$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39352e302f32342d3234203d3e20313530323438.roa File: 3131392e34372e39352e302f32342d3234203d3e20313530323438.roa (raw, json) Hash identifier: nIrbzR22XSry4Jrw3LIPGv150kbPZD6HPRMENEZHMHw= Subject key identifier: 3B:63:98:A7:ED:4D:C8:AA:EE:80:99:BA:C9:BE:2C:EE:52:2C:FB:86 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 103261E3CD7DC68E1CF1FD785262102DA9FE71EB Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39352e302f32342d3234203d3e20313530323438.roa Signing time: Mon 06 Jan 2025 14:34:03 +0000 ROA not before: Mon 06 Jan 2025 14:29:03 +0000 ROA not after: Mon 05 Jan 2026 14:34:03 +0000 asID: 150248 IP address blocks: 119.47.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 19:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:32:61:e3:cd:7d:c6:8e:1c:f1:fd:78:52:62:10:2d:a9:fe:71:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Jan 6 14:29:03 2025 GMT Not After : Jan 5 14:34:03 2026 GMT Subject: CN=3B6398A7ED4DC8AAEE8099BAC9BE2CEE522CFB86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:23:b3:70:3c:10:38:16:ab:7f:a7:4c:ea: 58:43:24:a4:90:67:21:f0:39:f2:55:68:be:1b:6c: 93:c0:ef:bd:b4:2c:ae:1f:09:47:bb:df:6a:99:e0: f6:b7:8b:9d:8c:bc:d1:b3:90:7e:8e:a8:4b:94:1b: e7:d7:fb:75:f8:6e:1d:94:ea:58:34:8f:8b:f3:1e: 9e:9f:41:0d:0f:ae:3f:32:30:68:ce:0c:45:cc:02: d1:94:40:f5:34:f2:42:56:94:fc:78:00:0c:e9:b4: 55:96:b3:af:9f:9d:75:1e:da:ff:41:34:41:06:c0: 18:6a:0f:de:25:70:47:bd:bf:a6:be:23:9e:4f:82: 0e:0d:d7:24:4f:86:61:05:ee:35:c6:22:9b:c1:b1: 8a:5c:0d:9a:01:fe:d0:31:c8:bc:17:18:37:2d:e0: 1c:80:72:9c:d1:ec:63:40:58:29:56:00:ff:12:df: 84:96:ec:e2:58:52:fc:0e:1d:b8:c7:8b:38:83:d6: d1:7a:f4:7a:6f:4f:61:3f:0c:33:b8:8a:43:07:ff: 86:c6:65:73:0f:1a:a3:87:1e:6e:ed:d6:3b:88:40: 08:f0:4f:39:cd:50:98:33:33:e3:ff:cb:e3:9c:36: 8b:48:46:95:d2:35:ae:80:32:ff:e3:f1:ff:e1:62: 6f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:63:98:A7:ED:4D:C8:AA:EE:80:99:BA:C9:BE:2C:EE:52:2C:FB:86 X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39352e302f32342d3234203d3e20313530323438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.47.95.0/24 Signature Algorithm: sha256WithRSAEncryption 61:ff:28:22:51:34:ec:d3:8b:ae:0d:77:d4:98:00:e4:ca:e9: d9:0e:f3:8e:da:0f:1e:10:2d:d1:04:66:15:a6:aa:92:ac:22: ee:78:11:f6:48:e4:9a:db:ff:62:7b:9e:e8:95:25:4a:2b:57: 0f:be:d4:04:bc:60:d7:53:91:a4:53:d2:c6:21:24:23:6e:eb: 19:a2:6e:03:a4:23:39:61:44:29:28:29:95:c1:f9:05:e6:42: fc:3c:c1:21:62:6e:8c:58:32:97:7a:09:38:d5:7b:dd:ca:90: c3:01:b1:39:87:8d:82:47:ea:50:2f:e2:20:11:9f:db:04:e3: 7f:68:56:7d:62:21:42:62:8a:ee:53:b7:25:f8:80:c3:c5:c5: d2:4b:d0:9e:37:84:49:08:9c:65:7a:b9:3b:0d:ea:91:29:3e: 16:35:a1:e0:30:23:6f:80:63:07:91:c0:73:14:83:d8:03:51: 86:51:6f:74:ad:9a:89:20:6d:5a:f9:49:2b:13:3f:c5:b4:66: 27:35:0a:91:0c:f3:37:05:6b:0c:7f:ea:8d:b2:c1:12:19:14: 99:3b:f2:53:4f:73:4b:ee:2a:fb:6b:05:01:39:5a:2a:76:5d: 84:a1:75:a1:83:6a:b0:98:bf:71:26:9c:0e:7d:8c:d1:ff:af: ae:d2:c3:34 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUEDJh4819xo4c8f14UmIQLan+ceswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNTAxMDYxNDI5MDNaFw0yNjAxMDUxNDM0MDNaMDMxMTAvBgNV BAMTKDNCNjM5OEE3RUQ0REM4QUFFRTgwOTlCQUM5QkUyQ0VFNTIyQ0ZCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LCOzcDwQOBarf6dM6lhDJKSQ ZyHwOfJVaL4bbJPA7720LK4fCUe732qZ4Pa3i52MvNGzkH6OqEuUG+fX+3X4bh2U 6lg0j4vzHp6fQQ0Prj8yMGjODEXMAtGUQPU08kJWlPx4AAzptFWWs6+fnXUe2v9B NEEGwBhqD94lcEe9v6a+I55Pgg4N1yRPhmEF7jXGIpvBsYpcDZoB/tAxyLwXGDct 4ByAcpzR7GNAWClWAP8S34SW7OJYUvwOHbjHiziD1tF69HpvT2E/DDO4ikMH/4bG ZXMPGqOHHm7t1juIQAjwTznNUJgzM+P/y+OcNotIRpXSNa6AMv/j8f/hYm+BAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUO2OYp+1NyKrugJm6yb4s7lIs+4YwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzEzOTJlMzQzNzJlMzkzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcvXzANBgkqhkiG 9w0BAQsFAAOCAQEAYf8oIlE07NOLrg131JgA5Mrp2Q7zjtoPHhAt0QRmFaaqkqwi 7ngR9kjkmtv/Ynue6JUlSitXD77UBLxg11ORpFPSxiEkI27rGaJuA6QjOWFEKSgp lcH5BeZC/DzBIWJujFgyl3oJONV73cqQwwGxOYeNgkfqUC/iIBGf2wTjf2hWfWIh QmKK7lO3JfiAw8XF0kvQnjeESQicZXq5Ow3qkSk+FjWh4DAjb4BjB5HAcxSD2ANR hlFvdK2aiSBtWvlJKxM/xbRmJzUKkQzzNwVrDH/qjbLBEhkUmTvyU09zS+4q+2sF ATlaKnZdhKF1oYNqsJi/cSacDn2M0f+vrtLDNA== -----END CERTIFICATE-----Generated at Sat Apr 26 15:53:57 2025 by rpki-client on console.sobornost.net