$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa File: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (raw, json) Hash identifier: tqVbqJyQTApYbizYu59I5NZoSysKTPKf9ZllM4I7v64= Subject key identifier: C0:28:2C:E2:8C:2F:6B:3A:FF:72:7F:D8:36:D3:AB:A2:7F:4A:E9:C9 Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 72FC57D65CD4858F5468B200E051171C3C093961 Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa Signing time: Wed 26 Mar 2025 06:00:58 +0000 ROA not before: Wed 26 Mar 2025 05:55:58 +0000 ROA not after: Wed 25 Mar 2026 06:00:58 +0000 asID: 201341 IP address blocks: 202.51.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fc:57:d6:5c:d4:85:8f:54:68:b2:00:e0:51:17:1c:3c:09:39:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Mar 26 05:55:58 2025 GMT Not After : Mar 25 06:00:58 2026 GMT Subject: CN=C0282CE28C2F6B3AFF727FD836D3ABA27F4AE9C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3c:5c:55:9d:88:98:c3:b6:85:0e:75:aa:2f: 43:a3:f4:41:91:77:82:01:4b:53:a9:1a:bd:d3:03: da:04:05:7b:94:36:fc:c6:91:a5:49:2a:05:9c:d9: 5a:16:f2:70:c9:70:ce:a9:d1:44:13:14:5e:4d:5c: f7:5c:2c:54:a5:f3:e9:0d:20:f3:a3:b7:4c:29:fa: c7:dc:7b:30:e4:ae:c8:81:9f:60:15:aa:4c:b9:94: 98:96:f8:40:a8:e8:00:ef:8c:49:b3:3c:9e:07:0e: 05:18:d9:0c:6d:ac:04:8b:1c:4b:9b:2a:c0:c7:44: ce:f2:e5:9c:d6:61:c5:cf:93:fc:59:d0:b4:13:40: e5:91:f7:b1:98:1e:44:9e:ed:c6:cd:96:3d:10:38: 45:cd:ad:3f:ca:0f:7d:5b:04:6b:b0:be:a4:d6:96: 93:d6:01:e8:05:02:17:66:98:75:bb:0e:1e:35:55: b8:2b:7c:6a:eb:5f:93:8a:2c:30:b2:5d:4e:91:40: 5f:3c:ea:9c:f7:a3:a8:b9:2d:d1:b1:22:77:18:48: e3:8d:fb:9e:68:74:62:40:f1:7d:fb:b5:65:12:fc: 8b:00:2a:b0:8f:d9:93:ea:4b:e1:88:87:0c:4e:07: 24:42:e9:3f:e6:d3:3c:60:d9:20:57:a2:67:b3:02: a6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:28:2C:E2:8C:2F:6B:3A:FF:72:7F:D8:36:D3:AB:A2:7F:4A:E9:C9 X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.60.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:0b:b1:3d:45:73:de:0d:72:fb:dc:f4:28:31:2b:a7:93:22: 18:86:fc:a8:b1:4f:9d:82:ef:d1:bd:68:71:cb:d5:b5:2b:67: 15:b1:7f:fb:14:98:7a:ee:ba:69:c5:1c:4d:7f:57:c4:5b:7d: aa:bc:42:9d:4a:17:7c:cd:70:b8:f9:83:0a:b3:d9:d6:4b:2b: 32:fa:a3:ef:a6:6d:11:8c:a6:35:05:02:a3:5a:7b:24:d0:79: fd:9d:cb:b8:2e:44:a5:fc:cf:c7:f8:db:c3:41:1b:bb:45:62: 7c:86:50:12:af:84:01:72:e1:78:3e:6a:48:36:f5:52:05:d1: a1:ef:86:a3:44:0c:d1:6e:00:ca:a9:95:19:5d:36:75:a1:39: 05:da:ac:54:4b:34:90:ac:79:29:07:f8:39:b7:94:9f:9c:29: f1:02:9e:4f:85:8c:20:61:66:d0:5b:be:57:f9:50:93:09:2a: 24:da:72:80:f6:93:36:8b:91:ad:12:2a:9d:4c:d0:37:65:35: 11:1d:fb:a9:63:4c:54:39:1a:d2:d3:89:9e:ec:e0:ef:ee:16: b6:17:26:87:c8:3a:bc:e7:27:b0:75:15:68:bd:45:37:c7:6b: 48:da:99:7a:0a:95:f5:67:e8:96:33:7d:0a:a5:21:01:1f:3a: de:04:b7:f2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcvxX1lzUhY9UaLIA4FEXHDwJOWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNTAzMjYwNTU1NThaFw0yNjAzMjUwNjAwNThaMDMxMTAvBgNV BAMTKEMwMjgyQ0UyOEMyRjZCM0FGRjcyN0ZEODM2RDNBQkEyN0Y0QUU5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPFxVnYiYw7aFDnWqL0Oj9EGR d4IBS1OpGr3TA9oEBXuUNvzGkaVJKgWc2VoW8nDJcM6p0UQTFF5NXPdcLFSl8+kN IPOjt0wp+sfcezDkrsiBn2AVqky5lJiW+ECo6ADvjEmzPJ4HDgUY2QxtrASLHEub KsDHRM7y5ZzWYcXPk/xZ0LQTQOWR97GYHkSe7cbNlj0QOEXNrT/KD31bBGuwvqTW lpPWAegFAhdmmHW7Dh41VbgrfGrrX5OKLDCyXU6RQF886pz3o6i5LdGxIncYSOON +55odGJA8X37tWUS/IsAKrCP2ZPqS+GIhwxOByRC6T/m0zxg2SBXomezAqb5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwCgs4owvazr/cn/YNtOron9K6ckwHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzYzMDJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsozPDANBgkqhkiG 9w0BAQsFAAOCAQEAnQuxPUVz3g1y+9z0KDErp5MiGIb8qLFPnYLv0b1occvVtStn FbF/+xSYeu66acUcTX9XxFt9qrxCnUoXfM1wuPmDCrPZ1ksrMvqj76ZtEYymNQUC o1p7JNB5/Z3LuC5EpfzPx/jbw0Ebu0VifIZQEq+EAXLheD5qSDb1UgXRoe+Go0QM 0W4AyqmVGV02daE5BdqsVEs0kKx5KQf4ObeUn5wp8QKeT4WMIGFm0Fu+V/lQkwkq JNpygPaTNouRrRIqnUzQN2U1ER37qWNMVDka0tOJnuzg7+4Wthcmh8g6vOcnsHUV aL1FN8drSNqZegqV9WfoljN9CqUhAR863gS38g== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net