$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa File: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (raw, json) Hash identifier: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY= Subject key identifier: 5A:B1:B4:E7:87:49:E2:2D:0F:59:F8:B6:D3:BD:5D:57:83:9F:66:42 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 7318F30C1E75B3D7455EE5849DA2B9A44C0366C6 Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa Signing time: Tue 15 Apr 2025 06:00:00 +0000 ROA not before: Tue 15 Apr 2025 05:55:00 +0000 ROA not after: Tue 14 Apr 2026 06:00:00 +0000 asID: 140443 IP address blocks: 202.125.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:18:f3:0c:1e:75:b3:d7:45:5e:e5:84:9d:a2:b9:a4:4c:03:66:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Apr 15 05:55:00 2025 GMT Not After : Apr 14 06:00:00 2026 GMT Subject: CN=5AB1B4E78749E22D0F59F8B6D3BD5D57839F6642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:1d:55:e2:1a:53:9d:cb:ac:09:fe:7e:41: 10:73:ff:4c:dd:9e:4e:e8:00:20:5a:76:06:39:5b: 95:36:f2:0e:3e:bc:9c:17:f2:11:21:c4:b0:af:a9: a6:9a:4a:d6:b6:5b:6c:02:98:8d:71:ad:30:49:2e: 3d:de:b7:7a:bd:29:6b:39:b1:cc:47:8d:fa:64:5e: 32:87:a7:8f:62:2c:df:47:8c:0f:7e:4e:e5:05:3f: f0:1b:b7:e3:a1:ad:1a:e4:57:bc:a7:15:b7:7c:0a: 6c:be:29:18:8b:60:f7:03:75:19:05:24:38:e2:fa: aa:93:e5:78:62:40:2d:fd:4c:44:18:3c:04:b1:bd: a5:6f:de:8d:55:a1:3b:69:01:ae:38:f0:f9:22:4c: 97:58:46:69:7d:f2:14:09:4e:d4:c6:14:85:a3:54: 41:47:29:e1:7b:22:34:ad:6a:74:80:a7:f4:94:20: af:d6:2b:ec:cc:1c:dd:6b:14:c2:d5:e1:ee:2a:75: 0a:e1:40:7a:63:33:39:9c:64:aa:27:97:5e:b4:e6: 01:8e:c3:25:cd:f8:3a:ea:20:68:f8:f7:6c:6f:4f: 8c:7b:a9:1a:6a:28:bf:f8:d0:04:18:de:ca:f8:ac: 07:33:84:82:11:09:dd:a2:c9:85:a8:ac:78:70:85: 48:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B1:B4:E7:87:49:E2:2D:0F:59:F8:B6:D3:BD:5D:57:83:9F:66:42 X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.125.82.0/23 Signature Algorithm: sha256WithRSAEncryption a6:0c:81:31:15:c0:6d:ed:d9:16:5a:9f:bb:34:ef:ef:a8:fb: f5:58:1a:5a:a9:76:51:07:f7:7a:6a:3f:cf:15:59:06:88:a8: ed:09:db:dc:66:16:a4:71:eb:59:eb:02:7c:f0:81:79:e7:76: d9:39:6e:d4:e2:ad:30:7f:65:df:9a:b3:67:ed:0f:8b:e7:62: 16:41:6c:6e:ab:56:5c:1f:16:44:e0:47:8d:52:a9:7b:b0:c7: d0:6a:cc:0a:24:6f:61:60:ac:6d:d2:d4:df:3b:87:96:80:b8: 1f:0e:00:21:ad:ef:0e:25:83:1a:36:5e:11:5c:92:39:79:9f: 3b:ae:3b:47:3f:68:8f:00:13:eb:c1:48:a6:64:e7:f3:09:c8: f6:eb:f2:4d:73:bb:15:3d:c0:fe:6a:73:1a:6f:a7:7c:9f:6d: d0:6f:3d:35:d6:ca:dd:98:da:44:83:b0:8d:c5:3d:14:79:c5: 58:41:0b:c0:bf:71:da:80:81:dc:17:f1:91:dd:34:6e:30:6f: 4c:93:67:79:1a:b1:68:86:07:aa:73:3d:bd:c9:62:46:66:51: 69:1f:1e:11:75:e5:d7:78:07:de:5a:3e:58:0c:6f:cc:32:bd: a3:67:9b:5c:37:b3:04:e2:9b:cd:70:43:bd:ef:80:b7:6a:ef: d5:5b:b3:2c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcxjzDB51s9dFXuWEnaK5pEwDZsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNTA0MTUwNTU1MDBaFw0yNjA0MTQwNjAwMDBaMDMxMTAvBgNV BAMTKDVBQjFCNEU3ODc0OUUyMkQwRjU5RjhCNkQzQkQ1RDU3ODM5RjY2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILh1V4hpTncusCf5+QRBz/0zd nk7oACBadgY5W5U28g4+vJwX8hEhxLCvqaaaSta2W2wCmI1xrTBJLj3et3q9KWs5 scxHjfpkXjKHp49iLN9HjA9+TuUFP/Abt+OhrRrkV7ynFbd8Cmy+KRiLYPcDdRkF JDji+qqT5XhiQC39TEQYPASxvaVv3o1VoTtpAa448PkiTJdYRml98hQJTtTGFIWj VEFHKeF7IjStanSAp/SUIK/WK+zMHN1rFMLV4e4qdQrhQHpjMzmcZKonl1605gGO wyXN+DrqIGj492xvT4x7qRpqKL/40AQY3sr4rAczhIIRCd2iyYWorHhwhUi/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWrG054dJ4i0PWfi2071dV4OfZkIwHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjZDMyM2JlLTgzN2QtNDI0NC04 NDZjLTdkMjM5M2E5YTAwOS8wLzMyMzAzMjJlMzEzMjM1MmUzODMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMwMzQzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByn1SMA0GCSqG SIb3DQEBCwUAA4IBAQCmDIExFcBt7dkWWp+7NO/vqPv1WBpaqXZRB/d6aj/PFVkG iKjtCdvcZhakcetZ6wJ88IF553bZOW7U4q0wf2XfmrNn7Q+L52IWQWxuq1ZcHxZE 4EeNUql7sMfQaswKJG9hYKxt0tTfO4eWgLgfDgAhre8OJYMaNl4RXJI5eZ87rjtH P2iPABPrwUimZOfzCcj26/JNc7sVPcD+anMab6d8n23Qbz011srdmNpEg7CNxT0U ecVYQQvAv3HagIHcF/GR3TRuMG9Mk2d5GrFohgeqcz29yWJGZlFpHx4RdeXXeAfe Wj5YDG/MMr2jZ5tcN7ME4pvNcEO974C3au/VW7Ms -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net