$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e20313431383932.roa File: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (raw, json) Hash identifier: L3e7xhgbdKiD6xLSCC6o4EcC4VabYtoVoPe/Fd1r3p4= Subject key identifier: 86:65:E2:A3:8A:C3:C3:6F:FD:D0:75:CD:F2:D3:BF:E1:0F:51:92:F0 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 14342BBFAE52F4323203CF3752AA841B8FF8D0C6 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e20313431383932.roa Signing time: Wed 16 Apr 2025 13:28:54 +0000 ROA not before: Wed 16 Apr 2025 13:23:54 +0000 ROA not after: Wed 15 Apr 2026 13:28:54 +0000 asID: 141892 IP address blocks: 202.73.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:34:2b:bf:ae:52:f4:32:32:03:cf:37:52:aa:84:1b:8f:f8:d0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Apr 16 13:23:54 2025 GMT Not After : Apr 15 13:28:54 2026 GMT Subject: CN=8665E2A38AC3C36FFDD075CDF2D3BFE10F5192F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:a3:73:76:b4:3c:80:71:69:00:05:61:69: fd:22:30:e8:02:ef:81:26:c5:e9:9d:3c:64:6a:76: fe:7f:15:88:8c:a2:ff:1e:c7:77:88:9a:8c:7b:cc: 3a:5a:0d:a4:cf:65:aa:0e:ee:f3:95:a4:0c:b2:57: f5:eb:e6:32:3b:47:6b:c1:42:b3:a9:d9:38:a9:a8: 47:96:0b:7e:30:ac:dc:18:10:de:32:37:17:5b:48: 3f:61:74:71:4d:41:00:8f:d7:05:13:7c:98:a2:5c: e8:5a:27:b7:f7:d7:9b:b3:e4:15:c0:c6:6d:cd:12: f9:26:9e:11:0f:67:52:12:95:a2:c7:4b:b7:25:90: de:b2:3b:f0:6b:d0:cb:e7:42:20:f4:88:69:6e:56: 62:53:0f:f4:f1:73:9d:41:07:24:65:3d:ee:2d:79: 21:fc:04:77:fd:39:77:39:05:84:6a:28:de:86:9a: d3:8e:dd:40:11:8b:a0:c3:97:ff:df:b1:0b:b0:a7: 7d:99:54:8f:cf:3b:ef:eb:64:42:36:d1:8f:f1:97: 04:10:9b:35:58:18:f0:14:81:c4:dd:b8:c1:b7:da: 9b:f4:c8:37:95:4b:f7:39:fd:2e:53:20:3a:56:77: ac:3c:eb:cf:da:6f:8b:04:1a:b8:52:45:2b:3e:ac: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:65:E2:A3:8A:C3:C3:6F:FD:D0:75:CD:F2:D3:BF:E1:0F:51:92:F0 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.73.25.0/24 Signature Algorithm: sha256WithRSAEncryption 37:fb:f4:36:a5:8e:f2:06:da:6b:50:c1:49:ff:d5:5c:1d:38: 40:c1:b6:4e:86:55:74:db:7a:bc:49:b6:81:c9:39:e2:0c:6c: ec:82:67:4a:0b:cc:3e:21:1e:b4:43:90:ac:1d:8e:01:e0:c9: 03:fe:f3:ea:7d:59:ab:be:68:d3:10:c5:ad:d9:a8:62:c2:9b: 04:23:87:50:ce:d5:01:ee:86:ac:7a:7d:c6:50:fb:fc:1f:f8: 6f:d9:3a:88:67:df:19:38:b9:06:bc:04:f4:4f:2e:86:0c:bc: 73:9e:32:29:05:41:8a:6d:f5:22:50:de:6b:2a:7e:df:c9:8b: 06:e0:3e:53:e2:36:a7:78:84:11:03:60:d5:15:5e:39:cf:4e: 9c:69:92:15:e4:be:02:e9:e6:94:d0:e8:a5:6d:53:e0:ca:47: d6:c8:20:98:ae:ed:66:f9:8c:91:55:01:1b:04:59:f2:1f:2d: 2e:1b:45:ed:f6:8a:de:4b:5e:98:9a:bb:08:58:d0:db:11:81: 78:f0:c7:07:dc:16:d8:b7:e6:ae:2e:93:b5:63:86:6d:4e:90: 60:80:be:39:9a:b7:2a:96:62:fd:5b:3f:7a:b2:08:3e:fd:fe: 78:d3:f1:20:9c:0a:71:ef:94:74:58:d9:8f:07:a8:fa:0a:d4: 04:d0:e3:22 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFDQrv65S9DIyA883UqqEG4/40MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNTA0MTYxMzIzNTRaFw0yNjA0MTUxMzI4NTRaMDMxMTAvBgNV BAMTKDg2NjVFMkEzOEFDM0MzNkZGREQwNzVDREYyRDNCRkUxMEY1MTkyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx06NzdrQ8gHFpAAVhaf0iMOgC 74EmxemdPGRqdv5/FYiMov8ex3eImox7zDpaDaTPZaoO7vOVpAyyV/Xr5jI7R2vB QrOp2TipqEeWC34wrNwYEN4yNxdbSD9hdHFNQQCP1wUTfJiiXOhaJ7f315uz5BXA xm3NEvkmnhEPZ1ISlaLHS7clkN6yO/Br0MvnQiD0iGluVmJTD/Txc51BByRlPe4t eSH8BHf9OXc5BYRqKN6GmtOO3UARi6DDl//fsQuwp32ZVI/PO+/rZEI20Y/xlwQQ mzVYGPAUgcTduMG32pv0yDeVS/c5/S5TIDpWd6w868/ab4sEGrhSRSs+rBMjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUhmXio4rDw2/90HXN8tO/4Q9RkvAwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzAzMjJlMzczMzJlMzIzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpJGTANBgkqhkiG 9w0BAQsFAAOCAQEAN/v0NqWO8gbaa1DBSf/VXB04QMG2ToZVdNt6vEm2gck54gxs 7IJnSgvMPiEetEOQrB2OAeDJA/7z6n1Zq75o0xDFrdmoYsKbBCOHUM7VAe6GrHp9 xlD7/B/4b9k6iGffGTi5BrwE9E8uhgy8c54yKQVBim31IlDeayp+38mLBuA+U+I2 p3iEEQNg1RVeOc9OnGmSFeS+AunmlNDopW1T4MpH1sggmK7tZvmMkVUBGwRZ8h8t LhtF7faK3ktemJq7CFjQ2xGBePDHB9wW2Lfmri6TtWOGbU6QYIC+OZq3KpZi/Vs/ erIIPv3+eNPxIJwKce+UdFjZjweo+grUBNDjIg== -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net