$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/3135372e36362e38342e302f32332d3234203d3e20313339393831.roa File: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (raw, json) Hash identifier: QVcLKReR3vobx/sEHPLJR2ePOo16P1H8K2UkUuXxUL8= Subject key identifier: D7:89:53:26:D9:57:20:8F:6A:7C:DE:38:E2:F8:15:C5:FA:90:B2:51 Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 2647854119F1586849E0C42DF1EB4AA0C3334E98 Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/3135372e36362e38342e302f32332d3234203d3e20313339393831.roa Signing time: Tue 22 Apr 2025 01:00:01 +0000 ROA not before: Tue 22 Apr 2025 00:55:01 +0000 ROA not after: Tue 21 Apr 2026 01:00:01 +0000 asID: 139981 IP address blocks: 157.66.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:47:85:41:19:f1:58:68:49:e0:c4:2d:f1:eb:4a:a0:c3:33:4e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Apr 22 00:55:01 2025 GMT Not After : Apr 21 01:00:01 2026 GMT Subject: CN=D7895326D957208F6A7CDE38E2F815C5FA90B251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bf:d2:57:3b:cb:a4:0f:2a:7a:ba:d2:6b:01: fd:0b:04:7f:f9:01:51:d4:69:22:7e:39:ca:a4:4f: e4:c6:48:57:0d:e0:62:30:5b:f8:5d:86:58:f4:2d: 80:64:a9:66:5c:ee:1d:7a:bb:30:8f:67:00:71:56: fc:a1:1d:2b:23:7b:07:40:1b:fe:8b:b4:fc:5b:30: 57:f6:ba:34:45:ea:82:d9:f7:f7:f8:12:a8:57:5e: f4:f4:d0:17:a0:9c:59:ae:81:2d:46:e0:6a:6c:ca: e0:53:00:3e:65:fd:32:4d:2b:bf:38:aa:f5:09:0c: 07:89:09:9b:91:e6:0b:07:5f:98:55:f8:9b:ff:65: a2:2f:87:45:4d:ab:6b:46:1d:5d:2a:51:a6:44:92: 0d:51:0e:88:3f:34:f9:8e:d2:a1:66:0a:f6:bc:5b: b8:0e:d6:16:a7:8a:bd:9b:33:64:45:6c:ea:1f:6f: 3d:11:e4:66:c7:06:6e:a9:12:11:27:d2:db:99:b3: cf:5c:74:19:e9:3a:e4:6b:2e:29:a2:87:75:bd:e9: 3b:63:a7:dd:6e:54:da:d8:68:7f:c6:c4:cb:60:0d: 4f:6a:54:2e:01:61:89:66:93:b3:5d:f3:97:a4:bb: 43:e3:74:e3:6a:26:de:74:a9:f3:a2:e1:be:e2:10: fb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:89:53:26:D9:57:20:8F:6A:7C:DE:38:E2:F8:15:C5:FA:90:B2:51 X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/3135372e36362e38342e302f32332d3234203d3e20313339393831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.84.0/23 Signature Algorithm: sha256WithRSAEncryption 65:31:95:2b:b0:63:35:84:0d:41:ec:2c:17:70:15:fb:69:16: bc:bc:d4:0c:e6:8b:36:55:3a:b3:8c:9a:79:ce:a2:27:59:3c: d2:92:fd:b4:38:bb:60:09:19:0a:21:0a:43:73:a7:b5:7a:f7: 3a:30:1b:92:43:7d:df:cc:99:c0:a3:5f:9d:ce:89:b5:13:25: f0:ea:42:74:95:f6:35:40:31:2b:36:75:93:32:92:79:38:43: de:2b:1a:48:0d:b9:27:a9:9f:86:5b:8e:0d:27:f8:91:42:2e: 86:d2:e2:0b:00:7c:79:72:37:33:94:9c:94:8c:1f:d8:8e:3f: b7:48:a1:0b:21:db:f8:a9:6e:28:18:db:2f:2e:36:8a:f6:af: c8:e7:be:0f:32:d2:9c:0f:bf:11:c1:e2:37:0f:64:ee:05:7d: f0:f9:4d:6e:ec:34:61:1a:a5:5e:34:03:ba:78:d7:5f:de:dc: db:c6:3b:6d:dd:d0:e0:ec:57:fe:c0:11:47:02:d4:ae:4a:17: 72:28:ba:07:6a:ce:b3:a0:be:b0:64:25:a2:7d:38:63:21:40: a1:21:83:d8:de:83:b6:fe:4d:93:b3:d3:aa:ca:cf:ca:4f:12: 21:ab:07:ab:8d:8d:9e:1a:d0:40:30:9f:38:5a:a6:b6:d3:46: 97:66:c1:e1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJkeFQRnxWGhJ4MQt8etKoMMzTpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNTA0MjIwMDU1MDFaFw0yNjA0MjEwMTAwMDFaMDMxMTAvBgNV BAMTKEQ3ODk1MzI2RDk1NzIwOEY2QTdDREUzOEUyRjgxNUM1RkE5MEIyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiv9JXO8ukDyp6utJrAf0LBH/5 AVHUaSJ+OcqkT+TGSFcN4GIwW/hdhlj0LYBkqWZc7h16uzCPZwBxVvyhHSsjewdA G/6LtPxbMFf2ujRF6oLZ9/f4EqhXXvT00BegnFmugS1G4GpsyuBTAD5l/TJNK784 qvUJDAeJCZuR5gsHX5hV+Jv/ZaIvh0VNq2tGHV0qUaZEkg1RDog/NPmO0qFmCva8 W7gO1hanir2bM2RFbOofbz0R5GbHBm6pEhEn0tuZs89cdBnpOuRrLimih3W96Ttj p91uVNrYaH/GxMtgDU9qVC4BYYlmk7Nd85eku0PjdONqJt50qfOi4b7iEPtdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU14lTJtlXII9qfN444vgVxfqQslEwHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5N2M2ODJhLTQ0OGItNDBlMi1h ODhmLTE2ZGY4M2RkMzMzNy8wLzMxMzUzNzJlMzYzNjJlMzgzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzOTM5MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ1CVDANBgkqhkiG 9w0BAQsFAAOCAQEAZTGVK7BjNYQNQewsF3AV+2kWvLzUDOaLNlU6s4yaec6iJ1k8 0pL9tDi7YAkZCiEKQ3OntXr3OjAbkkN938yZwKNfnc6JtRMl8OpCdJX2NUAxKzZ1 kzKSeThD3isaSA25J6mfhluODSf4kUIuhtLiCwB8eXI3M5SclIwf2I4/t0ihCyHb +KluKBjbLy42ivavyOe+DzLSnA+/EcHiNw9k7gV98PlNbuw0YRqlXjQDunjXX97c 28Y7bd3Q4OxX/sARRwLUrkoXcii6B2rOs6C+sGQlon04YyFAoSGD2N6Dtv5Nk7PT qsrPyk8SIasHq42NnhrQQDCfOFqmttNGl2bB4Q== -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:24 2025 by rpki-client on console.sobornost.net