$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38392e302f32342d3234203d3e203435323839.roa File: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (raw, json) Hash identifier: JqPwBzOb9IGp/J3IK4HU+cGl2mSkMSYQ3owKhX9duIs= Subject key identifier: 5B:98:52:1B:D7:B4:C8:34:AA:95:3D:2E:6C:B3:35:83:59:9F:41:6D Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 0884DB468B82B10B926327E989FDA9B7F97A3ABB Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38392e302f32342d3234203d3e203435323839.roa Signing time: Sat 15 Feb 2025 08:00:02 +0000 ROA not before: Sat 15 Feb 2025 07:55:02 +0000 ROA not after: Sat 14 Feb 2026 08:00:02 +0000 asID: 45289 IP address blocks: 120.89.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:84:db:46:8b:82:b1:0b:92:63:27:e9:89:fd:a9:b7:f9:7a:3a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: Feb 15 07:55:02 2025 GMT Not After : Feb 14 08:00:02 2026 GMT Subject: CN=5B98521BD7B4C834AA953D2E6CB33583599F416D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:f5:58:04:ea:21:dc:e6:21:f0:b2:1f:44: 9b:84:71:4e:0a:7f:ad:23:9c:fb:1c:c5:28:4a:49: 5f:9e:a6:d1:c2:b4:ac:2f:cf:04:27:96:34:36:9d: 60:c3:22:d8:cc:22:89:1f:4b:7a:4b:8c:77:df:93: 6b:3d:5b:73:d9:7a:0d:95:81:be:39:04:86:c8:3e: d6:e1:64:1a:f2:67:8c:e9:d7:4a:89:30:26:e9:89: 8e:1e:2c:34:31:83:92:16:be:38:99:da:21:d6:19: 58:5a:32:d0:5b:64:e1:e0:95:8a:c4:c3:31:c3:47: 93:04:1a:d1:9e:62:a8:b8:d2:32:70:3b:3c:db:73: 4e:49:2e:1e:96:72:d0:59:3a:74:dc:86:fb:27:2f: f4:11:57:f5:62:71:2e:23:7a:89:2b:a8:7e:79:56: 8e:fe:63:60:47:8e:c2:b7:79:bf:d2:ed:e2:0d:fc: 65:b6:67:85:35:1d:f6:21:5d:e1:b8:20:89:99:3f: f0:f8:e2:97:b1:58:09:c4:43:ac:db:6b:36:9d:e9: 3b:fa:02:2d:af:20:7b:0f:06:cf:59:a5:79:f4:07: 0e:ad:5c:d3:b8:8e:42:98:84:b5:f8:91:00:a8:e8: 41:b4:59:e6:f4:57:6a:a3:5c:e9:b0:79:c2:f8:5a: b2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:98:52:1B:D7:B4:C8:34:AA:95:3D:2E:6C:B3:35:83:59:9F:41:6D X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38392e302f32342d3234203d3e203435323839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.89.89.0/24 Signature Algorithm: sha256WithRSAEncryption b4:7b:ab:c4:b4:65:f1:db:65:88:4b:59:47:cc:cf:5c:e0:0f: 5b:ac:7d:12:d9:33:74:7f:3c:7c:dc:9e:f9:db:66:07:cc:60: 80:ae:5f:cc:08:84:f3:6c:06:f0:9f:ec:c2:b6:96:8d:f9:67: 7d:5f:ab:dd:2f:8e:ac:b9:2b:1e:35:46:99:b6:f5:1f:2b:17: c2:70:b7:4e:fa:97:7c:42:16:c0:08:3c:c4:0e:0c:b4:85:c8: 69:62:1e:b1:49:38:92:f2:69:3f:93:16:67:6b:1a:5f:ac:61: 39:30:38:a3:79:24:96:1d:ee:ec:ff:8a:32:3f:63:16:80:b3: b8:01:52:16:e0:54:9d:56:f7:02:6a:6d:f8:cd:31:7c:af:e0: 72:62:7e:19:80:6b:f5:3b:e0:d7:a0:94:00:a8:ea:7f:5a:f5: 6d:b9:73:e0:82:e4:19:b0:14:f3:0f:47:8c:76:bd:67:ce:0b: 88:dc:5b:a3:3a:e0:ca:a0:ba:01:e4:1f:fe:20:f1:9c:b6:b2: 29:c8:5c:51:cc:cd:c5:39:3c:53:90:12:9b:67:2e:8e:8f:6a: 6c:75:05:04:f6:7e:fd:16:04:2a:a2:75:79:7d:1c:a1:37:6d: df:c9:75:62:7a:ac:55:51:cc:fa:c0:2d:a8:f2:60:44:90:c0: 2d:b6:f4:86 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUCITbRouCsQuSYyfpif2pt/l6OrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNTAyMTUwNzU1MDJaFw0yNjAyMTQwODAwMDJaMDMxMTAvBgNV BAMTKDVCOTg1MjFCRDdCNEM4MzRBQTk1M0QyRTZDQjMzNTgzNTk5RjQxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIiPVYBOoh3OYh8LIfRJuEcU4K f60jnPscxShKSV+eptHCtKwvzwQnljQ2nWDDItjMIokfS3pLjHffk2s9W3PZeg2V gb45BIbIPtbhZBryZ4zp10qJMCbpiY4eLDQxg5IWvjiZ2iHWGVhaMtBbZOHglYrE wzHDR5MEGtGeYqi40jJwOzzbc05JLh6WctBZOnTchvsnL/QRV/VicS4jeokrqH55 Vo7+Y2BHjsK3eb/S7eIN/GW2Z4U1HfYhXeG4IImZP/D44pexWAnEQ6zbazad6Tv6 Ai2vIHsPBs9ZpXn0Bw6tXNO4jkKYhLX4kQCo6EG0Web0V2qjXOmwecL4WrIdAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUW5hSG9e0yDSqlT0ubLM1g1mfQW0wHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmNjMDBkLWNlNzktNDIxNi1h NjJiLWUzZDUwY2M3OTQ0Mi8wLzMxMzIzMDJlMzgzOTJlMzgzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMjM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB4WVkwDQYJKoZIhvcN AQELBQADggEBALR7q8S0ZfHbZYhLWUfMz1zgD1usfRLZM3R/PHzcnvnbZgfMYICu X8wIhPNsBvCf7MK2lo35Z31fq90vjqy5Kx41Rpm29R8rF8Jwt076l3xCFsAIPMQO DLSFyGliHrFJOJLyaT+TFmdrGl+sYTkwOKN5JJYd7uz/ijI/YxaAs7gBUhbgVJ1W 9wJqbfjNMXyv4HJifhmAa/U74NeglACo6n9a9W25c+CC5BmwFPMPR4x2vWfOC4jc W6M64MqgugHkH/4g8Zy2sinIXFHMzcU5PFOQEptnLo6Pamx1BQT2fv0WBCqidXl9 HKE3bd/JdWJ6rFVRzPrALajyYESQwC229IY= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net