$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38382e302f32332d3233203d3e20313532303832.roa File: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (raw, json) Hash identifier: 8HeVkgm+CVYOJ+iLevkSP38oQ5T0Ub4BqXq+xOD70Ck= Subject key identifier: DE:B2:A6:F3:E0:AE:EF:D6:71:87:71:5C:40:F8:51:B3:4F:BF:66:28 Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 013891DCC216679356667B8ADAA67046A0BD58F0 Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38382e302f32332d3233203d3e20313532303832.roa Signing time: Thu 12 Dec 2024 05:00:03 +0000 ROA not before: Thu 12 Dec 2024 04:55:03 +0000 ROA not after: Thu 11 Dec 2025 05:00:03 +0000 asID: 152082 IP address blocks: 157.10.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:38:91:dc:c2:16:67:93:56:66:7b:8a:da:a6:70:46:a0:bd:58:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Dec 12 04:55:03 2024 GMT Not After : Dec 11 05:00:03 2025 GMT Subject: CN=DEB2A6F3E0AEEFD67187715C40F851B34FBF6628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:54:68:b4:a9:94:96:0a:67:ba:8b:f0:14: 3f:b9:3d:35:8c:26:ae:5c:8d:85:3a:06:a3:62:9f: 17:2c:e7:5a:9b:85:bf:3f:df:54:21:13:d3:21:2c: e3:67:9d:94:f0:db:4a:6b:17:f2:a8:f1:be:d4:2c: 63:32:45:09:82:22:8f:ec:3c:ba:38:ff:05:e1:42: b8:c6:12:53:55:82:4f:a2:54:5b:7f:e7:ed:42:32: ad:39:d3:dc:fd:0e:ae:71:b1:56:99:85:1f:49:2e: d0:16:8a:24:95:6b:be:e9:0b:c7:aa:fb:bb:d8:3c: 51:28:52:34:93:81:d4:b2:1e:49:00:13:79:35:23: 78:cd:97:79:48:57:c0:18:0d:5d:ca:e1:a2:eb:32: 54:bc:6f:8e:8e:50:9b:ce:7d:74:b1:52:af:82:aa: b4:61:2f:00:a8:be:16:9e:bd:50:e5:24:f1:1f:b9: d6:c5:68:aa:57:01:88:63:bc:0a:f7:3e:1c:0d:22: 4a:da:16:07:3d:6c:89:6e:9b:1f:74:71:d1:78:f2: 1a:1c:22:f9:12:1e:6c:44:60:1d:b8:d7:d2:de:6f: 5c:30:29:dd:9f:e1:91:2e:21:65:ca:77:1c:7c:07: ad:a8:67:6a:a6:97:c9:d5:b0:94:3a:32:b1:2e:7f: 15:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B2:A6:F3:E0:AE:EF:D6:71:87:71:5C:40:F8:51:B3:4F:BF:66:28 X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38382e302f32332d3233203d3e20313532303832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.88.0/23 Signature Algorithm: sha256WithRSAEncryption 04:53:fe:69:b2:44:ed:52:50:3f:dc:78:15:c8:a3:e5:43:a6: fc:8b:68:1a:5c:17:5f:90:4b:f0:f3:64:34:47:2c:41:76:bd: 2f:16:16:1d:4b:e0:47:47:bf:84:73:50:b5:3e:c3:f1:c1:dd: ad:39:b1:fe:15:7c:bb:88:ff:6f:48:67:6d:29:15:b4:4e:4e: b6:ea:3e:21:ba:fb:e8:14:a6:7b:5a:9c:bf:e1:71:32:02:00: 5e:64:c3:cf:b1:32:c6:fd:28:d4:d1:1e:a2:00:12:fc:4f:59: e5:90:33:8a:75:03:51:e6:26:bf:0d:d6:fa:bd:40:ad:69:e0: b7:99:a5:bf:bc:ab:15:4a:40:27:5c:ab:52:72:cc:f8:5d:3d: 85:79:63:10:92:14:7c:7d:94:9d:02:3b:9d:2e:9c:76:64:57: 68:9a:7d:3a:8f:ad:49:3e:57:4a:4b:92:a6:28:9e:3e:52:37: 46:ce:5e:c6:61:1c:77:91:22:df:3d:d5:46:b4:9b:e8:b9:d6: 9d:64:0a:58:85:95:6e:e0:7e:a5:de:fd:0f:63:94:61:c4:fc: 7e:ac:f9:b9:7f:27:89:97:0a:a2:4f:e9:40:db:e9:45:54:38: 87:48:43:66:f7:3a:63:97:36:63:86:b0:94:59:c7:22:20:c1: 05:aa:04:28 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUATiR3MIWZ5NWZnuK2qZwRqC9WPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNDEyMTIwNDU1MDNaFw0yNTEyMTEwNTAwMDNaMDMxMTAvBgNV BAMTKERFQjJBNkYzRTBBRUVGRDY3MTg3NzE1QzQwRjg1MUIzNEZCRjY2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODVRotKmUlgpnuovwFD+5PTWM Jq5cjYU6BqNinxcs51qbhb8/31QhE9MhLONnnZTw20prF/Ko8b7ULGMyRQmCIo/s PLo4/wXhQrjGElNVgk+iVFt/5+1CMq0509z9Dq5xsVaZhR9JLtAWiiSVa77pC8eq +7vYPFEoUjSTgdSyHkkAE3k1I3jNl3lIV8AYDV3K4aLrMlS8b46OUJvOfXSxUq+C qrRhLwCovhaevVDlJPEfudbFaKpXAYhjvAr3PhwNIkraFgc9bIlumx90cdF48hoc IvkSHmxEYB2419Leb1wwKd2f4ZEuIWXKdxx8B62oZ2qml8nVsJQ6MrEufxW3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU3rKm8+Cu79Zxh3FcQPhRs0+/ZigwHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0N2NkNWEyLWE3NDItNDUwYy1i MTkwLTUwMGU3NTQ1MjBkZS8wLzMxMzUzNzJlMzEzMDJlMzgzODJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMjMwMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0KWDANBgkqhkiG 9w0BAQsFAAOCAQEABFP+abJE7VJQP9x4Fcij5UOm/ItoGlwXX5BL8PNkNEcsQXa9 LxYWHUvgR0e/hHNQtT7D8cHdrTmx/hV8u4j/b0hnbSkVtE5Otuo+Ibr76BSme1qc v+FxMgIAXmTDz7Eyxv0o1NEeogAS/E9Z5ZAzinUDUeYmvw3W+r1ArWngt5mlv7yr FUpAJ1yrUnLM+F09hXljEJIUfH2UnQI7nS6cdmRXaJp9Oo+tST5XSkuSpiiePlI3 Rs5exmEcd5Ei3z3VRrSb6LnWnWQKWIWVbuB+pd79D2OUYcT8fqz5uX8niZcKok/p QNvpRVQ4h0hDZvc6Y5c2Y4awlFnHIiDBBaoEKA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:25 2025 by rpki-client on console.sobornost.net