$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36372e302f32342d3234203d3e20313532303339.roa File: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (raw, json) Hash identifier: PIB1m7UZc9kcov7LjZoIh/Ol3lgnFrAZfbEkkmZBCd0= Subject key identifier: 88:D9:D1:2E:C1:60:8F:62:E3:F2:F6:C3:A6:35:60:D4:1A:46:17:8B Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 612906DC932312BD977A33AF8FA0B546086814E2 Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36372e302f32342d3234203d3e20313532303339.roa Signing time: Sun 24 Nov 2024 19:49:05 +0000 ROA not before: Sun 24 Nov 2024 19:44:05 +0000 ROA not after: Sun 23 Nov 2025 19:49:05 +0000 asID: 152039 IP address blocks: 27.124.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:29:06:dc:93:23:12:bd:97:7a:33:af:8f:a0:b5:46:08:68:14:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Nov 24 19:44:05 2024 GMT Not After : Nov 23 19:49:05 2025 GMT Subject: CN=88D9D12EC1608F62E3F2F6C3A63560D41A46178B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:38:d7:e0:7d:36:15:31:0a:86:e5:f8:c7: c2:fc:9c:5e:27:d5:5e:a5:cf:38:15:be:ee:45:fd: 2f:f5:91:2a:80:28:02:fc:05:85:48:fc:36:00:d3: ba:4a:9d:c5:68:8a:49:2e:bf:13:6e:9c:81:c8:47: 8f:10:83:9f:1a:83:20:28:fd:07:6d:2f:f9:76:e0: 60:b4:32:3a:fc:ed:13:ef:38:23:ea:08:2a:bf:a7: be:1d:bf:c2:b1:5c:65:de:a5:02:7b:29:4d:0f:64: 5e:72:2b:77:62:2a:27:24:ab:bb:94:df:50:74:55: b8:3e:fa:65:8a:ff:1b:ca:65:19:a1:b6:48:af:36: 13:25:10:f3:b9:3f:a2:2a:dd:84:54:e9:ac:c4:b8: 7a:54:06:cf:fc:69:7a:92:dc:e7:1e:2d:72:b0:41: 60:ef:4a:9f:79:eb:8e:60:c6:26:11:ff:46:36:d8: bc:6f:bb:02:e2:a0:c7:1e:91:79:63:e7:3c:8c:8b: b2:45:43:9f:3e:cc:2a:11:9c:08:a3:01:53:15:8a: de:1b:73:b8:6e:3a:94:87:bc:55:4c:95:9f:66:44: 07:93:cd:cf:cd:09:66:61:38:aa:0d:5e:8d:62:22: f6:5a:78:13:8c:93:7d:59:c1:96:22:7d:7f:cb:c3: fb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D9:D1:2E:C1:60:8F:62:E3:F2:F6:C3:A6:35:60:D4:1A:46:17:8B X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36372e302f32342d3234203d3e20313532303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.67.0/24 Signature Algorithm: sha256WithRSAEncryption 12:7c:95:d9:e0:5e:1b:ab:c7:31:97:82:99:0e:b9:85:0b:12: 0c:75:e3:54:71:89:57:1f:4a:24:8c:85:d2:6a:89:4d:3f:bb: 7d:b1:de:cf:e8:53:b9:80:f6:ac:65:23:e7:c0:a3:c2:e3:19: 40:c6:2f:a9:3a:b0:ea:e6:94:26:61:9c:10:0c:0c:43:fc:b5: b3:3e:c0:46:22:d9:49:67:7c:f1:42:cf:30:5b:c8:d3:3b:23: 38:5b:07:9d:b1:1a:ab:4a:b4:fb:30:f1:bc:f6:3d:00:ee:8f: db:18:e5:1a:09:1e:77:52:ab:22:cf:d6:b4:c7:cc:63:b2:b3: 9f:d9:2f:30:d5:cf:78:04:73:8e:4e:1a:2a:a1:4d:9a:f7:de: c3:8f:32:f2:64:f5:e1:21:b8:91:62:d2:07:b8:4c:d1:81:c3: cb:7d:1e:eb:2a:98:32:4f:98:30:14:50:da:5c:73:21:03:d4: f0:ca:e6:de:02:25:2a:80:cb:e4:25:4c:fb:de:63:71:ce:a9: b5:5f:40:1b:4d:ad:68:1b:bc:c1:af:4e:78:15:2f:2a:f7:67: 54:97:4c:62:e5:ff:76:c7:47:ad:98:6c:23:2e:32:96:28:22: b4:1e:80:cc:ef:f9:ee:62:4b:e9:53:65:14:6d:93:e3:c8:22: b4:4f:1e:b1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYSkG3JMjEr2XejOvj6C1RghoFOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNDExMjQxOTQ0MDVaFw0yNTExMjMxOTQ5MDVaMDMxMTAvBgNV BAMTKDg4RDlEMTJFQzE2MDhGNjJFM0YyRjZDM0E2MzU2MEQ0MUE0NjE3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWWDjX4H02FTEKhuX4x8L8nF4n 1V6lzzgVvu5F/S/1kSqAKAL8BYVI/DYA07pKncVoikkuvxNunIHIR48Qg58agyAo /QdtL/l24GC0Mjr87RPvOCPqCCq/p74dv8KxXGXepQJ7KU0PZF5yK3diKickq7uU 31B0Vbg++mWK/xvKZRmhtkivNhMlEPO5P6Iq3YRU6azEuHpUBs/8aXqS3OceLXKw QWDvSp95645gxiYR/0Y22LxvuwLioMcekXlj5zyMi7JFQ58+zCoRnAijAVMVit4b c7huOpSHvFVMlZ9mRAeTzc/NCWZhOKoNXo1iIvZaeBOMk31ZwZYifX/Lw/sjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUiNnRLsFgj2Lj8vbDpjVg1BpGF4swHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiN2UwYmMwLTc2MWItNGVjMy04 ZjQyLTgyOTgxYjkxYTk3YS8wLzMyMzcyZTMxMzIzNDJlMzYzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABt8QzANBgkqhkiG 9w0BAQsFAAOCAQEAEnyV2eBeG6vHMZeCmQ65hQsSDHXjVHGJVx9KJIyF0mqJTT+7 fbHez+hTuYD2rGUj58CjwuMZQMYvqTqw6uaUJmGcEAwMQ/y1sz7ARiLZSWd88ULP MFvI0zsjOFsHnbEaq0q0+zDxvPY9AO6P2xjlGgked1KrIs/WtMfMY7Kzn9kvMNXP eARzjk4aKqFNmvfew48y8mT14SG4kWLSB7hM0YHDy30e6yqYMk+YMBRQ2lxzIQPU 8Mrm3gIlKoDL5CVM+95jcc6ptV9AG02taBu8wa9OeBUvKvdnVJdMYuX/dsdHrZhs Iy4yligitB6AzO/57mJL6VNlFG2T48gitE8esQ== -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net