$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa File: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (raw, json) Hash identifier: DcGxDHPqViJVOJR4+8wZK4plCpX0AqnB3wzHsVU0B/I= Subject key identifier: 1E:36:26:4C:76:11:86:20:82:ED:BA:06:AD:BE:3C:F6:32:43:ED:D0 Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Certificate serial: 3A5D7DED21478BBC55708F1A41E6C5F87575A5D3 Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa Signing time: Fri 31 Jan 2025 11:00:01 +0000 ROA not before: Fri 31 Jan 2025 10:55:01 +0000 ROA not after: Fri 30 Jan 2026 11:00:01 +0000 asID: 9875 IP address blocks: 2001:f20:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5d:7d:ed:21:47:8b:bc:55:70:8f:1a:41:e6:c5:f8:75:75:a5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Validity Not Before: Jan 31 10:55:01 2025 GMT Not After : Jan 30 11:00:01 2026 GMT Subject: CN=1E36264C7611862082EDBA06ADBE3CF63243EDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:fa:7a:6d:41:3f:4e:36:91:d9:63:b6:07: fa:26:21:6d:51:f5:c7:17:5e:ec:bc:ba:af:ac:9e: c6:af:b2:e2:da:7c:33:c5:36:d8:b2:3a:4a:77:45: 43:55:4c:f3:0c:64:81:1e:b2:c6:8a:4f:30:66:8d: a4:86:89:da:4b:63:69:f8:af:0c:26:25:97:b5:b2: cf:32:8d:1a:db:92:cf:59:d1:66:4d:9e:6a:49:57: 3d:84:b0:e3:43:2e:34:47:00:5f:9f:55:b5:62:8b: 05:ff:ec:0c:36:9b:38:23:93:fa:92:f7:1c:53:04: ae:96:90:a8:2c:4e:ae:88:78:fa:82:53:2a:4b:ae: da:c6:ee:30:43:05:30:af:17:b4:fa:85:7a:60:7f: f6:ed:9a:2b:60:98:57:37:b8:41:2e:71:e7:15:2d: 6a:1e:4a:1d:f5:cd:24:91:dd:5d:7e:6b:ab:d9:00: 22:0d:28:7c:58:4d:6a:1c:8c:e3:8a:fc:17:19:a9: cc:20:2b:11:7d:23:95:80:9f:41:b2:8a:6d:8e:7f: dd:f8:c1:51:2e:2c:8e:e3:0d:6c:4f:c7:a9:e0:28: 9a:ae:3d:df:18:60:2e:2c:e4:68:33:c7:66:ee:b3: ee:6f:4f:1b:66:af:02:29:7a:79:f3:80:ba:2a:fb: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:36:26:4C:76:11:86:20:82:ED:BA:06:AD:BE:3C:F6:32:43:ED:D0 X509v3 Authority Key Identifier: keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:f20:2000::/36 Signature Algorithm: sha256WithRSAEncryption 98:41:d0:4b:6b:82:2c:2c:4b:af:d5:78:56:ee:56:07:95:79: e0:22:cb:ba:bd:f9:63:2c:ad:71:a8:68:9a:40:60:1d:7d:dc: af:d2:f0:33:47:dd:83:d6:13:02:9e:95:ba:a9:21:9f:1f:40: 87:ff:db:20:7d:e7:2b:84:e1:8a:da:f1:fc:d4:24:ed:64:af: 64:53:5f:a9:da:6b:1e:1d:4a:61:15:0e:21:f3:9e:54:0b:73: 59:11:1d:e3:2b:1b:f1:85:ad:2e:ae:d5:1c:a9:b8:16:d6:75: e3:d9:49:ad:a7:59:30:f9:e5:ae:8b:e7:48:0c:b8:1c:af:7e: 22:ee:2c:20:10:f2:fb:b3:d0:9d:8c:5d:dc:c7:bd:b5:80:e1: c3:64:a7:1a:6d:14:06:7a:c8:6f:a3:61:17:6f:47:dc:71:7d: 49:c5:fa:e2:24:d6:dd:ad:21:cb:68:8b:d1:91:86:36:69:fd: 8e:3d:65:a4:f2:ed:ec:27:6a:25:0c:9f:72:a7:53:45:e3:06: bb:d2:f6:16:50:ca:72:9a:c5:90:1e:88:7a:d5:2a:32:2a:bf: fe:25:c2:46:67:e8:8b:70:de:87:7b:58:b6:24:06:77:35:67: f1:68:e9:95:e6:2e:2e:87:78:94:16:52:e7:85:38:b7:ef:7b: f0:73:75:6c -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIUOl197SFHi7xVcI8aQebF+HV1pdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG MjhGODA2NjAeFw0yNTAxMzExMDU1MDFaFw0yNjAxMzAxMTAwMDFaMDMxMTAvBgNV BAMTKDFFMzYyNjRDNzYxMTg2MjA4MkVEQkEwNkFEQkUzQ0Y2MzI0M0VERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9rPp6bUE/TjaR2WO2B/omIW1R 9ccXXuy8uq+snsavsuLafDPFNtiyOkp3RUNVTPMMZIEessaKTzBmjaSGidpLY2n4 rwwmJZe1ss8yjRrbks9Z0WZNnmpJVz2EsONDLjRHAF+fVbViiwX/7Aw2mzgjk/qS 9xxTBK6WkKgsTq6IePqCUypLrtrG7jBDBTCvF7T6hXpgf/btmitgmFc3uEEucecV LWoeSh31zSSR3V1+a6vZACINKHxYTWocjOOK/BcZqcwgKxF9I5WAn0Gyim2Of934 wVEuLI7jDWxPx6ngKJquPd8YYC4s5Ggzx2bus+5vTxtmrwIpennzgLoq+6oNAgMB AAGjggI4MIICNDAdBgNVHQ4EFgQUHjYmTHYRhiCC7boGrb489jJD7dAwHwYDVR0j BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1 MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG ODA2Ni5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMDMxM2E2NjMyMzAzYTMyMzAzMDMwM2Ez YTJmMzMzNjJkMzQzODIwM2QzZTIwMzkzODM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQgAQ8gIDAN BgkqhkiG9w0BAQsFAAOCAQEAmEHQS2uCLCxLr9V4Vu5WB5V54CLLur35Yyytcaho mkBgHX3cr9LwM0fdg9YTAp6Vuqkhnx9Ah//bIH3nK4Thitrx/NQk7WSvZFNfqdpr Hh1KYRUOIfOeVAtzWREd4ysb8YWtLq7VHKm4FtZ149lJradZMPnlrovnSAy4HK9+ Iu4sIBDy+7PQnYxd3Me9tYDhw2SnGm0UBnrIb6NhF29H3HF9ScX64iTW3a0hy2iL 0ZGGNmn9jj1lpPLt7CdqJQyfcqdTReMGu9L2FlDKcprFkB6IetUqMiq//iXCRmfo i3Deh3tYtiQGdzVn8WjpleYuLod4lBZS54U4t+978HN1bA== -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net