$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32332d3233203d3e20313532303239.roa File: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (raw, json) Hash identifier: pDSTP56ToJDSRTcVsVFyapPSURv6QT0rNlu5hwY/nzw= Subject key identifier: 38:5C:B3:2E:87:CC:E3:93:06:F3:04:AF:2F:10:0A:39:C1:07:6C:6E Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 657783950FFEA3BD520414C98D3825DAB37DC042 Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32332d3233203d3e20313532303239.roa Signing time: Thu 05 Dec 2024 07:02:34 +0000 ROA not before: Thu 05 Dec 2024 06:57:34 +0000 ROA not after: Thu 04 Dec 2025 07:02:34 +0000 asID: 152029 IP address blocks: 36.50.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:77:83:95:0f:fe:a3:bd:52:04:14:c9:8d:38:25:da:b3:7d:c0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Dec 5 06:57:34 2024 GMT Not After : Dec 4 07:02:34 2025 GMT Subject: CN=385CB32E87CCE39306F304AF2F100A39C1076C6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:25:95:88:8b:87:b6:83:67:8e:25:c0:74:d8: 2c:75:a2:cd:b0:63:6f:c8:01:83:a7:a1:c0:85:4e: a9:c4:ae:bd:d8:9e:56:bd:09:86:a7:0f:cc:00:5d: 76:e3:90:31:eb:18:ae:3b:04:d7:35:d2:ab:9b:9a: dc:a0:8b:80:06:c8:59:1e:d6:4d:d5:ed:4c:21:db: 93:70:a6:29:06:a0:c7:c1:3c:65:4d:8d:40:d1:35: ae:c0:53:39:6b:f1:cb:60:dd:1f:a4:3f:2a:51:11: 2a:6c:ea:6c:1f:7c:d1:fa:19:14:85:f4:bc:d5:41: 7a:62:4b:47:59:40:c7:a3:b5:2a:a7:8a:b7:2e:0c: 02:18:31:f7:ed:1c:30:04:b2:03:ce:ad:21:bd:aa: d8:8c:dc:11:b1:87:fd:63:5a:a2:91:9b:5b:2b:d4: e7:64:54:cf:f7:aa:54:75:fc:3c:c9:59:6e:a6:07: 50:80:45:8b:e5:f8:23:50:0e:54:74:c8:5e:28:2a: 6e:5c:81:8b:f1:61:35:ea:95:65:e6:a0:8c:cd:ad: 4e:f7:c4:66:d7:6a:9d:7d:65:83:f2:71:57:97:da: bd:2e:1b:5c:4b:94:27:87:27:d9:0b:84:6d:d2:8c: 2a:ba:4c:0d:ac:9d:f8:35:e2:4c:16:2b:b2:c7:84: 32:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5C:B3:2E:87:CC:E3:93:06:F3:04:AF:2F:10:0A:39:C1:07:6C:6E X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32332d3233203d3e20313532303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.56.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:c7:1b:58:6d:f6:f6:50:3e:2f:12:34:c4:d6:ed:03:2f:43: 82:57:f9:b3:14:3e:45:88:87:c5:cd:e8:04:98:6d:6c:e4:aa: 5f:13:90:33:c8:d6:a0:c8:da:6a:e8:4c:bf:fc:05:1c:59:2d: b8:67:f2:20:45:c9:e8:f6:ff:aa:c0:c2:ba:87:3b:6d:04:ba: 08:3a:d1:69:f6:ac:54:d5:97:c2:92:3b:1b:20:81:08:d4:5c: 49:dc:ab:c7:2e:55:1f:e2:92:fe:7f:f9:f3:b0:e0:c2:3f:3f: 25:3e:b5:6f:30:fa:68:fd:32:09:5e:5e:98:dd:18:de:2f:00: 9e:22:68:98:84:e0:a5:2c:6e:42:16:9f:53:54:2f:02:79:b5: ae:34:23:fc:47:b5:4d:61:79:f4:bd:44:3b:57:06:9b:fe:a8: 95:6c:1e:e2:23:1a:bd:8f:37:da:83:bd:10:ab:de:31:fc:1e: 12:3e:34:18:83:68:ea:32:76:92:9f:c5:c8:21:63:3d:a9:f6: df:3a:50:ce:0d:c0:37:f1:ce:0d:62:d1:be:f3:e8:92:ae:5d: f2:27:d4:32:08:07:96:fa:4d:82:09:bb:4f:1d:5f:de:1d:83: 12:84:a4:42:e3:2a:bd:4d:7f:12:fc:65:c0:a2:60:8c:fb:4c: 12:fb:cf:28 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUZXeDlQ/+o71SBBTJjTgl2rN9wEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNDEyMDUwNjU3MzRaFw0yNTEyMDQwNzAyMzRaMDMxMTAvBgNV BAMTKDM4NUNCMzJFODdDQ0UzOTMwNkYzMDRBRjJGMTAwQTM5QzEwNzZDNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJZWIi4e2g2eOJcB02Cx1os2w Y2/IAYOnocCFTqnErr3Ynla9CYanD8wAXXbjkDHrGK47BNc10qubmtygi4AGyFke 1k3V7Uwh25NwpikGoMfBPGVNjUDRNa7AUzlr8ctg3R+kPypRESps6mwffNH6GRSF 9LzVQXpiS0dZQMejtSqnircuDAIYMfftHDAEsgPOrSG9qtiM3BGxh/1jWqKRm1sr 1OdkVM/3qlR1/DzJWW6mB1CARYvl+CNQDlR0yF4oKm5cgYvxYTXqlWXmoIzNrU73 xGbXap19ZYPycVeX2r0uG1xLlCeHJ9kLhG3SjCq6TA2snfg14kwWK7LHhDJpAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUOFyzLofM45MG8wSvLxAKOcEHbG4wHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliOGE3ZmE1LWZkYTMtNGEzZS05 MmY3LWZhYmZlZDA1YTk1Yy8wLzMzMzYyZTM1MzAyZTM1MzYyZTMwMmYzMjMzMmQz MjMzMjAzZDNlMjAzMTM1MzIzMDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEkMjgwDQYJKoZIhvcN AQELBQADggEBAJ3HG1ht9vZQPi8SNMTW7QMvQ4JX+bMUPkWIh8XN6ASYbWzkql8T kDPI1qDI2mroTL/8BRxZLbhn8iBFyej2/6rAwrqHO20Eugg60Wn2rFTVl8KSOxsg gQjUXEncq8cuVR/ikv5/+fOw4MI/PyU+tW8w+mj9MgleXpjdGN4vAJ4iaJiE4KUs bkIWn1NULwJ5ta40I/xHtU1hefS9RDtXBpv+qJVsHuIjGr2PN9qDvRCr3jH8HhI+ NBiDaOoydpKfxcghYz2p9t86UM4NwDfxzg1i0b7z6JKuXfIn1DIIB5b6TYIJu08d X94dgxKEpELjKr1NfxL8ZcCiYIz7TBL7zyg= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net