$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa File: 3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa (raw, json) Hash identifier: CFmjdJ2vd2S1hwPDr69BfeMIGUvy+yNC1CU/AmoDxB8= Subject key identifier: EC:B1:FE:26:09:91:B6:71:26:68:E5:77:58:6A:4E:6A:99:61:E8:4F Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Certificate serial: 38FB17E174B73815A39A0596E3863C984361CA45 Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa Signing time: Sun 06 Apr 2025 15:14:56 +0000 ROA not before: Sun 06 Apr 2025 15:09:56 +0000 ROA not after: Sun 05 Apr 2026 15:14:56 +0000 asID: 45725 IP address blocks: 202.150.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:fb:17:e1:74:b7:38:15:a3:9a:05:96:e3:86:3c:98:43:61:ca:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Validity Not Before: Apr 6 15:09:56 2025 GMT Not After : Apr 5 15:14:56 2026 GMT Subject: CN=ECB1FE260991B6712668E577586A4E6A9961E84F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:41:59:bd:bd:0e:4a:1f:90:18:01:22:3b: 6b:de:a6:c9:e7:f4:8d:f4:c5:3c:16:9d:b7:54:a5: b0:71:80:87:ee:9c:09:58:30:fa:bb:f2:3e:51:43: 8a:a8:c0:fd:23:d1:1b:a2:d9:e7:b3:fc:73:07:f1: 29:41:87:b0:68:a4:a3:96:c2:e0:01:0f:92:9a:c8: c0:a0:1e:e0:80:11:b9:41:37:81:fa:20:63:c1:df: cb:5b:4b:08:9c:87:3b:d9:8a:cc:db:5c:ce:c5:5a: 1a:cd:90:41:8f:35:1d:b6:a9:93:65:e3:1b:c7:78: 8d:eb:68:d0:c0:1d:7a:34:9b:73:17:38:cc:b5:ae: ef:c0:77:0c:a0:15:b7:c9:fb:d7:53:cc:88:b5:6c: 6e:11:c3:e4:9b:1c:06:66:95:f2:05:21:e5:dc:5f: 2c:95:28:c2:6e:96:1d:aa:9b:be:1d:a6:0b:36:bd: 3d:4f:a6:09:c6:b1:27:83:4c:df:b4:bb:a6:02:74: 35:1a:40:ba:06:28:77:cf:34:e7:13:4c:0a:9f:41: 9e:63:93:bd:5c:6e:61:55:aa:05:10:26:01:e1:5e: 62:9d:b3:ff:01:fa:25:14:e3:f3:e3:b1:ba:9c:32: 5e:4e:c8:4c:b5:36:2b:12:1f:9b:08:68:bf:86:97: 05:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B1:FE:26:09:91:B6:71:26:68:E5:77:58:6A:4E:6A:99:61:E8:4F X509v3 Authority Key Identifier: keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.150.168.0/23 Signature Algorithm: sha256WithRSAEncryption cf:81:6a:18:97:42:12:39:2d:72:21:f5:1a:5e:4d:4d:52:b7: 32:60:db:ef:be:d2:cc:03:b1:fd:fb:8f:01:6b:6d:58:f1:15: bc:e2:4b:a5:4c:f2:c8:f8:3f:96:5f:73:ea:b6:0f:17:1a:c4: ab:f9:88:9e:0f:40:ae:c6:11:c9:3b:a6:1b:b4:08:31:dd:0f: 09:ea:8d:77:8d:5d:d1:48:f5:d4:ff:fe:f7:5f:27:df:d7:d4: aa:5d:77:c1:30:04:ef:54:70:05:1c:f4:4a:3c:1e:4a:64:17: 84:96:cf:98:23:66:6b:92:38:44:c4:fc:38:20:22:79:52:5c: 69:1d:ad:dc:5f:d3:7d:be:94:88:4d:80:c9:2c:ad:0d:5e:7b: d3:56:b6:f9:fe:c2:45:05:50:d1:90:e9:a1:29:22:f9:dd:fb: f8:c1:ba:f4:4e:38:ee:42:cb:15:64:e8:4e:61:8f:ee:1e:c6: 9b:1c:2e:fa:c0:a6:b9:09:dd:21:31:e8:ca:ce:9e:5e:02:74: b0:06:01:54:ac:99:22:dd:b9:d1:e4:cd:cc:74:01:73:fe:da: e2:6a:e1:73:51:86:a6:53:0f:ec:cb:11:45:80:6e:16:56:63: 67:b9:d8:43:9d:5f:bd:5b:93:47:91:49:71:f1:9b:fa:ff:6a: c3:ef:fb:70 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOPsX4XS3OBWjmgWW44Y8mENhykUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy NzQ1ODEwMzAeFw0yNTA0MDYxNTA5NTZaFw0yNjA0MDUxNTE0NTZaMDMxMTAvBgNV BAMTKEVDQjFGRTI2MDk5MUI2NzEyNjY4RTU3NzU4NkE0RTZBOTk2MUU4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINUFZvb0OSh+QGAEiO2vepsnn 9I30xTwWnbdUpbBxgIfunAlYMPq78j5RQ4qowP0j0Rui2eez/HMH8SlBh7BopKOW wuABD5KayMCgHuCAEblBN4H6IGPB38tbSwichzvZiszbXM7FWhrNkEGPNR22qZNl 4xvHeI3raNDAHXo0m3MXOMy1ru/AdwygFbfJ+9dTzIi1bG4Rw+SbHAZmlfIFIeXc XyyVKMJulh2qm74dpgs2vT1PpgnGsSeDTN+0u6YCdDUaQLoGKHfPNOcTTAqfQZ5j k71cbmFVqgUQJgHhXmKds/8B+iUU4/PjsbqcMl5OyEy1NisSH5sIaL+GlwXPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU7LH+JgmRtnEmaOV3WGpOaplh6E8wHwYDVR0j BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1 ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h NzJiLWVjMjczZjQzYmJjMi8wLzMyMzAzMjJlMzEzNTMwMmUzMTM2MzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypaoMA0GCSqG SIb3DQEBCwUAA4IBAQDPgWoYl0ISOS1yIfUaXk1NUrcyYNvvvtLMA7H9+48Ba21Y 8RW84kulTPLI+D+WX3Pqtg8XGsSr+YieD0CuxhHJO6YbtAgx3Q8J6o13jV3RSPXU //73Xyff19SqXXfBMATvVHAFHPRKPB5KZBeEls+YI2ZrkjhExPw4ICJ5UlxpHa3c X9N9vpSITYDJLK0NXnvTVrb5/sJFBVDRkOmhKSL53fv4wbr0TjjuQssVZOhOYY/u HsabHC76wKa5Cd0hMejKzp5eAnSwBgFUrJki3bnR5M3MdAFz/triauFzUYamUw/s yxFFgG4WVmNnudhDnV+9W5NHkUlx8Zv6/2rD7/tw -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net