$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa File: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (raw, json) Hash identifier: w6SUeBV7r7eMx4zjejoHugvjH0LAjK8+Ny4oivQOtS8= Subject key identifier: E3:98:1D:0F:A0:B8:7B:29:60:61:CC:C5:1D:A9:20:B3:50:A1:86:03 Certificate issuer: /CN=46F8E3AC44B2F2208037674979268378CA60B901 Certificate serial: 35BE9CB368BABA5AE2BC681E5CE9CACF8CEF209E Authority key identifier: 46:F8:E3:AC:44:B2:F2:20:80:37:67:49:79:26:83:78:CA:60:B9:01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa Signing time: Wed 26 Feb 2025 13:00:02 +0000 ROA not before: Wed 26 Feb 2025 12:55:02 +0000 ROA not after: Wed 25 Feb 2026 13:00:02 +0000 asID: 152423 IP address blocks: 157.20.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.crl rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:be:9c:b3:68:ba:ba:5a:e2:bc:68:1e:5c:e9:ca:cf:8c:ef:20:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46F8E3AC44B2F2208037674979268378CA60B901 Validity Not Before: Feb 26 12:55:02 2025 GMT Not After : Feb 25 13:00:02 2026 GMT Subject: CN=E3981D0FA0B87B296061CCC51DA920B350A18603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:49:a4:e3:0e:fe:78:be:31:04:65:3e:59: 2e:49:a6:b4:69:61:03:97:0e:d1:66:8c:06:01:29: 40:ad:88:5d:8d:6c:6e:c3:8f:03:ea:42:f6:69:57: 25:10:82:31:7c:ee:46:1d:79:cf:13:72:22:39:d5: 01:4c:75:8a:63:b7:a1:cb:cb:5a:7c:d1:bc:f2:a9: 24:ff:2d:93:58:32:ea:72:48:d1:90:da:f4:20:48: 7c:28:81:1a:24:d0:05:7f:52:3b:05:ef:2d:a6:a2: f1:8e:a2:e8:35:e3:8d:c2:b9:f5:69:6c:6c:4b:96: 3c:84:87:78:81:dd:a6:cf:fd:75:4e:30:ee:bf:6e: 99:cd:5c:50:fa:8d:bb:9f:f7:c8:18:e0:a6:0d:48: 7e:fb:f6:d5:da:d2:4a:16:54:d2:12:c5:43:fc:21: 22:f9:e8:62:99:89:4a:8a:90:76:20:ba:34:b4:c9: 10:51:b5:07:ea:e7:82:81:35:3e:d0:cf:00:72:57: 91:3b:74:4b:d9:01:2a:db:8e:b4:e3:7f:36:f1:76: 17:01:e7:a8:81:22:b8:c5:22:5c:b6:f3:39:e3:ec: d0:7b:95:2d:2b:80:e3:a4:07:c2:03:48:b0:52:d7: 57:21:64:76:29:38:c8:43:ca:d1:1e:33:3f:a0:e7: 05:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:98:1D:0F:A0:B8:7B:29:60:61:CC:C5:1D:A9:20:B3:50:A1:86:03 X509v3 Authority Key Identifier: keyid:46:F8:E3:AC:44:B2:F2:20:80:37:67:49:79:26:83:78:CA:60:B9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.218.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:53:70:a5:af:72:d9:cf:93:a7:0b:4e:06:19:ca:62:6b:50: 50:c7:4a:6e:14:49:34:9a:95:fe:e7:75:c4:8e:56:a8:df:c2: ae:3e:97:a5:ff:b1:15:4e:ad:ca:15:3b:79:3a:a4:b9:23:68: f3:e6:d3:a9:80:b5:16:28:11:26:ba:eb:d2:3e:fa:ee:66:ac: 3e:15:44:23:37:ec:0e:dc:df:08:6c:8a:b9:45:f7:61:be:d3: 7e:e2:ae:4a:8e:eb:79:2f:cf:2a:1c:96:d6:e5:09:13:01:09: 27:79:a6:30:20:86:8f:06:63:84:d4:4a:c6:26:de:2a:70:df: b7:00:a5:cd:e3:29:62:49:fb:9f:e0:7b:6d:13:d8:f2:58:b6: 87:4f:e7:84:2e:da:36:5c:35:d6:6e:b7:6f:36:fa:52:b2:de: fc:79:cb:2a:82:e8:c1:fa:d8:eb:90:33:a3:62:c3:ae:ff:c0: 58:ec:20:67:60:1e:9e:c2:6a:34:bb:b2:cb:b6:d2:b1:5c:7b: e7:2a:ea:5d:44:9c:95:9a:e7:c5:57:ef:46:71:dc:3b:a6:b6: 9d:80:8a:36:b4:bf:c1:0e:47:08:1c:59:e5:22:22:9c:4a:19: 12:08:7b:8a:03:3d:d4:f6:f6:de:b2:a4:87:fc:9c:0f:42:eb: b3:56:6b:90 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNb6cs2i6ulrivGgeXOnKz4zvIJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgzNzhD QTYwQjkwMTAeFw0yNTAyMjYxMjU1MDJaFw0yNjAyMjUxMzAwMDJaMDMxMTAvBgNV BAMTKEUzOTgxRDBGQTBCODdCMjk2MDYxQ0NDNTFEQTkyMEIzNTBBMTg2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMEmk4w7+eL4xBGU+WS5JprRp YQOXDtFmjAYBKUCtiF2NbG7DjwPqQvZpVyUQgjF87kYdec8TciI51QFMdYpjt6HL y1p80bzyqST/LZNYMupySNGQ2vQgSHwogRok0AV/UjsF7y2movGOoug1443CufVp bGxLljyEh3iB3abP/XVOMO6/bpnNXFD6jbuf98gY4KYNSH779tXa0koWVNISxUP8 ISL56GKZiUqKkHYgujS0yRBRtQfq54KBNT7QzwByV5E7dEvZASrbjrTjfzbxdhcB 56iBIrjFIly28znj7NB7lS0rgOOkB8IDSLBS11chZHYpOMhDytEeMz+g5wVVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU45gdD6C4eylgYczFHakgs1ChhgMwHwYDVR0j BBgwFoAURvjjrESy8iCAN2dJeSaDeMpguQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU4M2FmZS0zYmRjLTQ0YjItYTcwMi1iNDU1NWRhYTY1ZWEvMC80NkY4RTNBQzQ0 QjJGMjIwODAzNzY3NDk3OTI2ODM3OENBNjBCOTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgzNzhDQTYw QjkwMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyZTgzYWZlLTNiZGMtNDRiMi1h NzAyLWI0NTU1ZGFhNjVlYS8wLzMxMzUzNzJlMzIzMDJlMzIzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTaMA0GCSqG SIb3DQEBCwUAA4IBAQBdU3Clr3LZz5OnC04GGcpia1BQx0puFEk0mpX+53XEjlao 38KuPpel/7EVTq3KFTt5OqS5I2jz5tOpgLUWKBEmuuvSPvruZqw+FUQjN+wO3N8I bIq5RfdhvtN+4q5Kjut5L88qHJbW5QkTAQkneaYwIIaPBmOE1ErGJt4qcN+3AKXN 4yliSfuf4HttE9jyWLaHT+eELto2XDXWbrdvNvpSst78ecsqgujB+tjrkDOjYsOu /8BY7CBnYB6ewmo0u7LLttKxXHvnKupdRJyVmufFV+9Gcdw7pradgIo2tL/BDkcI HFnlIiKcShkSCHuKAz3U9vbesqSH/JwPQuuzVmuQ -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net