$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35382e302f32342d3234203d3e203435333132.roa File: 3230322e38312e35382e302f32342d3234203d3e203435333132.roa (raw, json) Hash identifier: vN5n9PhqQpTM7HWXjcndl5RxHQWa7HzL5zU/2GxM5Dk= Subject key identifier: C2:B2:67:ED:29:0D:A2:73:42:D6:46:8C:02:93:FA:38:A0:8E:F0:59 Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Certificate serial: 40841A7A5E9F81B6D66C4ED35AA113C5C781AB06 Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35382e302f32342d3234203d3e203435333132.roa Signing time: Tue 17 Dec 2024 08:33:31 +0000 ROA not before: Tue 17 Dec 2024 08:28:31 +0000 ROA not after: Tue 16 Dec 2025 08:33:31 +0000 asID: 45312 IP address blocks: 202.81.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:84:1a:7a:5e:9f:81:b6:d6:6c:4e:d3:5a:a1:13:c5:c7:81:ab:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Validity Not Before: Dec 17 08:28:31 2024 GMT Not After : Dec 16 08:33:31 2025 GMT Subject: CN=C2B267ED290DA27342D6468C0293FA38A08EF059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:36:06:86:c8:7e:8f:4c:0f:0b:e1:9f:20: 4e:a7:f2:af:f1:bb:9f:ce:10:95:ae:31:6c:5c:75: 16:5a:44:9d:e0:03:80:41:de:f2:34:50:41:ef:69: d5:60:61:99:5d:b5:f7:44:09:ef:da:56:ab:4e:d2: 1f:0a:65:ad:27:69:a5:58:1a:43:7f:b6:51:d2:ef: 79:32:02:a8:38:28:7c:cd:28:81:0b:0e:e8:d6:b8: 5b:78:66:50:ac:e9:c3:79:a2:4b:d0:db:60:ea:f3: d7:2f:0f:97:a8:47:ed:a5:d4:4c:58:95:66:fb:05: ee:f2:e0:ff:bc:20:ba:6f:01:a8:f6:b8:63:ea:44: 58:fc:f7:4d:6a:62:ba:13:56:ac:5c:2d:8a:f5:aa: bf:25:e3:dc:a7:4d:7e:64:a6:e7:2f:6b:ac:0f:ad: 75:3b:a9:58:e5:af:7d:7e:90:0f:21:ac:b6:b8:58: 4d:39:9c:f2:29:1e:1b:7a:d2:80:35:cc:6d:18:1f: 75:37:ee:1e:f0:8a:2e:57:4c:17:9c:ed:cc:62:e1: f1:ba:cf:85:75:3d:c7:ef:b0:07:95:3f:a7:ed:3d: 40:b1:a7:13:f7:4f:fa:35:11:87:c3:c3:9a:1f:24: 67:9c:05:ee:4b:b9:f4:d6:c8:5c:29:06:d8:10:8a: bc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B2:67:ED:29:0D:A2:73:42:D6:46:8C:02:93:FA:38:A0:8E:F0:59 X509v3 Authority Key Identifier: keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35382e302f32342d3234203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.81.58.0/24 Signature Algorithm: sha256WithRSAEncryption 76:31:84:4d:09:9a:25:2f:bc:0f:a0:44:ec:49:16:88:08:9a: 79:86:85:76:67:ec:18:6b:ea:b7:ea:30:79:64:53:8a:ed:d5: 00:c5:24:20:66:46:8d:c2:bb:13:66:13:2f:c7:bc:0f:e2:a4: db:79:82:85:f2:da:a8:bc:c7:f3:85:d6:17:a1:30:98:ac:9f: 3f:d9:a2:20:ed:e1:06:1c:4e:59:5e:42:38:82:48:f4:07:b5: d1:30:f7:aa:86:e6:e8:1e:04:f0:51:48:d6:16:b9:83:e7:4e: 28:41:bc:2c:78:79:10:af:87:10:9b:c8:47:73:e4:5b:d9:f1: ce:be:f1:a9:11:cc:de:4f:15:f7:ff:b8:56:c4:38:37:11:15: 0a:16:77:67:23:70:a6:c4:f0:1d:05:df:f9:42:d2:c3:38:4d: d6:eb:01:0b:0e:b4:c8:cf:32:c0:63:f2:cb:20:a1:4d:91:5c: a1:00:ac:18:9b:1f:d6:0e:82:c8:dc:02:c8:14:e9:d3:06:10: a9:0e:9c:8a:59:df:92:a9:67:65:f5:4f:74:92:06:b0:9d:d9: d0:c3:c3:38:c8:6f:08:f7:d3:52:70:57:de:cc:86:b5:2f:41: 57:21:08:1d:b1:78:d8:e6:ba:e1:ad:1a:32:a6:d1:7a:16:aa: 94:8b:97:ec -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUQIQael6fgbbWbE7TWqETxceBqwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB MEJGQzQ0MTAeFw0yNDEyMTcwODI4MzFaFw0yNTEyMTYwODMzMzFaMDMxMTAvBgNV BAMTKEMyQjI2N0VEMjkwREEyNzM0MkQ2NDY4QzAyOTNGQTM4QTA4RUYwNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8jYGhsh+j0wPC+GfIE6n8q/x u5/OEJWuMWxcdRZaRJ3gA4BB3vI0UEHvadVgYZldtfdECe/aVqtO0h8KZa0naaVY GkN/tlHS73kyAqg4KHzNKIELDujWuFt4ZlCs6cN5okvQ22Dq89cvD5eoR+2l1ExY lWb7Be7y4P+8ILpvAaj2uGPqRFj8901qYroTVqxcLYr1qr8l49ynTX5kpucva6wP rXU7qVjlr31+kA8hrLa4WE05nPIpHht60oA1zG0YH3U37h7wii5XTBec7cxi4fG6 z4V1PcfvsAeVP6ftPUCxpxP3T/o1EYfDw5ofJGecBe5LufTWyFwpBtgQirxFAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUwrJn7SkNonNC1kaMApP6OKCO8FkwHwYDVR0j BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4 NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzUzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKUTowDQYJKoZIhvcN AQELBQADggEBAHYxhE0JmiUvvA+gROxJFogImnmGhXZn7Bhr6rfqMHlkU4rt1QDF JCBmRo3CuxNmEy/HvA/ipNt5goXy2qi8x/OF1hehMJisnz/ZoiDt4QYcTlleQjiC SPQHtdEw96qG5ugeBPBRSNYWuYPnTihBvCx4eRCvhxCbyEdz5FvZ8c6+8akRzN5P Fff/uFbEODcRFQoWd2cjcKbE8B0F3/lC0sM4TdbrAQsOtMjPMsBj8ssgoU2RXKEA rBibH9YOgsjcAsgU6dMGEKkOnIpZ35KpZ2X1T3SSBrCd2dDDwzjIbwj301JwV97M hrUvQVchCB2xeNjmuuGtGjKm0XoWqpSLl+w= -----END CERTIFICATE-----Generated at Wed Apr 23 11:12:23 2025 by rpki-client on console.sobornost.net