$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32342d3234203d3e20313532333737.roa File: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (raw, json) Hash identifier: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE= Subject key identifier: 42:26:51:42:AC:54:29:13:50:16:41:C8:8B:1E:E3:A8:7C:BC:2B:21 Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 4FD01DFB4A5FCFD4320C4AEFDAAF404C892FEF35 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32342d3234203d3e20313532333737.roa Signing time: Mon 20 Jan 2025 06:00:44 +0000 ROA not before: Mon 20 Jan 2025 05:55:44 +0000 ROA not after: Mon 19 Jan 2026 06:00:44 +0000 asID: 152377 IP address blocks: 157.15.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d0:1d:fb:4a:5f:cf:d4:32:0c:4a:ef:da:af:40:4c:89:2f:ef:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Jan 20 05:55:44 2025 GMT Not After : Jan 19 06:00:44 2026 GMT Subject: CN=42265142AC542913501641C88B1EE3A87CBC2B21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:89:72:64:19:05:57:2e:e2:4d:3e:80:8d: a2:db:94:31:63:15:95:76:f2:1b:bd:db:16:86:77: 79:c3:82:97:2b:8a:cb:6b:85:22:36:cc:2c:16:ae: 80:c8:08:76:7d:2c:ae:ba:b5:3e:4e:d9:9b:4a:bc: 7a:c6:00:7e:ca:35:1e:92:85:39:df:f6:07:b2:74: f2:0d:52:a3:2c:6d:1e:97:88:81:6f:93:b8:0a:85: d5:ab:03:dc:e3:1c:f8:c6:68:17:bd:d9:ef:93:1e: 20:4c:e0:2b:0b:f2:51:77:a3:34:40:73:fa:fa:e0: 8a:32:84:74:a2:ce:ba:0f:ae:3c:c7:0c:b0:57:af: 9d:3d:3c:78:13:15:93:bd:5a:51:54:4b:17:a3:c9: f7:3d:73:79:bc:20:a3:d5:75:f9:9c:bc:8f:e9:d0: 98:ed:75:f3:36:d7:61:d5:cf:c3:ba:78:75:f3:95: fd:2c:db:29:0c:16:1d:d6:48:dd:86:68:53:fb:db: 7c:6a:5e:76:21:00:4f:62:55:a8:ca:0c:9b:cc:a7: 2d:39:0a:0a:6f:51:d7:00:dc:5c:44:0e:1a:e3:ff: f5:dd:fe:50:37:a0:ec:34:b0:9c:84:27:45:99:f2: 82:0d:3b:60:96:80:f2:c7:c6:09:f7:67:58:0f:a4: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:26:51:42:AC:54:29:13:50:16:41:C8:8B:1E:E3:A8:7C:BC:2B:21 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32342d3234203d3e20313532333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.66.0/24 Signature Algorithm: sha256WithRSAEncryption 45:44:8a:2d:13:74:08:00:3d:9c:ad:3c:a4:37:47:78:d5:78: dc:63:48:d6:25:22:c7:c2:9b:47:73:e5:85:6c:46:35:ef:59: 46:91:ea:87:f8:d9:53:4b:a4:fa:cb:a1:c2:76:ba:ab:56:0d: 53:a4:22:d9:1c:83:d3:a0:b9:b3:f3:2c:db:1b:fc:ce:9b:c6: 16:d2:de:32:4a:4a:df:e0:9d:49:85:de:42:9f:2a:a0:6d:0c: 6e:34:62:47:3d:f7:9f:93:1b:8a:a5:69:f2:57:99:a4:7a:9e: 47:66:e5:e9:92:0b:7c:e1:07:80:59:6f:76:ed:6f:39:d0:20: 02:08:db:35:37:9d:79:bd:7d:43:7b:a5:ca:d2:69:8f:77:1d: 18:d9:bb:28:6a:60:b9:40:ae:53:c1:d7:1b:0d:3d:4e:20:fe: 5c:35:f0:82:57:16:59:8f:c1:62:3e:83:4a:e6:7c:25:8b:ab: a6:65:86:3b:8e:71:c3:b3:d0:ba:09:4f:a4:09:37:2e:a0:41: 02:ca:0a:e2:bf:c4:c9:f2:c8:c4:fb:6d:3c:fd:33:a9:6b:da: 46:00:95:08:bf:39:3a:30:76:ef:a0:e7:ce:10:49:08:8f:5e: 12:c1:94:a4:b8:a3:f7:08:c8:a6:58:29:91:ef:a8:e8:40:f8: 14:2a:51:65 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUT9Ad+0pfz9QyDErv2q9ATIkv7zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTAxMjAwNTU1NDRaFw0yNjAxMTkwNjAwNDRaMDMxMTAvBgNV BAMTKDQyMjY1MTQyQUM1NDI5MTM1MDE2NDFDODhCMUVFM0E4N0NCQzJCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UolyZBkFVy7iTT6AjaLblDFj FZV28hu92xaGd3nDgpcristrhSI2zCwWroDICHZ9LK66tT5O2ZtKvHrGAH7KNR6S hTnf9geydPINUqMsbR6XiIFvk7gKhdWrA9zjHPjGaBe92e+THiBM4CsL8lF3ozRA c/r64IoyhHSizroPrjzHDLBXr509PHgTFZO9WlFUSxejyfc9c3m8IKPVdfmcvI/p 0JjtdfM212HVz8O6eHXzlf0s2ykMFh3WSN2GaFP723xqXnYhAE9iVajKDJvMpy05 CgpvUdcA3FxEDhrj//Xd/lA3oOw0sJyEJ0WZ8oINO2CWgPLHxgn3Z1gPpHc3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUQiZRQqxUKRNQFkHIix7jqHy8KyEwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NGU4NzlmLTNhNTYtNGQ4ZC04 M2U4LTBlOWNjNjU3NzBlYS8wLzMxMzUzNzJlMzEzNTJlMzYzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PQjANBgkqhkiG 9w0BAQsFAAOCAQEARUSKLRN0CAA9nK08pDdHeNV43GNI1iUix8KbR3PlhWxGNe9Z RpHqh/jZU0uk+suhwna6q1YNU6Qi2RyD06C5s/Ms2xv8zpvGFtLeMkpK3+CdSYXe Qp8qoG0MbjRiRz33n5MbiqVp8leZpHqeR2bl6ZILfOEHgFlvdu1vOdAgAgjbNTed eb19Q3ulytJpj3cdGNm7KGpguUCuU8HXGw09TiD+XDXwglcWWY/BYj6DSuZ8JYur pmWGO45xw7PQuglPpAk3LqBBAsoK4r/EyfLIxPttPP0zqWvaRgCVCL85OjB276Dn zhBJCI9eEsGUpLij9wjIplgpke+o6ED4FCpRZQ== -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:22 2025 by rpki-client on console.sobornost.net