$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa File: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (raw, json) Hash identifier: fkNU7FdVjKHsjFj1YpiV+gYURzvDFsZYzfTu/zHhcfE= Subject key identifier: 43:58:36:78:11:36:59:AF:6E:A1:81:EA:D5:F0:99:FD:3E:A1:DC:C8 Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 20F5C21270F26911E88716C4F7C4DF6D9AFF8C31 Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa Signing time: Thu 17 Apr 2025 10:00:00 +0000 ROA not before: Thu 17 Apr 2025 09:55:00 +0000 ROA not after: Thu 16 Apr 2026 10:00:00 +0000 asID: 136846 IP address blocks: 157.15.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f5:c2:12:70:f2:69:11:e8:87:16:c4:f7:c4:df:6d:9a:ff:8c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Apr 17 09:55:00 2025 GMT Not After : Apr 16 10:00:00 2026 GMT Subject: CN=43583678113659AF6EA181EAD5F099FD3EA1DCC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:95:9c:9d:83:36:f6:58:fd:21:85:5b:82: 3d:61:9d:04:2b:1a:59:45:7d:4b:88:72:a8:b6:63: 58:3f:b4:c4:a6:62:55:4f:38:a1:14:19:39:45:86: 9c:46:9f:7e:4d:63:fd:a3:3f:84:83:4d:92:a8:e2: e9:f9:73:98:42:7e:59:95:2b:4a:7e:4c:8e:6e:4d: 5e:3d:0c:f1:99:46:21:fd:3a:c5:79:d5:5d:a1:b2: 1a:59:a0:3c:b4:a0:9e:72:7e:09:fb:42:ac:fc:ab: f6:44:68:70:1e:9c:da:c9:96:f5:b1:09:d6:4a:ef: e7:85:8b:ea:62:26:96:96:dd:5c:b2:ea:f8:a7:fc: 2c:d5:e0:0f:b2:05:a9:41:62:0c:6c:55:67:cb:e6: 67:7e:e9:55:f1:f4:1a:cf:b7:da:42:e4:2e:81:69: 8e:f7:88:68:d0:7d:55:14:db:dd:6d:84:c1:16:44: 8a:d9:58:7e:00:ec:aa:64:16:24:09:2f:aa:06:a6: f8:fb:a9:25:f8:f1:1c:b1:20:31:22:25:92:53:8a: d8:da:53:3f:05:df:ce:8b:aa:8b:52:7a:c8:ea:7e: d6:a3:d7:2d:0d:92:e6:29:cf:74:50:d0:f4:c4:4c: 2e:6d:8d:b5:9f:ff:7c:38:2a:4f:77:18:59:64:57: 29:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:58:36:78:11:36:59:AF:6E:A1:81:EA:D5:F0:99:FD:3E:A1:DC:C8 X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.120.0/24 Signature Algorithm: sha256WithRSAEncryption bb:57:6d:7c:56:1b:09:b9:68:3b:ce:d3:63:3e:4e:64:85:4d: f4:32:3e:dc:18:ec:55:b1:7c:b4:c4:73:2d:7e:23:1c:7c:3f: 54:ca:53:19:33:26:29:d1:94:94:bd:46:88:e3:6e:51:92:5f: 4e:58:30:cf:92:6b:d0:90:da:b2:bd:df:2d:65:95:37:34:c0: eb:28:13:a1:7f:c3:49:ad:f2:62:f8:81:1d:be:ed:85:3a:04: b2:fc:78:fb:2e:b5:01:32:d2:e8:74:aa:c1:15:44:27:52:16: 6f:ab:ec:9e:56:fb:65:2c:92:c9:76:7a:c2:c4:97:c7:5d:2d: 59:99:e0:5b:42:a7:50:91:cc:38:62:86:af:ca:80:8a:2c:70: c7:1e:39:98:77:d2:ea:a9:20:b6:d3:8a:8f:ad:99:5c:8c:66: c2:0d:ac:90:30:96:17:78:db:bd:60:91:fa:0e:51:5a:6d:96: 49:b7:cb:46:4a:cd:cf:b6:bc:e0:68:c9:5f:bc:1f:82:d9:09: 7a:ee:ff:a5:f5:33:75:24:55:40:b6:8a:9b:92:82:3c:6a:c6: b2:1d:79:39:13:04:ac:e4:3e:71:77:36:c5:ef:da:0e:15:52: 4e:c8:81:10:3b:8b:ad:ae:96:81:52:67:12:94:8a:9e:1b:f9: ce:68:16:45 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIPXCEnDyaRHohxbE98TfbZr/jDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNTA0MTcwOTU1MDBaFw0yNjA0MTYxMDAwMDBaMDMxMTAvBgNV BAMTKDQzNTgzNjc4MTEzNjU5QUY2RUExODFFQUQ1RjA5OUZEM0VBMURDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6E5WcnYM29lj9IYVbgj1hnQQr GllFfUuIcqi2Y1g/tMSmYlVPOKEUGTlFhpxGn35NY/2jP4SDTZKo4un5c5hCflmV K0p+TI5uTV49DPGZRiH9OsV51V2hshpZoDy0oJ5yfgn7Qqz8q/ZEaHAenNrJlvWx CdZK7+eFi+piJpaW3Vyy6vin/CzV4A+yBalBYgxsVWfL5md+6VXx9BrPt9pC5C6B aY73iGjQfVUU291thMEWRIrZWH4A7KpkFiQJL6oGpvj7qSX48RyxIDEiJZJTitja Uz8F386LqotSesjqftaj1y0NkuYpz3RQ0PTETC5tjbWf/3w4Kk93GFlkVymNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQ1g2eBE2Wa9uoYHq1fCZ/T6h3MgwHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmYjQ2NmM2LTM3NDMtNDk1Zi1i MWE4LTI2MDdjYzk5NTczZi8wLzMxMzUzNzJlMzEzNTJlMzEzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ94MA0GCSqG SIb3DQEBCwUAA4IBAQC7V218VhsJuWg7ztNjPk5khU30Mj7cGOxVsXy0xHMtfiMc fD9UylMZMyYp0ZSUvUaI425Rkl9OWDDPkmvQkNqyvd8tZZU3NMDrKBOhf8NJrfJi +IEdvu2FOgSy/Hj7LrUBMtLodKrBFUQnUhZvq+yeVvtlLJLJdnrCxJfHXS1ZmeBb QqdQkcw4YoavyoCKLHDHHjmYd9LqqSC204qPrZlcjGbCDayQMJYXeNu9YJH6DlFa bZZJt8tGSs3PtrzgaMlfvB+C2Ql67v+l9TN1JFVAtoqbkoI8asayHXk5EwSs5D5x dzbF79oOFVJOyIEQO4utrpaBUmcSlIqeG/nOaBZF -----END CERTIFICATE-----Generated at Sat Apr 26 08:46:13 2025 by rpki-client on console.sobornost.net