$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa File: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (raw, json) Hash identifier: TZ45IaHiDcklYnYgaDPwrwSUbUctA3Q/NXqUbigRnzs= Subject key identifier: A7:77:F4:BA:B9:13:BE:20:0B:78:B3:6D:8C:51:82:07:2C:44:B0:ED Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Certificate serial: 67B46703737B9A0EEDD0B1615975EA019CB72D5B Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa Signing time: Sat 01 Feb 2025 12:02:21 +0000 ROA not before: Sat 01 Feb 2025 11:57:21 +0000 ROA not after: Sat 31 Jan 2026 12:02:21 +0000 asID: 58478 IP address blocks: 202.182.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b4:67:03:73:7b:9a:0e:ed:d0:b1:61:59:75:ea:01:9c:b7:2d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Validity Not Before: Feb 1 11:57:21 2025 GMT Not After : Jan 31 12:02:21 2026 GMT Subject: CN=A777F4BAB913BE200B78B36D8C5182072C44B0ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:4b:bf:df:c3:72:b8:f2:df:75:94:a9:3e: 7b:ef:e8:7f:85:07:21:22:68:d7:36:53:e0:46:d0: 4b:c4:04:1d:b1:60:43:cc:8c:94:03:4b:fe:ba:91: 35:98:a8:57:bc:99:82:f6:47:63:5f:02:74:d3:ce: e2:ca:96:e7:e0:bf:6d:d8:84:50:bf:6d:66:35:7e: 16:86:ec:cd:cc:7e:7a:3f:65:28:e1:24:4a:66:de: 0c:6c:ba:48:96:1d:cf:a1:07:2e:f7:34:26:ee:a5: 52:47:70:92:e7:fb:bb:c2:7d:c0:ac:6b:f0:72:fd: 90:67:44:03:5e:d7:f9:c8:79:ec:e4:28:ca:65:e4: 89:a6:80:6e:66:10:c2:3b:b0:f8:8e:45:b7:18:c7: 53:d1:ab:cb:71:34:a9:3e:1f:fb:16:08:f7:4e:d6: 0c:1c:2a:54:00:f8:2b:a1:36:e4:e9:c8:1a:66:34: d3:cb:0f:ca:ef:2b:d7:98:48:25:58:d1:62:08:a3: 97:1a:62:7c:55:19:0a:87:b3:c3:43:82:97:ca:c4: 45:cb:c2:eb:e3:0f:c9:94:e6:04:b2:61:b1:db:55: 3d:b8:0f:4a:28:66:43:b4:42:7f:61:a8:8d:ee:73: ff:66:41:da:57:23:fc:b2:a3:24:2d:a7:3a:f2:fc: 61:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:77:F4:BA:B9:13:BE:20:0B:78:B3:6D:8C:51:82:07:2C:44:B0:ED X509v3 Authority Key Identifier: keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.182.177.0/24 Signature Algorithm: sha256WithRSAEncryption ca:f7:11:01:6d:19:01:b1:cb:56:f3:d4:98:db:d6:f5:8c:68: 7b:25:03:a4:89:78:5b:36:b4:0b:9d:5f:f0:cf:b6:ab:cd:cb: a3:b4:50:b3:47:d4:c0:2e:56:7d:19:cb:3e:26:0a:76:e2:e5: 39:86:fd:43:d1:c3:0d:17:be:17:06:1c:07:35:2b:35:e1:0c: 7a:d6:29:4c:90:f2:57:a7:f9:13:a0:35:4c:df:81:28:ba:58: 6e:1d:59:04:a3:d0:6b:b7:93:c0:9e:78:1a:55:40:d8:99:d9: 7e:50:f0:4f:75:df:03:e0:5e:9f:df:80:4d:7e:56:cf:d8:c4: e9:83:00:f2:07:a0:07:80:98:bb:99:22:c6:da:a6:a1:6e:ad: a9:b2:32:d1:be:e5:a0:88:d4:79:19:f0:f0:77:77:dd:33:a4: 9a:03:ef:42:cf:48:60:59:08:52:fb:20:f9:98:94:ae:cd:36: f5:3c:7f:aa:e3:85:d7:05:44:73:5b:02:0a:cb:ea:96:c9:da: e8:c7:7b:93:74:22:11:31:06:6d:6b:b2:2f:92:ca:64:93:a0: bb:a7:13:f6:23:37:5b:5d:2c:8a:c8:bd:57:de:1e:5a:41:ae: e8:e1:10:08:b3:25:66:c0:d0:f4:f1:1f:26:5d:b4:79:6d:75: b9:1a:9a:c0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZ7RnA3N7mg7t0LFhWXXqAZy3LVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG MjhGODA2NjAeFw0yNTAyMDExMTU3MjFaFw0yNjAxMzExMjAyMjFaMDMxMTAvBgNV BAMTKEE3NzdGNEJBQjkxM0JFMjAwQjc4QjM2RDhDNTE4MjA3MkM0NEIwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3YEu/38NyuPLfdZSpPnvv6H+F ByEiaNc2U+BG0EvEBB2xYEPMjJQDS/66kTWYqFe8mYL2R2NfAnTTzuLKlufgv23Y hFC/bWY1fhaG7M3Mfno/ZSjhJEpm3gxsukiWHc+hBy73NCbupVJHcJLn+7vCfcCs a/By/ZBnRANe1/nIeezkKMpl5ImmgG5mEMI7sPiORbcYx1PRq8txNKk+H/sWCPdO 1gwcKlQA+CuhNuTpyBpmNNPLD8rvK9eYSCVY0WIIo5caYnxVGQqHs8NDgpfKxEXL wuvjD8mU5gSyYbHbVT24D0ooZkO0Qn9hqI3uc/9mQdpXI/yyoyQtpzry/GGvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUp3f0urkTviALeLNtjFGCByxEsO0wHwYDVR0j BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1 MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG ODA2Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMjJlMzEzODMyMmUzMTM3MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyraxMA0GCSqG SIb3DQEBCwUAA4IBAQDK9xEBbRkBsctW89SY29b1jGh7JQOkiXhbNrQLnV/wz7ar zcujtFCzR9TALlZ9Gcs+Jgp24uU5hv1D0cMNF74XBhwHNSs14Qx61ilMkPJXp/kT oDVM34EoulhuHVkEo9Brt5PAnngaVUDYmdl+UPBPdd8D4F6f34BNflbP2MTpgwDy B6AHgJi7mSLG2qahbq2psjLRvuWgiNR5GfDwd3fdM6SaA+9Cz0hgWQhS+yD5mJSu zTb1PH+q44XXBURzWwIKy+qWydrox3uTdCIRMQZta7Ivkspkk6C7pxP2IzdbXSyK yL1X3h5aQa7o4RAIsyVmwND08R8mXbR5bXW5GprA -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net