$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa File: 3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa (raw, json) Hash identifier: H1Ehj5teFFzgxCljJRj0gxvRRdxy+g/hVzQo6QST2ns= Subject key identifier: 3E:6C:77:A7:5B:85:E3:B9:DF:70:0C:F9:B3:E7:B7:4F:B4:DB:7C:1D Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 6B38955E4C9CBDAC05EFCE26F3AB480A5928B0DA Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa Signing time: Fri 23 Aug 2024 06:00:04 +0000 ROA not before: Fri 23 Aug 2024 05:55:04 +0000 ROA not after: Fri 22 Aug 2025 06:00:04 +0000 asID: 138841 IP address blocks: 110.232.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:38:95:5e:4c:9c:bd:ac:05:ef:ce:26:f3:ab:48:0a:59:28:b0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Aug 23 05:55:04 2024 GMT Not After : Aug 22 06:00:04 2025 GMT Subject: CN=3E6C77A75B85E3B9DF700CF9B3E7B74FB4DB7C1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:69:0d:37:73:93:9e:04:83:9b:6c:17:34: c1:ca:af:29:7a:e3:12:1f:fe:bc:a5:ef:ff:6b:37: 4d:8a:74:63:0f:06:5a:b4:59:eb:4d:8e:bb:97:4b: 95:c1:33:34:c4:d2:f2:b3:22:fc:90:9b:92:e2:49: 4f:52:fe:d1:de:5b:d3:04:69:88:6d:92:75:f7:52: 28:6f:fa:d0:8d:32:3f:38:0b:88:55:66:88:87:47: f8:31:a6:74:b2:bb:0b:65:93:cd:57:37:8b:ff:30: cb:eb:e5:67:44:0c:66:9c:7a:59:b4:23:2d:37:a9: fd:41:7a:f8:ce:41:87:a3:59:d6:39:63:cd:62:2f: c7:b4:03:15:c1:c6:68:45:20:cc:19:de:f2:10:98: 41:fb:0f:89:79:ae:0a:63:37:15:be:b4:c0:62:fc: 96:24:ca:f9:ae:af:84:5c:f7:1d:29:2f:9c:ad:36: bf:9d:fd:ca:00:38:0e:0f:d9:b0:cc:06:a8:ef:db: 5a:80:2b:04:b7:ad:ad:04:aa:53:ff:70:20:61:ed: 7f:80:10:22:cb:ca:59:59:e9:ce:5b:69:5e:00:15: de:18:41:80:3e:6a:fb:80:f0:94:e9:d8:32:3e:51: 05:e8:c8:0a:41:62:c9:51:aa:5c:65:07:ef:60:16: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6C:77:A7:5B:85:E3:B9:DF:70:0C:F9:B3:E7:B7:4F:B4:DB:7C:1D X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.232.88.0/23 Signature Algorithm: sha256WithRSAEncryption 73:f3:9e:b5:f2:d0:3f:c8:f3:ee:ba:00:1b:cb:1b:e8:a8:42: 1f:70:62:85:18:ca:23:e9:2e:80:ee:67:40:4b:ab:5e:49:ff: f6:54:90:b9:63:85:d8:ff:d0:52:ac:4f:9a:43:be:3f:da:aa: f2:de:47:ee:45:a2:cc:69:83:9e:ca:62:38:5d:0e:e7:5d:d5: c1:9c:a9:36:6d:31:b3:3e:56:7c:4d:4a:52:f4:3f:97:a5:96: 00:c2:9e:50:77:28:24:61:d8:31:8e:29:2c:1f:a5:3f:50:56: 34:ad:a4:41:27:ed:dc:a3:1d:08:3a:40:a6:a1:2b:81:42:08: b7:54:eb:95:d2:92:2d:25:50:a7:2c:1d:79:df:65:30:d7:88: 31:d1:da:d3:0f:f1:26:73:94:f6:c6:95:00:5f:3e:c5:a0:05: 5b:16:a8:8d:fe:80:85:d4:c5:79:91:be:56:83:b3:07:11:7b: 57:84:2f:3f:31:e3:b4:ec:b9:03:6c:05:df:57:bf:85:6d:43: 61:99:10:ae:84:39:4c:c1:61:0d:bb:3f:fc:df:60:f3:12:19: 84:b8:b1:de:cd:2d:93:58:be:b5:e4:4e:12:6e:6f:df:b1:4b: 26:21:7f:e2:b7:00:c0:e4:2a:e6:d1:26:33:98:b1:6e:32:b3: af:63:8d:f5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaziVXkycvawF784m86tIClkosNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNDA4MjMwNTU1MDRaFw0yNTA4MjIwNjAwMDRaMDMxMTAvBgNV BAMTKDNFNkM3N0E3NUI4NUUzQjlERjcwMENGOUIzRTdCNzRGQjREQjdDMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrWkNN3OTngSDm2wXNMHKryl6 4xIf/ryl7/9rN02KdGMPBlq0WetNjruXS5XBMzTE0vKzIvyQm5LiSU9S/tHeW9ME aYhtknX3Uihv+tCNMj84C4hVZoiHR/gxpnSyuwtlk81XN4v/MMvr5WdEDGacelm0 Iy03qf1BevjOQYejWdY5Y81iL8e0AxXBxmhFIMwZ3vIQmEH7D4l5rgpjNxW+tMBi /JYkyvmur4Rc9x0pL5ytNr+d/coAOA4P2bDMBqjv21qAKwS3ra0EqlP/cCBh7X+A ECLLyllZ6c5baV4AFd4YQYA+avuA8JTp2DI+UQXoyApBYslRqlxlB+9gFi+LAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPmx3p1uF47nfcAz5s+e3T7TbfB0wHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzODM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbuhYMA0GCSqG SIb3DQEBCwUAA4IBAQBz85618tA/yPPuugAbyxvoqEIfcGKFGMoj6S6A7mdAS6te Sf/2VJC5Y4XY/9BSrE+aQ74/2qry3kfuRaLMaYOeymI4XQ7nXdXBnKk2bTGzPlZ8 TUpS9D+XpZYAwp5QdygkYdgxjiksH6U/UFY0raRBJ+3cox0IOkCmoSuBQgi3VOuV 0pItJVCnLB1532Uw14gx0drTD/Emc5T2xpUAXz7FoAVbFqiN/oCF1MV5kb5Wg7MH EXtXhC8/MeO07LkDbAXfV7+FbUNhmRCuhDlMwWENuz/832DzEhmEuLHezS2TWL61 5E4Sbm/fsUsmIX/itwDA5Crm0SYzmLFuMrOvY431 -----END CERTIFICATE-----Generated at Sat Apr 26 11:16:28 2025 by rpki-client on console.sobornost.net