$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32322d3232203d3e203536323432.roa File: 3133372e35392e3136302e302f32322d3232203d3e203536323432.roa (raw, json) Hash identifier: rcz//AsSqiZg8aHXcowT/JjNbH5viCHfj8Kqlm0HRpc= Subject key identifier: 65:E5:18:4A:EC:69:59:F6:56:F5:AA:72:4C:AE:04:7A:EA:1E:6D:D3 Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Certificate serial: 6050A9BDEFCB29A56DD40E0FA51D971C7D7EA1C9 Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32322d3232203d3e203536323432.roa Signing time: Sat 11 Mar 2023 08:00:00 +0000 ROA not before: Sat 11 Mar 2023 07:55:00 +0000 ROA not after: Sat 09 Mar 2024 08:00:00 +0000 asID: 56242 IP address blocks: 137.59.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jan 2024 09:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:50:a9:bd:ef:cb:29:a5:6d:d4:0e:0f:a5:1d:97:1c:7d:7e:a1:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Validity Not Before: Mar 11 07:55:00 2023 GMT Not After : Mar 9 08:00:00 2024 GMT Subject: CN=65E5184AEC6959F656F5AA724CAE047AEA1E6DD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:be:f6:e7:0d:7c:ca:37:81:12:c9:ad:97: 61:d7:84:20:6b:07:14:cf:4b:1e:05:7c:13:4a:a8: ea:f5:80:47:03:8b:29:e2:1f:22:87:02:7a:df:11: 21:3a:79:4a:b3:f2:4e:32:7a:a4:1b:ba:9c:9d:6c: 20:34:73:29:61:0c:fe:09:55:fb:c4:66:c7:29:e9: f1:92:ea:9d:c1:94:88:47:27:f1:3c:62:00:0c:43: 92:17:79:c3:36:28:c9:c9:97:34:a8:d0:e9:ce:e4: df:d9:ec:31:e2:7b:d1:75:2d:ab:96:53:5c:92:ec: 05:47:5c:1d:0b:a7:88:22:ad:4b:39:71:b4:4f:a4: 4a:90:18:b1:98:3f:32:df:a1:b7:b4:81:44:6d:19: 8f:4c:2a:3e:3a:76:7b:5e:f5:ae:96:27:fe:4d:7f: 15:d5:79:5b:8b:bc:61:ff:b7:fd:11:f6:6e:35:2f: d5:fa:45:6f:2c:ec:5f:57:69:8c:4c:2b:81:ba:10: 17:77:bc:49:51:76:5a:86:1f:d3:77:cc:1d:13:6a: 6e:f4:a7:a4:0b:c9:d0:38:bd:f1:c3:d1:f6:4f:35: 7f:76:b3:53:8d:df:41:1b:6b:32:4c:34:b5:1b:7c: 34:55:24:cc:94:cf:5d:e4:4d:11:16:e5:10:d8:62: 4e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E5:18:4A:EC:69:59:F6:56:F5:AA:72:4C:AE:04:7A:EA:1E:6D:D3 X509v3 Authority Key Identifier: keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32322d3232203d3e203536323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.59.160.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:e3:2f:82:31:33:52:0e:38:66:88:25:6e:ff:b3:49:24:b6: ea:da:52:ea:9a:b7:22:35:5e:0d:b0:a0:e0:c5:73:d8:67:b2: 08:d4:1a:d7:57:2a:3f:b8:d9:b6:28:5e:14:c5:d6:09:93:79: 7a:75:27:1e:be:62:bc:93:c4:99:d9:d2:01:03:8b:ef:5a:56: fd:47:64:c8:d2:0f:68:25:38:63:e9:e7:7a:17:b6:8c:42:46: ae:79:c3:6a:8e:c8:49:74:06:27:83:8f:ed:43:05:0e:b8:8c: bd:23:b0:9b:c8:22:28:8c:d2:9a:30:09:01:f2:16:88:5c:02: 21:a9:5a:ec:2e:1d:e0:4e:21:44:f8:e6:df:66:4f:bc:a6:35: 86:ef:84:d9:a0:9a:2c:d0:91:61:da:30:db:79:69:87:c2:9a: 54:35:68:ca:30:45:8c:12:b9:b5:16:f2:e0:1b:f3:cf:73:54: 40:f9:61:b8:d2:77:86:44:da:a5:e5:04:4c:80:5a:38:8c:65: c0:56:df:3c:44:9f:33:16:01:6c:09:dc:4b:5d:69:92:e6:b8: 42:06:2b:82:2e:7a:f2:2b:07:cf:ef:73:17:35:69:72:a3:12: 2e:48:d4:39:87:61:52:c4:3b:3d:fc:17:c5:95:f6:8a:dc:5c: b8:3e:86:74 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYFCpve/LKaVt1A4PpR2XHH1+ockwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0 ODUzMEU5RTAeFw0yMzAzMTEwNzU1MDBaFw0yNDAzMDkwODAwMDBaMDMxMTAvBgNV BAMTKDY1RTUxODRBRUM2OTU5RjY1NkY1QUE3MjRDQUUwNDdBRUExRTZERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3b725w18yjeBEsmtl2HXhCBr BxTPSx4FfBNKqOr1gEcDiyniHyKHAnrfESE6eUqz8k4yeqQbupydbCA0cylhDP4J VfvEZscp6fGS6p3BlIhHJ/E8YgAMQ5IXecM2KMnJlzSo0OnO5N/Z7DHie9F1LauW U1yS7AVHXB0Lp4girUs5cbRPpEqQGLGYPzLfobe0gURtGY9MKj46dnte9a6WJ/5N fxXVeVuLvGH/t/0R9m41L9X6RW8s7F9XaYxMK4G6EBd3vElRdlqGH9N3zB0Tam70 p6QLydA4vfHD0fZPNX92s1ON30EbazJMNLUbfDRVJMyUz13kTREW5RDYYk7LAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUZeUYSuxpWfZW9apyTK4EeuoebdMwHwYDVR0j BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz MEU5RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05 ZmExLTE1NGNhMTU3OTIyMy8wLzMxMzMzNzJlMzUzOTJlMzEzNjMwMmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzUzNjMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAok7oDANBgkqhkiG 9w0BAQsFAAOCAQEAe+MvgjEzUg44Zoglbv+zSSS26tpS6pq3IjVeDbCg4MVz2Gey CNQa11cqP7jZtiheFMXWCZN5enUnHr5ivJPEmdnSAQOL71pW/UdkyNIPaCU4Y+nn ehe2jEJGrnnDao7ISXQGJ4OP7UMFDriMvSOwm8giKIzSmjAJAfIWiFwCIala7C4d 4E4hRPjm32ZPvKY1hu+E2aCaLNCRYdow23lph8KaVDVoyjBFjBK5tRby4Bvzz3NU QPlhuNJ3hkTapeUETIBaOIxlwFbfPESfMxYBbAncS11pkua4QgYrgi568isHz+9z FzVpcqMSLkjUOYdhUsQ7PfwXxZX2itxcuD6GdA== -----END CERTIFICATE-----Generated at Tue Jan 9 05:55:10 2024 by rpki-client on console.sobornost.net