$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa File: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (raw, json) Hash identifier: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk= Subject key identifier: D2:D8:B4:42:9D:72:51:1D:2B:C8:AA:DE:54:11:21:67:90:59:3C:5A Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 694B7BC42C2D97422D71AA621AAAE3A6C60D04F4 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa Signing time: Sun 16 Feb 2025 14:22:24 +0000 ROA not before: Sun 16 Feb 2025 14:17:24 +0000 ROA not after: Sun 15 Feb 2026 14:22:24 +0000 asID: 131705 IP address blocks: 2406:5c40:9999::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 01:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:4b:7b:c4:2c:2d:97:42:2d:71:aa:62:1a:aa:e3:a6:c6:0d:04:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Feb 16 14:17:24 2025 GMT Not After : Feb 15 14:22:24 2026 GMT Subject: CN=D2D8B4429D72511D2BC8AADE5411216790593C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:d2:44:ad:ff:2f:44:b0:ba:2d:6c:9b:8f: 2f:4e:13:21:0a:1f:29:66:20:db:69:9c:f5:d2:77: 6b:9b:54:c3:46:7d:64:2e:77:de:dd:e9:33:0f:2c: c1:40:54:2f:06:14:b8:d2:91:d4:03:2b:1e:83:3b: 5d:a8:99:7b:f6:4b:93:d7:b9:89:92:ec:83:c8:18: 5b:86:9b:4d:00:87:60:a9:c0:c8:8a:07:67:a6:07: b5:d5:c9:10:f9:02:4e:ff:2d:95:0d:15:55:de:cc: 47:4c:eb:99:9d:d1:a6:95:6c:96:6b:5d:5c:02:e4: e3:ff:4b:d2:eb:53:d5:4a:23:82:f8:5c:57:da:89: 92:9a:ea:e9:b4:c8:af:3c:1f:27:6f:49:93:b6:8c: 31:da:e7:df:e8:0b:55:56:21:d8:d7:74:4c:2a:30: 87:ba:b5:7b:ff:58:03:ed:c3:ed:44:9c:8c:8c:da: 72:12:c5:b7:7d:08:a0:48:3e:5d:b2:b8:84:f8:f1: 81:f4:ef:ee:03:75:1b:75:ef:3e:5c:fc:21:51:e2: 58:9f:a8:c9:ff:98:9d:3c:6f:92:c7:f9:92:78:a2: d5:72:af:fe:e6:5f:81:ac:69:35:7d:86:b2:4c:c3: 9e:44:71:c4:0a:2f:1a:43:13:41:43:9d:81:42:28: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D8:B4:42:9D:72:51:1D:2B:C8:AA:DE:54:11:21:67:90:59:3C:5A X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:5c40:9999::/48 Signature Algorithm: sha256WithRSAEncryption 15:6d:ec:0d:de:dd:2d:e4:c1:18:82:5c:61:0e:43:a8:52:33: 59:c7:88:f3:2d:e5:27:e1:b6:d2:59:0a:c0:2f:25:70:ce:c4: 28:46:5f:cd:2d:f5:f6:6d:b2:05:2b:e4:32:d6:e1:8b:a2:7a: 49:d2:71:1c:29:83:f1:d6:ee:ce:06:d6:a3:16:77:7d:6b:42: f5:b5:7d:87:3d:9e:2b:ec:41:3f:56:2f:30:bb:23:ea:f1:3d: e1:fe:51:41:3b:d9:60:b9:0c:0c:75:65:10:6b:06:f1:04:1f: 3f:a7:50:c9:2b:ca:6d:a3:5c:58:bd:f5:b1:cb:53:fd:b0:d1: 99:66:c6:0d:6d:6e:8d:5d:1e:60:c7:bf:fa:5d:78:3c:84:1e: 98:9b:29:0f:21:56:b4:fb:b3:16:7e:ae:9c:d6:6e:6a:8a:c7: 27:0d:e0:22:5e:e7:09:eb:77:fd:2a:76:a2:f7:06:41:0e:d3: e6:fa:34:b4:f1:c3:16:94:5f:3e:79:c0:19:07:98:e0:8f:c6: b1:02:eb:23:52:80:4b:55:ea:98:16:3a:63:4e:f3:cd:6e:e1: 84:1f:e9:35:52:ee:9d:9e:d3:3f:05:70:5b:a0:eb:62:c6:93: 47:de:46:99:c9:3c:d9:a6:0d:0f:88:65:6c:cf:d9:49:0e:1a: ec:7f:e4:3f -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUaUt7xCwtl0ItcapiGqrjpsYNBPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTAyMTYxNDE3MjRaFw0yNjAyMTUxNDIyMjRaMDMxMTAvBgNV BAMTKEQyRDhCNDQyOUQ3MjUxMUQyQkM4QUFERTU0MTEyMTY3OTA1OTNDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhNJErf8vRLC6LWybjy9OEyEK HylmINtpnPXSd2ubVMNGfWQud97d6TMPLMFAVC8GFLjSkdQDKx6DO12omXv2S5PX uYmS7IPIGFuGm00Ah2CpwMiKB2emB7XVyRD5Ak7/LZUNFVXezEdM65md0aaVbJZr XVwC5OP/S9LrU9VKI4L4XFfaiZKa6um0yK88HydvSZO2jDHa59/oC1VWIdjXdEwq MIe6tXv/WAPtw+1EnIyM2nISxbd9CKBIPl2yuIT48YH07+4DdRt17z5c/CFR4lif qMn/mJ08b5LH+ZJ4otVyr/7mX4GsaTV9hrJMw55EccQKLxpDE0FDnYFCKJBpAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU0ti0Qp1yUR0ryKreVBEhZ5BZPFowHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05 OWE0LTBmNDVlOGVjZjU3Ni8wLzMyMzQzMDM2M2EzNTYzMzQzMDNhMzkzOTM5Mzkz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzNzMwMzUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BlxAmZkwDQYJKoZIhvcNAQELBQADggEBABVt7A3e3S3kwRiCXGEOQ6hSM1nHiPMt 5SfhttJZCsAvJXDOxChGX80t9fZtsgUr5DLW4YuieknScRwpg/HW7s4G1qMWd31r QvW1fYc9nivsQT9WLzC7I+rxPeH+UUE72WC5DAx1ZRBrBvEEHz+nUMkrym2jXFi9 9bHLU/2w0Zlmxg1tbo1dHmDHv/pdeDyEHpibKQ8hVrT7sxZ+rpzWbmqKxycN4CJe 5wnrd/0qdqL3BkEO0+b6NLTxwxaUXz55wBkHmOCPxrEC6yNSgEtV6pgWOmNO881u 4YQf6TVS7p2e0z8FcFug62LGk0feRpnJPNmmDQ+IZWzP2UkOGux/5D8= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net