$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa File: 3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa (raw, json) Hash identifier: 705Tii5x7S14LtQKPH8/q3tF4NH3B5/oStv9EoIsYwk= Subject key identifier: 0A:6D:4E:BC:AC:54:37:8E:DA:50:EC:84:CF:74:7E:50:C4:C5:C1:BA Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 63CF7CDA0DABE0EF5FE303CA75E65F2A714EA8A1 Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa Signing time: Thu 24 Apr 2025 07:00:02 +0000 ROA not before: Thu 24 Apr 2025 06:55:02 +0000 ROA not after: Thu 23 Apr 2026 07:00:02 +0000 asID: 152751 IP address blocks: 157.66.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:cf:7c:da:0d:ab:e0:ef:5f:e3:03:ca:75:e6:5f:2a:71:4e:a8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Apr 24 06:55:02 2025 GMT Not After : Apr 23 07:00:02 2026 GMT Subject: CN=0A6D4EBCAC54378EDA50EC84CF747E50C4C5C1BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1d:20:87:4a:68:02:f4:1d:eb:af:ad:21:05: 4f:25:ca:6a:b7:fe:a0:cc:a5:fc:69:28:5a:4d:4e: 0c:be:94:84:a9:c6:90:a6:da:f2:c0:79:ff:d1:69: 35:f9:64:a3:fd:32:5a:c1:b2:79:fb:eb:7a:9a:2d: 7e:36:a7:ad:6d:16:08:60:19:db:ea:cc:60:bd:4a: d7:20:4d:d1:80:9f:81:14:47:f1:67:79:61:41:36: 6f:cf:4a:9e:7c:83:27:c2:8b:93:fd:fa:f4:69:ad: b4:65:28:f9:2e:da:de:99:dc:48:f3:4a:c2:fc:26: e0:33:89:8d:f2:c2:0c:fb:a1:86:0b:bd:a8:85:06: b0:2a:4d:cb:36:31:90:3b:eb:d2:79:3f:89:03:4c: cb:af:61:09:62:a7:a3:02:8f:fa:df:00:a4:2b:15: aa:2f:9c:d7:74:84:32:75:e4:e1:fc:f0:35:2e:98: cc:0b:95:a1:63:8a:90:49:bd:e0:21:09:99:60:ef: 6a:c4:61:ab:cd:7b:ef:c2:7c:9e:91:ea:b1:0a:4c: 4c:4b:6b:22:9a:50:d0:3a:2a:fd:46:40:5c:fd:99: 74:6d:18:7c:49:0c:31:ef:4e:60:dc:01:0a:6e:76: 03:a1:c7:62:e1:2b:ff:49:36:44:2d:62:f1:fb:24: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6D:4E:BC:AC:54:37:8E:DA:50:EC:84:CF:74:7E:50:C4:C5:C1:BA X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.128.0/23 Signature Algorithm: sha256WithRSAEncryption 71:b7:38:4c:5a:74:9d:b8:9a:d9:2d:c4:b5:3d:2e:05:cb:71: 08:58:80:5e:28:96:a4:80:5c:29:79:f6:ea:ea:96:e1:ff:02: 18:27:97:9f:71:8d:bd:37:e0:87:ee:dd:a4:30:07:c6:e7:fe: f3:5b:a6:63:42:29:f2:df:55:bb:d5:e6:e2:ad:97:7a:ea:b7: 8f:73:01:5d:f6:45:fa:53:44:d3:ac:63:e8:fa:a7:7a:c4:6c: 6f:87:93:fe:bd:5d:87:8f:02:4a:c9:ef:5b:be:dc:ac:8e:7b: ed:55:60:73:a7:7d:26:53:39:44:24:3b:91:14:46:95:c3:43: 9a:ec:f5:25:70:a7:78:85:12:81:8a:5f:2d:dc:f9:aa:8b:2a: 73:dd:a8:f0:c5:8f:75:b1:a9:14:20:9f:43:53:48:95:97:58: 1f:00:99:be:3c:be:25:3f:3f:d5:45:f9:2b:a5:be:6e:a3:06: a3:89:27:a4:3e:22:62:d3:bb:1f:61:4a:53:48:14:16:ae:9e: a1:b7:e0:f8:48:0b:e3:07:6d:5f:c3:66:4f:21:74:52:2c:24: de:b5:da:f6:97:d8:a5:a7:32:74:a6:5e:ec:70:06:32:09:7b: e9:70:31:81:79:29:60:ff:60:60:7b:b2:0f:0f:63:6e:3e:25: d7:fc:10:b8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUY8982g2r4O9f4wPKdeZfKnFOqKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNTA0MjQwNjU1MDJaFw0yNjA0MjMwNzAwMDJaMDMxMTAvBgNV BAMTKDBBNkQ0RUJDQUM1NDM3OEVEQTUwRUM4NENGNzQ3RTUwQzRDNUMxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuHSCHSmgC9B3rr60hBU8lymq3 /qDMpfxpKFpNTgy+lISpxpCm2vLAef/RaTX5ZKP9MlrBsnn763qaLX42p61tFghg GdvqzGC9StcgTdGAn4EUR/FneWFBNm/PSp58gyfCi5P9+vRprbRlKPku2t6Z3Ejz SsL8JuAziY3ywgz7oYYLvaiFBrAqTcs2MZA769J5P4kDTMuvYQlip6MCj/rfAKQr FaovnNd0hDJ15OH88DUumMwLlaFjipBJveAhCZlg72rEYavNe+/CfJ6R6rEKTExL ayKaUNA6Kv1GQFz9mXRtGHxJDDHvTmDcAQpudgOhx2LhK/9JNkQtYvH7JL/hAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUCm1OvKxUN47aUOyEz3R+UMTFwbowHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyNGQxZWJiLWFlZWItNDk0NS05 ZWYyLTMyYWQ5YmZkZWIxOS8wLzMxMzUzNzJlMzYzNjJlMzEzMjM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnUKAMA0GCSqG SIb3DQEBCwUAA4IBAQBxtzhMWnSduJrZLcS1PS4Fy3EIWIBeKJakgFwpefbq6pbh /wIYJ5efcY29N+CH7t2kMAfG5/7zW6ZjQiny31W71ebirZd66rePcwFd9kX6U0TT rGPo+qd6xGxvh5P+vV2HjwJKye9bvtysjnvtVWBzp30mUzlEJDuRFEaVw0Oa7PUl cKd4hRKBil8t3Pmqiypz3ajwxY91sakUIJ9DU0iVl1gfAJm+PL4lPz/VRfkrpb5u owajiSekPiJi07sfYUpTSBQWrp6ht+D4SAvjB21fw2ZPIXRSLCTetdr2l9ilpzJ0 pl7scAYyCXvpcDGBeSlg/2Bge7IPD2NuPiXX/BC4 -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:54 2025 by rpki-client on console.sobornost.net