$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa File: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (raw, json) Hash identifier: AO7wu2Q7QW+RPhPuz6APgWm6cf6PGEEupVDtRJV53rE= Subject key identifier: 59:0D:4D:40:E7:9A:62:E5:E3:E8:45:F0:BF:13:25:EC:78:BA:D6:EB Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Certificate serial: 421E4EC368BD9D9CCEA9108BE274BF1373BF95FD Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa Signing time: Tue 28 Jan 2025 17:00:00 +0000 ROA not before: Tue 28 Jan 2025 16:55:00 +0000 ROA not after: Tue 27 Jan 2026 17:00:00 +0000 asID: 24429 IP address blocks: 2405:1640:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1e:4e:c3:68:bd:9d:9c:ce:a9:10:8b:e2:74:bf:13:73:bf:95:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Validity Not Before: Jan 28 16:55:00 2025 GMT Not After : Jan 27 17:00:00 2026 GMT Subject: CN=590D4D40E79A62E5E3E845F0BF1325EC78BAD6EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:55:f5:e6:2d:b7:1c:b5:61:0d:75:be:d0:08: 5d:ea:10:21:c4:e3:fc:25:23:a3:5c:6e:38:62:a6: 15:01:f9:90:b4:d4:15:3a:e1:ea:9d:71:62:22:ed: 7b:5b:51:cc:29:b9:10:6e:d7:c8:3c:2d:9d:d2:e6: cd:9c:ef:ad:1f:35:53:15:11:d7:6a:8a:0e:f9:27: ed:17:0e:18:af:47:8d:fa:9f:94:f5:69:dc:da:c5: 48:67:42:e8:53:29:f0:c3:1f:80:3f:b5:07:e8:af: 4f:0f:0c:9f:2a:bf:d3:8e:15:11:c7:26:67:4f:cc: ac:ef:2f:8d:13:84:cc:b5:43:e4:ba:c5:45:0f:60: 4a:af:da:26:28:b7:d3:58:e7:56:19:4c:00:99:53: 9f:7b:d3:b1:9d:ba:5d:2a:b1:26:11:9e:51:99:f8: a1:9a:81:fa:a4:0f:24:15:64:ec:04:d9:13:17:7b: fc:c8:d4:9a:e2:6a:1c:19:92:ca:0d:0c:69:2e:e7: fe:99:16:25:4c:c7:6d:cb:cf:7a:f7:ca:ab:6a:58: d4:fe:df:c1:f5:e9:e3:fe:c6:81:7f:4e:a9:3d:02: b2:1e:1e:6d:eb:57:36:94:55:bd:97:ca:44:ce:1c: c1:30:b5:c6:5f:d9:fb:48:3d:ac:c2:31:75:8f:9c: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0D:4D:40:E7:9A:62:E5:E3:E8:45:F0:BF:13:25:EC:78:BA:D6:EB X509v3 Authority Key Identifier: keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:1640:6::/48 Signature Algorithm: sha256WithRSAEncryption 5e:cf:e3:84:d8:9b:9e:4c:85:e3:cf:5e:de:6b:57:99:27:f5: 73:da:13:6b:d0:9e:c7:39:10:74:36:e7:30:30:87:19:ae:59: 15:6c:a8:4e:55:97:90:7f:3c:86:4c:dc:ac:99:53:b7:c7:8f: fb:11:62:ca:66:cb:93:93:e6:5b:91:78:ae:3d:68:f5:d3:46: b6:26:8f:9f:00:1c:22:f8:61:97:24:99:55:ab:45:dc:13:b5: c0:0a:be:b1:62:ea:a6:7c:cd:77:8d:7d:42:d0:c3:00:c4:dd: dc:3d:bd:20:c1:b5:8a:d7:99:fe:64:53:96:fa:99:92:dc:b4: ba:e1:76:76:c4:48:32:b3:6e:a6:54:34:6c:b5:89:d0:39:72: df:3b:ca:cb:49:e3:43:9b:02:eb:ba:93:3d:12:4a:73:1b:13: 50:3a:67:54:01:ac:a1:88:f6:3a:70:60:c6:f7:0e:21:8b:ac: a4:a0:4d:ef:c6:0f:4c:b5:d4:0b:a8:e9:84:62:69:62:c9:8e: 8c:c1:ab:d1:8e:1e:22:34:84:48:3f:bb:e4:96:e6:89:09:1a: 66:1e:f6:36:b2:63:9e:27:54:fd:55:7e:00:b2:3a:7c:c5:1a: cb:35:bd:3e:8f:28:21:2e:1e:30:80:55:5a:f3:87:82:42:6f: ab:ce:d8:68 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUQh5Ow2i9nZzOqRCL4nS/E3O/lf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3 QjQ1Q0IzNTAeFw0yNTAxMjgxNjU1MDBaFw0yNjAxMjcxNzAwMDBaMDMxMTAvBgNV BAMTKDU5MEQ0RDQwRTc5QTYyRTVFM0U4NDVGMEJGMTMyNUVDNzhCQUQ2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrVfXmLbcctWENdb7QCF3qECHE 4/wlI6NcbjhiphUB+ZC01BU64eqdcWIi7XtbUcwpuRBu18g8LZ3S5s2c760fNVMV Eddqig75J+0XDhivR436n5T1adzaxUhnQuhTKfDDH4A/tQfor08PDJ8qv9OOFRHH JmdPzKzvL40ThMy1Q+S6xUUPYEqv2iYot9NY51YZTACZU59707Gdul0qsSYRnlGZ +KGagfqkDyQVZOwE2RMXe/zI1JriahwZksoNDGku5/6ZFiVMx23Lz3r3yqtqWNT+ 38H16eP+xoF/Tqk9ArIeHm3rVzaUVb2XykTOHMEwtcZf2ftIPazCMXWPnOxPAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUWQ1NQOeaYuXj6EXwvxMl7Hi61uswHwYDVR0j BBgwFoAUFbfr+Ss1/bW8aZC7jsosKXtFyzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjU1MWFiOS04MDQxLTRhOWEtOWI1MC1jN2M2ZGVjMjE2NmYvMC8xNUI3RUJGOTJC MzVGREI1QkM2OTkwQkI4RUNBMkMyOTdCNDVDQjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3QjQ1 Q0IzNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmNTUxYWI5LTgwNDEtNGE5YS05 YjUwLWM3YzZkZWMyMTY2Zi8wLzMyMzQzMDM1M2EzMTM2MzQzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMjM0MzQzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAUWQAAGMA0G CSqGSIb3DQEBCwUAA4IBAQBez+OE2JueTIXjz17ea1eZJ/Vz2hNr0J7HORB0Nucw MIcZrlkVbKhOVZeQfzyGTNysmVO3x4/7EWLKZsuTk+ZbkXiuPWj100a2Jo+fABwi +GGXJJlVq0XcE7XACr6xYuqmfM13jX1C0MMAxN3cPb0gwbWK15n+ZFOW+pmS3LS6 4XZ2xEgys26mVDRstYnQOXLfO8rLSeNDmwLrupM9EkpzGxNQOmdUAayhiPY6cGDG 9w4hi6ykoE3vxg9MtdQLqOmEYmliyY6MwavRjh4iNIRIP7vkluaJCRpmHvY2smOe J1T9VX4Asjp8xRrLNb0+jyghLh4wgFVa84eCQm+rztho -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net