$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3332203d3e203338353236.roa File: 323430353a333734303a3a2f33322d3332203d3e203338353236.roa (raw, json) Hash identifier: 6a3NMKbD4UnpsuwEWPnlec493XlN0AGEH9RkkJq+gFY= Subject key identifier: A7:29:89:BD:4B:B7:61:5F:84:39:73:12:CA:C6:30:D7:5D:77:DC:76 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: AA2829C9D5C8CB90A776CA580D3D36833AF07B Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3332203d3e203338353236.roa Signing time: Wed 29 Jan 2025 07:00:02 +0000 ROA not before: Wed 29 Jan 2025 06:55:02 +0000 ROA not after: Wed 28 Jan 2026 07:00:02 +0000 asID: 38526 IP address blocks: 2405:3740::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 20:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: aa:28:29:c9:d5:c8:cb:90:a7:76:ca:58:0d:3d:36:83:3a:f0:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Jan 29 06:55:02 2025 GMT Not After : Jan 28 07:00:02 2026 GMT Subject: CN=A72989BD4BB7615F84397312CAC630D75D77DC76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:f4:cb:17:e0:16:7d:5f:ad:44:10:17:86: 6a:b5:73:fc:5f:22:41:70:aa:47:ff:66:1d:35:75: 0d:42:db:b7:ee:4b:d2:93:ac:ba:21:af:e4:1d:be: 96:ac:7c:e5:db:83:58:c1:84:0c:1d:eb:45:17:c7: b5:54:d4:a8:97:6e:83:fa:8f:37:84:fe:38:31:37: e4:f8:53:8e:aa:02:f1:bb:8b:d0:e6:2f:f3:7d:38: 18:fd:c2:ca:5f:8d:b1:3c:ba:4d:d6:ce:1c:0a:73: 49:a6:65:f8:0e:5d:1d:62:1b:5b:89:6b:db:40:3c: 08:58:a4:78:5f:bb:9c:1a:0e:20:e2:27:6a:c7:91: b7:08:42:51:8f:5a:16:17:c7:c4:4c:54:3c:f2:a0: c5:79:52:c8:26:98:45:6b:f9:4e:ef:4c:95:68:11: 53:51:3a:64:8e:41:ad:84:c3:96:f7:1a:81:48:b2: bc:55:32:ef:88:fb:a9:b8:d7:e5:97:78:fe:ea:31: da:be:b1:33:70:5e:a9:c4:ed:17:d5:86:d3:11:64: 00:90:07:41:e0:38:14:49:a6:60:21:43:31:bc:7a: 8c:81:15:fb:05:fb:41:d4:f9:a2:ce:ee:80:fc:c9: 0a:62:26:c9:de:54:ee:cd:4f:12:61:11:97:9a:66: 44:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:29:89:BD:4B:B7:61:5F:84:39:73:12:CA:C6:30:D7:5D:77:DC:76 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3332203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740::/32 Signature Algorithm: sha256WithRSAEncryption df:d4:65:5c:bb:8a:34:69:dc:58:a9:25:90:f2:5e:c1:cc:e6: 74:fd:1d:73:67:13:92:83:aa:24:01:a0:1e:1b:cc:be:a4:42: 15:28:d1:42:0d:7a:dd:10:5d:27:13:08:ac:1b:34:ba:22:74: 6e:3a:66:00:19:e9:44:97:2a:8f:57:43:ce:ea:84:ca:0a:43: f2:ea:40:0c:09:e3:c3:ca:9a:f1:5a:79:d7:dc:2c:1d:c3:7a: 5b:44:f7:7a:ef:6e:e8:18:06:08:b0:4b:60:e9:57:c7:a5:d5: e9:32:08:d2:3a:48:8f:c8:4a:92:70:42:29:f5:19:a8:31:98: 94:92:9b:67:1c:cf:c0:ad:c2:13:48:2b:fa:24:bb:40:d1:9f: 10:70:12:85:fd:d6:e8:71:3d:40:ac:d0:e0:5b:23:a7:0d:76: 19:b1:f2:c4:b0:28:5f:55:87:e6:e2:54:8d:8d:fb:f3:e0:d5: 7e:97:cc:df:1b:47:6a:06:05:5f:c5:d0:9c:a4:55:6a:33:97: d2:90:24:6f:68:65:8b:71:03:72:5b:3c:7c:8f:e8:04:0c:99: 91:14:34:ab:bc:09:a2:18:2f:34:5e:3c:17:cc:95:2f:8c:8f: f3:61:ec:88:6f:de:7b:31:ee:b5:db:8d:24:11:11:50:5f:e6: 63:ff:e9:f8 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUAKooKcnVyMuQp3bKWA09NoM68HswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNTAxMjkwNjU1MDJaFw0yNjAxMjgwNzAwMDJaMDMxMTAvBgNV BAMTKEE3Mjk4OUJENEJCNzYxNUY4NDM5NzMxMkNBQzYzMEQ3NUQ3N0RDNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlfTLF+AWfV+tRBAXhmq1c/xf IkFwqkf/Zh01dQ1C27fuS9KTrLohr+QdvpasfOXbg1jBhAwd60UXx7VU1KiXboP6 jzeE/jgxN+T4U46qAvG7i9DmL/N9OBj9wspfjbE8uk3WzhwKc0mmZfgOXR1iG1uJ a9tAPAhYpHhfu5waDiDiJ2rHkbcIQlGPWhYXx8RMVDzyoMV5UsgmmEVr+U7vTJVo EVNROmSOQa2Ew5b3GoFIsrxVMu+I+6m41+WXeP7qMdq+sTNwXqnE7RfVhtMRZACQ B0HgOBRJpmAhQzG8eoyBFfsF+0HU+aLO7oD8yQpiJsneVO7NTxJhEZeaZkSDAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUpymJvUu3YV+EOXMSysYw11133HYwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMzMzgzNTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBTdAMA0GCSqGSIb3 DQEBCwUAA4IBAQDf1GVcu4o0adxYqSWQ8l7BzOZ0/R1zZxOSg6okAaAeG8y+pEIV KNFCDXrdEF0nEwisGzS6InRuOmYAGelElyqPV0PO6oTKCkPy6kAMCePDyprxWnnX 3Cwdw3pbRPd6727oGAYIsEtg6VfHpdXpMgjSOkiPyEqScEIp9RmoMZiUkptnHM/A rcITSCv6JLtA0Z8QcBKF/dbocT1ArNDgWyOnDXYZsfLEsChfVYfm4lSNjfvz4NV+ l8zfG0dqBgVfxdCcpFVqM5fSkCRvaGWLcQNyWzx8j+gEDJmRFDSrvAmiGC80XjwX zJUvjI/zYeyIb957Me61240kERFQX+Zj/+n4 -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:03 2025 by rpki-client on console.sobornost.net