$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35332e302f32342d3234203d3e20313430343735.roa File: 3230322e31302e35332e302f32342d3234203d3e20313430343735.roa (raw, json) Hash identifier: oOzJ3BGB2FevVXEpUYz6HSWkqE4PQESlqlUO0oidZHM= Subject key identifier: 28:F8:47:5D:4F:81:8A:7E:BE:68:69:57:C3:28:26:97:8C:CA:F3:BF Certificate issuer: /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3 Certificate serial: 7B0B775A8273AD86D99DB7A3DE89E527D42F3C5E Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35332e302f32342d3234203d3e20313430343735.roa Signing time: Mon 21 Apr 2025 06:20:13 +0000 ROA not before: Mon 21 Apr 2025 06:15:13 +0000 ROA not after: Mon 20 Apr 2026 06:20:13 +0000 asID: 140475 IP address blocks: 202.10.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0b:77:5a:82:73:ad:86:d9:9d:b7:a3:de:89:e5:27:d4:2f:3c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3 Validity Not Before: Apr 21 06:15:13 2025 GMT Not After : Apr 20 06:20:13 2026 GMT Subject: CN=28F8475D4F818A7EBE686957C32826978CCAF3BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:9e:22:c0:76:dd:13:7a:a9:fd:55:f9:cf: bd:77:ad:3f:24:bf:be:d0:7a:37:41:17:eb:08:4b: 54:3d:da:37:f1:cd:81:9e:7b:d9:04:c6:d5:01:1b: 10:d1:cc:e7:92:1d:d1:ca:17:5f:b3:49:da:c7:e7: 49:a9:0a:de:bd:a4:51:d5:ce:13:6c:5a:8c:19:84: cc:63:da:53:11:a1:bb:f3:17:50:14:74:38:9f:8a: eb:4f:56:e6:11:3f:51:11:03:85:11:48:d8:cc:4f: 14:0a:c0:e4:a4:c8:fb:98:ad:0d:eb:63:97:73:37: dd:da:f8:dd:9a:36:58:90:12:83:5c:13:cd:5d:4f: 70:f1:63:72:2a:2a:30:7a:0e:2b:e1:2a:e9:f0:e5: 1a:32:ab:87:07:39:a0:95:08:e1:4a:94:8b:50:96: c6:18:bf:e3:3c:ee:ca:c4:43:13:ac:fa:7a:5e:a0: b6:60:96:1e:86:09:1d:3f:a2:60:fe:e2:d8:fd:08: be:3a:5a:e4:15:9f:1d:62:e2:7e:a4:91:d7:a8:0f: 63:65:8c:e2:3e:c3:f6:26:a0:49:7a:26:5d:17:da: 60:16:53:8e:df:69:4a:af:86:0d:f9:6e:44:ae:6a: cf:cd:9b:d3:dc:0d:80:66:60:37:b5:8d:db:0a:20: 54:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F8:47:5D:4F:81:8A:7E:BE:68:69:57:C3:28:26:97:8C:CA:F3:BF X509v3 Authority Key Identifier: keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35332e302f32342d3234203d3e20313430343735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.53.0/24 Signature Algorithm: sha256WithRSAEncryption c4:97:4b:6f:17:5e:e2:e7:a8:d1:79:9c:9f:85:20:ad:ff:75: e2:5e:03:70:e9:f9:11:d3:1a:a0:a5:72:f0:89:ab:20:20:55: 5f:5a:95:7f:d3:7d:5c:37:91:8b:6e:18:a3:61:f4:f0:42:94: 94:e2:30:de:78:69:16:4b:1e:90:53:00:26:3c:84:a2:19:7f: 7e:74:c5:c7:c0:a4:00:91:e3:00:dc:cd:37:8c:ce:ec:d9:f7: a0:16:f0:85:a6:40:ea:d3:ad:43:60:a2:0a:8a:b9:2a:0c:8a: 29:57:cb:97:e2:73:f4:58:fa:65:1f:7f:b3:56:2c:e9:f0:bc: 78:4a:81:ab:1b:69:32:44:79:e6:44:42:68:61:ad:b8:cb:8d: 13:a0:84:e7:ce:eb:ee:c0:9f:c8:3b:da:58:68:7a:15:36:3d: ea:fc:16:f8:5b:d9:9d:ff:02:ee:a3:ca:eb:c9:56:1b:ee:38: 38:6d:f5:05:2a:55:b7:6d:bf:ca:4e:91:15:cb:09:06:e6:12: 7a:48:a1:4c:1c:a0:d5:d8:35:4a:79:c4:17:f7:b9:48:6d:cc: 8f:25:04:47:52:5f:5b:c1:9d:fb:90:32:47:c0:03:ff:03:ed: e0:3f:21:f4:83:78:bf:d7:1c:75:b0:2b:20:9d:8d:b3:bb:d9: 76:00:81:86 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUewt3WoJzrYbZnbej3onlJ9QvPF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEy NDk5M0NBMzAeFw0yNTA0MjEwNjE1MTNaFw0yNjA0MjAwNjIwMTNaMDMxMTAvBgNV BAMTKDI4Rjg0NzVENEY4MThBN0VCRTY4Njk1N0MzMjgyNjk3OENDQUYzQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJZ4iwHbdE3qp/VX5z713rT8k v77QejdBF+sIS1Q92jfxzYGee9kExtUBGxDRzOeSHdHKF1+zSdrH50mpCt69pFHV zhNsWowZhMxj2lMRobvzF1AUdDifiutPVuYRP1ERA4URSNjMTxQKwOSkyPuYrQ3r Y5dzN93a+N2aNliQEoNcE81dT3DxY3IqKjB6DivhKunw5Royq4cHOaCVCOFKlItQ lsYYv+M87srEQxOs+npeoLZglh6GCR0/omD+4tj9CL46WuQVnx1i4n6kkdeoD2Nl jOI+w/YmoEl6Jl0X2mAWU47faUqvhg35bkSuas/Nm9PcDYBmYDe1jdsKIFRRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUKPhHXU+Bin6+aGlXwygml4zK878wHwYDVR0j BBgwFoAUtu4fYdbo6e7GQMzB15HboSSZPKMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTA4NWI0YS1mNTczLTQyZjMtODI1Yy0xY2YwYzg3MmIxNTIvMC9CNkVFMUY2MUQ2 RThFOUVFQzY0MENDQzFENzkxREJBMTI0OTkzQ0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEyNDk5 M0NBMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRhLWY1NzMtNDJmMy04 MjVjLTFjZjBjODcyYjE1Mi8wLzMyMzAzMjJlMzEzMDJlMzUzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMDM0MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoKNTANBgkqhkiG 9w0BAQsFAAOCAQEAxJdLbxde4ueo0Xmcn4Ugrf914l4DcOn5EdMaoKVy8ImrICBV X1qVf9N9XDeRi24Yo2H08EKUlOIw3nhpFksekFMAJjyEohl/fnTFx8CkAJHjANzN N4zO7Nn3oBbwhaZA6tOtQ2CiCoq5KgyKKVfLl+Jz9Fj6ZR9/s1Ys6fC8eEqBqxtp MkR55kRCaGGtuMuNE6CE587r7sCfyDvaWGh6FTY96vwW+FvZnf8C7qPK68lWG+44 OG31BSpVt22/yk6RFcsJBuYSekihTByg1dg1SnnEF/e5SG3MjyUER1JfW8Gd+5Ay R8AD/wPt4D8h9IN4v9ccdbArIJ2Ns7vZdgCBhg== -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net