$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa File: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (raw, json) Hash identifier: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng= Subject key identifier: 16:A5:1F:1D:D6:18:B8:7C:5F:BB:FB:34:27:B8:37:9C:FE:FE:53:A7 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 02A07DD4754F5DF0EC7CB352CB23AF13F72E7B0E Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa Signing time: Sun 16 Feb 2025 14:21:35 +0000 ROA not before: Sun 16 Feb 2025 14:16:35 +0000 ROA not after: Sun 15 Feb 2026 14:21:35 +0000 asID: 131705 IP address blocks: 2406:5c40:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 01:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a0:7d:d4:75:4f:5d:f0:ec:7c:b3:52:cb:23:af:13:f7:2e:7b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Feb 16 14:16:35 2025 GMT Not After : Feb 15 14:21:35 2026 GMT Subject: CN=16A51F1DD618B87C5FBBFB3427B8379CFEFE53A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:85:8a:b5:92:93:48:33:7f:f2:53:2e:0f: 24:3d:3d:c0:b2:11:5c:1f:8c:37:dd:b1:68:70:99: 7f:47:bb:3b:b2:eb:0b:35:92:2b:23:26:34:35:4f: 52:39:47:1c:ad:6b:b7:b8:89:18:74:c7:68:14:ca: b0:f2:66:46:41:fd:96:2f:9c:c6:eb:03:90:21:29: 1e:fa:05:da:93:91:cc:71:6c:e2:aa:5e:4c:07:5c: c4:08:e6:d3:f9:c0:af:ea:84:8b:c4:5f:ca:7a:29: 60:61:cd:b1:ee:aa:66:b3:60:37:43:86:38:6d:64: 7b:e0:7a:45:1d:7b:c6:cb:c0:98:ae:d6:b0:78:5b: 9e:29:b5:5b:8d:3f:e0:e6:9a:bf:5e:32:93:81:f1: 4e:f4:8d:d5:e9:4f:36:d9:a4:7b:bb:13:c8:1d:10: 38:d0:fb:34:c5:13:30:7f:00:cd:3d:14:fd:60:6a: 7f:fb:48:86:c6:a6:69:6c:57:dc:47:c7:1e:cf:1f: 46:fc:1b:9f:1a:46:28:e3:de:86:98:c9:73:af:68: e4:22:76:a9:67:e1:6b:da:87:f4:a5:76:fd:59:8d: a7:2a:22:9f:aa:5f:2c:77:ea:0e:e5:ca:a4:82:fc: 09:d0:df:6b:e8:40:6d:cc:f7:11:7a:d5:0d:4f:52: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A5:1F:1D:D6:18:B8:7C:5F:BB:FB:34:27:B8:37:9C:FE:FE:53:A7 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:5c40:8888::/48 Signature Algorithm: sha256WithRSAEncryption 72:e2:10:ae:e3:0e:0a:e0:fc:31:f3:f1:d4:2c:83:79:2e:70: 7b:24:55:fb:48:9a:b6:17:81:8d:b5:69:51:48:c4:7d:4e:60: 09:f1:86:6a:6b:de:2f:2b:69:ae:1a:64:df:f4:96:1c:b9:56: 55:7e:81:df:06:26:82:18:41:f5:d0:54:b8:c0:c4:c1:0c:77: 97:a8:45:42:d7:43:30:bd:c7:85:d2:5d:2a:7d:d9:42:be:6b: 5c:09:07:5d:eb:a6:32:7e:43:da:77:11:03:69:f6:67:5d:e7: 3c:39:c2:e0:25:13:c2:78:38:33:05:3b:21:f9:45:3b:13:83: bb:cc:dd:7e:af:ba:91:48:bd:11:8d:1e:db:16:5a:1b:ad:02: 52:39:b6:7f:f8:ea:9a:08:da:f5:0e:e7:b2:d8:0e:e2:bf:bb: 59:b6:04:26:89:5f:58:54:ba:8d:60:33:15:a1:bf:5f:44:10: d6:a1:f2:2c:ae:48:f9:e5:be:4e:ea:31:1c:4a:2f:29:3e:65: 82:a5:05:46:52:71:ab:67:f4:33:7f:44:73:b6:23:b1:a9:ed: a8:69:5b:43:52:bd:9c:43:09:fc:3c:2e:cb:81:99:bd:e7:c5: 63:59:39:e7:69:94:be:f4:f7:e4:4f:10:cf:f1:e7:1e:44:06: 2e:df:e1:68 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUAqB91HVPXfDsfLNSyyOvE/cuew4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTAyMTYxNDE2MzVaFw0yNjAyMTUxNDIxMzVaMDMxMTAvBgNV BAMTKDE2QTUxRjFERDYxOEI4N0M1RkJCRkIzNDI3QjgzNzlDRkVGRTUzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChToWKtZKTSDN/8lMuDyQ9PcCy EVwfjDfdsWhwmX9Huzuy6ws1kisjJjQ1T1I5Rxyta7e4iRh0x2gUyrDyZkZB/ZYv nMbrA5AhKR76BdqTkcxxbOKqXkwHXMQI5tP5wK/qhIvEX8p6KWBhzbHuqmazYDdD hjhtZHvgekUde8bLwJiu1rB4W54ptVuNP+Dmmr9eMpOB8U70jdXpTzbZpHu7E8gd EDjQ+zTFEzB/AM09FP1gan/7SIbGpmlsV9xHxx7PH0b8G58aRijj3oaYyXOvaOQi dqln4Wvah/Sldv1ZjacqIp+qXyx36g7lyqSC/AnQ32voQG3M9xF61Q1PUmxNAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUFqUfHdYYuHxfu/s0J7g3nP7+U6cwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05 OWE0LTBmNDVlOGVjZjU3Ni8wLzMyMzQzMDM2M2EzNTYzMzQzMDNhMzgzODM4Mzgz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzNzMwMzUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BlxAiIgwDQYJKoZIhvcNAQELBQADggEBAHLiEK7jDgrg/DHz8dQsg3kucHskVftI mrYXgY21aVFIxH1OYAnxhmpr3i8raa4aZN/0lhy5VlV+gd8GJoIYQfXQVLjAxMEM d5eoRULXQzC9x4XSXSp92UK+a1wJB13rpjJ+Q9p3EQNp9mdd5zw5wuAlE8J4ODMF OyH5RTsTg7vM3X6vupFIvRGNHtsWWhutAlI5tn/46poI2vUO57LYDuK/u1m2BCaJ X1hUuo1gMxWhv19EENah8iyuSPnlvk7qMRxKLyk+ZYKlBUZScatn9DN/RHO2I7Gp 7ahpW0NSvZxDCfw8LsuBmb3nxWNZOedplL709+RPEM/x5x5EBi7f4Wg= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net