bb:0b:cc:97:b8:e6:de:55: 67:19:7e:c3:27:71:0b:77:31:ca:45:99:28:36:48:fa:c4:ce: 3f:a2:a3:28:c6:a6:99:57:e8:70:4b:d0:0d:a9:81:59:9e:2f: 7c:d1:a8:5b -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUJojdEM7s/95+WhnUapWRob1abhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNDEyMjgwODU1MDJaFw0yNTEyMjcwOTAwMDJaMDMxMTAvBgNV BAMTKEExQzQ3MDMzQjAyOTYyQjdGQjJBRDdFOTMxOEEyRTQzN0RDRjIyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJComgiL6LnOy089MFzlmaCIP jZgz9AANDx8jMH6nnyzQXy4Rvo60LZzOAWeX2HOSZbU+VtZuYqXA8SZFE41vo37y oLVKhHcTX6uyKs4E593EET1slSvctK8g14ei7N6jlE17sbt8ULwnaH2syQOocZLL FEzoLJFt+/B3IZlexWGKzhUtpXApBfBS/ASEsTL5RAnr4zPTeIaFfmOpFgIwxAID rshj9LPoBGZCmwYENWpXxMHxKMuMMHkmCwfZT/tLKdTwida3xcB7ktPQ0GtRofRj hkC8oV+pBXups0Kn/9I0BUeT2Gzs1gezP55AVgbZ4DwG91Ng+vVh3LNVr1oPAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUocRwM7ApYrf7KtfpMYouQ33PIlcwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzMzMDMwMzEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzMzODM0MzAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BOEAMAEwDQYJKoZIhvcNAQELBQADggEBAJTfMpuXP08b+r1NqcCdMv9XJbA7Al6k fEXo2/H2ikPd2Rwz3dVXsHVC/9QziIt2meKz9bGvJ5Vst0Xetv6LkM976XXB+zWJ y+jHScHVxmsaqX3AlCNP4kMZVvUc/PJ4aduh5NcAGj5IlY2taSFKa9dPIjqyTjBR VBLqAWB6sztNiZOjDSor480h1azi0ca/pdWGJd95bjpe3ZS0EIIi9N+J8wINTfR4 +bAvzB5yz8CqGXq7QwMk/lYB52NM8LJDfxk8l7fmr5kBW6aWBA4hnoK7C8yXuObe VWcZfsMncQt3McpFmSg2SPrEzj+ioyjGpplX6HBL0A2pgVmeL3zRqFs= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net