$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136332e302f32342d3234203d3e203536323432.roa File: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (raw, json) Hash identifier: nBHgJ9scpxnDLh4WsmH3WPakx6Rx02RsuPBuZbUxKAs= Subject key identifier: 0C:66:0D:AE:A6:6B:8F:1E:C7:91:14:79:FB:20:85:05:70:5F:42:DC Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Certificate serial: 18D22B57C6ACBDEEC75036F7A16CB373BBC5850D Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136332e302f32342d3234203d3e203536323432.roa Signing time: Sat 11 Jan 2025 10:00:00 +0000 ROA not before: Sat 11 Jan 2025 09:55:00 +0000 ROA not after: Sat 10 Jan 2026 10:00:00 +0000 asID: 56242 IP address blocks: 137.59.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d2:2b:57:c6:ac:bd:ee:c7:50:36:f7:a1:6c:b3:73:bb:c5:85:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Validity Not Before: Jan 11 09:55:00 2025 GMT Not After : Jan 10 10:00:00 2026 GMT Subject: CN=0C660DAEA66B8F1EC7911479FB208505705F42DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:44:2d:68:58:e4:27:05:b6:a9:53:7c:5d: 30:4b:5b:68:c7:f3:b0:be:e1:9a:2b:de:14:c4:81: 6f:0d:68:85:e3:01:36:11:ce:a7:39:9b:e0:bd:b9: b4:9a:e6:35:30:0e:4b:f0:01:bc:51:95:d2:ba:ed: 28:86:f8:62:01:9d:69:72:6f:13:5c:bc:e3:81:2c: 0a:31:cf:ab:72:3f:47:ff:7c:4c:69:98:f8:ca:a6: 69:43:38:41:f4:67:53:44:74:43:1c:36:31:0f:da: ce:8e:52:f9:86:32:71:c2:ad:da:53:ad:0a:e0:8b: b5:80:a4:21:23:17:92:a6:92:8f:83:b7:c9:00:64: dd:b6:5f:9b:9a:52:eb:6a:2d:b9:fa:1a:ed:22:fc: 69:08:6c:a1:aa:fc:26:ee:f7:39:13:5a:20:02:e2: de:4e:19:d2:66:82:72:32:d3:71:b0:5b:38:bf:04: f2:be:e4:2b:75:5d:53:f4:3f:aa:ed:8d:f7:35:4a: 08:d3:50:c3:74:44:4c:a9:28:a9:d1:b6:ed:c6:da: aa:d4:98:52:01:99:75:9b:06:cc:cf:ed:44:9b:46: 04:88:db:4d:da:b1:0d:02:d4:cb:1c:9e:b6:b6:36: 6d:06:cc:af:e6:98:f4:f1:96:e5:20:9a:dd:4d:a9: 80:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:66:0D:AE:A6:6B:8F:1E:C7:91:14:79:FB:20:85:05:70:5F:42:DC X509v3 Authority Key Identifier: keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136332e302f32342d3234203d3e203536323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.59.163.0/24 Signature Algorithm: sha256WithRSAEncryption 08:20:06:47:2a:d5:70:98:fa:27:d8:2f:e8:48:3a:88:78:53: 4f:4b:1a:b7:8c:70:c6:b8:c6:b3:42:c9:a8:28:80:60:52:c4: 17:4c:13:87:51:d6:30:95:37:4d:54:79:4d:09:5d:62:bd:6d: fb:9f:8a:ed:2f:67:31:b5:40:f4:ee:22:f7:2b:8d:55:3e:61: db:f4:1b:a0:c6:d6:af:ca:3c:f4:f8:69:3c:97:e0:38:6e:08: 45:34:8d:15:04:cf:61:ba:1e:bc:db:62:1a:a5:83:58:5e:ad: 46:f3:77:98:c7:a2:79:e6:0e:e6:07:2a:1c:4e:8f:cf:28:ef: 5f:08:09:b5:a4:c5:1e:9c:1f:02:8b:40:cf:4a:25:61:b3:53: 0e:32:1a:d3:63:06:32:0f:ea:5d:a2:2f:0a:f1:94:22:9f:65: af:cc:e8:bb:11:9d:3e:5d:c2:39:40:74:52:8d:40:e2:f7:a3: bd:72:2f:35:11:f6:18:37:80:8e:c9:27:ac:ac:42:1c:9d:21: 4a:b7:44:a4:a1:65:db:a3:02:6b:f1:8c:79:5b:af:ff:28:32: 72:9d:3c:1c:83:cf:35:1a:ae:71:db:c1:05:6b:55:05:af:68: 97:8a:8a:cc:c1:fc:10:92:67:71:d7:23:76:11:a4:14:1a:1d: 6d:51:14:5b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGNIrV8asve7HUDb3oWyzc7vFhQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0 ODUzMEU5RTAeFw0yNTAxMTEwOTU1MDBaFw0yNjAxMTAxMDAwMDBaMDMxMTAvBgNV BAMTKDBDNjYwREFFQTY2QjhGMUVDNzkxMTQ3OUZCMjA4NTA1NzA1RjQyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8EQtaFjkJwW2qVN8XTBLW2jH 87C+4Zor3hTEgW8NaIXjATYRzqc5m+C9ubSa5jUwDkvwAbxRldK67SiG+GIBnWly bxNcvOOBLAoxz6tyP0f/fExpmPjKpmlDOEH0Z1NEdEMcNjEP2s6OUvmGMnHCrdpT rQrgi7WApCEjF5Kmko+Dt8kAZN22X5uaUutqLbn6Gu0i/GkIbKGq/Cbu9zkTWiAC 4t5OGdJmgnIy03GwWzi/BPK+5Ct1XVP0P6rtjfc1SgjTUMN0REypKKnRtu3G2qrU mFIBmXWbBszP7USbRgSI203asQ0C1Mscnra2Nm0GzK/mmPTxluUgmt1NqYAhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUDGYNrqZrjx7HkRR5+yCFBXBfQtwwHwYDVR0j BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz MEU5RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05 ZmExLTE1NGNhMTU3OTIyMy8wLzMxMzMzNzJlMzUzOTJlMzEzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIk7ozANBgkqhkiG 9w0BAQsFAAOCAQEACCAGRyrVcJj6J9gv6Eg6iHhTT0sat4xwxrjGs0LJqCiAYFLE F0wTh1HWMJU3TVR5TQldYr1t+5+K7S9nMbVA9O4i9yuNVT5h2/QboMbWr8o89Php PJfgOG4IRTSNFQTPYboevNtiGqWDWF6tRvN3mMeieeYO5gcqHE6PzyjvXwgJtaTF HpwfAotAz0olYbNTDjIa02MGMg/qXaIvCvGUIp9lr8zouxGdPl3COUB0Uo1A4vej vXIvNRH2GDeAjsknrKxCHJ0hSrdEpKFl26MCa/GMeVuv/ygycp08HIPPNRqucdvB BWtVBa9ol4qKzMH8EJJncdcjdhGkFBodbVEUWw== -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:05 2025 by rpki-client on console.sobornost.net