$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa File: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (raw, json) Hash identifier: Yq8Q6JYOVHESjvKiauFlSKUKL9dSlIZbiu5ayrjEea4= Subject key identifier: B6:62:1A:24:88:E2:CA:9D:D2:9D:31:27:D4:FE:C3:34:D7:10:0B:1D Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 26587098DB9A3D52B997279A43F651F1E40A6E4F Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa Signing time: Fri 13 Dec 2024 16:22:27 +0000 ROA not before: Fri 13 Dec 2024 16:17:27 +0000 ROA not after: Fri 12 Dec 2025 16:22:27 +0000 asID: 153073 IP address blocks: 160.25.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:58:70:98:db:9a:3d:52:b9:97:27:9a:43:f6:51:f1:e4:0a:6e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Dec 13 16:17:27 2024 GMT Not After : Dec 12 16:22:27 2025 GMT Subject: CN=B6621A2488E2CA9DD29D3127D4FEC334D7100B1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:62:83:0d:46:d6:75:4c:80:da:3c:a3:a9: 67:04:89:cd:c1:1d:09:73:f4:a5:06:ed:12:c9:b2: e0:10:96:09:61:d8:77:e8:cf:6f:33:1b:9f:97:ff: 9b:26:15:3b:f8:e0:e8:b1:37:86:06:c4:24:f1:b6: 47:08:ab:00:e4:33:04:b0:1b:54:88:3c:df:e4:6c: 10:91:38:45:23:64:e4:84:14:ee:9e:d4:ae:3d:cc: 9a:6c:67:c5:39:8d:6f:db:37:dd:f0:dc:81:34:24: ff:17:2b:69:ee:17:c4:f6:1a:a0:5e:3d:ef:01:68: d9:01:c9:3f:1c:fd:d5:7c:75:07:18:96:98:c5:8c: ce:96:e8:6f:20:9d:a9:50:0c:60:95:a4:3e:f0:31: f6:4c:d2:03:52:b4:f5:d7:0b:b2:2b:64:c7:ef:3d: 06:0b:24:fd:40:e2:f9:35:44:10:5c:be:e0:ad:75: 8e:29:8c:cf:32:a2:b0:d9:81:20:71:9f:fa:8c:87: e1:18:a7:e8:1e:2a:3e:45:8f:74:72:33:aa:f4:27: 32:55:18:e8:cf:2c:81:ac:dd:68:65:e4:f3:7d:a5: b2:15:6f:55:dd:22:d0:3f:e0:c0:3b:f2:fb:4e:d8: 17:cd:e0:67:eb:26:4c:50:7b:59:ac:52:b0:32:f8: 3b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:62:1A:24:88:E2:CA:9D:D2:9D:31:27:D4:FE:C3:34:D7:10:0B:1D X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.175.0/24 Signature Algorithm: sha256WithRSAEncryption 93:97:80:0b:49:e6:16:ce:0d:b8:15:c3:6c:f5:eb:46:41:09: 5f:83:c8:3b:67:f4:c6:02:bf:9c:e9:6e:81:79:ba:9f:b1:3f: f3:8d:0e:69:9f:31:75:cb:b0:af:b7:7e:2b:63:ef:9c:60:1c: 13:21:db:8b:09:04:33:cf:cb:a8:94:28:ec:15:74:52:69:44: bc:ff:dd:f2:84:69:27:58:ab:47:04:70:c3:45:69:79:15:d5: f6:3e:96:06:88:43:5c:f7:2b:d2:4a:be:25:13:7d:87:3a:cb: 75:9a:40:43:98:b4:de:65:08:4f:dc:b5:67:b8:26:96:1c:6a: f7:de:fa:8f:58:9a:97:a6:e6:7e:d0:8f:a2:9c:b0:b5:7a:2b: c1:63:ba:39:c4:b0:81:3b:f7:5f:1f:0d:b8:b0:fa:53:a1:92: 20:da:ea:3c:13:1b:03:fa:97:db:87:03:27:6c:4f:ac:0c:95: d0:6c:85:fc:b6:cd:ef:f9:2b:56:66:0e:93:ad:36:e6:6b:aa: 33:95:24:80:2a:cb:73:62:21:cf:58:83:75:d2:46:d3:b0:cb: 28:3a:e8:ab:72:b7:8e:b7:30:8f:60:6d:9a:5e:86:5e:07:45: b7:86:11:1a:4a:69:3f:2f:e7:71:cf:52:68:dd:d8:77:92:62: d3:8a:9a:cb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJlhwmNuaPVK5lyeaQ/ZR8eQKbk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNDEyMTMxNjE3MjdaFw0yNTEyMTIxNjIyMjdaMDMxMTAvBgNV BAMTKEI2NjIxQTI0ODhFMkNBOUREMjlEMzEyN0Q0RkVDMzM0RDcxMDBCMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQmKDDUbWdUyA2jyjqWcEic3B HQlz9KUG7RLJsuAQlglh2Hfoz28zG5+X/5smFTv44OixN4YGxCTxtkcIqwDkMwSw G1SIPN/kbBCROEUjZOSEFO6e1K49zJpsZ8U5jW/bN93w3IE0JP8XK2nuF8T2GqBe Pe8BaNkByT8c/dV8dQcYlpjFjM6W6G8gnalQDGCVpD7wMfZM0gNStPXXC7IrZMfv PQYLJP1A4vk1RBBcvuCtdY4pjM8yorDZgSBxn/qMh+EYp+geKj5Fj3RyM6r0JzJV GOjPLIGs3Whl5PN9pbIVb1XdItA/4MA78vtO2BfN4GfrJkxQe1msUrAy+Ds7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtmIaJIjiyp3SnTEn1P7DNNcQCx0wHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjNzJlZTNjLWUxODAtNDI5Ni05 ZGFkLTk1MDBlZmQ5NDg5MC8wLzMxMzYzMDJlMzIzNTJlMzEzNzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBmvMA0GCSqG SIb3DQEBCwUAA4IBAQCTl4ALSeYWzg24FcNs9etGQQlfg8g7Z/TGAr+c6W6Bebqf sT/zjQ5pnzF1y7Cvt34rY++cYBwTIduLCQQzz8uolCjsFXRSaUS8/93yhGknWKtH BHDDRWl5FdX2PpYGiENc9yvSSr4lE32HOst1mkBDmLTeZQhP3LVnuCaWHGr33vqP WJqXpuZ+0I+inLC1eivBY7o5xLCBO/dfHw24sPpToZIg2uo8ExsD+pfbhwMnbE+s DJXQbIX8ts3v+StWZg6TrTbma6ozlSSAKstzYiHPWIN10kbTsMsoOuircreOtzCP YG2aXoZeB0W3hhEaSmk/L+dxz1Jo3dh3kmLTiprL -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net