$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e37322e302f32322d3234203d3e203338333230.roa File: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: EaI6/Dsx2ZEnLc96pWiD/aogqQZmiIKOu7YhzjemiyQ= Subject key identifier: 1B:5A:E1:61:51:DD:2B:FF:DE:F9:FB:CA:2E:6E:F9:DE:1C:17:0C:E0 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 522177C92D00203CB2B3E25ABA5158337CC0533F Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e37322e302f32322d3234203d3e203338333230.roa Signing time: Mon 27 Jan 2025 06:00:00 +0000 ROA not before: Mon 27 Jan 2025 05:55:00 +0000 ROA not after: Mon 26 Jan 2026 06:00:00 +0000 asID: 38320 IP address blocks: 119.110.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:21:77:c9:2d:00:20:3c:b2:b3:e2:5a:ba:51:58:33:7c:c0:53:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Jan 27 05:55:00 2025 GMT Not After : Jan 26 06:00:00 2026 GMT Subject: CN=1B5AE16151DD2BFFDEF9FBCA2E6EF9DE1C170CE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:95:a6:19:3b:20:97:c8:ef:e0:10:00:d5: 13:ff:12:fc:e0:3b:95:cb:6f:ac:29:bb:5a:c6:ca: 44:6e:7d:13:0a:72:dd:2f:19:e2:ae:03:c3:89:6a: af:86:4b:f4:80:1f:6b:5b:1e:55:ba:c1:fb:ac:44: b3:a5:22:26:c6:61:70:bf:bc:70:16:22:fb:97:23: 9f:a7:97:cd:22:8e:75:91:41:08:0d:24:1a:83:22: 11:e6:8b:59:d7:1a:e2:60:fa:5c:d9:d2:1e:bf:a3: d2:84:26:6c:f9:f8:8a:2f:9f:97:f8:eb:a6:21:33: 47:5d:ae:90:51:eb:1a:f1:9b:de:73:2e:9d:02:24: 52:b2:b6:63:84:17:54:60:c2:fa:67:e4:48:7c:1a: 4b:23:f2:3a:ba:a3:6b:42:b0:77:20:06:dc:41:5b: c5:8b:3f:d7:08:d4:38:ed:f1:2e:14:73:40:33:e2: 62:0e:5f:18:06:45:25:f5:d0:09:4c:13:da:f2:2f: 42:32:2b:4a:14:c6:bc:98:52:96:99:8e:aa:bc:b7: 8e:b8:e6:49:38:9a:f2:5c:86:7a:ad:80:79:6d:54: b9:16:4d:97:ab:16:6c:50:75:90:30:b3:de:39:12: c6:3b:bb:a8:cd:75:24:ca:af:1c:56:63:a0:57:83: 87:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5A:E1:61:51:DD:2B:FF:DE:F9:FB:CA:2E:6E:F9:DE:1C:17:0C:E0 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e37322e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.72.0/22 Signature Algorithm: sha256WithRSAEncryption 17:16:c7:e2:fd:a4:64:c5:29:bd:e9:52:3b:67:8b:fc:0a:7a: 08:2f:23:d5:5e:f8:29:e0:32:7b:97:5e:18:09:90:c8:f0:86: 52:05:94:7e:f0:d8:33:75:85:df:f3:ae:27:44:77:30:fa:6d: fa:c8:75:22:65:82:e0:cd:f6:aa:35:69:38:9a:08:8d:9f:02: 81:a5:63:de:a9:b0:be:32:95:d0:fc:32:d5:ef:01:e0:42:de: 20:67:ad:77:3d:3b:67:73:8d:d6:9f:8e:3d:f1:ac:f9:79:b3: d3:57:ff:ae:c0:06:c8:bb:1f:0b:49:41:e1:b2:e7:97:6b:63: f5:47:28:75:75:55:21:ba:17:3f:30:b2:80:b5:c5:02:59:28: 73:27:f6:db:74:1f:f6:3c:97:fe:05:55:96:8e:e3:bf:91:e5: a8:7c:a7:6a:a8:1a:9d:53:81:47:9b:5c:67:6c:ca:96:b6:5e: 10:23:94:31:35:c5:ab:64:7d:f4:9e:53:50:04:14:89:cd:bd: ed:0f:54:e8:46:21:96:3a:f3:97:42:75:82:bc:96:3f:af:ba: 9d:7b:45:9a:94:fb:2e:84:05:10:c5:4e:9a:a9:07:ed:61:e1: d9:1e:e2:c3:8c:0e:21:f0:36:9c:94:48:b3:42:7e:0d:d2:4d: 2f:2f:c3:d7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUiF3yS0AIDyys+JaulFYM3zAUz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTAxMjcwNTU1MDBaFw0yNjAxMjYwNjAwMDBaMDMxMTAvBgNV BAMTKDFCNUFFMTYxNTFERDJCRkZERUY5RkJDQTJFNkVGOURFMUMxNzBDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxpWmGTsgl8jv4BAA1RP/Evzg O5XLb6wpu1rGykRufRMKct0vGeKuA8OJaq+GS/SAH2tbHlW6wfusRLOlIibGYXC/ vHAWIvuXI5+nl80ijnWRQQgNJBqDIhHmi1nXGuJg+lzZ0h6/o9KEJmz5+Iovn5f4 66YhM0ddrpBR6xrxm95zLp0CJFKytmOEF1Rgwvpn5Eh8Gksj8jq6o2tCsHcgBtxB W8WLP9cI1Djt8S4Uc0Az4mIOXxgGRSX10AlME9ryL0IyK0oUxryYUpaZjqq8t464 5kk4mvJchnqtgHltVLkWTZerFmxQdZAws945EsY7u6jNdSTKrxxWY6BXg4eJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUG1rhYVHdK//e+fvKLm753hwXDOAwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzEzOTJlMzEzMTMwMmUzNzMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnduSDANBgkqhkiG 9w0BAQsFAAOCAQEAFxbH4v2kZMUpvelSO2eL/Ap6CC8j1V74KeAye5deGAmQyPCG UgWUfvDYM3WF3/OuJ0R3MPpt+sh1ImWC4M32qjVpOJoIjZ8CgaVj3qmwvjKV0Pwy 1e8B4ELeIGetdz07Z3ON1p+OPfGs+Xmz01f/rsAGyLsfC0lB4bLnl2tj9UcodXVV IboXPzCygLXFAlkocyf223Qf9jyX/gVVlo7jv5HlqHynaqganVOBR5tcZ2zKlrZe ECOUMTXFq2R99J5TUAQUic297Q9U6EYhljrzl0J1gryWP6+6nXtFmpT7LoQFEMVO mqkH7WHh2R7iw4wOIfA2nJRIs0J+DdJNLy/D1w== -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net