$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32342d3234203d3e203538343837.roa File: 3230322e31302e33382e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: i2cfHNp7ELXHkG32amjDVO13rtFH9PXQxmlERj1fotw= Subject key identifier: 36:DA:09:5E:AC:13:DD:1E:F3:07:B9:66:D1:0B:48:3E:5E:7D:D7:FB Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 56D6881BABAA5FEC49D46E26886ABF689172731B Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32342d3234203d3e203538343837.roa Signing time: Thu 13 Mar 2025 11:02:24 +0000 ROA not before: Thu 13 Mar 2025 10:57:24 +0000 ROA not after: Thu 12 Mar 2026 11:02:24 +0000 asID: 58487 IP address blocks: 202.10.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d6:88:1b:ab:aa:5f:ec:49:d4:6e:26:88:6a:bf:68:91:72:73:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Mar 13 10:57:24 2025 GMT Not After : Mar 12 11:02:24 2026 GMT Subject: CN=36DA095EAC13DD1EF307B966D10B483E5E7DD7FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:91:47:a4:5a:0c:da:96:e0:bf:65:4b:91: a6:60:34:73:4f:b6:70:60:65:6c:c9:33:c3:66:12: 5d:6c:41:8d:76:c4:fa:c4:53:72:08:4d:67:32:61: 8d:e7:9a:82:33:29:ee:01:88:44:5c:fa:2f:56:26: 99:3b:82:27:a7:51:8e:18:dd:b7:e5:bc:30:97:13: b9:e0:db:38:bf:e7:06:c6:1e:be:44:3b:2b:05:fc: a0:54:68:e9:a7:df:20:de:63:55:6a:00:8e:6e:b8: 3b:44:a3:cc:67:05:43:bc:fa:37:ec:f2:27:b8:d8: 7f:3b:88:07:76:31:a7:89:a0:5a:37:d3:67:59:fe: 55:93:6b:13:16:dd:a5:1f:f9:d7:18:60:4e:28:20: cf:7e:80:ad:00:c7:ca:81:be:37:5d:fb:52:65:3c: 02:99:0a:f2:d7:2d:eb:d1:39:b7:0f:a9:76:2e:5d: 2d:5a:9a:4a:2c:e2:1b:f4:a8:20:09:a3:fb:1f:ba: a5:d6:e8:90:03:28:12:fa:5a:d9:41:1c:8b:3b:5f: ee:1b:4f:34:22:f4:5b:e3:ce:9a:2b:03:08:37:d3: 10:0b:e5:76:2a:b9:52:fd:78:2d:53:7f:ed:80:22: ac:65:4b:73:38:9a:7d:fe:d9:8b:3b:c6:d9:6f:78: 77:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DA:09:5E:AC:13:DD:1E:F3:07:B9:66:D1:0B:48:3E:5E:7D:D7:FB X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.38.0/24 Signature Algorithm: sha256WithRSAEncryption b0:30:4f:78:ce:de:9a:1d:06:d9:e6:47:55:f9:89:02:5b:07: e1:7e:9c:6e:57:69:b9:88:7a:ef:6e:b0:e9:8d:07:9b:ff:8a: cf:2a:4c:73:56:35:d7:cb:3a:bc:7c:3c:6a:05:fd:7f:25:0d: fb:72:de:2e:25:23:9a:82:4c:c5:fb:50:1a:0d:f6:3e:a9:95: 87:41:e8:52:1a:33:ff:9a:fc:09:b4:21:09:f1:71:7a:4d:fb: 0a:3d:20:6f:58:08:eb:8e:d5:38:df:48:ee:d9:c1:d0:b6:ad: b7:47:52:68:60:d2:96:5a:f7:7e:56:8c:b3:95:53:48:23:f3: a2:7a:16:bd:48:11:88:4a:c1:78:7b:28:ff:01:dd:4d:84:d4: c5:6e:78:b3:6f:8f:61:8f:36:7e:b5:de:dc:01:96:7a:f6:ce: b9:33:73:a4:74:3e:10:d7:f8:9f:9b:3e:8b:89:f7:ef:6d:c5: 89:c0:77:4e:e6:f6:42:0d:47:8d:34:f9:82:5a:53:13:23:ef: 02:99:1d:e3:02:07:ef:44:a8:9c:bc:6a:15:06:34:3d:8c:38: e8:03:07:22:c9:2c:34:47:3d:d5:dc:f1:40:38:db:68:ec:64: f0:52:a6:5c:39:dc:15:b2:41:d5:0c:fa:0f:97:ff:42:17:86: ef:76:c7:58 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUVtaIG6uqX+xJ1G4miGq/aJFycxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNTAzMTMxMDU3MjRaFw0yNjAzMTIxMTAyMjRaMDMxMTAvBgNV BAMTKDM2REEwOTVFQUMxM0REMUVGMzA3Qjk2NkQxMEI0ODNFNUU3REQ3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZzJFHpFoM2pbgv2VLkaZgNHNP tnBgZWzJM8NmEl1sQY12xPrEU3IITWcyYY3nmoIzKe4BiERc+i9WJpk7gienUY4Y 3bflvDCXE7ng2zi/5wbGHr5EOysF/KBUaOmn3yDeY1VqAI5uuDtEo8xnBUO8+jfs 8ie42H87iAd2MaeJoFo302dZ/lWTaxMW3aUf+dcYYE4oIM9+gK0Ax8qBvjdd+1Jl PAKZCvLXLevRObcPqXYuXS1amkos4hv0qCAJo/sfuqXW6JADKBL6WtlBHIs7X+4b TzQi9FvjzporAwg30xAL5XYquVL9eC1Tf+2AIqxlS3M4mn3+2Ys7xtlveHexAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUNtoJXqwT3R7zB7lm0QtIPl591/swHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzMzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiYwDQYJKoZIhvcN AQELBQADggEBALAwT3jO3podBtnmR1X5iQJbB+F+nG5XabmIeu9usOmNB5v/is8q THNWNdfLOrx8PGoF/X8lDfty3i4lI5qCTMX7UBoN9j6plYdB6FIaM/+a/Am0IQnx cXpN+wo9IG9YCOuO1TjfSO7ZwdC2rbdHUmhg0pZa935WjLOVU0gj86J6Fr1IEYhK wXh7KP8B3U2E1MVueLNvj2GPNn613twBlnr2zrkzc6R0PhDX+J+bPouJ9+9txYnA d07m9kINR400+YJaUxMj7wKZHeMCB+9EqJy8ahUGND2MOOgDByLJLDRHPdXc8UA4 22jsZPBSplw53BWyQdUM+g+X/0IXhu92x1g= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:10 2025 by rpki-client on console.sobornost.net