$ rpki-client -vvf repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/3135372e36362e33342e302f32332d3234203d3e203535363838.roa File: 3135372e36362e33342e302f32332d3234203d3e203535363838.roa (raw, json) Hash identifier: ZYRFgg3YsM3yKUn62KsbkyrpaJzgLMKU6Z815DCOnrQ= Subject key identifier: F2:85:13:26:CE:E8:D7:59:EE:E8:BD:C3:1B:C0:34:15:B4:94:55:04 Certificate issuer: /CN=85735A4922D529215199E6F4D6829DF68512E117 Certificate serial: 4711E63CEEE889CDB7730E2506DBF1D91EDF91A2 Authority key identifier: 85:73:5A:49:22:D5:29:21:51:99:E6:F4:D6:82:9D:F6:85:12:E1:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/3135372e36362e33342e302f32332d3234203d3e203535363838.roa Signing time: Mon 31 Mar 2025 10:00:01 +0000 ROA not before: Mon 31 Mar 2025 09:55:01 +0000 ROA not after: Mon 30 Mar 2026 10:00:01 +0000 asID: 55688 IP address blocks: 157.66.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.crl rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:11:e6:3c:ee:e8:89:cd:b7:73:0e:25:06:db:f1:d9:1e:df:91:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85735A4922D529215199E6F4D6829DF68512E117 Validity Not Before: Mar 31 09:55:01 2025 GMT Not After : Mar 30 10:00:01 2026 GMT Subject: CN=F2851326CEE8D759EEE8BDC31BC03415B4945504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:c1:46:f0:0a:1d:3a:32:a3:62:74:94:e1: f6:48:5f:37:fa:63:24:2e:12:59:ae:64:eb:12:c7: 71:c0:37:d3:88:15:3b:91:07:93:7a:74:a6:12:a3: 8e:9f:5d:6f:f1:2c:c0:e8:c7:28:22:99:a7:12:fb: 90:ae:97:f7:70:fc:19:77:6d:0c:0e:42:27:0c:90: 87:5e:8f:16:36:32:e8:f3:63:ef:7b:7b:c6:74:db: 33:d8:43:90:b4:d0:f4:ba:04:aa:3c:8d:91:d7:71: 83:a1:ba:c6:bf:d3:5a:0d:e6:48:98:11:c7:7e:60: 72:d0:c6:ae:2d:d9:8e:77:91:08:f7:51:28:87:10: 90:3e:6d:ca:19:c6:5c:5f:8c:de:c2:e6:85:c9:08: 2d:d3:f2:c4:ee:3b:52:dc:57:e2:6f:98:e4:77:e9: 48:2b:12:8f:46:b6:4f:0f:e9:d8:c0:58:d3:8b:d3: dd:4d:3a:a4:67:75:de:a5:44:7c:6c:cc:27:3c:ec: 2c:d2:16:6a:04:5d:fe:d0:ae:ed:27:1d:4e:7e:a5: 66:b2:2e:5b:05:90:91:ca:4c:84:dd:f6:a5:1e:06: 29:20:9a:fc:11:04:70:27:16:f4:c0:ac:09:4e:aa: 8e:5f:ab:a4:fa:55:d9:5b:a3:ff:01:dc:54:f7:2a: df:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:85:13:26:CE:E8:D7:59:EE:E8:BD:C3:1B:C0:34:15:B4:94:55:04 X509v3 Authority Key Identifier: keyid:85:73:5A:49:22:D5:29:21:51:99:E6:F4:D6:82:9D:F6:85:12:E1:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/3135372e36362e33342e302f32332d3234203d3e203535363838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.34.0/23 Signature Algorithm: