$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa File: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (raw, json) Hash identifier: z3oujUIzdkfwfVAu7GxNc2o8SfOMUyinAWnvZ5gqzec= Subject key identifier: 53:BF:15:0E:67:A4:B8:BA:AB:B3:F7:CA:49:B2:77:9D:23:F5:EC:C2 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 3494AD28B2186C2702919323303096A19FEAFFA4 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa Signing time: Tue 18 Jun 2024 06:00:00 +0000 ROA not before: Tue 18 Jun 2024 05:55:00 +0000 ROA not after: Tue 17 Jun 2025 06:00:00 +0000 asID: 38143 IP address blocks: 202.169.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:94:ad:28:b2:18:6c:27:02:91:93:23:30:30:96:a1:9f:ea:ff:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Jun 18 05:55:00 2024 GMT Not After : Jun 17 06:00:00 2025 GMT Subject: CN=53BF150E67A4B8BAABB3F7CA49B2779D23F5ECC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:00:a8:2d:1c:fa:5b:12:38:e7:cd:0c:85:58: 53:77:bf:70:e3:80:7c:88:be:5c:24:fc:69:a0:8e: 34:15:26:32:51:1d:ec:1f:02:54:8b:2d:c0:60:15: 89:c6:db:f1:81:72:a5:7a:b4:4b:46:ca:dd:f0:19: 10:b2:50:fc:cc:62:ea:e8:e8:bb:a8:eb:29:d7:c2: 71:f2:ef:b6:27:dd:ce:80:92:cd:28:59:e0:54:55: 94:6b:09:81:4d:d1:43:c6:43:2b:d1:63:45:9d:56: 80:7c:7a:b6:0d:83:ed:ab:a3:ad:b7:ff:4f:cb:40: 53:5f:a8:91:ba:5e:3f:36:1d:77:36:68:f7:ba:94: 06:66:f4:b1:b8:9c:ed:21:38:57:1a:a4:f6:56:c9: 00:6a:b8:d7:09:66:49:17:99:57:19:6e:bb:f4:50: 85:05:fb:78:d0:7f:21:d2:61:c8:f7:8a:30:2b:75: 70:d7:27:f6:df:db:a3:8b:96:91:cb:88:cc:08:6f: bf:3c:3e:67:31:c2:37:6f:d7:56:2a:8e:e6:ca:47: 81:a4:72:b4:5e:6b:0b:fe:5f:c1:7f:7f:4b:c9:7d: 3b:0c:ab:35:fb:f6:bb:2e:82:fa:0d:fd:6f:d5:5e: 4a:98:3d:01:c4:01:a6:b6:1f:a2:c3:d0:4f:3c:b9: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BF:15:0E:67:A4:B8:BA:AB:B3:F7:CA:49:B2:77:9D:23:F5:EC:C2 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.169.242.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:60:a4:93:4f:ca:f5:00:19:bc:82:31:2e:48:e2:78:d2:dd: 25:f1:d6:d1:37:e4:e0:f8:0d:4f:e6:b7:ab:dc:47:67:c9:97: 49:78:a8:17:5a:6f:e7:47:b4:72:13:51:6f:08:78:aa:65:c8: bd:01:d6:1d:a6:f1:d5:dd:58:52:a5:26:f5:99:48:6c:f8:6d: 88:48:91:58:6c:2e:1c:7a:55:f8:f4:b3:86:ab:ad:5d:39:b6: 27:1a:d7:42:42:63:30:55:aa:80:3b:c5:41:91:fe:cf:9d:e0: 8c:d4:3b:bd:01:2d:75:cb:32:d3:cc:3a:9d:29:44:08:b8:a5: 56:e5:c1:fa:50:d6:80:bd:a9:0c:61:32:cc:a0:87:13:b3:ef: 7e:e9:37:c7:6c:9e:76:b7:19:e6:75:41:ac:14:c4:10:2f:d3: 74:86:29:e8:f4:42:b4:84:72:e4:3f:b7:1c:a9:d7:f8:1d:0e: 6d:95:1e:60:70:0c:b9:2f:9a:b8:1d:8f:99:ef:57:61:cb:5a: 7c:88:f5:c4:aa:fe:a7:c5:1c:af:8d:4d:dc:76:11:6f:e2:a1: 73:a7:30:74:0b:cc:41:77:4c:c5:af:98:ed:df:02:59:c2:02: 40:e0:8c:b1:bd:5a:8b:de:d9:7b:88:27:5e:43:8f:3e:8e:ed: d6:f2:ec:ff -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNJStKLIYbCcCkZMjMDCWoZ/q/6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNDA2MTgwNTU1MDBaFw0yNTA2MTcwNjAwMDBaMDMxMTAvBgNV BAMTKDUzQkYxNTBFNjdBNEI4QkFBQkIzRjdDQTQ5QjI3NzlEMjNGNUVDQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAKgtHPpbEjjnzQyFWFN3v3Dj gHyIvlwk/GmgjjQVJjJRHewfAlSLLcBgFYnG2/GBcqV6tEtGyt3wGRCyUPzMYuro 6Luo6ynXwnHy77Yn3c6Aks0oWeBUVZRrCYFN0UPGQyvRY0WdVoB8erYNg+2ro623 /0/LQFNfqJG6Xj82HXc2aPe6lAZm9LG4nO0hOFcapPZWyQBquNcJZkkXmVcZbrv0 UIUF+3jQfyHSYcj3ijArdXDXJ/bf26OLlpHLiMwIb788Pmcxwjdv11YqjubKR4Gk crReawv+X8F/f0vJfTsMqzX79rsugvoN/W/VXkqYPQHEAaa2H6LD0E88uaflAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUU78VDmekuLqrs/fKSbJ3nSP17MIwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM0MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqnyMA0GCSqG SIb3DQEBCwUAA4IBAQANYKSTT8r1ABm8gjEuSOJ40t0l8dbRN+Tg+A1P5rer3Edn yZdJeKgXWm/nR7RyE1FvCHiqZci9AdYdpvHV3VhSpSb1mUhs+G2ISJFYbC4celX4 9LOGq61dObYnGtdCQmMwVaqAO8VBkf7PneCM1Du9AS11yzLTzDqdKUQIuKVW5cH6 UNaAvakMYTLMoIcTs+9+6TfHbJ52txnmdUGsFMQQL9N0hino9EK0hHLkP7ccqdf4 HQ5tlR5gcAy5L5q4HY+Z71dhy1p8iPXEqv6nxRyvjU3cdhFv4qFzpzB0C8xBd0zF r5jt3wJZwgJA4IyxvVqL3tl7iCdeQ48+ju3W8uz/ -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net