$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33372e302f32342d3234203d3e203538343837.roa File: 3230322e31302e33372e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: Gd+XobvX/fy/Mh2XkDqNxhWNk3QnX1w7MS4RWmVMXCk= Subject key identifier: 48:D6:22:C3:E2:E1:F9:B6:03:D7:28:B4:61:4B:E2:C8:22:F0:70:6E Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 627B8AA9940ECCA8E45845250D0E718CF2B9AEFE Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33372e302f32342d3234203d3e203538343837.roa Signing time: Thu 13 Mar 2025 11:02:23 +0000 ROA not before: Thu 13 Mar 2025 10:57:23 +0000 ROA not after: Thu 12 Mar 2026 11:02:23 +0000 asID: 58487 IP address blocks: 202.10.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7b:8a:a9:94:0e:cc:a8:e4:58:45:25:0d:0e:71:8c:f2:b9:ae:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Mar 13 10:57:23 2025 GMT Not After : Mar 12 11:02:23 2026 GMT Subject: CN=48D622C3E2E1F9B603D728B4614BE2C822F0706E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:75:cb:ac:29:24:ce:e9:53:57:cc:1c:1c: 07:c6:72:88:67:4c:8f:87:8a:92:a8:25:4c:24:37: ff:ed:b4:6c:97:94:95:19:65:06:fb:4b:db:31:de: 62:8b:6f:92:0c:19:90:a8:35:45:6d:2c:ab:0e:e9: 12:9c:30:28:20:8c:15:8c:ef:89:95:b3:2b:7b:c8: 34:93:12:79:fa:e9:81:33:f3:7f:80:2e:c0:29:ac: eb:6f:ff:a7:5e:79:ba:79:1d:c5:54:66:b3:c2:f7: 7a:0d:4f:1d:0b:7d:25:1c:4c:2b:25:10:e4:bb:94: 95:b8:63:68:90:4d:f1:15:c3:7a:8d:14:09:a1:29: 7d:fb:95:55:a0:8d:a2:d3:4e:cd:53:88:2a:6a:ba: d9:80:68:b6:6b:69:60:23:e9:dd:66:aa:65:ac:fa: 4d:32:75:67:a7:28:df:1b:43:22:54:d4:a2:dc:db: 11:9f:72:08:57:c2:13:69:56:64:6e:7c:4a:15:60: eb:b4:44:e5:78:72:ee:f4:a9:e5:a6:26:bd:2b:98: ed:6f:de:05:f0:c5:c1:75:de:b1:91:90:fd:06:ad: ac:8c:97:a4:c7:f2:de:90:2d:ce:b5:b8:ea:a1:88: b6:9d:07:a2:28:b2:37:c1:5e:58:7c:d9:16:84:99: 50:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D6:22:C3:E2:E1:F9:B6:03:D7:28:B4:61:4B:E2:C8:22:F0:70:6E X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33372e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.37.0/24 Signature Algorithm: sha256WithRSAEncryption 44:e7:0a:ba:4f:1c:76:1e:7c:37:1c:c1:fd:a5:7d:d5:70:97: 2d:7d:33:33:60:df:2a:4e:96:ee:0a:39:66:13:c5:43:d8:94: 33:66:34:8b:49:66:78:81:1a:91:ec:a2:30:92:3f:f4:f9:f7: 27:23:38:c2:cb:6b:c8:0b:68:e0:fc:f6:bb:51:08:ef:23:dd: 31:ca:27:0b:d8:73:10:29:89:fd:2a:5f:c2:dc:61:02:12:08: d8:9f:27:04:cf:58:98:73:a6:98:89:ce:04:d6:c3:9f:9b:d4: 10:da:6d:14:55:8b:f5:90:23:8a:0b:59:3b:93:16:38:08:8f: 03:e2:23:f0:82:52:9e:83:ed:93:7d:46:41:af:d4:61:00:e4: ec:19:6e:3f:d4:d9:a8:b0:2f:37:b0:39:e6:80:e9:cf:ed:34: 5d:e9:6a:3d:83:6e:a0:4b:c7:5d:de:41:55:53:22:08:a6:84: 28:7b:55:c8:01:e3:b1:a1:45:2b:3b:61:e0:52:cf:5e:73:7a: a3:fc:ed:68:c3:89:51:54:fb:cc:19:07:c2:f1:2b:a8:f2:6a: b9:97:b6:68:b2:ea:9b:c3:81:53:d7:ea:09:2a:b5:26:32:42: 9c:e9:ee:97:9d:e8:b5:86:ba:0c:13:88:43:9a:f0:d2:b3:8e: 08:07:a1:18 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUYnuKqZQOzKjkWEUlDQ5xjPK5rv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNTAzMTMxMDU3MjNaFw0yNjAzMTIxMTAyMjNaMDMxMTAvBgNV BAMTKDQ4RDYyMkMzRTJFMUY5QjYwM0Q3MjhCNDYxNEJFMkM4MjJGMDcwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/3XLrCkkzulTV8wcHAfGcohn TI+HipKoJUwkN//ttGyXlJUZZQb7S9sx3mKLb5IMGZCoNUVtLKsO6RKcMCggjBWM 74mVsyt7yDSTEnn66YEz83+ALsAprOtv/6deebp5HcVUZrPC93oNTx0LfSUcTCsl EOS7lJW4Y2iQTfEVw3qNFAmhKX37lVWgjaLTTs1TiCpqutmAaLZraWAj6d1mqmWs +k0ydWenKN8bQyJU1KLc2xGfcghXwhNpVmRufEoVYOu0ROV4cu70qeWmJr0rmO1v 3gXwxcF13rGRkP0GrayMl6TH8t6QLc61uOqhiLadB6IosjfBXlh82RaEmVDLAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUSNYiw+Lh+bYD1yi0YUviyCLwcG4wHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzMzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiUwDQYJKoZIhvcN AQELBQADggEBAETnCrpPHHYefDccwf2lfdVwly19MzNg3ypOlu4KOWYTxUPYlDNm NItJZniBGpHsojCSP/T59ycjOMLLa8gLaOD89rtRCO8j3THKJwvYcxApif0qX8Lc YQISCNifJwTPWJhzppiJzgTWw5+b1BDabRRVi/WQI4oLWTuTFjgIjwPiI/CCUp6D 7ZN9RkGv1GEA5OwZbj/U2aiwLzewOeaA6c/tNF3paj2DbqBLx13eQVVTIgimhCh7 VcgB47GhRSs7YeBSz15zeqP87WjDiVFU+8wZB8LxK6jyarmXtmiy6pvDgVPX6gkq tSYyQpzp7ped6LWGugwTiEOa8NKzjggHoRg= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:10 2025 by rpki-client on console.sobornost.net