$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa File: 3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa (raw, json) Hash identifier: Vd4YXu/zv6QpeJqZrRqJLtEJqDsjx9BYEUrETFSOwbg= Subject key identifier: 32:60:F3:CB:22:F4:16:C7:D9:75:0B:CE:F7:E5:29:5B:AF:DA:EE:4A Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Certificate serial: 48BD52EC8E5399FDC2148B2EA2A01493558F8FE6 Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa Signing time: Sun 06 Apr 2025 15:14:17 +0000 ROA not before: Sun 06 Apr 2025 15:09:17 +0000 ROA not after: Sun 05 Apr 2026 15:14:17 +0000 asID: 45725 IP address blocks: 202.150.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bd:52:ec:8e:53:99:fd:c2:14:8b:2e:a2:a0:14:93:55:8f:8f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Validity Not Before: Apr 6 15:09:17 2025 GMT Not After : Apr 5 15:14:17 2026 GMT Subject: CN=3260F3CB22F416C7D9750BCEF7E5295BAFDAEE4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:66:a3:0c:50:3d:67:6d:ff:7c:a6:b8:7e: b0:2f:53:09:c3:6e:da:4f:ed:f6:e5:c2:84:7c:11: ef:20:f7:41:5e:2c:34:27:ed:0e:40:12:5b:4d:b1: ed:3c:04:87:01:d8:ae:35:f9:99:4c:e0:71:ad:ed: d0:12:c7:b4:87:81:57:fd:0a:0f:ff:fb:ed:d3:84: 9d:20:b7:61:56:c4:fc:4a:eb:e2:20:21:e8:bb:18: 35:49:75:91:3a:2b:39:9e:8e:c1:b3:12:87:51:bc: 59:07:ea:1e:1c:e8:9f:d7:72:45:c2:5a:2a:24:82: 39:84:4f:f1:9c:a3:3a:5a:9a:e1:5f:cf:40:0a:a8: bc:b1:7b:db:e5:99:af:c0:72:1e:38:56:e1:f6:ef: 3e:a5:26:fc:bf:98:cd:73:a7:e3:e9:f6:97:e8:26: 0d:eb:2f:14:ec:fc:80:61:a0:28:89:6d:e5:5d:87: bc:66:fb:91:f5:b5:5b:b7:be:4c:4f:20:5b:3d:83: fe:9f:de:b7:30:a1:80:cd:e5:8f:6b:79:d6:ee:48: 7e:ce:49:bb:ae:8e:ed:31:9b:ed:2b:00:bc:a6:b0: 2c:10:2c:c0:d0:8e:1c:ac:94:75:b6:5c:ba:62:00: 40:b9:6c:ad:a1:d1:90:df:fd:e7:cf:7d:fd:33:ac: d1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:60:F3:CB:22:F4:16:C7:D9:75:0B:CE:F7:E5:29:5B:AF:DA:EE:4A X509v3 Authority Key Identifier: keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.150.160.0/23 Signature Algorithm: sha256WithRSAEncryption 39:cf:79:f4:37:c6:15:03:d9:f4:e4:a9:e8:85:39:33:8d:81: 29:a0:db:7c:1f:da:c1:43:20:45:90:57:a1:e2:bf:73:b0:9b: 9a:d6:45:bc:0d:b9:a3:8a:f7:f0:e9:df:9f:fb:1e:a0:82:14: cb:98:c7:37:f3:00:b5:85:f8:27:7e:51:ad:b4:b5:2d:de:84: 31:e7:fd:fd:4b:5c:8b:a0:1f:45:72:c6:72:c2:66:4a:37:dc: dd:1f:60:23:e3:2a:a9:90:2e:ae:31:be:ab:98:03:fa:e8:56: 78:fc:1a:68:9d:e1:28:5a:bc:01:3c:79:6b:ed:33:52:7d:c2: f5:b0:df:9d:05:44:f5:61:ec:fa:6d:cb:a0:b8:5e:8a:c7:85: e2:02:6d:51:c9:01:b3:ad:56:31:0e:aa:25:2a:22:ad:e8:1e: c9:7d:f9:b2:9f:93:24:b8:1a:66:d0:25:02:18:c0:d9:75:4a: 84:b4:24:f9:8d:f1:2e:76:b3:27:2b:ac:44:24:03:f4:3d:99: 6e:90:e6:07:dc:5f:8f:d4:33:f6:89:e0:b0:32:05:49:ec:20: 40:b8:b2:c7:89:0b:c5:d0:7e:22:78:50:05:a2:71:a1:e8:f9: 39:0b:1c:9c:5c:84:ce:42:65:af:9c:c7:91:26:48:bd:ae:ec: 89:a2:12:e3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSL1S7I5Tmf3CFIsuoqAUk1WPj+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy NzQ1ODEwMzAeFw0yNTA0MDYxNTA5MTdaFw0yNjA0MDUxNTE0MTdaMDMxMTAvBgNV BAMTKDMyNjBGM0NCMjJGNDE2QzdEOTc1MEJDRUY3RTUyOTVCQUZEQUVFNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6S2ajDFA9Z23/fKa4frAvUwnD btpP7fblwoR8Ee8g90FeLDQn7Q5AEltNse08BIcB2K41+ZlM4HGt7dASx7SHgVf9 Cg//++3ThJ0gt2FWxPxK6+IgIei7GDVJdZE6KzmejsGzEodRvFkH6h4c6J/XckXC WiokgjmET/GcozpamuFfz0AKqLyxe9vlma/Ach44VuH27z6lJvy/mM1zp+Pp9pfo Jg3rLxTs/IBhoCiJbeVdh7xm+5H1tVu3vkxPIFs9g/6f3rcwoYDN5Y9redbuSH7O Sbuuju0xm+0rALymsCwQLMDQjhyslHW2XLpiAEC5bK2h0ZDf/efPff0zrNFBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMmDzyyL0FsfZdQvO9+UpW6/a7kowHwYDVR0j BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1 ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h NzJiLWVjMjczZjQzYmJjMi8wLzMyMzAzMjJlMzEzNTMwMmUzMTM2MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypagMA0GCSqG SIb3DQEBCwUAA4IBAQA5z3n0N8YVA9n05KnohTkzjYEpoNt8H9rBQyBFkFeh4r9z sJua1kW8Dbmjivfw6d+f+x6gghTLmMc38wC1hfgnflGttLUt3oQx5/39S1yLoB9F csZywmZKN9zdH2Aj4yqpkC6uMb6rmAP66FZ4/BponeEoWrwBPHlr7TNSfcL1sN+d BUT1Yez6bcuguF6Kx4XiAm1RyQGzrVYxDqolKiKt6B7Jffmyn5MkuBpm0CUCGMDZ dUqEtCT5jfEudrMnK6xEJAP0PZlukOYH3F+P1DP2ieCwMgVJ7CBAuLLHiQvF0H4i eFAFonGh6Pk5CxycXITOQmWvnMeRJki9ruyJohLj -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net