$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa File: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (raw, json) Hash identifier: NYSNKUm/BgmT5rJhU5PDu3zm0ji32HyB3xQtf69bB+8= Subject key identifier: 02:31:08:4F:37:C8:6F:A1:24:F8:89:6B:23:D2:97:10:AC:ED:5B:11 Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Certificate serial: 3F963507F123EBFF46CF998A5D355A88D950898B Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa Signing time: Tue 11 Mar 2025 13:00:02 +0000 ROA not before: Tue 11 Mar 2025 12:55:02 +0000 ROA not after: Tue 10 Mar 2026 13:00:02 +0000 asID: 137323 IP address blocks: 2001:df4:9100::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 10:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:96:35:07:f1:23:eb:ff:46:cf:99:8a:5d:35:5a:88:d9:50:89:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Validity Not Before: Mar 11 12:55:02 2025 GMT Not After : Mar 10 13:00:02 2026 GMT Subject: CN=0231084F37C86FA124F8896B23D29710ACED5B11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:7a:3d:2f:88:e8:40:ef:e1:da:76:b2:ba: d1:e9:db:2d:30:8f:a0:74:fa:0a:15:35:85:5a:17: 0f:1e:58:56:5c:51:45:d5:91:f2:75:1e:93:8e:2b: 44:ba:ac:eb:63:b1:ba:d5:47:09:79:01:4d:8e:d5: 84:31:db:0d:ee:5a:2e:27:d0:9b:5e:90:28:57:96: a7:2c:ed:54:b6:df:c2:9d:42:06:ca:cd:47:d6:2d: 4b:c0:68:11:c5:e3:18:04:10:d3:c1:11:22:a0:b6: da:a4:d2:1b:42:e3:1a:5f:69:da:02:ed:55:a8:a5: 45:8a:d3:cf:c1:87:9d:dd:7f:1c:c1:35:40:ce:70: 22:4c:71:f8:45:96:59:bb:ee:a6:9b:48:a0:fc:88: c6:c8:16:51:d6:b5:d4:d0:c5:f6:f8:b6:eb:b0:3e: 9c:96:18:7d:4b:25:1e:65:63:dd:6e:f4:08:ec:77: ee:c8:01:47:5a:64:08:b1:e4:9d:b5:a1:9b:32:1a: 13:68:16:a2:2e:f1:6c:47:7a:71:e7:01:ba:bc:0b: 76:6e:d9:9d:5e:0c:3e:db:6b:9b:91:e2:be:ae:34: f8:8e:37:40:a5:bd:c9:9d:b9:a6:29:d7:b0:08:6f: 3e:f0:a7:f4:33:5b:ad:59:13:07:60:78:28:a2:e0: 64:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:31:08:4F:37:C8:6F:A1:24:F8:89:6B:23:D2:97:10:AC:ED:5B:11 X509v3 Authority Key Identifier: keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:9100::/48 Signature Algorithm: sha256WithRSAEncryption a6:90:e7:3e:ac:e1:af:67:8d:36:f2:f3:31:b7:31:72:84:c8: 6a:cd:f9:58:e5:96:cb:5c:bd:52:24:80:7a:79:ca:07:af:72: 2a:5b:8e:cd:76:f1:fc:46:a7:29:6e:59:b7:0a:20:f0:18:5d: 11:81:a5:e0:92:08:2f:24:fe:08:a8:df:06:2a:dd:3c:d9:23: 96:ea:f0:16:6c:d4:dd:06:95:b2:ff:2c:01:65:30:81:6b:a9: fb:6b:53:71:8d:64:4a:61:0b:b4:e9:b9:dd:eb:73:0a:ed:ab: 6d:2f:7e:02:4d:17:76:ca:d7:7f:eb:2b:6b:84:26:e1:3e:47: d1:0b:2b:92:ef:9f:39:c2:97:e3:03:83:fe:51:ba:0e:e9:8b: e6:2c:f5:ee:dd:9b:06:b5:62:13:27:89:fc:cb:6e:9d:8e:e2: 35:bf:42:f9:9e:0b:5e:72:de:01:1f:b3:fc:9b:9c:f5:26:c4: 50:88:56:c1:1d:2d:43:fd:e1:92:ac:5b:df:58:5a:dd:8d:37: 8d:1a:2b:ad:63:f7:e8:92:6a:fc:37:4c:bf:00:a4:ed:61:bc: 19:b6:43:41:a2:5a:59:4a:cc:8f:77:61:0e:b7:d0:50:30:79: cd:47:18:a7:fd:17:bd:e1:56:cf:fe:7d:e4:e1:2c:82:25:94: 98:20:1e:57 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUP5Y1B/Ej6/9Gz5mKXTVaiNlQiYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFB Q0YwRjMwRjAeFw0yNTAzMTExMjU1MDJaFw0yNjAzMTAxMzAwMDJaMDMxMTAvBgNV BAMTKDAyMzEwODRGMzdDODZGQTEyNEY4ODk2QjIzRDI5NzEwQUNFRDVCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7no9L4joQO/h2nayutHp2y0w j6B0+goVNYVaFw8eWFZcUUXVkfJ1HpOOK0S6rOtjsbrVRwl5AU2O1YQx2w3uWi4n 0JtekChXlqcs7VS238KdQgbKzUfWLUvAaBHF4xgEENPBESKgttqk0htC4xpfadoC 7VWopUWK08/Bh53dfxzBNUDOcCJMcfhFllm77qabSKD8iMbIFlHWtdTQxfb4tuuw PpyWGH1LJR5lY91u9Ajsd+7IAUdaZAix5J21oZsyGhNoFqIu8WxHenHnAbq8C3Zu 2Z1eDD7ba5uR4r6uNPiON0ClvcmduaYp17AIbz7wp/QzW61ZEwdgeCii4GQ5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUAjEITzfIb6Ek+IlrI9KXEKztWxEwHwYDVR0j BBgwFoAU3Pz+ToGX/6+5pXkgvUDcwazw8w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWFmMTQ0Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9EQ0ZDRkU0RTgx OTdGRkFGQjlBNTc5MjBCRDQwRENDMUFDRjBGMzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFBQ0Yw RjMwRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxYWYxNDRiLWI5MmUtNGZmZi1i NjQxLWU0NmZkZGU4YzZkZi8wLzMyMzAzMDMxM2E2NDY2MzQzYTM5MzEzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM3MzMzMjMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9JEAMA0GCSqGSIb3DQEBCwUAA4IBAQCmkOc+rOGvZ4028vMxtzFyhMhqzflY5ZbL XL1SJIB6ecoHr3IqW47NdvH8Rqcpblm3CiDwGF0RgaXgkggvJP4IqN8GKt082SOW 6vAWbNTdBpWy/ywBZTCBa6n7a1NxjWRKYQu06bnd63MK7attL34CTRd2ytd/6ytr hCbhPkfRCyuS7585wpfjA4P+UboO6YvmLPXu3ZsGtWITJ4n8y26djuI1v0L5ngte ct4BH7P8m5z1JsRQiFbBHS1D/eGSrFvfWFrdjTeNGiutY/fokmr8N0y/AKTtYbwZ tkNBolpZSsyPd2EOt9BQMHnNRxin/Re94VbP/n3k4SyCJZSYIB5X -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:52 2025 by rpki-client on console.sobornost.net