$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa File: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (raw, json) Hash identifier: UdR2VsrcQEJLqL8yqAOv5eiXRwXBi0l4fctRzRTejQo= Subject key identifier: 13:06:09:3C:A3:43:C2:26:0B:E5:91:39:D1:B3:22:FD:C5:1A:A1:77 Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Certificate serial: 1DF9DAF9F8E6C437CE951847D341409332131C64 Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa Signing time: Wed 11 Dec 2024 07:04:04 +0000 ROA not before: Wed 11 Dec 2024 06:59:04 +0000 ROA not after: Wed 10 Dec 2025 07:04:04 +0000 asID: 153148 IP address blocks: 160.191.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f9:da:f9:f8:e6:c4:37:ce:95:18:47:d3:41:40:93:32:13:1c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Validity Not Before: Dec 11 06:59:04 2024 GMT Not After : Dec 10 07:04:04 2025 GMT Subject: CN=1306093CA343C2260BE59139D1B322FDC51AA177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:17:02:0d:53:85:c0:fd:e0:4f:84:3e:be: b1:de:d5:10:89:32:c0:34:2b:f5:20:fa:8d:fb:73: 40:48:4c:16:72:04:fc:72:21:39:e4:1f:2a:b6:df: 29:73:06:77:4e:4a:d5:ef:8d:fa:05:64:e1:a0:74: 6c:a3:e3:26:7d:87:3c:c0:f4:00:24:19:51:54:e3: 88:ae:c1:a4:d5:8c:a6:2f:f7:39:1b:dd:bc:c9:f7: a3:a8:bc:56:e2:f4:68:15:14:02:b9:e8:58:de:63: 12:7e:38:2e:93:7f:a8:5f:6c:5e:34:93:78:4b:4c: 7b:7e:06:db:f7:32:dd:95:1b:01:d2:e4:66:3e:7c: d3:b3:18:51:26:e9:bb:76:89:57:7b:e9:6e:30:22: 6e:ff:ed:95:af:5e:a6:36:d7:47:b8:2c:e7:ab:ee: b8:15:00:f4:29:da:b7:4e:26:7c:6f:47:c2:ae:2f: 5a:e5:39:2d:27:2e:53:18:74:70:a3:c2:2d:7d:3c: 67:80:3b:93:9a:2d:09:73:77:79:a5:89:b3:4f:fc: 45:42:05:aa:66:2f:25:3b:d3:ec:ae:9b:c8:1b:c6: de:5a:ef:7d:36:ce:63:74:5a:c1:ed:e0:62:7b:41: 21:22:ac:d9:56:3f:10:75:34:44:af:33:3c:a5:69: 4b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:06:09:3C:A3:43:C2:26:0B:E5:91:39:D1:B3:22:FD:C5:1A:A1:77 X509v3 Authority Key Identifier: keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.64.0/24 Signature Algorithm: sha256WithRSAEncryption a2:28:3e:fa:31:8d:8b:70:9a:67:35:18:19:dd:1b:d7:99:6f: 3a:11:08:41:88:b9:f2:65:18:79:2b:9c:ee:eb:a0:00:3d:6b: c6:09:73:8f:bf:06:1d:5c:1a:e4:c7:40:3b:77:4b:26:df:03: 59:bc:26:22:9b:75:82:32:0b:6a:7c:4b:02:7a:f8:62:24:af: 5b:2f:08:72:91:f4:10:a4:9e:82:ae:db:9b:cf:6a:ef:db:95: d4:6b:04:11:2b:57:f4:48:a0:1f:55:ec:3b:17:ba:56:92:2f: 88:b0:d1:97:29:5a:bd:93:74:d1:86:78:37:95:d3:44:6e:9b: 1c:c2:b4:ae:86:f3:dd:a6:43:e9:37:af:52:a8:63:d1:79:2c: d0:46:16:c6:fb:f0:37:d7:38:63:c0:e0:de:09:d6:8c:75:14: 10:7a:a6:47:73:5d:53:67:95:69:68:6a:b7:95:6d:db:9d:be: ec:c8:88:59:4e:27:bb:ce:cd:46:9f:1a:e0:42:00:28:97:7b: 5f:d1:32:a8:c8:6b:f5:84:0e:26:0f:a8:58:f2:da:65:38:e9: 31:c9:8b:eb:5e:b7:0b:02:34:87:d4:d9:6c:ec:49:b1:2e:d5: 61:e8:3e:5f:b2:cc:a2:02:42:69:81:b8:bc:6d:85:63:2c:69: 33:71:2f:c9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHfna+fjmxDfOlRhH00FAkzITHGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQx NURFRTdGQzAeFw0yNDEyMTEwNjU5MDRaFw0yNTEyMTAwNzA0MDRaMDMxMTAvBgNV BAMTKDEzMDYwOTNDQTM0M0MyMjYwQkU1OTEzOUQxQjMyMkZEQzUxQUExNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/RcCDVOFwP3gT4Q+vrHe1RCJ MsA0K/Ug+o37c0BITBZyBPxyITnkHyq23ylzBndOStXvjfoFZOGgdGyj4yZ9hzzA 9AAkGVFU44iuwaTVjKYv9zkb3bzJ96OovFbi9GgVFAK56FjeYxJ+OC6Tf6hfbF40 k3hLTHt+Btv3Mt2VGwHS5GY+fNOzGFEm6bt2iVd76W4wIm7/7ZWvXqY210e4LOer 7rgVAPQp2rdOJnxvR8KuL1rlOS0nLlMYdHCjwi19PGeAO5OaLQlzd3mlibNP/EVC BapmLyU70+yum8gbxt5a7302zmN0WsHt4GJ7QSEirNlWPxB1NESvMzylaUuZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUEwYJPKNDwiYL5ZE50bMi/cUaoXcwHwYDVR0j BBgwFoAUqdZjxuvNJQqokn6glGJ8lBXe5/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BOUQ2NjNDNkVC Q0QyNTBBQTg5MjdFQTA5NDYyN0M5NDE1REVFN0ZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQxNURF RTdGQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4MmE5YmQ5LTE2NmYtNDUzZS1i M2MwLWU2YjNlZjkyYTU0MC8wLzMxMzYzMDJlMzEzOTMxMmUzNjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoL9AMA0GCSqG SIb3DQEBCwUAA4IBAQCiKD76MY2LcJpnNRgZ3RvXmW86EQhBiLnyZRh5K5zu66AA PWvGCXOPvwYdXBrkx0A7d0sm3wNZvCYim3WCMgtqfEsCevhiJK9bLwhykfQQpJ6C rtubz2rv25XUawQRK1f0SKAfVew7F7pWki+IsNGXKVq9k3TRhng3ldNEbpscwrSu hvPdpkPpN69SqGPReSzQRhbG+/A31zhjwODeCdaMdRQQeqZHc11TZ5VpaGq3lW3b nb7syIhZTie7zs1GnxrgQgAol3tf0TKoyGv1hA4mD6hY8tplOOkxyYvrXrcLAjSH 1Nls7EmxLtVh6D5fssyiAkJpgbi8bYVjLGkzcS/J -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:10 2025 by rpki-client on console.sobornost.net