$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33322e302f32342d3234203d3e203338333230.roa File: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (raw, json) Hash identifier: SKzoUE6GJjGbrRoLBDSg0MJXDhRPXJNlIyQMu/0QWEw= Subject key identifier: 6E:5E:A8:25:FB:76:C2:CA:78:CB:67:B0:1E:45:B1:F6:DD:8A:E5:85 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 16B8EE1A18E6D9890F36A7E01990D712DC4A2278 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33322e302f32342d3234203d3e203338333230.roa Signing time: Mon 27 Jan 2025 07:00:00 +0000 ROA not before: Mon 27 Jan 2025 06:55:00 +0000 ROA not after: Mon 26 Jan 2026 07:00:00 +0000 asID: 38320 IP address blocks: 175.103.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b8:ee:1a:18:e6:d9:89:0f:36:a7:e0:19:90:d7:12:dc:4a:22:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Jan 27 06:55:00 2025 GMT Not After : Jan 26 07:00:00 2026 GMT Subject: CN=6E5EA825FB76C2CA78CB67B01E45B1F6DD8AE585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:d5:ea:19:ab:12:f1:a9:58:a2:1e:f9:58: 15:66:d6:3e:80:41:5b:db:00:5b:8a:c7:90:35:ab: b8:65:ec:db:74:18:ff:cc:26:01:4c:4a:b3:32:c7: 41:b6:a6:75:e9:33:d1:16:8b:d3:79:a2:b7:03:00: c1:f9:88:42:0a:77:be:85:4a:a3:40:a4:a4:ab:41: 80:07:e9:22:2a:1c:21:94:2f:d5:8e:ba:9c:da:de: 2f:1b:c8:0e:7e:2d:c0:9a:b1:ae:11:39:8d:ce:a4: d6:c0:f3:b7:fc:05:f2:cd:bf:96:3d:24:12:f5:87: f7:75:94:e5:ee:d4:62:da:ec:c6:af:1e:d1:f7:04: 09:ea:58:5e:42:17:c3:22:d1:fa:21:07:5e:22:2c: 9d:61:32:31:6a:4b:07:6f:fa:e6:26:61:ef:af:eb: 85:32:14:36:fe:9e:b6:86:5e:39:51:d9:1c:08:7f: e2:55:e2:6f:9b:08:5e:17:0e:2b:00:2f:33:dc:7a: 0c:a9:fd:98:fb:1c:84:98:94:52:cc:30:39:94:83: ae:e8:9a:21:25:ed:73:f0:df:cf:f1:ad:13:7e:27: e5:03:8d:c9:51:c3:23:e0:06:17:69:da:15:05:f4: c7:0e:76:a9:44:7f:45:dc:52:a6:79:09:ff:0e:ad: 06:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5E:A8:25:FB:76:C2:CA:78:CB:67:B0:1E:45:B1:F6:DD:8A:E5:85 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33322e302f32342d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.103.32.0/24 Signature Algorithm: sha256WithRSAEncryption 21:b0:e8:3b:b3:b0:8d:77:57:72:13:ac:66:55:fb:fb:26:6f: 61:71:a2:b9:9e:b3:36:ed:76:c4:d9:e0:b3:16:f6:df:9f:8a: 70:9e:2c:17:56:f5:c7:b2:b8:54:93:98:88:c6:df:2d:e6:d9: 8b:9c:a6:92:09:4e:80:26:33:b0:c1:29:75:67:32:f3:32:52: 71:b5:12:d8:12:79:d9:9a:08:db:76:86:50:f2:64:db:fa:f6: 12:38:21:e7:08:dd:da:e9:bd:72:48:b0:84:1f:2d:8a:6d:12: a5:7d:62:7e:b4:ff:df:10:5b:2e:b0:5a:ee:a8:a9:54:64:f9: 40:9f:e8:36:00:bc:33:1b:91:7e:15:aa:a8:26:a8:46:29:b0: 5a:6b:d8:71:4e:25:09:8b:dc:7f:6c:e8:76:27:12:cf:1a:26: 64:54:92:45:fb:39:74:b4:cc:2d:98:c2:8a:82:83:20:08:22: f2:6c:a8:47:2e:6c:36:0d:06:ed:6c:fa:3c:57:dd:71:1b:23: 2e:84:2a:5e:30:14:b7:2d:77:dc:4d:39:11:f8:2b:e4:df:4f: cb:c1:13:11:f1:22:e4:21:53:a8:9c:4f:11:ce:e0:6a:99:a8: 4d:51:ee:e7:88:05:c9:c4:26:39:97:f5:71:dc:ac:76:dc:ed: 51:15:10:77 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFrjuGhjm2YkPNqfgGZDXEtxKIngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTAxMjcwNjU1MDBaFw0yNjAxMjYwNzAwMDBaMDMxMTAvBgNV BAMTKDZFNUVBODI1RkI3NkMyQ0E3OENCNjdCMDFFNDVCMUY2REQ4QUU1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENNXqGasS8alYoh75WBVm1j6A QVvbAFuKx5A1q7hl7Nt0GP/MJgFMSrMyx0G2pnXpM9EWi9N5orcDAMH5iEIKd76F SqNApKSrQYAH6SIqHCGUL9WOupza3i8byA5+LcCasa4ROY3OpNbA87f8BfLNv5Y9 JBL1h/d1lOXu1GLa7MavHtH3BAnqWF5CF8Mi0fohB14iLJ1hMjFqSwdv+uYmYe+v 64UyFDb+nraGXjlR2RwIf+JV4m+bCF4XDisALzPcegyp/Zj7HISYlFLMMDmUg67o miEl7XPw38/xrRN+J+UDjclRwyPgBhdp2hUF9McOdqlEf0XcUqZ5Cf8OrQbdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUbl6oJft2wsp4y2ewHkWx9t2K5YUwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzczNTJlMzEzMDMzMmUzMzMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK9nIDANBgkqhkiG 9w0BAQsFAAOCAQEAIbDoO7OwjXdXchOsZlX7+yZvYXGiuZ6zNu12xNngsxb235+K cJ4sF1b1x7K4VJOYiMbfLebZi5ymkglOgCYzsMEpdWcy8zJScbUS2BJ52ZoI23aG UPJk2/r2Ejgh5wjd2um9ckiwhB8tim0SpX1ifrT/3xBbLrBa7qipVGT5QJ/oNgC8 MxuRfhWqqCaoRimwWmvYcU4lCYvcf2zodicSzxomZFSSRfs5dLTMLZjCioKDIAgi 8myoRy5sNg0G7Wz6PFfdcRsjLoQqXjAUty133E05Efgr5N9Py8ETEfEi5CFTqJxP Ec7gapmoTVHu54gFycQmOZf1cdysdtztURUQdw== -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net