$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa File: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (raw, json) Hash identifier: gOJdZEtA6e6fwm7lb/MvZbjgtOf6sLlu0HNuBmiaEZM= Subject key identifier: 54:96:00:BB:5E:D9:B9:80:4E:92:40:E9:6B:39:AE:DB:FD:88:92:79 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 4F25D39970C1EB06B6512639D852DB3604D3F6D9 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa Signing time: Mon 27 Jan 2025 07:00:00 +0000 ROA not before: Mon 27 Jan 2025 06:55:00 +0000 ROA not after: Mon 26 Jan 2026 07:00:00 +0000 asID: 38320 IP address blocks: 2404:3900:1992::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:25:d3:99:70:c1:eb:06:b6:51:26:39:d8:52:db:36:04:d3:f6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Jan 27 06:55:00 2025 GMT Not After : Jan 26 07:00:00 2026 GMT Subject: CN=549600BB5ED9B9804E9240E96B39AEDBFD889279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c1:c0:23:f0:eb:c1:e7:9d:b7:b9:cd:ed:97: 0b:55:cd:d2:f8:02:cb:8c:10:d2:e6:92:07:67:0d: e6:9b:ce:43:b5:4d:d4:55:67:09:38:a3:95:b8:b9: 8d:74:03:a5:d6:97:b3:66:96:f6:e2:02:d9:f9:84: 39:ab:6c:08:b5:57:81:cd:53:8a:24:41:ae:a7:88: 04:2b:71:a8:19:45:15:64:c0:08:c1:1b:91:99:8b: dc:3c:a2:fd:1e:d3:80:21:c3:8d:81:8e:1a:08:64: 49:59:c7:e5:9e:3a:fe:a0:61:4d:43:f1:fc:f6:dd: a1:f5:21:65:e5:71:3d:b0:51:3a:43:9d:17:22:ad: 07:11:a6:b5:93:03:22:c6:59:60:d8:65:44:2d:8b: 6f:25:41:d7:63:0e:e4:ed:a9:fb:39:ab:51:53:2b: 9c:67:97:a1:61:51:41:0d:76:8c:4f:5b:f5:df:cb: 4e:d8:f5:ea:bd:0f:7c:5d:34:c0:5f:6e:d7:b0:b1: cb:0e:a2:88:03:55:76:f4:ef:4f:2d:12:51:00:e5: ca:53:31:75:5a:fc:9c:ec:80:36:69:1f:c2:17:6a: 14:68:f1:12:f5:ce:f6:e2:41:a6:8a:99:e9:83:25: 97:23:f0:7a:49:0f:d8:8c:a9:20:bb:f0:ce:89:e3: 8f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:96:00:BB:5E:D9:B9:80:4E:92:40:E9:6B:39:AE:DB:FD:88:92:79 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:3900:1992::/48 Signature Algorithm: sha256WithRSAEncryption 86:6a:28:ff:fa:c6:ce:b2:51:99:a7:2d:9f:b8:0d:1c:0d:ab: 83:e8:bc:28:23:fc:4c:24:e0:57:98:c3:3c:d4:ad:19:77:0a: a3:0a:23:1b:47:fa:26:fa:ad:a7:82:a2:9d:d9:ee:34:94:3b: 09:14:e3:76:9e:cf:2a:e4:b4:27:ab:a3:1a:04:7d:72:3d:56: a7:e9:10:f5:74:80:fb:73:c3:62:b9:31:e7:06:07:d8:d8:77: 9b:81:5e:5b:4a:14:02:35:91:27:06:9b:13:e5:94:73:99:ad: c2:e5:a2:75:c5:ed:07:28:2a:59:e8:11:5f:6b:cb:8a:9c:6d: c9:88:b5:37:e6:c1:35:29:56:0c:97:81:53:59:12:f9:c2:ae: 3f:53:77:8e:db:3f:c1:5a:9d:27:25:09:2b:0b:d0:45:f5:e3: 49:18:58:eb:94:90:b3:ee:c3:33:d2:d2:dc:58:53:a6:5c:4b: d2:9d:cb:eb:65:3e:36:88:3f:89:73:5b:86:e5:d2:da:f8:d6: 41:7e:6d:20:96:26:1d:70:78:4c:84:db:69:79:5d:29:07:68: ab:7d:1a:f0:05:97:c4:c4:99:e9:45:52:1d:2b:e8:ee:f3:4a: 63:f0:eb:d6:eb:a3:cc:6d:37:eb:16:17:d9:f9:bd:7f:a1:32: 46:e2:6a:2e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTyXTmXDB6wa2USY52FLbNgTT9tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTAxMjcwNjU1MDBaFw0yNjAxMjYwNzAwMDBaMDMxMTAvBgNV BAMTKDU0OTYwMEJCNUVEOUI5ODA0RTkyNDBFOTZCMzlBRURCRkQ4ODkyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnwcAj8OvB5523uc3tlwtVzdL4 AsuMENLmkgdnDeabzkO1TdRVZwk4o5W4uY10A6XWl7NmlvbiAtn5hDmrbAi1V4HN U4okQa6niAQrcagZRRVkwAjBG5GZi9w8ov0e04Ahw42BjhoIZElZx+WeOv6gYU1D 8fz23aH1IWXlcT2wUTpDnRcirQcRprWTAyLGWWDYZUQti28lQddjDuTtqfs5q1FT K5xnl6FhUUENdoxPW/Xfy07Y9eq9D3xdNMBfbtewscsOoogDVXb0708tElEA5cpT MXVa/JzsgDZpH8IXahRo8RL1zvbiQaaKmemDJZcj8HpJD9iMqSC78M6J44/PAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUVJYAu17ZuYBOkkDpazmu2/2IknkwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMyMzQzMDM0M2EzMzM5MzAzMDNhMzEzOTM5MzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzMzMjMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAQ5 ABmSMA0GCSqGSIb3DQEBCwUAA4IBAQCGaij/+sbOslGZpy2fuA0cDauD6LwoI/xM JOBXmMM81K0ZdwqjCiMbR/om+q2ngqKd2e40lDsJFON2ns8q5LQnq6MaBH1yPVan 6RD1dID7c8NiuTHnBgfY2HebgV5bShQCNZEnBpsT5ZRzma3C5aJ1xe0HKCpZ6BFf a8uKnG3JiLU35sE1KVYMl4FTWRL5wq4/U3eO2z/BWp0nJQkrC9BF9eNJGFjrlJCz 7sMz0tLcWFOmXEvSncvrZT42iD+Jc1uG5dLa+NZBfm0gliYdcHhMhNtpeV0pB2ir fRrwBZfExJnpRVIdK+ju80pj8OvW66PMbTfrFhfZ+b1/oTJG4mou -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net