$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: mznW2wf6ad/PAHuopPakHeeFZx7rtA4ruvMLr8gBfUg= Subject key identifier: B3:DA:3A:39:FD:67:D2:DE:84:F5:C8:F7:C1:CF:E3:1E:FF:D4:58:EF Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 54A85C56C6D9A88026DFBB4C6F4EB63C6B3EAC88 Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 26 Feb 2025 03:00:03 +0000 ROA not before: Wed 26 Feb 2025 02:55:03 +0000 ROA not after: Wed 25 Feb 2026 03:00:03 +0000 asID: 38526 IP address blocks: 2405:3740:901b::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 20:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a8:5c:56:c6:d9:a8:80:26:df:bb:4c:6f:4e:b6:3c:6b:3e:ac:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Feb 26 02:55:03 2025 GMT Not After : Feb 25 03:00:03 2026 GMT Subject: CN=B3DA3A39FD67D2DE84F5C8F7C1CFE31EFFD458EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:31:af:45:48:0d:bc:76:78:3d:70:6d:22: 0c:85:55:63:54:1c:85:60:db:66:e1:00:42:1f:a0: 00:f8:1c:84:f6:bf:6b:53:7e:8f:b6:b5:ee:77:ec: 96:8b:76:8c:67:94:b8:03:cb:41:95:d2:1e:ec:48: 7e:40:d5:a4:93:72:46:f8:f3:3d:1e:3f:7d:2e:89: 43:43:85:56:5d:1e:b4:43:7d:07:75:e7:d8:89:3b: da:80:af:60:dd:48:85:00:eb:18:95:2e:72:d5:a3: a8:93:4a:42:97:bb:65:57:1e:15:3c:fe:87:fd:83: eb:91:f9:4f:a3:f1:67:cd:bf:18:42:2f:a8:16:41: 4b:d4:58:aa:a8:1d:60:c3:60:09:c6:09:12:9d:60: c1:ca:99:eb:fa:01:a5:fc:de:51:c6:55:dd:99:b2: dd:92:2a:43:7d:b2:ee:98:9d:67:eb:85:60:af:d5: 6a:02:36:9c:db:40:ed:ec:9f:df:dd:a4:9d:08:50: 11:91:9d:5c:82:98:28:35:85:21:c3:e2:9d:fc:73: ab:3d:ca:81:39:1c:76:de:42:8c:78:fe:00:ba:6f: f1:59:95:fb:22:54:d2:62:4d:44:25:ac:9c:d7:aa: 26:d0:d9:c7:1e:38:ea:19:58:7a:02:ba:2d:ce:f9: 75:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DA:3A:39:FD:67:D2:DE:84:F5:C8:F7:C1:CF:E3:1E:FF:D4:58:EF X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:901b::/48 Signature Algorithm: sha256WithRSAEncryption 6e:48:af:ec:2a:68:21:f0:63:10:aa:66:ea:4d:f8:28:5d:1e: 66:3e:48:13:d2:66:fd:f3:d3:59:56:0d:58:64:2e:e4:3c:95: 3a:9b:ba:fd:cc:c1:9e:44:bb:53:1a:64:6d:53:58:08:a4:a2: 7f:c8:90:af:a2:13:19:8c:9f:c5:27:a7:db:94:6e:95:76:7b: d5:df:0c:20:08:6b:1a:cd:a0:cd:75:1b:a2:e4:a2:a9:e0:12: c9:bb:ee:84:d9:a4:b2:9b:d2:85:2b:92:87:84:bf:3e:55:30: cd:74:3e:eb:c4:00:e2:f5:1a:a2:6c:a6:f7:0d:31:bf:6f:68: 7f:3b:ec:e3:79:57:4a:f2:ca:d8:d8:b0:a4:62:bc:f5:2a:8e: 24:33:4e:90:c1:88:f8:87:a3:7b:fc:aa:37:6b:7e:fa:2c:db: 81:7c:d6:fb:35:48:e4:22:dd:e8:59:0d:d1:6b:73:30:22:70: 2f:b6:2b:20:49:3c:14:ea:f7:66:4a:ce:dd:83:0b:fd:d9:e2: b4:93:10:21:1c:df:c0:8a:c9:2d:e8:00:e3:2f:8f:c6:24:3b: 4a:fe:d5:02:fe:23:b1:ca:13:a2:78:f0:10:f4:b0:d1:aa:5e: e8:af:3f:70:32:ed:e4:57:22:7a:b1:16:b2:2f:01:95:47:e4: e2:2f:75:c3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVKhcVsbZqIAm37tMb062PGs+rIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNTAyMjYwMjU1MDNaFw0yNjAyMjUwMzAwMDNaMDMxMTAvBgNV BAMTKEIzREEzQTM5RkQ2N0QyREU4NEY1QzhGN0MxQ0ZFMzFFRkZENDU4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLTGvRUgNvHZ4PXBtIgyFVWNU HIVg22bhAEIfoAD4HIT2v2tTfo+2te537JaLdoxnlLgDy0GV0h7sSH5A1aSTckb4 8z0eP30uiUNDhVZdHrRDfQd159iJO9qAr2DdSIUA6xiVLnLVo6iTSkKXu2VXHhU8 /of9g+uR+U+j8WfNvxhCL6gWQUvUWKqoHWDDYAnGCRKdYMHKmev6AaX83lHGVd2Z st2SKkN9su6YnWfrhWCv1WoCNpzbQO3sn9/dpJ0IUBGRnVyCmCg1hSHD4p38c6s9 yoE5HHbeQox4/gC6b/FZlfsiVNJiTUQlrJzXqibQ2cceOOoZWHoCui3O+XW9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUs9o6Of1n0t6E9cj3wc/jHv/UWO8wHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxNjIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAbMA0GCSqGSIb3DQEBCwUAA4IBAQBuSK/sKmgh8GMQqmbqTfgoXR5mPkgT0mb9 89NZVg1YZC7kPJU6m7r9zMGeRLtTGmRtU1gIpKJ/yJCvohMZjJ/FJ6fblG6VdnvV 3wwgCGsazaDNdRui5KKp4BLJu+6E2aSym9KFK5KHhL8+VTDNdD7rxADi9RqibKb3 DTG/b2h/O+zjeVdK8srY2LCkYrz1Ko4kM06QwYj4h6N7/Ko3a376LNuBfNb7NUjk It3oWQ3Ra3MwInAvtisgSTwU6vdmSs7dgwv92eK0kxAhHN/Aiskt6ADjL4/GJDtK /tUC/iOxyhOiePAQ9LDRql7orz9wMu3kVyJ6sRayLwGVR+TiL3XD -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:03 2025 by rpki-client on console.sobornost.net