$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32332d3234203d3e203538343837.roa File: 3230322e31302e34362e302f32332d3234203d3e203538343837.roa (raw, json) Hash identifier: cIiVH55gZhKhd09SRv36IxJOQWAEZ8Rp7D3EJnyu0U8= Subject key identifier: E6:60:76:8B:67:9A:2E:E9:3F:C9:21:8B:E5:5B:00:56:5B:BC:35:6C Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 2221511E90E98605D1C3CD90778D7177587E8848 Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32332d3234203d3e203538343837.roa Signing time: Thu 13 Mar 2025 11:02:24 +0000 ROA not before: Thu 13 Mar 2025 10:57:24 +0000 ROA not after: Thu 12 Mar 2026 11:02:24 +0000 asID: 58487 IP address blocks: 202.10.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:21:51:1e:90:e9:86:05:d1:c3:cd:90:77:8d:71:77:58:7e:88:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Mar 13 10:57:24 2025 GMT Not After : Mar 12 11:02:24 2026 GMT Subject: CN=E660768B679A2EE93FC9218BE55B00565BBC356C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:bc:f2:69:b6:14:16:10:b5:d3:94:1f:20: 06:65:5c:2d:a8:9f:d9:d0:a8:99:38:2f:87:d2:f2: 58:99:03:51:a2:db:87:4f:06:5a:0e:d0:24:1e:69: 5a:ea:ec:83:3d:f5:43:07:0b:57:6b:f2:d3:18:e2: 6c:62:e4:48:4d:1f:d0:1c:84:aa:d4:e4:29:1b:6a: 42:a9:ef:26:d6:f6:52:36:9c:80:3a:46:82:3c:5e: 56:e0:e3:82:5e:85:eb:12:45:d7:84:73:49:14:51: 98:72:b4:f1:4a:8e:c9:0b:92:00:11:8c:78:65:3c: 21:85:9f:21:f6:49:37:ea:05:01:ad:f0:d9:e1:e5: 7f:92:20:73:ba:b7:7c:29:7d:b2:46:2b:7f:e4:e0: 75:1e:6d:f6:88:b8:b9:97:4a:ae:cd:a3:b2:8e:d8: 10:3f:14:49:66:69:60:f9:b8:cb:5c:63:bc:54:c8: 18:0c:68:01:a2:63:62:cd:85:c6:9b:c1:a3:10:9d: 07:65:33:38:4b:8f:18:0c:ea:68:44:2c:d7:01:be: 94:a4:ed:2f:aa:93:0f:87:b3:96:a2:a9:26:a0:9f: bf:67:61:24:3e:58:a5:79:cf:ca:7a:82:04:5a:c9: 9e:03:78:89:50:cc:a5:3f:62:f0:49:ff:05:d1:45: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:60:76:8B:67:9A:2E:E9:3F:C9:21:8B:E5:5B:00:56:5B:BC:35:6C X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32332d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.46.0/23 Signature Algorithm: sha256WithRSAEncryption 24:3b:68:2b:97:21:ca:68:d9:ae:0f:1c:c4:54:20:41:81:8d: 40:da:f6:c7:de:7f:3f:cb:29:c9:0e:b2:45:3f:09:2d:e9:8d: 36:2e:62:a6:1d:f1:e6:3c:12:24:d5:df:42:3f:7c:38:75:48: 45:cc:c7:1a:e3:68:47:47:37:48:60:2d:9a:d4:77:71:de:08: 4e:74:99:0d:99:fd:b6:6e:ce:e3:6c:5f:6b:e3:01:3d:4d:98: 9b:08:c0:f5:e5:92:a0:f5:4e:07:70:29:87:1d:9d:81:f0:ee: 2e:31:ac:fc:12:f5:b9:fc:88:ee:06:2d:b8:50:48:8f:d8:f6: 40:03:84:80:09:01:55:ce:1c:04:c6:07:ac:a6:6a:3c:3d:e3: c4:d3:28:7c:bf:dc:f7:3f:c2:04:dc:ec:11:c5:47:6e:c6:64: 33:b1:a2:c2:30:07:68:7a:d5:89:98:3d:e4:ef:e6:35:be:88: 58:9e:0d:4b:0f:11:4f:b6:e2:17:0b:e7:2a:d8:29:06:bc:51: 89:24:6e:6b:b6:cf:c8:51:bf:1c:59:e2:74:aa:7b:0a:7a:a8: 82:12:05:c8:4f:3e:93:fd:ac:42:b3:e8:13:8c:86:fe:85:31: e0:52:ea:ef:57:8c:b5:dc:ef:2c:f5:b0:ac:b3:63:c7:54:ef: e9:fd:40:58 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUIiFRHpDphgXRw82Qd41xd1h+iEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNTAzMTMxMDU3MjRaFw0yNjAzMTIxMTAyMjRaMDMxMTAvBgNV BAMTKEU2NjA3NjhCNjc5QTJFRTkzRkM5MjE4QkU1NUIwMDU2NUJCQzM1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMbzyabYUFhC105QfIAZlXC2o n9nQqJk4L4fS8liZA1Gi24dPBloO0CQeaVrq7IM99UMHC1dr8tMY4mxi5EhNH9Ac hKrU5CkbakKp7ybW9lI2nIA6RoI8Xlbg44JehesSRdeEc0kUUZhytPFKjskLkgAR jHhlPCGFnyH2STfqBQGt8Nnh5X+SIHO6t3wpfbJGK3/k4HUebfaIuLmXSq7No7KO 2BA/FElmaWD5uMtcY7xUyBgMaAGiY2LNhcabwaMQnQdlMzhLjxgM6mhELNcBvpSk 7S+qkw+Hs5aiqSagn79nYSQ+WKV5z8p6ggRayZ4DeIlQzKU/YvBJ/wXRRdw5AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU5mB2i2eaLuk/ySGL5VsAVlu8NWwwHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzNjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKCi4wDQYJKoZIhvcN AQELBQADggEBACQ7aCuXIcpo2a4PHMRUIEGBjUDa9sfefz/LKckOskU/CS3pjTYu YqYd8eY8EiTV30I/fDh1SEXMxxrjaEdHN0hgLZrUd3HeCE50mQ2Z/bZuzuNsX2vj AT1NmJsIwPXlkqD1TgdwKYcdnYHw7i4xrPwS9bn8iO4GLbhQSI/Y9kADhIAJAVXO HATGB6ymajw948TTKHy/3Pc/wgTc7BHFR27GZDOxosIwB2h61YmYPeTv5jW+iFie DUsPEU+24hcL5yrYKQa8UYkkbmu2z8hRvxxZ4nSqewp6qIISBchPPpP9rEKz6BOM hv6FMeBS6u9XjLXc7yz1sKyzY8dU7+n9QFg= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:10 2025 by rpki-client on console.sobornost.net