$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa File: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (raw, json) Hash identifier: qbLrPvZpuRQboHf20eAwQEqv0hdBrMoM2us7hcpzxVQ= Subject key identifier: 66:6B:45:CC:1B:AB:EF:4C:29:21:A2:00:9C:62:51:8F:CA:16:80:34 Certificate issuer: /CN=73626536B3B2A503E6D53473A97CF39A13301753 Certificate serial: 665DB3E81D80992BFE2D916AD10491FAA9D1A380 Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa Signing time: Sat 18 Jan 2025 05:29:16 +0000 ROA not before: Sat 18 Jan 2025 05:24:16 +0000 ROA not after: Sat 17 Jan 2026 05:29:16 +0000 asID: 153122 IP address blocks: 160.187.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5d:b3:e8:1d:80:99:2b:fe:2d:91:6a:d1:04:91:fa:a9:d1:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753 Validity Not Before: Jan 18 05:24:16 2025 GMT Not After : Jan 17 05:29:16 2026 GMT Subject: CN=666B45CC1BABEF4C2921A2009C62518FCA168034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:59:99:37:5d:ac:af:54:13:9b:3f:c0:4a:5e: 2f:9c:45:a6:8d:49:92:0c:38:b3:00:09:a8:54:a6: 66:b1:12:79:39:a3:7f:6b:63:5d:a6:a3:7d:cd:fb: 5a:ae:53:e5:2f:c4:37:13:2f:82:66:89:1b:f7:49: 26:6e:4e:2d:9f:30:33:98:3f:b9:6e:a8:07:dd:65: 76:1b:c0:fa:9c:b8:a2:ee:d7:03:56:47:db:04:c3: 68:60:d6:b7:b9:60:42:b2:14:36:9c:ad:0d:94:69: f1:de:cf:76:fc:81:1c:ef:cf:d1:5d:29:2a:f8:be: 76:ce:91:e3:38:85:bc:e4:ab:62:b1:22:7b:52:4e: 17:83:17:d6:9c:c5:c1:c5:ff:9b:54:91:47:1d:b8: e7:d5:b5:77:dd:63:91:05:44:4f:a1:7b:7b:12:84: be:6e:60:7a:cb:28:36:e7:73:5f:09:cd:8a:2f:45: 82:8c:b1:8b:7c:83:9f:9d:99:07:d5:04:8d:bd:d8: cc:69:36:d0:8c:9e:75:d5:e7:a0:90:d2:60:ed:d5: e3:23:c3:26:d8:58:f3:73:51:96:d7:64:1c:ca:86: 83:25:92:27:0b:6f:43:99:95:0b:da:3a:3a:bc:bd: e2:68:5f:46:74:85:39:1f:a7:e8:e0:8d:14:00:72: 82:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6B:45:CC:1B:AB:EF:4C:29:21:A2:00:9C:62:51:8F:CA:16:80:34 X509v3 Authority Key Identifier: keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.138.0/24 Signature Algorithm: sha256WithRSAEncryption a7:3d:23:58:e7:b9:05:03:d9:ff:51:c4:c8:62:95:05:ba:4a: 74:c6:e4:4f:80:47:50:60:11:98:f5:1d:6d:07:0b:1e:75:62: 89:59:25:ab:6f:30:4e:18:e8:60:72:3b:d7:c6:91:82:bc:77: 6e:65:fd:f0:a2:7f:6d:56:dc:70:91:32:d9:15:c9:f2:7e:ed: f0:ff:09:4d:c3:07:7a:f5:5a:06:0a:9c:32:2c:e4:4d:5c:69: b7:e0:f3:16:a3:67:24:00:7f:ce:5e:73:e6:b2:32:cb:09:f6: 6d:32:70:25:c7:a0:a1:8f:d4:80:be:97:30:ef:f8:db:8b:3c: b2:b7:91:de:77:39:ad:a4:33:19:96:2b:13:af:60:ed:35:6c: 32:06:b8:56:90:8d:fc:3a:fb:1e:97:28:2e:94:e6:00:90:ca: 90:a4:4f:78:af:91:c9:d0:98:e5:e5:ed:d8:90:ba:9f:45:aa: fe:4f:4a:b6:91:b5:f8:f0:99:8e:1d:8b:6f:3e:46:f1:a9:40: a5:6d:49:43:4f:76:50:09:0b:89:cd:4f:6e:55:12:1b:46:5b: d8:8b:34:41:8f:9b:21:52:bc:1d:64:11:8d:14:e7:41:82:18: 58:cf:32:98:27:85:df:71:7a:6b:a8:9e:5c:05:29:de:7f:a4: d4:2a:8c:56 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZl2z6B2AmSv+LZFq0QSR+qnRo4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUEx MzMwMTc1MzAeFw0yNTAxMTgwNTI0MTZaFw0yNjAxMTcwNTI5MTZaMDMxMTAvBgNV BAMTKDY2NkI0NUNDMUJBQkVGNEMyOTIxQTIwMDlDNjI1MThGQ0ExNjgwMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWZk3XayvVBObP8BKXi+cRaaN SZIMOLMACahUpmaxEnk5o39rY12mo33N+1quU+UvxDcTL4JmiRv3SSZuTi2fMDOY P7luqAfdZXYbwPqcuKLu1wNWR9sEw2hg1re5YEKyFDacrQ2UafHez3b8gRzvz9Fd KSr4vnbOkeM4hbzkq2KxIntSTheDF9acxcHF/5tUkUcduOfVtXfdY5EFRE+he3sS hL5uYHrLKDbnc18JzYovRYKMsYt8g5+dmQfVBI292MxpNtCMnnXV56CQ0mDt1eMj wybYWPNzUZbXZBzKhoMlkicLb0OZlQvaOjq8veJoX0Z0hTkfp+jgjRQAcoJfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUZmtFzBur70wpIaIAnGJRj8oWgDQwHwYDVR0j BBgwFoAUc2JlNrOypQPm1TRzqXzzmhMwF1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMC83MzYyNjUzNkIz QjJBNTAzRTZENTM0NzNBOTdDRjM5QTEzMzAxNzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUExMzMw MTc1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjJmNjQ5LTk5NjgtNDk1ZC1i ZGYxLTdkNzYyNTZkYWFkNS8wLzMxMzYzMDJlMzEzODM3MmUzMTMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu4owDQYJ KoZIhvcNAQELBQADggEBAKc9I1jnuQUD2f9RxMhilQW6SnTG5E+AR1BgEZj1HW0H Cx51YolZJatvME4Y6GByO9fGkYK8d25l/fCif21W3HCRMtkVyfJ+7fD/CU3DB3r1 WgYKnDIs5E1cabfg8xajZyQAf85ec+ayMssJ9m0ycCXHoKGP1IC+lzDv+NuLPLK3 kd53Oa2kMxmWKxOvYO01bDIGuFaQjfw6+x6XKC6U5gCQypCkT3ivkcnQmOXl7diQ up9Fqv5PSraRtfjwmY4di28+RvGpQKVtSUNPdlAJC4nNT25VEhtGW9iLNEGPmyFS vB1kEY0U50GCGFjPMpgnhd9xemuonlwFKd5/pNQqjFY= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:54 2025 by rpki-client on console.sobornost.net