$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa File: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (raw, json) Hash identifier: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ= Subject key identifier: C4:85:60:8D:F2:F3:B9:AE:CE:90:03:AE:D5:A3:AB:A3:F1:EA:71:12 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 6A33967F7C20156DE45F483FD69D518E66D5A303 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa Signing time: Wed 19 Mar 2025 09:54:19 +0000 ROA not before: Wed 19 Mar 2025 09:49:19 +0000 ROA not after: Wed 18 Mar 2026 09:54:19 +0000 asID: 133800 IP address blocks: 202.74.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 04:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:33:96:7f:7c:20:15:6d:e4:5f:48:3f:d6:9d:51:8e:66:d5:a3:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Mar 19 09:49:19 2025 GMT Not After : Mar 18 09:54:19 2026 GMT Subject: CN=C485608DF2F3B9AECE9003AED5A3ABA3F1EA7112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a9:11:67:59:e7:ac:39:0e:83:a7:1c:cc:c3: 54:07:87:5c:b1:b4:6a:e4:60:d2:b5:21:90:fb:ed: 74:6d:60:91:1b:00:df:d9:61:4a:20:81:2d:e0:30: c7:f6:b4:cc:79:79:1f:ff:00:e6:bb:e0:d8:64:38: 3f:e2:9d:10:85:1c:88:db:0c:63:df:a3:2b:34:53: 3d:8f:2a:94:f9:7f:a6:57:0b:6c:e2:63:26:5b:f4: 39:e8:d6:cc:f4:cc:99:84:e4:fd:60:b8:50:f1:61: 8a:14:d8:7f:56:01:3d:71:27:c8:3c:5b:1f:3a:70: 87:b0:8c:f8:c7:f2:ef:2a:1c:39:29:2a:74:45:3f: de:c9:a2:c1:fd:ed:9f:0a:9e:ef:ea:75:8d:60:ac: 58:69:c2:4a:1d:43:41:6a:6b:ad:99:46:ec:a3:51: b4:97:a1:d8:63:c1:a4:65:76:20:c1:2f:b2:c5:ef: 13:59:72:9f:cd:1e:60:37:e7:15:cf:0c:59:80:37: ce:36:30:9a:c0:44:68:85:a9:d6:0a:5b:0e:67:0e: a1:d8:55:88:a7:a7:ed:7e:bf:6c:67:e7:47:0a:07: b2:ce:6e:25:60:c1:54:53:33:4e:b6:91:22:67:5f: 31:01:aa:62:b5:db:43:92:9f:37:70:5d:50:3c:a7: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:85:60:8D:F2:F3:B9:AE:CE:90:03:AE:D5:A3:AB:A3:F1:EA:71:12 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.74.74.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:7d:05:6f:2e:78:c6:79:0b:18:a2:91:2f:b6:03:8b:fd:47: 3a:6d:25:ee:e9:0e:91:8d:d7:0f:f6:82:90:59:a9:c0:2d:61: 4b:86:d4:bd:54:b2:77:1f:af:c7:20:2c:1b:57:6c:41:d7:62: ec:c3:dd:44:de:e4:44:c9:0c:0c:4e:1d:90:3a:37:e1:cb:51: d2:51:6a:dc:21:d9:23:77:95:84:6e:df:9d:73:b6:cd:05:ab: 01:60:ae:66:1c:f6:6b:da:6f:47:e7:a7:8d:20:dd:af:a1:4e: 5f:9e:af:a1:80:fa:ed:6f:a4:6e:fb:8b:fb:79:2c:a6:39:a7: e2:65:fe:74:76:48:7a:57:9b:b8:7e:2e:e4:04:7b:4f:30:9f: 0b:7f:6b:03:11:52:7e:e0:53:42:99:23:79:9e:98:8c:45:c9: fe:c4:56:36:c1:9e:dc:84:3e:61:f7:ca:25:71:e5:b1:92:30: 92:ff:11:13:f3:76:33:cf:03:47:1b:3b:e6:9f:3f:84:31:39: 08:c5:5b:d0:c7:5a:24:46:79:1b:f1:6d:6f:92:e0:d3:5d:34: b5:6f:86:66:c9:56:2a:96:6e:2a:f2:41:ce:6d:fb:85:df:6e: a9:e7:15:18:f6:3e:02:b1:1d:f7:c8:02:fe:7f:a1:71:d5:e7: 2b:cd:ef:a2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUajOWf3wgFW3kX0g/1p1RjmbVowMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTAzMTkwOTQ5MTlaFw0yNjAzMTgwOTU0MTlaMDMxMTAvBgNV BAMTKEM0ODU2MDhERjJGM0I5QUVDRTkwMDNBRUQ1QTNBQkEzRjFFQTcxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqRFnWeesOQ6DpxzMw1QHh1yx tGrkYNK1IZD77XRtYJEbAN/ZYUoggS3gMMf2tMx5eR//AOa74NhkOD/inRCFHIjb DGPfoys0Uz2PKpT5f6ZXC2ziYyZb9Dno1sz0zJmE5P1guFDxYYoU2H9WAT1xJ8g8 Wx86cIewjPjH8u8qHDkpKnRFP97JosH97Z8Knu/qdY1grFhpwkodQ0Fqa62ZRuyj UbSXodhjwaRldiDBL7LF7xNZcp/NHmA35xXPDFmAN842MJrARGiFqdYKWw5nDqHY VYinp+1+v2xn50cKB7LObiVgwVRTM062kSJnXzEBqmK120OSnzdwXVA8pzsNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUxIVgjfLzua7OkAOu1aOro/HqcRIwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q1MGM4NjdiLTJjYjktNDU3Yi04 NTZiLWEyYWZhMzhmNTdjYy8wLzMyMzAzMjJlMzczNDJlMzczNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzMzM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcpKSjANBgkqhkiG 9w0BAQsFAAOCAQEAXH0Fby54xnkLGKKRL7YDi/1HOm0l7ukOkY3XD/aCkFmpwC1h S4bUvVSydx+vxyAsG1dsQddi7MPdRN7kRMkMDE4dkDo34ctR0lFq3CHZI3eVhG7f nXO2zQWrAWCuZhz2a9pvR+enjSDdr6FOX56voYD67W+kbvuL+3kspjmn4mX+dHZI elebuH4u5AR7TzCfC39rAxFSfuBTQpkjeZ6YjEXJ/sRWNsGe3IQ+YffKJXHlsZIw kv8RE/N2M88DRxs75p8/hDE5CMVb0MdaJEZ5G/Ftb5Lg0100tW+GZslWKpZuKvJB zm37hd9uqecVGPY+ArEd98gC/n+hcdXnK83vog== -----END CERTIFICATE-----Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net