$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa File: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (raw, json) Hash identifier: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4= Subject key identifier: B6:D3:28:97:BB:88:DD:34:DA:5E:56:7A:C1:C1:DF:47:95:AB:A0:90 Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 4ACAB781C77894A995FD5F0324A3F0D108A5222E Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa Signing time: Mon 30 Dec 2024 10:00:02 +0000 ROA not before: Mon 30 Dec 2024 09:55:02 +0000 ROA not after: Mon 29 Dec 2025 10:00:02 +0000 asID: 152076 IP address blocks: 202.47.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ca:b7:81:c7:78:94:a9:95:fd:5f:03:24:a3:f0:d1:08:a5:22:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Dec 30 09:55:02 2024 GMT Not After : Dec 29 10:00:02 2025 GMT Subject: CN=B6D32897BB88DD34DA5E567AC1C1DF4795ABA090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:c1:09:c7:5f:13:ff:66:dd:73:02:99:1a: a7:b8:1a:60:e5:15:d7:16:c6:62:64:e5:96:5e:09: 40:7d:65:e6:31:ad:a3:a7:df:ac:d0:71:a4:3a:cf: fe:13:39:97:25:93:71:47:6b:15:43:04:28:bc:25: 7f:ab:fd:4b:4e:52:30:b2:8f:7e:f9:f8:0f:3b:e1: 03:93:8f:76:1c:1f:20:e1:60:d4:8b:86:82:2d:85: f4:33:05:1e:19:c1:94:bf:1c:8a:9c:b4:3c:c1:5d: 10:a4:b3:05:5f:ec:72:f0:9f:67:d1:34:81:d9:c9: 9f:64:52:ea:8d:c7:e2:cc:33:e7:d1:32:34:fd:46: f5:f0:3b:c3:4d:ad:37:a8:aa:85:5b:68:b5:f9:4b: 28:a1:84:a2:72:5c:40:70:f7:67:be:7b:14:45:dc: f1:e8:3a:78:5a:03:25:15:75:43:7a:ef:57:24:81: 5b:8c:4c:b6:34:54:d9:0e:8d:a0:17:52:29:ce:e1: d8:eb:5d:02:80:21:0d:f0:73:d0:11:6a:eb:cf:a2: 1d:0a:2b:6e:1a:a7:bf:47:4d:77:03:c4:95:31:71: a7:ea:64:62:1d:53:92:ab:b4:f3:9a:c2:af:b7:2e: a8:30:11:7e:d8:e5:b0:ce:31:93:e8:f3:ae:35:2d: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D3:28:97:BB:88:DD:34:DA:5E:56:7A:C1:C1:DF:47:95:AB:A0:90 X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.160.0/24 Signature Algorithm: sha256WithRSAEncryption 94:bb:07:ce:ee:72:7f:06:bc:99:9a:a2:c4:77:23:1a:b1:fe: c2:f5:1b:14:5a:93:3d:db:d4:e3:93:fb:e6:70:97:d8:a0:44: 91:33:c8:4b:3e:2d:e5:d5:e5:7c:77:5a:3d:f2:51:fa:99:5b: fc:a0:8f:b6:03:11:95:cb:8a:a6:2b:27:07:50:a1:91:6a:f3: f1:50:c1:8a:7b:0d:15:6b:b0:57:ca:9d:a4:38:7a:2b:d2:bd: 10:9d:19:b1:0d:56:20:93:db:a6:a1:b2:50:c5:f2:0e:73:85: 71:0d:c8:49:8d:18:b1:b1:5b:d9:35:90:4d:13:68:55:11:40: 5e:23:41:5c:80:84:d5:f4:f4:88:ec:bb:3e:62:27:31:f8:69: 33:b4:c8:24:55:e9:98:b7:51:14:7c:84:1d:d8:60:81:9b:c5: 60:39:8a:08:d2:c5:96:5b:17:09:d3:7a:45:e8:2e:0a:99:3d: 0b:1a:78:14:f6:43:8b:95:72:fe:89:0f:8e:0a:bf:eb:8f:b3: 52:82:7f:49:2c:a6:a2:aa:05:91:02:d1:36:1d:f2:d3:67:8f: 3a:e9:c1:7a:fa:fd:59:c8:42:94:61:f3:00:36:05:ae:03:80: 38:d1:6a:45:98:0e:04:73:c0:3c:32:ac:33:d8:dd:38:53:f1: af:f3:41:8a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSsq3gcd4lKmV/V8DJKPw0QilIi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNDEyMzAwOTU1MDJaFw0yNTEyMjkxMDAwMDJaMDMxMTAvBgNV BAMTKEI2RDMyODk3QkI4OEREMzREQTVFNTY3QUMxQzFERjQ3OTVBQkEwOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQh8EJx18T/2bdcwKZGqe4GmDl FdcWxmJk5ZZeCUB9ZeYxraOn36zQcaQ6z/4TOZclk3FHaxVDBCi8JX+r/UtOUjCy j375+A874QOTj3YcHyDhYNSLhoIthfQzBR4ZwZS/HIqctDzBXRCkswVf7HLwn2fR NIHZyZ9kUuqNx+LMM+fRMjT9RvXwO8NNrTeoqoVbaLX5SyihhKJyXEBw92e+exRF 3PHoOnhaAyUVdUN671ckgVuMTLY0VNkOjaAXUinO4djrXQKAIQ3wc9ARauvPoh0K K24ap79HTXcDxJUxcafqZGIdU5KrtPOawq+3LqgwEX7Y5bDOMZPo8641LeJhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUttMol7uI3TTaXlZ6wcHfR5WroJAwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyODg3NjJjLTNmYzUtNDljYy05 NDlhLTU5NGIzMzFhMTNhMS8wLzMyMzAzMjJlMzQzNzJlMzEzNjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyi+gMA0GCSqG SIb3DQEBCwUAA4IBAQCUuwfO7nJ/BryZmqLEdyMasf7C9RsUWpM929Tjk/vmcJfY oESRM8hLPi3l1eV8d1o98lH6mVv8oI+2AxGVy4qmKycHUKGRavPxUMGKew0Va7BX yp2kOHor0r0QnRmxDVYgk9umobJQxfIOc4VxDchJjRixsVvZNZBNE2hVEUBeI0Fc gITV9PSI7Ls+Yicx+GkztMgkVemYt1EUfIQd2GCBm8VgOYoI0sWWWxcJ03pF6C4K mT0LGngU9kOLlXL+iQ+OCr/rj7NSgn9JLKaiqgWRAtE2HfLTZ4866cF6+v1ZyEKU YfMANgWuA4A40WpFmA4Ec8A8Mqwz2N04U/Gv80GK -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net