$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3130313a3a2f34382d3438203d3e203338373533.roa File: 323430313a616530303a3130313a3a2f34382d3438203d3e203338373533.roa (raw, json) Hash identifier: rZeCS55HO6aLQecVXkr9X9nZxnppbVZfkavZq+fHlns= Subject key identifier: 77:BD:1B:A9:C2:CB:82:96:97:1D:25:13:EA:AE:95:2D:28:1E:45:37 Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 541C5E7DFCCE4CFB49F698DE0D0A1DAAEAE0582E Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3130313a3a2f34382d3438203d3e203338373533.roa Signing time: Wed 29 Jan 2025 03:02:50 +0000 ROA not before: Wed 29 Jan 2025 02:57:50 +0000 ROA not after: Wed 28 Jan 2026 03:02:50 +0000 asID: 38753 IP address blocks: 2401:ae00:101::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1c:5e:7d:fc:ce:4c:fb:49:f6:98:de:0d:0a:1d:aa:ea:e0:58:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Jan 29 02:57:50 2025 GMT Not After : Jan 28 03:02:50 2026 GMT Subject: CN=77BD1BA9C2CB8296971D2513EAAE952D281E4537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7a:a7:4b:a1:e0:26:c9:37:f6:75:ea:a4:85: d5:6d:3e:90:3a:f1:0d:0e:a7:2a:1f:14:2e:ae:01: 08:59:55:ee:ef:f5:17:ea:d9:49:fa:d4:a9:4b:da: ac:5c:8a:1f:3b:99:9c:21:6e:13:9e:2e:ff:2b:52: ce:4c:c2:3d:12:14:2c:f2:ad:57:49:f2:6b:1e:fd: 27:23:9f:08:05:b2:b7:ef:2d:91:64:35:6e:8c:53: 4c:e8:59:02:80:7c:0f:c5:49:b6:a5:8d:17:78:7a: dd:ca:3f:3e:a4:17:ff:91:54:b6:66:51:f3:a4:04: 48:a0:4b:f6:7e:6e:62:34:7a:db:34:e5:ce:17:95: 6c:bc:16:9e:3a:9f:a2:ab:43:e9:6b:6b:18:98:61: d3:16:23:5b:f7:27:3c:47:ad:38:0b:24:cb:78:c4: 85:4e:0d:22:9c:83:44:cc:70:4d:a7:d2:79:aa:23: b1:96:07:04:a9:39:90:54:90:08:4d:1a:97:39:eb: ce:b6:fb:4c:e0:b5:a2:13:eb:71:18:47:ae:f4:25: ae:81:f6:4e:06:c2:cd:f9:b5:71:2f:d4:ba:2b:a6: 0a:be:24:b7:f0:d8:79:e1:79:41:81:38:70:9c:96: aa:99:30:ef:ba:48:b4:0e:27:1a:0f:95:bf:11:0b: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BD:1B:A9:C2:CB:82:96:97:1D:25:13:EA:AE:95:2D:28:1E:45:37 X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3130313a3a2f34382d3438203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:ae00:101::/48 Signature Algorithm: sha256WithRSAEncryption 6b:f4:6e:c8:81:65:e8:c7:53:35:37:b8:97:d5:39:09:b3:41: 8f:4c:d0:01:ae:13:6a:06:21:ce:4d:ea:58:b6:d2:b7:ac:98: 36:66:ab:5a:4d:0b:60:4a:6e:06:65:53:27:e8:24:6b:70:52: 5c:7a:99:79:6b:95:1b:9c:21:81:a6:2a:a9:fe:c3:52:c6:88: c7:3d:f5:fa:b3:6c:ed:48:f9:25:87:bc:ac:6c:e4:7f:23:63: 62:b2:67:bb:ef:bf:43:4c:db:ae:75:b7:bd:6f:88:02:40:1a: d6:6d:89:37:35:9f:1c:05:6f:c1:cc:89:50:1c:eb:49:02:1d: 6d:4a:52:08:47:5c:c2:bc:66:81:47:bd:d0:b7:98:bb:fe:27: 71:6f:49:8f:de:18:c6:dc:7c:19:3c:79:80:45:23:79:54:cf: 76:84:f3:cd:88:b3:7b:91:04:6e:f5:a7:f0:bd:c9:e1:11:84: 4c:21:7b:66:5f:4d:a6:b4:bb:23:3e:57:7f:3d:bf:9c:a1:9c: 05:6a:73:d0:d1:51:bf:5f:59:8c:33:54:ae:22:b3:e2:69:92: 17:a3:e6:d6:c8:3b:8f:98:3c:f9:aa:24:97:17:f0:ba:7c:d5: 72:2a:58:fa:b3:99:d5:56:60:61:07:a6:af:2b:0a:f8:69:b5: dc:98:bc:33 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUVBxeffzOTPtJ9pjeDQodqurgWC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNTAxMjkwMjU3NTBaFw0yNjAxMjgwMzAyNTBaMDMxMTAvBgNV BAMTKDc3QkQxQkE5QzJDQjgyOTY5NzFEMjUxM0VBQUU5NTJEMjgxRTQ1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eqdLoeAmyTf2deqkhdVtPpA6 8Q0OpyofFC6uAQhZVe7v9Rfq2Un61KlL2qxcih87mZwhbhOeLv8rUs5Mwj0SFCzy rVdJ8mse/ScjnwgFsrfvLZFkNW6MU0zoWQKAfA/FSbaljRd4et3KPz6kF/+RVLZm UfOkBEigS/Z+bmI0ets05c4XlWy8Fp46n6KrQ+lraxiYYdMWI1v3JzxHrTgLJMt4 xIVODSKcg0TMcE2n0nmqI7GWBwSpOZBUkAhNGpc56862+0zgtaIT63EYR670Ja6B 9k4Gws35tXEv1Lorpgq+JLfw2HnheUGBOHCclqqZMO+6SLQOJxoPlb8RC9RtAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUd70bqcLLgpaXHSUT6q6VLSgeRTcwHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i NmMyLTQyYWI4YjQ3NjI0OS8wLzMyMzQzMDMxM2E2MTY1MzAzMDNhMzEzMDMxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM3MzUzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQBrgAB ATANBgkqhkiG9w0BAQsFAAOCAQEAa/RuyIFl6MdTNTe4l9U5CbNBj0zQAa4TagYh zk3qWLbSt6yYNmarWk0LYEpuBmVTJ+gka3BSXHqZeWuVG5whgaYqqf7DUsaIxz31 +rNs7Uj5JYe8rGzkfyNjYrJnu++/Q0zbrnW3vW+IAkAa1m2JNzWfHAVvwcyJUBzr SQIdbUpSCEdcwrxmgUe90LeYu/4ncW9Jj94Yxtx8GTx5gEUjeVTPdoTzzYize5EE bvWn8L3J4RGETCF7Zl9NprS7Iz5Xfz2/nKGcBWpz0NFRv19ZjDNUriKz4mmSF6Pm 1sg7j5g8+aoklxfwunzVcipY+rOZ1VZgYQemrysK+Gm13Ji8Mw== -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net