sha256WithRSAEncryption 71:00:83:47:4d:03:cd:40:65:36:1e:0c:bb:97:76:34:8c:2e: 7d:ba:df:61:dc:84:99:f2:0d:e3:09:77:69:38:c5:df:97:e2: ca:66:40:9a:03:cb:a1:30:e2:6a:0e:5f:74:4a:cb:3b:b2:d9: c3:fc:c6:80:e8:ef:5e:d0:91:ee:20:89:cd:1a:59:66:f2:6a: 02:4e:ec:86:97:28:da:c7:24:16:0d:2b:e2:6a:d6:49:d5:ed: 49:df:f2:c7:9e:a0:45:58:b0:2a:71:73:91:4f:8e:91:bf:6c: 1a:4a:f1:20:b3:76:ff:d7:bd:9c:85:89:04:70:f9:a7:ad:11: 8b:d3:ec:92:af:42:5f:7d:24:aa:f8:f7:9b:7c:67:3b:3b:ef: 0d:80:d9:d3:6d:1b:7e:27:fa:2c:d5:d4:47:aa:67:c5:de:06: e4:4c:8f:56:83:b7:6d:49:9d:94:39:53:fb:e6:33:81:8c:db: ba:3a:9f:e6:54:c3:eb:4f:7a:e0:8e:63:b1:18:60:b0:15:35: 59:d9:91:81:83:0b:db:e8:87:63:b9:69:24:7d:8e:7f:d9:d1: 54:7c:62:36:dd:09:5b:4a:29:a0:b2:a7:43:ad:9e:86:62:db: 82:75:91:7c:98:80:86:c0:1b:22:cf:55:37:1b:38:5f:5e:98: 84:99:e0:27 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIURxHmPO7oic23cw4lBtvx2R7fkaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlERjY4 NTEyRTExNzAeFw0yNTAzMzEwOTU1MDFaFw0yNjAzMzAxMDAwMDFaMDMxMTAvBgNV BAMTKEYyODUxMzI2Q0VFOEQ3NTlFRUU4QkRDMzFCQzAzNDE1QjQ5NDU1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxuMFG8AodOjKjYnSU4fZIXzf6 YyQuElmuZOsSx3HAN9OIFTuRB5N6dKYSo46fXW/xLMDoxygimacS+5Cul/dw/Bl3 bQwOQicMkIdejxY2MujzY+97e8Z02zPYQ5C00PS6BKo8jZHXcYOhusa/01oN5kiY Ecd+YHLQxq4t2Y53kQj3USiHEJA+bcoZxlxfjN7C5oXJCC3T8sTuO1LcV+JvmOR3 6UgrEo9Gtk8P6djAWNOL091NOqRndd6lRHxszCc87CzSFmoEXf7Qru0nHU5+pWay LlsFkJHKTITd9qUeBikgmvwRBHAnFvTArAlOqo5fq6T6Vdlbo/8B3FT3Kt8/AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU8oUTJs7o11nu6L3DG8A0FbSUVQQwHwYDVR0j BBgwFoAUhXNaSSLVKSFRmeb01oKd9oUS4RcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzNlNjhiZC1iMDRjLTRkMzUtODAyMC0wMjkzNjM0MmZiMWQvMC84NTczNUE0OTIy RDUyOTIxNTE5OUU2RjRENjgyOURGNjg1MTJFMTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlERjY4NTEy RTExNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjM2U2OGJkLWIwNGMtNGQzNS04 MDIwLTAyOTM2MzQyZmIxZC8wLzMxMzUzNzJlMzYzNjJlMzMzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDM1MzUzNjM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQiIwDQYJKoZIhvcN AQELBQADggEBAHEAg0dNA81AZTYeDLuXdjSMLn2632HchJnyDeMJd2k4xd+X4spm QJoDy6Ew4moOX3RKyzuy2cP8xoDo717Qke4gic0aWWbyagJO7IaXKNrHJBYNK+Jq 1knV7Unf8seeoEVYsCpxc5FPjpG/bBpK8SCzdv/XvZyFiQRw+aetEYvT7JKvQl99 JKr495t8Zzs77w2A2dNtG34n+izV1EeqZ8XeBuRMj1aDt21JnZQ5U/vmM4GM27o6 n+ZUw+tPeuCOY7EYYLAVNVnZkYGDC9voh2O5aSR9jn/Z0VR8YjbdCVtKKaCyp0Ot noZi24J1kXyYgIbAGyLPVTcbOF9emISZ4Cc= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net