$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32332d3233203d3e203435373235.roa File: 34332e3233302e3135342e302f32332d3233203d3e203435373235.roa (raw, json) Hash identifier: FoOUIBlL9T9MhX4bEhccY3Kjn0yIPa1cMqY4C0eO3xI= Subject key identifier: 11:88:0A:68:8B:84:5F:B2:9D:BE:31:1A:E6:BC:30:50:B9:11:E4:31 Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Certificate serial: 1ADFB5D00816BCFBF5A04B848B18E544D2D879F2 Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32332d3233203d3e203435373235.roa Signing time: Sun 06 Apr 2025 15:10:45 +0000 ROA not before: Sun 06 Apr 2025 15:05:45 +0000 ROA not after: Sun 05 Apr 2026 15:10:45 +0000 asID: 45725 IP address blocks: 43.230.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:df:b5:d0:08:16:bc:fb:f5:a0:4b:84:8b:18:e5:44:d2:d8:79:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Validity Not Before: Apr 6 15:05:45 2025 GMT Not After : Apr 5 15:10:45 2026 GMT Subject: CN=11880A688B845FB29DBE311AE6BC3050B911E431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:ac:7b:f9:42:cf:4d:87:b9:a0:97:38:80: d9:2d:bc:ae:e9:28:7d:81:9e:b9:75:44:53:31:bb: e2:76:ed:28:26:6c:62:fe:52:f0:2b:7b:57:ae:7a: f9:2a:8f:4d:d1:ab:a3:39:82:f8:d9:e8:7a:9d:15: 1a:9b:c9:a5:ca:51:87:4b:83:c6:a7:ed:45:55:d1: b0:6a:76:ea:3b:57:cc:95:24:0c:0c:8e:9f:44:00: dc:3f:35:7d:17:9d:91:02:78:e1:43:73:4e:3e:b3: d2:0f:5f:1f:9c:e1:9e:fe:9a:9d:0c:52:b3:74:2a: ff:f0:cb:a8:e9:b9:21:c2:9a:de:a1:87:64:f0:64: e3:48:b6:ee:3f:fe:10:69:af:66:9a:f3:94:0d:d8: 77:ff:e3:50:38:ab:1f:ca:9e:bb:34:84:d5:7b:10: 4c:0a:84:a1:34:bf:2f:f5:7e:31:3e:e0:d4:0a:59: 2a:89:0a:bb:9f:5a:fd:69:f2:78:d5:fd:18:ce:01: 12:5f:60:59:88:fe:3b:dc:90:47:a1:aa:3b:a0:78: 95:af:79:7f:6e:c0:5b:33:4c:ff:0b:30:b7:57:16: 70:81:a7:13:91:dd:38:08:d5:59:57:1a:ad:39:eb: 7a:aa:34:45:dd:06:b2:36:21:3b:47:76:dc:36:1e: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:0A:68:8B:84:5F:B2:9D:BE:31:1A:E6:BC:30:50:B9:11:E4:31 X509v3 Authority Key Identifier: keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32332d3233203d3e203435373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.154.0/23 Signature Algorithm: sha256WithRSAEncryption 36:8d:81:ee:37:cb:9a:38:94:7f:27:7b:ed:2c:6a:eb:a3:3c: fc:d9:ea:65:7d:26:cd:04:18:29:59:f7:fe:54:6a:fa:bb:52: c4:18:3a:d7:41:16:28:53:df:32:25:d7:09:31:7a:03:a9:12: d3:66:ef:95:f0:ad:33:e6:82:9c:89:2e:45:04:c2:7e:82:d6: 14:39:5e:82:32:4b:92:ff:1a:f0:56:77:cc:a6:91:b9:05:41: 1b:be:19:9c:ef:4d:ec:31:01:06:7a:d9:b3:9b:4c:2d:a0:fd: d6:22:aa:eb:ad:d8:7f:db:a3:20:77:66:6d:67:9f:b6:f3:e3: 23:ca:6e:16:96:61:1d:57:99:d2:97:bc:0f:5d:68:27:c1:bd: a8:8c:67:86:e3:b3:ad:ee:49:04:d2:45:5a:4e:50:8c:5d:ef: 50:14:41:48:cb:2e:ab:26:64:c5:d6:60:ed:f2:25:b9:d5:61: be:34:44:69:3a:07:e8:f8:2a:f1:6a:5d:8f:84:ff:df:dc:48: a8:12:86:a4:c2:72:4a:10:ec:7f:2a:f1:c8:37:17:bf:88:1f: 8d:27:ba:01:41:8d:c8:04:75:cb:ba:d5:e3:57:bd:a4:46:b8: 3a:f0:8d:c3:46:24:f2:8e:3f:a7:0d:85:6c:f4:93:6a:cb:a1: 7c:2f:1f:9c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGt+10AgWvPv1oEuEixjlRNLYefIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy NzQ1ODEwMzAeFw0yNTA0MDYxNTA1NDVaFw0yNjA0MDUxNTEwNDVaMDMxMTAvBgNV BAMTKDExODgwQTY4OEI4NDVGQjI5REJFMzExQUU2QkMzMDUwQjkxMUU0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaoKx7+ULPTYe5oJc4gNktvK7p KH2Bnrl1RFMxu+J27SgmbGL+UvAre1euevkqj03Rq6M5gvjZ6HqdFRqbyaXKUYdL g8an7UVV0bBqduo7V8yVJAwMjp9EANw/NX0XnZECeOFDc04+s9IPXx+c4Z7+mp0M UrN0Kv/wy6jpuSHCmt6hh2TwZONItu4//hBpr2aa85QN2Hf/41A4qx/Knrs0hNV7 EEwKhKE0vy/1fjE+4NQKWSqJCrufWv1p8njV/RjOARJfYFmI/jvckEehqjugeJWv eX9uwFszTP8LMLdXFnCBpxOR3TgI1VlXGq0563qqNEXdBrI2ITtHdtw2HsULAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUEYgKaIuEX7KdvjEa5rwwULkR5DEwHwYDVR0j BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1 ODEwMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h NzJiLWVjMjczZjQzYmJjMi8wLzM0MzMyZTMyMzMzMDJlMzEzNTM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzQzNTM3MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASvmmjANBgkqhkiG 9w0BAQsFAAOCAQEANo2B7jfLmjiUfyd77Sxq66M8/NnqZX0mzQQYKVn3/lRq+rtS xBg610EWKFPfMiXXCTF6A6kS02bvlfCtM+aCnIkuRQTCfoLWFDlegjJLkv8a8FZ3 zKaRuQVBG74ZnO9N7DEBBnrZs5tMLaD91iKq663Yf9ujIHdmbWeftvPjI8puFpZh HVeZ0pe8D11oJ8G9qIxnhuOzre5JBNJFWk5QjF3vUBRBSMsuqyZkxdZg7fIludVh vjREaToH6Pgq8Wpdj4T/39xIqBKGpMJyShDsfyrxyDcXv4gfjSe6AUGNyAR1y7rV 41e9pEa4OvCNw0Yk8o4/pw2FbPSTasuhfC8fnA== -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net