$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3230382e302f32342d3234203d3e203435323938.roa File: 34332e3234392e3230382e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: ZBvkqi4wu7ycsgvkdgZN2UrIQ3x4XvFGJe42h/LvuEk= Subject key identifier: 66:57:11:8E:EB:BF:08:49:37:9A:E2:F7:DA:1E:6B:22:3B:B9:88:84 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 4B5F4749580AE86E466FCA9949E325E9B8AB8BB9 Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3230382e302f32342d3234203d3e203435323938.roa Signing time: Wed 26 Feb 2025 01:00:01 +0000 ROA not before: Wed 26 Feb 2025 00:55:01 +0000 ROA not after: Wed 25 Feb 2026 01:00:01 +0000 asID: 45298 IP address blocks: 43.249.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5f:47:49:58:0a:e8:6e:46:6f:ca:99:49:e3:25:e9:b8:ab:8b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Feb 26 00:55:01 2025 GMT Not After : Feb 25 01:00:01 2026 GMT Subject: CN=6657118EEBBF0849379AE2F7DA1E6B223BB98884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:74:28:a6:8d:1c:92:98:bc:45:93:77:d6: fa:6c:de:39:b4:6e:31:70:2d:1b:e9:48:1e:45:7b: ed:a2:b4:5f:52:bd:84:55:da:80:4d:57:5f:16:9e: d4:ad:13:b4:3d:a7:e9:db:df:31:c9:72:23:2a:06: bd:4a:35:9d:55:b9:ae:22:f0:2d:79:9e:d4:4e:b9: 74:c4:49:3e:1b:6a:9f:f7:33:86:49:d6:3a:50:32: 8f:39:94:2e:54:2a:ef:2e:c0:27:1e:92:47:5b:58: cc:de:b7:8a:67:34:28:fd:33:2c:38:a7:ca:a3:ce: f7:28:49:19:e8:42:f2:45:62:9c:9f:44:1d:71:38: 69:e1:9b:bc:f1:47:c8:21:e5:bc:fa:d7:73:6c:b4: 8a:60:cb:e1:81:6f:90:7f:d4:81:aa:55:db:fe:75: 5e:7f:e1:22:e0:28:90:22:1f:07:3b:fc:ca:d8:d3: cd:c8:49:f0:a0:3f:82:6b:9f:49:af:b0:a4:70:c6: e9:24:14:d5:98:dd:14:cc:15:68:f1:0a:bc:b1:a3: 81:e5:7a:e7:8b:9e:db:9c:d4:ea:fd:cd:7d:a6:3b: d6:99:72:48:4a:17:ec:98:e5:73:c9:a6:2a:71:a4: f8:5b:6e:70:8c:fa:5d:c4:71:c2:18:63:1f:96:06: f5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:57:11:8E:EB:BF:08:49:37:9A:E2:F7:DA:1E:6B:22:3B:B9:88:84 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3230382e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.208.0/24 Signature Algorithm: sha256WithRSAEncryption 25:44:70:be:d8:56:9b:aa:1f:f8:53:55:5a:ae:bb:03:3e:35: 6c:f8:f7:f1:75:2e:57:12:bd:98:ec:23:1f:fb:e9:b8:49:ca: 89:71:40:36:7c:02:74:e8:3e:dc:71:87:89:f2:67:89:91:8a: 50:9d:51:91:a2:91:11:02:51:25:bc:23:42:ec:72:5c:eb:a5: 4d:29:48:a2:56:bd:c9:ed:2e:b9:1a:04:ae:24:95:c3:64:13: b9:35:2b:0f:93:df:1a:22:75:9e:e2:8f:c0:a6:32:0c:03:6a: b2:02:c3:12:3c:ed:ef:c6:81:3c:42:06:52:1f:88:b8:c0:39: 37:c6:b8:dd:75:4d:40:df:72:3d:b6:99:10:34:53:af:b4:96: 44:e7:a4:83:87:dc:c1:0d:5c:b5:36:a9:8c:70:25:f4:7b:38: 0d:d2:a9:a3:3d:e6:4e:d3:e6:9a:7c:7a:92:15:1a:ca:0d:32: b5:3a:23:b8:08:bb:31:83:e0:e2:56:f3:d1:6b:70:2e:47:ff: ff:22:60:42:c0:f2:98:3c:05:f8:f4:bf:b7:94:da:f6:f3:aa: 7c:e5:5d:5f:41:dd:68:2b:ce:42:14:17:02:f4:fc:93:be:c5: 98:0b:06:ed:f0:93:00:b4:b3:b1:77:5e:8e:f1:9f:2a:0a:f1: 32:03:fa:bc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUS19HSVgK6G5Gb8qZSeMl6biri7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNTAyMjYwMDU1MDFaFw0yNjAyMjUwMTAwMDFaMDMxMTAvBgNV BAMTKDY2NTcxMThFRUJCRjA4NDkzNzlBRTJGN0RBMUU2QjIyM0JCOTg4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1WnQopo0ckpi8RZN31vps3jm0 bjFwLRvpSB5Fe+2itF9SvYRV2oBNV18WntStE7Q9p+nb3zHJciMqBr1KNZ1Vua4i 8C15ntROuXTEST4bap/3M4ZJ1jpQMo85lC5UKu8uwCcekkdbWMzet4pnNCj9Myw4 p8qjzvcoSRnoQvJFYpyfRB1xOGnhm7zxR8gh5bz613NstIpgy+GBb5B/1IGqVdv+ dV5/4SLgKJAiHwc7/MrY083ISfCgP4Jrn0mvsKRwxukkFNWY3RTMFWjxCryxo4Hl eueLntuc1Or9zX2mO9aZckhKF+yY5XPJpipxpPhbbnCM+l3EccIYYx+WBvUzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUZlcRjuu/CEk3muL32h5rIju5iIQwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzM0MzMyZTMyMzQzOTJlMzIzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv50DANBgkqhkiG 9w0BAQsFAAOCAQEAJURwvthWm6of+FNVWq67Az41bPj38XUuVxK9mOwjH/vpuEnK iXFANnwCdOg+3HGHifJniZGKUJ1RkaKREQJRJbwjQuxyXOulTSlIola9ye0uuRoE riSVw2QTuTUrD5PfGiJ1nuKPwKYyDANqsgLDEjzt78aBPEIGUh+IuMA5N8a43XVN QN9yPbaZEDRTr7SWROekg4fcwQ1ctTapjHAl9Hs4DdKpoz3mTtPmmnx6khUayg0y tTojuAi7MYPg4lbz0WtwLkf//yJgQsDymDwF+PS/t5Ta9vOqfOVdX0HdaCvOQhQX AvT8k77FmAsG7fCTALSzsXdejvGfKgrxMgP6vA== -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net