$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa File: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (raw, json) Hash identifier: yredKIZP9xr2lB528+R6ApvkXgeNpX2Bu3+xAbm9RU0= Subject key identifier: A2:A5:D3:0D:22:F2:C3:DE:8F:B9:4F:4C:B2:FB:9D:1C:24:AC:6C:90 Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 01EDD49AEA836C85EAC1487020FA63929F1CE487 Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa Signing time: Tue 11 Mar 2025 09:00:02 +0000 ROA not before: Tue 11 Mar 2025 08:55:02 +0000 ROA not after: Tue 10 Mar 2026 09:00:02 +0000 asID: 152414 IP address blocks: 157.20.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ed:d4:9a:ea:83:6c:85:ea:c1:48:70:20:fa:63:92:9f:1c:e4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Mar 11 08:55:02 2025 GMT Not After : Mar 10 09:00:02 2026 GMT Subject: CN=A2A5D30D22F2C3DE8FB94F4CB2FB9D1C24AC6C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:7d:a8:23:af:86:e4:73:e9:20:de:70:5c: 89:3a:a9:0e:36:85:03:54:05:0f:ba:ee:79:be:c1: 1b:8c:e6:75:d4:e9:de:1c:d2:6c:fa:db:08:29:c0: 44:2f:de:c5:8d:88:3e:d0:ec:0e:81:d9:62:b6:40: 48:58:9b:8c:0b:d6:42:62:dd:0e:8f:c4:c0:7d:b4: 79:25:69:34:ec:22:5a:e9:f2:2e:c3:8f:b0:1b:cb: 5b:e9:a9:9f:55:1e:a7:62:98:36:1a:e6:ef:67:40: 54:6e:ed:24:25:c7:fd:c4:06:05:e0:a5:d7:5d:b8: 18:21:ff:97:af:04:82:0f:02:89:42:bc:ca:1f:b6: e8:c5:b6:76:3b:71:44:6e:63:f9:e0:81:2a:b7:72: 3b:e7:b3:92:cd:fd:f3:fd:4b:94:44:43:8f:1e:7b: df:c7:8f:39:cf:aa:fb:43:55:0e:d5:14:74:3c:9b: c5:c2:18:55:d8:bb:0c:4c:13:2b:76:9a:c8:1c:ea: 09:ea:55:6a:d2:58:c4:9f:1c:d2:a9:16:85:12:9a: fa:fa:52:04:e5:80:18:ef:c5:96:9a:84:bc:0d:ec: c0:f9:0f:27:de:83:de:13:89:53:47:c9:f0:92:9e: 00:3f:f4:ef:69:d9:81:41:19:cb:e0:02:4d:d8:71: 68:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A5:D3:0D:22:F2:C3:DE:8F:B9:4F:4C:B2:FB:9D:1C:24:AC:6C:90 X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.130.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:51:19:6b:bb:2f:00:93:8e:19:a0:21:96:67:1d:6d:96:4a: 05:12:fa:8e:2f:6e:20:61:64:c4:ad:30:1b:6e:36:4c:c4:ad: ac:59:33:26:59:d7:b4:6f:92:95:9b:15:24:61:e0:d1:b3:b4: da:13:c4:c6:63:d8:e9:58:07:a0:c8:8b:e7:a7:bd:05:a8:c2: a8:ae:cc:f9:9e:be:2d:33:61:f4:5b:a7:fb:64:fb:32:7a:72: 67:2b:8f:39:b1:a0:67:fa:a5:3c:e6:09:9d:a7:e4:92:e7:b9: b4:db:51:9a:a2:fb:1f:45:78:70:e9:17:78:ea:b6:15:f4:c4: 86:56:7d:b6:90:df:59:a5:fb:34:46:2a:52:2c:4f:53:0f:42: a7:06:dd:7b:9e:63:2a:55:f0:de:ac:04:e0:86:06:65:db:f7: f6:82:43:be:77:65:64:77:ae:ef:11:89:3d:55:8b:07:3b:58: db:dc:9e:f3:76:78:25:c9:12:3a:7d:75:8f:db:fc:32:e2:a1: b7:d3:57:9b:1c:cd:a3:94:52:e3:04:c5:e8:28:08:06:fd:a2: be:af:a6:8a:27:43:5a:85:e6:17:40:81:fd:4f:6a:ec:79:e9: a0:da:bb:85:8f:67:2e:fc:cc:32:15:07:33:b0:c4:95:3f:95: 09:ba:26:a9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAe3UmuqDbIXqwUhwIPpjkp8c5IcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNTAzMTEwODU1MDJaFw0yNjAzMTAwOTAwMDJaMDMxMTAvBgNV BAMTKEEyQTVEMzBEMjJGMkMzREU4RkI5NEY0Q0IyRkI5RDFDMjRBQzZDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFk32oI6+G5HPpIN5wXIk6qQ42 hQNUBQ+67nm+wRuM5nXU6d4c0mz62wgpwEQv3sWNiD7Q7A6B2WK2QEhYm4wL1kJi 3Q6PxMB9tHklaTTsIlrp8i7Dj7Aby1vpqZ9VHqdimDYa5u9nQFRu7SQlx/3EBgXg pddduBgh/5evBIIPAolCvMoftujFtnY7cURuY/nggSq3cjvns5LN/fP9S5REQ48e e9/HjznPqvtDVQ7VFHQ8m8XCGFXYuwxMEyt2msgc6gnqVWrSWMSfHNKpFoUSmvr6 UgTlgBjvxZaahLwN7MD5Dyfeg94TiVNHyfCSngA/9O9p2YFBGcvgAk3YcWijAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoqXTDSLyw96PuU9MsvudHCSsbJAwHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4NmZmMjY0LWZmMjUtNGZlNi04 NmVmLWQ4NGI3ZDI4ODM1NC8wLzMxMzUzNzJlMzIzMDJlMzEzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRSCMA0GCSqG SIb3DQEBCwUAA4IBAQBKURlruy8Ak44ZoCGWZx1tlkoFEvqOL24gYWTErTAbbjZM xK2sWTMmWde0b5KVmxUkYeDRs7TaE8TGY9jpWAegyIvnp70FqMKorsz5nr4tM2H0 W6f7ZPsyenJnK485saBn+qU85gmdp+SS57m021GaovsfRXhw6Rd46rYV9MSGVn22 kN9Zpfs0RipSLE9TD0KnBt17nmMqVfDerATghgZl2/f2gkO+d2Vkd67vEYk9VYsH O1jb3J7zdnglyRI6fXWP2/wy4qG301ebHM2jlFLjBMXoKAgG/aK+r6aKJ0NaheYX QIH9T2rseemg2ruFj2cu/MwyFQczsMSVP5UJuiap -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net