$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: eM3HVrPcreAeucRByV37c+JRXniGRFix+YRiOKtKRWI= Subject key identifier: 42:F7:A0:77:C4:D4:7B:6E:84:1C:86:34:C0:A5:C5:F4:70:50:8A:6C Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 6FCC0DDB3CF2435298EF8B63B0F14405259F75C9 Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa Signing time: Sun 23 Mar 2025 05:00:02 +0000 ROA not before: Sun 23 Mar 2025 04:55:02 +0000 ROA not after: Sun 22 Mar 2026 05:00:02 +0000 asID: 9341 IP address blocks: 119.252.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 03:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cc:0d:db:3c:f2:43:52:98:ef:8b:63:b0:f1:44:05:25:9f:75:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Mar 23 04:55:02 2025 GMT Not After : Mar 22 05:00:02 2026 GMT Subject: CN=42F7A077C4D47B6E841C8634C0A5C5F470508A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5b:15:a8:38:2d:38:ed:d2:71:54:72:43:11: 91:58:33:c6:c7:63:2d:37:6b:16:63:5f:00:60:df: b5:23:a3:d0:38:34:bd:7a:0a:3f:76:80:85:49:e0: 44:94:98:af:6d:b7:9a:66:92:89:00:73:59:02:d0: 72:1b:1f:b0:f3:60:8b:85:3a:0f:bd:e5:1c:59:11: b4:a0:32:72:10:01:43:f6:16:f2:e4:8a:2a:12:69: 54:aa:73:71:32:33:dd:64:6b:08:bd:05:0c:54:3f: 6b:81:0e:3f:c4:d5:99:fa:7b:1d:84:a6:5f:4d:b6: 68:6c:fc:11:c8:fc:de:e5:27:87:35:27:ef:f7:6f: e9:4b:2d:95:cb:2e:ba:44:b1:ba:e7:4c:4b:a4:2d: 18:32:1d:29:de:58:c6:57:c5:2a:8f:4b:d5:09:4e: 7e:46:f9:d2:8b:02:d9:63:0a:28:d9:75:f2:86:57: fc:37:79:d2:30:69:97:82:31:0b:a3:62:cd:d0:0d: 73:17:67:78:9d:e7:f1:33:49:38:36:a2:66:de:de: d0:33:13:a0:f6:73:e0:12:d4:b6:9a:29:7b:e4:7b: 27:73:37:dd:be:19:2d:eb:66:e4:f7:37:1f:1c:df: ce:f7:a2:47:af:d1:ce:65:e7:b2:73:25:a1:a9:d2: cb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F7:A0:77:C4:D4:7B:6E:84:1C:86:34:C0:A5:C5:F4:70:50:8A:6C X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.171.0/24 Signature Algorithm: sha256WithRSAEncryption 19:88:50:e8:3c:2d:af:7d:86:18:a8:95:20:54:69:f5:88:c0: 48:35:32:55:31:dc:6d:5d:45:40:ad:5a:6d:02:17:1d:83:ea: a6:5d:85:b8:e5:99:8d:43:2d:53:fc:96:cd:38:b0:91:8e:b2: 55:ad:84:e1:b7:5b:9c:68:a4:1b:02:72:da:e0:05:b4:e4:41: 1f:74:e0:e3:8c:44:34:a2:a1:39:35:d6:af:1e:0a:bc:db:65: 09:0d:aa:d2:e0:4f:b7:95:d8:31:ab:02:b5:79:c7:c6:d5:a9: 42:14:12:c5:15:1f:e8:59:59:01:7d:6e:76:0d:df:1f:00:a7: 4c:e4:f3:96:bb:ef:d0:d2:5f:c5:1f:35:b3:79:9d:8d:c3:45: 4f:03:a3:e7:64:0e:83:3a:c6:fd:a2:a0:13:7f:6d:48:9d:1b: c7:ae:33:07:6b:36:99:38:db:dc:0b:d2:c2:24:05:00:b8:ba: 87:82:bc:be:3b:81:7a:45:53:b2:39:a4:78:9b:4f:0a:37:ea: cc:bd:c7:a2:3d:9b:6e:08:89:f2:6e:5a:21:3b:ec:76:c3:38: d1:cd:df:72:c3:a6:c0:12:00:81:ad:d0:10:7e:ca:c9:7f:17: c5:83:ba:34:52:9d:8b:cb:78:4c:c8:d2:eb:a3:24:cb:4b:82: 2e:a8:8d:18 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUb8wN2zzyQ1KY74tjsPFEBSWfdckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNTAzMjMwNDU1MDJaFw0yNjAzMjIwNTAwMDJaMDMxMTAvBgNV BAMTKDQyRjdBMDc3QzRENDdCNkU4NDFDODYzNEMwQTVDNUY0NzA1MDhBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqWxWoOC047dJxVHJDEZFYM8bH Yy03axZjXwBg37Ujo9A4NL16Cj92gIVJ4ESUmK9tt5pmkokAc1kC0HIbH7DzYIuF Og+95RxZEbSgMnIQAUP2FvLkiioSaVSqc3EyM91kawi9BQxUP2uBDj/E1Zn6ex2E pl9Ntmhs/BHI/N7lJ4c1J+/3b+lLLZXLLrpEsbrnTEukLRgyHSneWMZXxSqPS9UJ Tn5G+dKLAtljCijZdfKGV/w3edIwaZeCMQujYs3QDXMXZ3id5/EzSTg2ombe3tAz E6D2c+AS1LaaKXvkeydzN92+GS3rZuT3Nx8c3873okev0c5l57JzJaGp0ssZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUQvegd8TUe26EHIY0wKXF9HBQimwwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM3MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8qzANBgkqhkiG 9w0BAQsFAAOCAQEAGYhQ6Dwtr32GGKiVIFRp9YjASDUyVTHcbV1FQK1abQIXHYPq pl2FuOWZjUMtU/yWzTiwkY6yVa2E4bdbnGikGwJy2uAFtORBH3Tg44xENKKhOTXW rx4KvNtlCQ2q0uBPt5XYMasCtXnHxtWpQhQSxRUf6FlZAX1udg3fHwCnTOTzlrvv 0NJfxR81s3mdjcNFTwOj52QOgzrG/aKgE39tSJ0bx64zB2s2mTjb3AvSwiQFALi6 h4K8vjuBekVTsjmkeJtPCjfqzL3Hoj2bbgiJ8m5aITvsdsM40c3fcsOmwBIAga3Q EH7KyX8XxYO6NFKdi8t4TMjS66Mky0uCLqiNGA== -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:38 2025 by rpki-client on console.sobornost.net