$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa File: 3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa (raw, json) Hash identifier: BYPvMoDDPypOQWfaJ1aHyrVN5GPt3r1xMFVPu9nx4mk= Subject key identifier: 90:7C:09:AB:96:B1:54:C9:E7:8F:11:C3:37:E1:F0:3C:5F:0F:DC:B4 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 2A996D32002B8AC9F41F8239E70E28555342C4D1 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa Signing time: Fri 21 Mar 2025 11:00:01 +0000 ROA not before: Fri 21 Mar 2025 10:55:01 +0000 ROA not after: Fri 20 Mar 2026 11:00:01 +0000 asID: 18059 IP address blocks: 150.107.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:99:6d:32:00:2b:8a:c9:f4:1f:82:39:e7:0e:28:55:53:42:c4:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Mar 21 10:55:01 2025 GMT Not After : Mar 20 11:00:01 2026 GMT Subject: CN=907C09AB96B154C9E78F11C337E1F03C5F0FDCB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:a8:74:90:18:32:4b:db:e7:d6:da:af:41: 32:8e:d0:50:5d:9d:67:df:7f:07:50:1d:7e:b1:28: 3f:71:e8:9a:bc:bd:29:84:17:9e:12:f1:4e:91:b0: 2e:29:31:e7:ba:21:e5:e5:1e:bb:b4:2a:85:fc:47: 58:5b:eb:cd:90:6a:bf:8f:0e:16:0e:f5:37:17:10: 26:44:08:22:be:47:a0:04:a3:89:b0:1c:94:81:6e: cf:89:09:6d:16:78:ee:10:d6:0d:7f:6b:02:43:02: b0:11:cd:d9:78:7a:d1:25:90:63:99:6e:db:6b:3c: 8a:24:a1:19:ff:f5:83:86:4b:55:57:2e:de:f3:a6: d0:c0:f1:4a:ae:6a:79:07:ac:fe:39:27:39:55:28: 95:b3:2b:8a:f6:bc:4a:17:e3:54:2a:c5:87:c9:fd: da:29:d9:57:ce:34:6d:27:28:f1:fc:e2:a6:c4:ee: 99:01:11:72:fa:44:72:bf:8a:b5:2f:78:b4:91:51: d4:a5:53:b2:de:91:a6:23:ff:be:b2:80:f9:b5:35: 13:6d:94:32:95:5a:b8:fc:cc:92:ee:91:90:24:5f: 66:7b:45:50:2f:36:be:b8:43:1d:0d:29:1b:c7:18: 25:1d:2b:ec:5d:83:a2:0d:42:78:4a:f0:63:d4:54: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7C:09:AB:96:B1:54:C9:E7:8F:11:C3:37:E1:F0:3C:5F:0F:DC:B4 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.108.0/22 Signature Algorithm: sha256WithRSAEncryption a6:2f:8b:64:55:38:bd:57:a0:5a:32:27:af:ff:28:d1:ae:21: c3:d3:73:86:ff:2c:ac:9b:44:94:93:18:7d:a3:ca:08:53:2a: 26:78:6d:a4:c8:03:64:79:4d:0c:71:83:34:2d:b0:c8:3e:d4: 7c:ab:c5:42:7b:fd:b5:4d:72:ca:57:e1:19:f3:e8:c9:79:39: 07:ca:05:69:e7:b8:c1:ed:f1:bb:5a:39:45:b9:30:1e:42:69: c2:12:5d:0d:08:02:34:32:c3:9d:26:6a:57:3c:1b:75:fd:03: 20:11:03:7e:1d:e1:d9:16:02:80:99:f8:d4:8b:a1:07:f9:37: a1:34:eb:d2:bf:d0:cc:ac:b0:16:4b:5c:99:0a:af:88:ab:0c: 3e:70:66:0b:25:25:9e:f9:df:e2:b0:2a:1c:db:f3:37:5d:0a: da:fe:13:6d:42:7b:8f:3e:55:21:8d:ab:1c:e1:2e:10:ee:0f: 11:62:08:58:b2:ca:1a:77:b9:fb:0e:c5:29:44:cb:91:65:28: 65:64:24:79:64:cc:56:25:92:36:48:a6:84:0a:74:03:0b:2d: e3:3c:64:15:ad:95:44:4b:18:3b:4a:66:cd:4a:d6:61:74:20: 5b:b8:49:ff:ef:27:e3:c4:e8:4b:d3:8e:51:f2:50:57:e0:5a: 11:46:f8:c1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKpltMgArisn0H4I55w4oVVNCxNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTAzMjExMDU1MDFaFw0yNjAzMjAxMTAwMDFaMDMxMTAvBgNV BAMTKDkwN0MwOUFCOTZCMTU0QzlFNzhGMTFDMzM3RTFGMDNDNUYwRkRDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMmKh0kBgyS9vn1tqvQTKO0FBd nWfffwdQHX6xKD9x6Jq8vSmEF54S8U6RsC4pMee6IeXlHru0KoX8R1hb682Qar+P DhYO9TcXECZECCK+R6AEo4mwHJSBbs+JCW0WeO4Q1g1/awJDArARzdl4etElkGOZ bttrPIokoRn/9YOGS1VXLt7zptDA8UquankHrP45JzlVKJWzK4r2vEoX41QqxYfJ /dop2VfONG0nKPH84qbE7pkBEXL6RHK/irUveLSRUdSlU7LekaYj/76ygPm1NRNt lDKVWrj8zJLukZAkX2Z7RVAvNr64Qx0NKRvHGCUdK+xdg6INQnhK8GPUVCb1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkHwJq5axVMnnjxHDN+HwPF8P3LQwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzUzMDJlMzEzMDM3MmUzMTMwMzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClmtsMA0GCSqG SIb3DQEBCwUAA4IBAQCmL4tkVTi9V6BaMiev/yjRriHD03OG/yysm0SUkxh9o8oI UyomeG2kyANkeU0McYM0LbDIPtR8q8VCe/21TXLKV+EZ8+jJeTkHygVp57jB7fG7 WjlFuTAeQmnCEl0NCAI0MsOdJmpXPBt1/QMgEQN+HeHZFgKAmfjUi6EH+TehNOvS v9DMrLAWS1yZCq+Iqww+cGYLJSWe+d/isCoc2/M3XQra/hNtQnuPPlUhjasc4S4Q 7g8RYghYssoad7n7DsUpRMuRZShlZCR5ZMxWJZI2SKaECnQDCy3jPGQVrZVESxg7 SmbNStZhdCBbuEn/7yfjxOhL045R8lBX4FoRRvjB -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net