$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa File: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (raw, json) Hash identifier: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs= Subject key identifier: 3D:44:21:46:48:7B:CB:5F:42:C1:7C:47:EB:52:2C:7B:F6:5C:AC:D1 Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Certificate serial: 561C8C01EADD922EAE64997AB903564447CC7EBC Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa Signing time: Wed 05 Mar 2025 05:00:02 +0000 ROA not before: Wed 05 Mar 2025 04:55:02 +0000 ROA not after: Wed 04 Mar 2026 05:00:02 +0000 asID: 452023 IP address blocks: 45.123.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 14:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1c:8c:01:ea:dd:92:2e:ae:64:99:7a:b9:03:56:44:47:cc:7e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Validity Not Before: Mar 5 04:55:02 2025 GMT Not After : Mar 4 05:00:02 2026 GMT Subject: CN=3D442146487BCB5F42C17C47EB522C7BF65CACD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:cc:69:66:4c:0d:5a:2a:82:3c:a9:42:fa: 67:bc:47:1f:ee:a1:5f:42:50:0b:fa:5c:c9:cb:07: 8f:1e:18:da:09:ba:9f:98:41:2f:b1:c4:f4:0b:98: 21:bd:ac:d8:18:36:de:44:f9:6a:e9:24:d0:75:dd: f3:e3:64:f0:e2:da:d5:4a:36:e9:96:12:7b:4e:f3: 9b:88:33:43:31:9c:da:57:89:1f:08:e2:7c:85:b3: 8d:d0:f8:d0:08:c3:f5:3d:fe:d3:16:95:da:5c:98: 7b:c5:6c:1b:7f:ec:4d:05:40:68:4b:10:c2:27:06: 6c:e3:52:49:f2:23:96:df:96:79:4f:71:77:6b:92: 28:b0:dd:fb:93:1d:ba:aa:7f:7f:b5:de:81:47:fa: 25:4e:80:33:a5:c5:b9:47:d9:03:d0:5e:7d:b2:fd: 30:72:a5:0b:c8:87:ca:5a:05:8e:e1:b7:36:b7:c8: c0:82:c6:db:5c:ee:37:b3:64:92:cd:c3:87:ad:46: 04:96:43:b3:f4:10:1e:ef:d7:fc:b1:e1:c4:3b:ba: 4f:5d:07:f7:f3:d0:aa:ef:b8:7b:12:8b:dd:ef:27: 16:6b:d5:74:5f:01:5f:d6:62:d0:9e:d5:55:07:51: 18:91:0c:51:33:3b:dd:5a:d2:e0:7e:a5:24:f1:0e: 3d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:44:21:46:48:7B:CB:5F:42:C1:7C:47:EB:52:2C:7B:F6:5C:AC:D1 X509v3 Authority Key Identifier: keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.143.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:ba:e2:35:6e:93:72:49:c2:17:ec:9e:85:5f:dd:9a:2d:c0: 06:28:36:f3:2f:30:24:81:6b:89:fe:57:20:86:07:8e:fe:e4: 93:0a:29:85:6b:84:f5:28:ea:64:fa:5c:1f:95:d3:cc:e3:92: 7b:1f:e3:d5:ac:b3:b7:81:72:21:c0:51:2c:03:7b:54:31:e5: b5:0e:04:79:82:4e:0e:ba:b3:e7:60:03:c6:e0:fe:f1:d7:68: a7:2c:ca:9d:36:0a:88:37:b3:62:32:1d:90:09:8b:2d:c7:cd: 72:c2:ac:38:44:8b:82:75:ef:70:32:d8:4a:41:83:27:61:50: db:0b:2f:14:6e:10:4f:57:83:0d:68:08:24:d6:7f:c9:1f:f2: 4d:e0:54:8a:05:f5:4f:af:a5:bf:7e:25:a8:c9:a8:ff:0f:56: cc:3b:23:f5:bc:d2:51:b1:36:26:b9:22:65:91:09:d7:79:4f: 73:81:4f:20:d5:30:2d:44:18:29:b3:ae:cd:52:df:79:ba:6d: 11:13:90:74:e5:6e:50:45:3e:19:15:f0:f5:82:35:a8:d6:01: 24:71:1d:32:a3:7b:42:2d:73:7a:f3:fe:b0:8d:f0:0e:c3:2c: 79:26:10:f8:74:99:a6:57:96:14:3b:2c:e7:d1:a0:66:d4:45: c3:36:33:75 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVhyMAerdki6uZJl6uQNWREfMfrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3Mjgx MzFCQzJEQTAeFw0yNTAzMDUwNDU1MDJaFw0yNjAzMDQwNTAwMDJaMDMxMTAvBgNV BAMTKDNENDQyMTQ2NDg3QkNCNUY0MkMxN0M0N0VCNTIyQzdCRjY1Q0FDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF88xpZkwNWiqCPKlC+me8Rx/u oV9CUAv6XMnLB48eGNoJup+YQS+xxPQLmCG9rNgYNt5E+WrpJNB13fPjZPDi2tVK NumWEntO85uIM0MxnNpXiR8I4nyFs43Q+NAIw/U9/tMWldpcmHvFbBt/7E0FQGhL EMInBmzjUknyI5bflnlPcXdrkiiw3fuTHbqqf3+13oFH+iVOgDOlxblH2QPQXn2y /TBypQvIh8paBY7htza3yMCCxttc7jezZJLNw4etRgSWQ7P0EB7v1/yx4cQ7uk9d B/fz0KrvuHsSi93vJxZr1XRfAV/WYtCe1VUHURiRDFEzO91a0uB+pSTxDj1fAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPUQhRkh7y19CwXxH61Ise/ZcrNEwHwYDVR0j BBgwFoAUEqghDmqRqT3bkvWU1+R3KBMbwtowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTgyODA2Ny1lN2MxLTQ5NjQtODQyOC01OTkwMzNkNzQyOTYvMC8xMkE4MjEwRTZB OTFBOTNEREI5MkY1OTREN0U0NzcyODEzMUJDMkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3MjgxMzFC QzJEQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExODI4MDY3LWU3YzEtNDk2NC04 NDI4LTU5OTAzM2Q3NDI5Ni8wLzM0MzUyZTMxMzIzMzJlMzEzNDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzAzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXuPMA0GCSqG SIb3DQEBCwUAA4IBAQBcuuI1bpNyScIX7J6FX92aLcAGKDbzLzAkgWuJ/lcghgeO /uSTCimFa4T1KOpk+lwfldPM45J7H+PVrLO3gXIhwFEsA3tUMeW1DgR5gk4OurPn YAPG4P7x12inLMqdNgqIN7NiMh2QCYstx81ywqw4RIuCde9wMthKQYMnYVDbCy8U bhBPV4MNaAgk1n/JH/JN4FSKBfVPr6W/fiWoyaj/D1bMOyP1vNJRsTYmuSJlkQnX eU9zgU8g1TAtRBgps67NUt95um0RE5B05W5QRT4ZFfD1gjWo1gEkcR0yo3tCLXN6 8/6wjfAOwyx5JhD4dJmmV5YUOyzn0aBm1EXDNjN1 -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:48 2025 by rpki-client on console.sobornost.net