$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030393a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a383030393a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: /zPL4mvwDI//5aR6IhyW9hCm7nHSqI0+NttYtKRZhAc= Subject key identifier: 9C:B1:80:78:09:8F:76:E4:BB:BC:ED:C0:BF:39:E8:82:6D:5D:68:2B Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 17FB0524B77DF490A0DDC3FDE37C1B73BE4412C2 Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030393a3a2f34382d3438203d3e203338353236.roa Signing time: Mon 07 Apr 2025 02:00:01 +0000 ROA not before: Mon 07 Apr 2025 01:55:01 +0000 ROA not after: Mon 06 Apr 2026 02:00:01 +0000 asID: 38526 IP address blocks: 2405:3740:8009::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 20:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:fb:05:24:b7:7d:f4:90:a0:dd:c3:fd:e3:7c:1b:73:be:44:12:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Apr 7 01:55:01 2025 GMT Not After : Apr 6 02:00:01 2026 GMT Subject: CN=9CB18078098F76E4BBBCEDC0BF39E8826D5D682B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fa:b4:60:8b:28:3f:65:c3:c3:61:79:97:c5: 0c:13:f0:d4:32:e9:84:cd:0c:65:ee:dd:6a:47:c9: 31:b5:c3:60:8f:c5:9d:89:6c:74:0a:fd:d9:4d:8c: d7:1c:2d:d3:74:67:19:87:18:36:9c:ce:f9:c3:28: 6a:3b:7e:c8:21:d1:e3:08:57:19:09:50:65:81:40: bc:ff:e6:98:d3:bd:62:a1:79:d0:9c:ed:70:9e:2f: 74:27:2b:ae:b1:df:90:6e:0b:f3:64:f3:95:5b:33: d1:54:7d:96:91:a1:57:f6:d9:f5:5e:6c:1a:fc:9d: d9:f8:9f:31:67:8e:42:5c:1e:48:ec:e1:87:60:85: 51:e5:85:34:7e:f1:9a:10:53:43:f7:d7:d9:a8:8c: ac:b3:79:86:47:d7:0e:81:44:fa:5f:73:fd:2f:75: 17:13:6c:63:2a:f3:a3:aa:29:22:20:ea:30:45:00: bb:75:8e:0d:7a:ab:61:4d:a6:66:87:f2:79:74:fc: 52:eb:ec:94:bc:aa:9e:64:c4:72:20:91:03:32:ad: b4:d4:ec:41:87:53:85:f7:a6:c6:1e:93:a7:e3:c5: b5:85:88:2c:02:13:98:e8:4c:ec:e2:ad:96:36:06: f9:5c:17:47:8e:26:0f:f1:a3:1f:2d:d0:80:44:01: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B1:80:78:09:8F:76:E4:BB:BC:ED:C0:BF:39:E8:82:6D:5D:68:2B X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030393a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:8009::/48 Signature Algorithm: sha256WithRSAEncryption 3a:79:a9:2b:47:a7:c2:89:2a:4c:9e:a5:6a:2b:0a:c3:7a:76: 7d:05:bb:cf:18:4f:06:b8:e3:d0:ab:ff:df:32:0b:7c:47:e3: 98:a8:73:f6:1d:9d:75:d0:c4:e6:fb:2a:31:ef:63:59:aa:79: c0:0a:3d:d4:2b:0d:d9:6d:5e:35:f8:93:b8:f8:88:a6:48:0c: f9:42:4d:0f:b7:b2:8b:82:6b:b3:03:c2:e9:93:37:6a:df:53: e4:73:67:9a:d2:2e:31:94:98:31:0d:0b:4f:88:64:45:a4:f5: 3b:54:ba:db:23:aa:b1:ae:99:87:8d:d8:92:63:18:28:27:db: 4c:ec:0b:b0:58:0a:c9:33:ff:b4:e9:a8:ae:dc:d4:67:cd:6a: 30:18:5e:ff:f0:f7:21:0d:ea:ef:df:ee:b9:7b:eb:77:24:29: 16:f8:ae:89:23:37:ab:49:d7:66:3a:e2:ce:65:52:37:99:3e: cf:cf:1b:03:12:c1:c6:03:e8:67:7f:a6:45:0e:e4:52:52:5a: 68:28:94:99:db:21:d9:02:a2:c0:ba:5b:6f:fd:8a:a3:80:0e: 3a:1a:0a:b5:a6:2f:2c:bf:ff:22:8a:6f:24:47:52:a4:7c:f4: 3f:52:ea:0b:c6:cb:6e:dc:0a:4c:ac:51:50:1c:54:0f:2a:d5: 89:1e:bd:b2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUF/sFJLd99JCg3cP943wbc75EEsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNTA0MDcwMTU1MDFaFw0yNjA0MDYwMjAwMDFaMDMxMTAvBgNV BAMTKDlDQjE4MDc4MDk4Rjc2RTRCQkJDRURDMEJGMzlFODgyNkQ1RDY4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+rRgiyg/ZcPDYXmXxQwT8NQy 6YTNDGXu3WpHyTG1w2CPxZ2JbHQK/dlNjNccLdN0ZxmHGDaczvnDKGo7fsgh0eMI VxkJUGWBQLz/5pjTvWKhedCc7XCeL3QnK66x35BuC/Nk85VbM9FUfZaRoVf22fVe bBr8ndn4nzFnjkJcHkjs4YdghVHlhTR+8ZoQU0P319mojKyzeYZH1w6BRPpfc/0v dRcTbGMq86OqKSIg6jBFALt1jg16q2FNpmaH8nl0/FLr7JS8qp5kxHIgkQMyrbTU 7EGHU4X3psYek6fjxbWFiCwCE5joTOzirZY2BvlcF0eOJg/xox8t0IBEAfa7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUnLGAeAmPduS7vO3Avznogm1daCswHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzgzMDMwMzkz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QIAJMA0GCSqGSIb3DQEBCwUAA4IBAQA6eakrR6fCiSpMnqVqKwrDenZ9BbvPGE8G uOPQq//fMgt8R+OYqHP2HZ110MTm+yox72NZqnnACj3UKw3ZbV41+JO4+IimSAz5 Qk0Pt7KLgmuzA8Lpkzdq31Pkc2ea0i4xlJgxDQtPiGRFpPU7VLrbI6qxrpmHjdiS YxgoJ9tM7AuwWArJM/+06aiu3NRnzWowGF7/8PchDerv3+65e+t3JCkW+K6JIzer SddmOuLOZVI3mT7PzxsDEsHGA+hnf6ZFDuRSUlpoKJSZ2yHZAqLAultv/YqjgA46 Ggq1pi8sv/8iim8kR1KkfPQ/UuoLxstu3ApMrFFQHFQPKtWJHr2y -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:03 2025 by rpki-client on console.sobornost.net