$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS24520.roa File: AS24520.roa (raw, json) Hash identifier: /X2OowKvSum0rz+umcdT3kPQkSHfCFlWzy8KzFiLuzk= Subject key identifier: 51:E2:82:32:87:CB:2C:CE:AA:30:FB:50:7C:C6:8B:17:23:DC:55:31 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 551E82C0EBC322D1280BA8CCA9F6322E2344F83B Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS24520.roa Signing time: Fri 11 Apr 2025 04:09:00 +0000 ROA not before: Fri 11 Apr 2025 04:04:00 +0000 ROA not after: Fri 10 Apr 2026 04:09:00 +0000 asID: 24520 IP address blocks: 112.78.96.0/21 maxlen: 24 202.87.190.0/24 maxlen: 24 202.87.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1e:82:c0:eb:c3:22:d1:28:0b:a8:cc:a9:f6:32:2e:23:44:f8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Apr 11 04:04:00 2025 GMT Not After : Apr 10 04:09:00 2026 GMT Subject: CN=51E2823287CB2CCEAA30FB507CC68B1723DC5531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:3d:9e:fe:75:c9:18:8b:5d:31:2b:86:08: 24:60:65:f9:c5:db:a4:85:c3:8a:15:64:79:a0:86: 3f:c7:33:2b:4c:b8:62:20:00:77:18:3f:e0:0a:15: d4:31:93:2e:4a:d3:ba:c9:b1:74:be:54:e8:16:8b: d1:72:d6:08:c1:fe:7c:30:43:a4:b8:58:69:c5:02: 4e:58:ba:a4:e0:32:4c:73:92:9c:a1:73:85:76:41: 67:a3:25:a1:78:c7:ee:fa:a6:b3:91:d6:55:43:f0: ae:a1:65:60:7b:ac:14:9a:6d:6f:fa:70:2d:33:df: 4a:10:41:68:1f:2e:9f:3d:bb:9a:ab:9c:31:e6:a7: 09:aa:34:5c:25:b9:66:bd:f5:ab:dd:04:2b:7a:ee: 2b:cd:b7:32:d8:a2:6d:e4:01:4b:95:30:cf:d3:62: 74:47:8e:6a:0d:9e:c5:78:3f:cc:39:c2:33:cb:52: e9:ad:a7:22:e0:c7:da:08:d1:b2:94:be:40:49:08: eb:76:7a:3f:f8:5b:6d:71:05:4c:8c:05:bc:78:44: fc:62:db:4a:c6:54:ea:bb:1a:1c:39:08:de:28:e8: e0:4f:96:f8:10:97:6a:f6:65:54:e5:f3:f6:29:8e: 6d:e3:52:fc:c4:9b:0a:35:cd:f5:c8:f0:83:3e:9c: 5b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E2:82:32:87:CB:2C:CE:AA:30:FB:50:7C:C6:8B:17:23:DC:55:31 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS24520.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 112.78.96.0/21 202.87.190.0/23 Signature Algorithm: sha256WithRSAEncryption 11:8b:61:92:93:ac:6e:22:e1:ca:30:4f:8f:b3:1b:e1:96:b6: e8:26:d4:8e:6c:d9:18:81:ab:e5:f3:b6:cb:9b:17:d1:49:8d: 73:8b:02:5b:03:70:16:5f:2a:28:2d:44:6d:37:f9:e4:51:fa: 72:fd:1b:1b:e9:db:a7:06:c8:68:5c:d4:26:2c:6e:f2:7f:a7: 32:82:f0:fa:0d:60:39:e6:a7:1d:ea:1e:5c:34:de:35:00:b0: a2:ad:fe:16:ae:ac:2e:aa:38:21:0d:47:36:f9:8b:f2:aa:c3: 75:d1:13:58:45:85:d6:37:1d:2b:cf:0e:4e:30:0b:10:6b:56: 20:94:24:b9:55:0f:d6:dc:3d:9e:4a:4e:ce:7e:5e:ae:fd:94: af:50:a1:35:57:58:9e:35:cc:f0:9d:bb:35:6b:13:0c:54:da: f9:87:a6:e7:86:54:49:54:d1:e5:a9:6d:97:91:7f:dd:02:63: cd:2b:cd:dc:4d:07:98:99:37:be:3e:36:34:6c:2e:da:e7:f2: 4a:c7:cf:76:13:ed:a2:b7:83:22:c4:2c:99:47:6d:dc:ee:3d: e7:72:1c:16:65:0f:f0:30:2a:92:4c:d7:46:84:41:c1:e4:59: 81:81:46:f2:e9:b5:82:a3:64:96:42:47:13:44:85:18:c2:e3: d2:33:5a:32 -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUVR6CwOvDItEoC6jMqfYyLiNE+DswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNTA0MTEwNDA0MDBaFw0yNjA0MTAwNDA5MDBaMDMxMTAvBgNV BAMTKDUxRTI4MjMyODdDQjJDQ0VBQTMwRkI1MDdDQzY4QjE3MjNEQzU1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNUT2e/nXJGItdMSuGCCRgZfnF 26SFw4oVZHmghj/HMytMuGIgAHcYP+AKFdQxky5K07rJsXS+VOgWi9Fy1gjB/nww Q6S4WGnFAk5YuqTgMkxzkpyhc4V2QWejJaF4x+76prOR1lVD8K6hZWB7rBSabW/6 cC0z30oQQWgfLp89u5qrnDHmpwmqNFwluWa99avdBCt67ivNtzLYom3kAUuVMM/T YnRHjmoNnsV4P8w5wjPLUumtpyLgx9oI0bKUvkBJCOt2ej/4W21xBUyMBbx4RPxi 20rGVOq7Ghw5CN4o6OBPlvgQl2r2ZVTl8/Ypjm3jUvzEmwo1zfXI8IM+nFvbAgMB AAGjggIEMIICADAdBgNVHQ4EFgQUUeKCMofLLM6qMPtQfMaLFyPcVTEwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby9lODczNDlmYi00NjVlLTRlOGItYTk3NC05 MGU5MzliY2IwZmIvMC9BUzI0NTIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDcE5gAwQByle+MA0GCSqG SIb3DQEBCwUAA4IBAQARi2GSk6xuIuHKME+PsxvhlrboJtSObNkYgavl87bLmxfR SY1ziwJbA3AWXyooLURtN/nkUfpy/Rsb6dunBshoXNQmLG7yf6cygvD6DWA55qcd 6h5cNN41ALCirf4WrqwuqjghDUc2+YvyqsN10RNYRYXWNx0rzw5OMAsQa1YglCS5 VQ/W3D2eSk7Ofl6u/ZSvUKE1V1ieNczwnbs1axMMVNr5h6bnhlRJVNHlqW2XkX/d AmPNK83cTQeYmTe+PjY0bC7a5/JKx892E+2it4MixCyZR23c7j3nchwWZQ/wMCqS TNdGhEHB5FmBgUby6bWCo2SWQkcTRIUYwuPSM1oy -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net