$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32382e302f32332d3234203d3e203538333738.roa File: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (raw, json) Hash identifier: gRftjSQQEs2HA/M7jkf+ozLtCrIoawfYsZxOb3X4kBI= Subject key identifier: 13:11:E2:C6:7C:E8:62:C9:6F:A2:A9:29:75:73:38:A9:0A:BA:24:60 Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Certificate serial: 1C05FF61A33A460E66024963FF39E3849DC93F8A Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32382e302f32332d3234203d3e203538333738.roa Signing time: Tue 14 Jan 2025 07:24:56 +0000 ROA not before: Tue 14 Jan 2025 07:19:56 +0000 ROA not after: Tue 13 Jan 2026 07:24:56 +0000 asID: 58378 IP address blocks: 203.83.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:05:ff:61:a3:3a:46:0e:66:02:49:63:ff:39:e3:84:9d:c9:3f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Validity Not Before: Jan 14 07:19:56 2025 GMT Not After : Jan 13 07:24:56 2026 GMT Subject: CN=1311E2C67CE862C96FA2A929757338A90ABA2460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:ac:54:e7:7f:63:98:ce:21:c8:92:91:fb: 14:e0:72:d6:c8:bc:12:11:91:f1:e3:71:68:f5:2e: 81:2e:68:96:69:5b:45:fd:72:2a:8d:ed:f8:de:6f: d5:82:b4:4f:69:0e:95:8c:e2:41:d9:c9:e9:59:99: 37:2b:e1:d7:1d:ae:23:18:8e:ed:0e:8c:69:d1:61: 3e:6f:e8:e3:97:b2:8c:5c:18:bd:3d:96:1d:de:91: e0:f2:91:5b:8f:25:60:6c:54:75:67:54:e3:4d:82: 92:e8:f3:54:f9:2a:21:84:89:01:25:bb:2a:2f:79: 84:74:30:da:c7:9a:5b:de:4e:d4:a8:df:b3:32:a1: 3d:fa:b5:7a:fe:2b:33:d6:64:c5:35:ab:e8:5a:b9: e4:d9:4a:b1:a3:58:4d:10:90:db:7a:8b:1c:8e:28: 5f:aa:e1:f7:ef:76:4d:79:8b:68:6a:de:80:1b:65: cb:73:cd:5f:01:88:a9:89:d3:ab:45:96:eb:89:25: 82:06:78:0e:4b:b6:c4:43:9e:a3:b7:d3:a0:b5:05: dc:ee:e3:85:ec:b8:d2:40:96:e4:af:30:05:92:82: 36:86:69:42:fd:dd:cf:e5:44:f1:8c:fb:d5:12:66: f7:e5:bb:07:04:de:f0:86:6e:16:a0:3f:af:20:c3: b8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:11:E2:C6:7C:E8:62:C9:6F:A2:A9:29:75:73:38:A9:0A:BA:24:60 X509v3 Authority Key Identifier: keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32382e302f32332d3234203d3e203538333738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.83.28.0/23 Signature Algorithm: sha256WithRSAEncryption 85:ca:6f:30:08:5f:04:1d:e8:c5:cd:94:44:4f:83:f2:97:05: 24:b4:b6:fe:5d:54:f4:61:4b:84:41:99:f4:ff:56:19:69:75: 36:0b:94:f9:c3:8f:35:1c:51:61:eb:50:98:2e:23:bf:a0:93: f5:df:13:f0:6c:a0:b0:d9:b3:bb:e4:5d:e1:59:e8:8e:86:1c: 27:8a:24:2d:1f:b1:04:00:08:d0:4b:d7:9b:80:56:0c:e1:2b: ba:35:bf:ed:5d:11:0e:87:f7:6b:49:b4:c1:af:c9:ab:9e:fe: 79:f2:2e:61:d5:1e:ca:ea:f0:dc:c6:ff:a2:95:de:eb:13:00: 87:f8:f7:db:68:bc:71:c7:90:23:c6:32:33:da:b3:15:61:f1: 2b:e1:e6:c1:69:e3:a7:a3:57:1b:9f:68:20:38:71:f6:57:5c: 12:ce:41:26:f9:97:c1:21:85:83:72:42:37:51:6f:b3:49:e6: 3a:4e:f7:2a:ac:41:4c:84:4d:da:c8:3b:95:d5:97:95:ec:ce: db:6a:23:68:6e:4b:03:20:4c:32:59:65:10:a4:e6:bc:ae:cd: 46:9b:1c:dc:63:05:12:b0:e2:18:94:02:e4:d2:08:2f:39:d6: 80:bb:90:f2:49:53:09:36:f0:2f:ba:c3:2a:13:76:a6:dd:03: 7e:02:3f:7a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUHAX/YaM6Rg5mAklj/znjhJ3JP4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG MjhGODA2NjAeFw0yNTAxMTQwNzE5NTZaFw0yNjAxMTMwNzI0NTZaMDMxMTAvBgNV BAMTKDEzMTFFMkM2N0NFODYyQzk2RkEyQTkyOTc1NzMzOEE5MEFCQTI0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbKxU539jmM4hyJKR+xTgctbI vBIRkfHjcWj1LoEuaJZpW0X9ciqN7fjeb9WCtE9pDpWM4kHZyelZmTcr4dcdriMY ju0OjGnRYT5v6OOXsoxcGL09lh3ekeDykVuPJWBsVHVnVONNgpLo81T5KiGEiQEl uyoveYR0MNrHmlveTtSo37MyoT36tXr+KzPWZMU1q+haueTZSrGjWE0QkNt6ixyO KF+q4ffvdk15i2hq3oAbZctzzV8BiKmJ06tFluuJJYIGeA5LtsRDnqO306C1Bdzu 44XsuNJAluSvMAWSgjaGaUL93c/lRPGM+9USZvfluwcE3vCGbhagP68gw7hFAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUExHixnzoYslvoqkpdXM4qQq6JGAwHwYDVR0j BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1 MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG ODA2Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMzJlMzgzMzJlMzIzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDM1MzgzMzM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLUxwwDQYJKoZIhvcN AQELBQADggEBAIXKbzAIXwQd6MXNlERPg/KXBSS0tv5dVPRhS4RBmfT/VhlpdTYL lPnDjzUcUWHrUJguI7+gk/XfE/BsoLDZs7vkXeFZ6I6GHCeKJC0fsQQACNBL15uA VgzhK7o1v+1dEQ6H92tJtMGvyaue/nnyLmHVHsrq8NzG/6KV3usTAIf499tovHHH kCPGMjPasxVh8Svh5sFp46ejVxufaCA4cfZXXBLOQSb5l8EhhYNyQjdRb7NJ5jpO 9yqsQUyETdrIO5XVl5XszttqI2huSwMgTDJZZRCk5ryuzUabHNxjBRKw4hiUAuTS CC851oC7kPJJUwk28C+6wyoTdqbdA34CP3o= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net