$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa File: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (raw, json) Hash identifier: ThbbDvKhsxoAnPUKtdbY/FsPIfXpLzxzoe4gZ4SwG7I= Subject key identifier: 23:51:D6:18:D0:AD:58:92:BF:DF:8E:D6:0C:83:3A:74:22:B8:DB:90 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 2089966720286EE71D093C3B2A8F2CA5A5668C8E Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa Signing time: Sat 23 Nov 2024 21:00:00 +0000 ROA not before: Sat 23 Nov 2024 20:55:00 +0000 ROA not after: Sat 22 Nov 2025 21:00:00 +0000 asID: 46026 IP address blocks: 175.111.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:89:96:67:20:28:6e:e7:1d:09:3c:3b:2a:8f:2c:a5:a5:66:8c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Nov 23 20:55:00 2024 GMT Not After : Nov 22 21:00:00 2025 GMT Subject: CN=2351D618D0AD5892BFDF8ED60C833A7422B8DB90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:e7:53:06:bc:f3:41:aa:d0:f9:70:af:64: c3:ff:3c:87:a3:28:05:3c:79:c3:46:f5:74:55:da: d0:ed:ed:4d:f7:c9:46:5b:45:79:26:a8:74:06:9a: bc:93:65:d6:58:5e:3e:ad:f9:8d:bf:3e:a3:9b:3e: 8a:54:0f:2e:51:e6:cf:bf:87:88:39:5b:a0:c3:19: 7c:d7:7a:34:97:3d:31:6a:f9:77:08:d9:34:ea:92: 77:f9:25:60:80:6d:6c:af:cf:f9:23:a9:76:61:3a: 78:b3:20:87:ee:1a:2d:c7:6d:3a:fd:c3:b9:4f:71: d4:11:42:6a:9a:a3:d7:42:d5:68:ec:e5:b5:45:4f: c5:2f:07:51:bb:df:86:47:a2:dd:91:dc:60:64:f3: 83:44:df:1a:ba:a2:57:e8:09:0f:1e:dc:ee:84:d4: ab:24:41:fd:42:14:91:9b:19:32:e1:17:9a:29:95: aa:f5:c5:c1:2c:d4:19:79:32:c5:72:f3:e5:a4:0e: e1:45:7f:22:47:f6:06:7f:ba:27:1e:2b:b6:e2:7c: 73:11:74:cf:99:fd:08:ff:ab:df:dd:9c:bc:dc:6e: 5a:50:50:8a:28:7b:3f:0d:b5:d4:2a:ca:8f:2e:9a: 4b:5f:b1:84:55:34:ae:ab:38:1c:dc:c0:14:5f:1e: 80:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:51:D6:18:D0:AD:58:92:BF:DF:8E:D6:0C:83:3A:74:22:B8:DB:90 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.111.112.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:55:a8:0f:fd:25:15:df:ac:dd:af:e8:fe:55:f6:e0:24:35: d4:64:49:4c:cf:dc:26:58:7f:9a:b1:b4:ee:32:b2:7f:3b:bd: e5:ab:bd:39:3b:ab:12:86:1e:3c:3b:04:0b:c5:54:9a:e1:10: bd:96:b3:64:90:c6:0a:10:cd:29:69:91:a2:fa:9b:74:fa:8e: 54:c5:8b:9e:78:ce:a5:ac:2e:4c:b8:57:18:ca:f0:54:e9:69: 68:7f:c1:0b:52:c7:4c:65:80:69:35:dc:52:32:2e:00:9e:3d: 98:72:36:3a:bc:0d:1c:95:3e:d9:a1:a2:d5:63:c4:32:dc:c7: e8:17:6f:ac:b8:df:0c:3e:9d:ea:cb:d3:90:51:30:90:7f:09: 94:49:4d:97:f7:6a:30:1f:e2:0c:19:1d:6c:c0:79:9f:4f:57: a6:89:f6:f3:40:fb:e0:e6:23:75:4e:df:57:a9:ad:8d:fc:f3: ec:22:81:39:bc:bb:c7:d6:24:e1:96:0c:48:f5:79:cc:c0:6e: 63:2f:41:30:7d:a3:36:ac:53:d0:77:9a:bd:b3:a4:a1:74:da: e9:8a:fa:1c:ec:a0:ec:53:91:f6:e0:ff:95:a6:df:fa:5d:22: ab:2c:15:c6:6d:c8:f8:aa:8a:38:35:c0:bf:1a:01:30:59:e0: 87:12:c1:a9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIImWZyAobucdCTw7Ko8spaVmjI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNDExMjMyMDU1MDBaFw0yNTExMjIyMTAwMDBaMDMxMTAvBgNV BAMTKDIzNTFENjE4RDBBRDU4OTJCRkRGOEVENjBDODMzQTc0MjJCOERCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1oOdTBrzzQarQ+XCvZMP/PIej KAU8ecNG9XRV2tDt7U33yUZbRXkmqHQGmryTZdZYXj6t+Y2/PqObPopUDy5R5s+/ h4g5W6DDGXzXejSXPTFq+XcI2TTqknf5JWCAbWyvz/kjqXZhOnizIIfuGi3HbTr9 w7lPcdQRQmqao9dC1Wjs5bVFT8UvB1G734ZHot2R3GBk84NE3xq6olfoCQ8e3O6E 1KskQf1CFJGbGTLhF5oplar1xcEs1Bl5MsVy8+WkDuFFfyJH9gZ/uiceK7bifHMR dM+Z/Qj/q9/dnLzcblpQUIooez8NtdQqyo8umktfsYRVNK6rOBzcwBRfHoDzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUI1HWGNCtWJK/347WDIM6dCK425AwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzczNTJlMzEzMTMxMmUzMTMxMzIyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzNDM2MzAzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDr29wMA0GCSqG SIb3DQEBCwUAA4IBAQBNVagP/SUV36zdr+j+VfbgJDXUZElMz9wmWH+asbTuMrJ/ O73lq705O6sShh48OwQLxVSa4RC9lrNkkMYKEM0paZGi+pt0+o5UxYueeM6lrC5M uFcYyvBU6Wlof8ELUsdMZYBpNdxSMi4Anj2YcjY6vA0clT7ZoaLVY8Qy3MfoF2+s uN8MPp3qy9OQUTCQfwmUSU2X92owH+IMGR1swHmfT1emifbzQPvg5iN1Tt9Xqa2N /PPsIoE5vLvH1iThlgxI9XnMwG5jL0EwfaM2rFPQd5q9s6ShdNrpivoc7KDsU5H2 4P+Vpt/6XSKrLBXGbcj4qoo4NcC/GgEwWeCHEsGp -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:04 2025 by rpki-client on console.sobornost.net