$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35342e302f32342d3234203d3e20313431383932.roa File: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (raw, json) Hash identifier: Vo1kQIs1zoW5Jt8je7QhcYagX5zelAQNRLkr+gdh4UU= Subject key identifier: B3:0B:4F:21:75:85:73:AF:45:AA:DC:E5:A6:E6:03:D7:33:D2:EF:30 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 0891790363039D616603FD9DA73D8667C81851B2 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35342e302f32342d3234203d3e20313431383932.roa Signing time: Fri 07 Mar 2025 09:00:02 +0000 ROA not before: Fri 07 Mar 2025 08:55:02 +0000 ROA not after: Fri 06 Mar 2026 09:00:02 +0000 asID: 141892 IP address blocks: 157.66.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:91:79:03:63:03:9d:61:66:03:fd:9d:a7:3d:86:67:c8:18:51:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Mar 7 08:55:02 2025 GMT Not After : Mar 6 09:00:02 2026 GMT Subject: CN=B30B4F21758573AF45AADCE5A6E603D733D2EF30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:d0:19:07:81:be:21:6a:98:43:d8:c8:b9: 7c:16:3c:3c:f3:42:d3:3c:e7:f9:ab:1f:2e:2c:e9: 51:2c:1c:0d:17:3b:a6:49:7b:e6:42:98:b3:28:fe: 40:7e:f4:22:c8:d3:fd:1f:78:d4:d9:f5:51:8d:35: 41:65:f7:d6:58:ff:ef:a6:8c:e0:62:c1:3c:dc:19: cd:b7:1a:f0:f2:f6:aa:83:97:80:a1:7a:97:9f:cd: 07:36:2b:64:10:67:e7:37:10:f3:a2:38:42:f9:21: 01:24:40:c1:8a:ac:76:43:e1:3f:b4:3f:cb:e9:ed: 67:ba:d7:26:ee:9d:d6:6d:38:3b:25:dd:a2:58:74: e3:ae:49:d8:99:9c:60:b5:87:cc:c2:11:6c:b2:f8: 98:59:1f:f8:b3:0e:36:aa:da:6e:1b:64:2a:5e:98: 61:29:5b:df:c7:ee:2d:e7:8c:0d:db:d7:13:e2:d7: d7:33:05:60:ec:72:ba:48:16:39:d0:52:a2:c8:03: e7:4a:c7:85:86:0f:19:a5:9f:7f:68:e3:cd:66:d3: 99:3d:24:a2:97:9f:cd:38:1f:b2:3e:60:a5:67:e2: 3b:4e:2b:6f:4c:de:45:d4:c2:08:0e:26:2a:b1:74: fc:ce:8c:c8:6b:e2:07:a7:fd:9a:a4:15:cc:c5:22: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0B:4F:21:75:85:73:AF:45:AA:DC:E5:A6:E6:03:D7:33:D2:EF:30 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35342e302f32342d3234203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.54.0/24 Signature Algorithm: sha256WithRSAEncryption 01:fb:ba:6b:f8:db:41:b8:81:2a:3f:79:7e:39:b4:54:78:a7: 64:8b:6c:5e:fa:75:be:b1:bc:e6:f3:21:04:d3:79:b1:6c:06: 81:db:2e:02:0f:fd:bc:8a:a3:64:35:f0:5a:f0:58:fe:3b:40: 35:22:47:a9:f0:bf:42:7a:a7:86:a0:96:de:b8:90:47:df:0d: e2:e2:fa:34:10:c3:41:e5:1e:d4:f5:5c:a6:81:15:80:78:14: 08:7f:08:62:e7:32:b1:2b:21:d5:d8:b0:87:d5:96:24:7c:f5: 9d:cc:8d:23:68:e6:1e:73:38:80:0e:cf:43:b4:f5:a4:3e:f4: 33:75:85:3e:36:69:25:e0:1b:6d:4b:b2:03:e3:41:81:2b:89: 71:cd:47:a4:05:a8:2a:f9:bc:78:4d:66:bf:5a:4a:26:eb:27: 70:c4:a5:81:9b:8d:7e:9a:2d:e5:06:a3:4c:f4:3e:a8:2a:cc: 84:c5:32:78:99:60:1c:b2:c4:7e:b0:1a:86:bb:94:61:c6:4f: 7d:93:db:5d:51:04:92:d5:9f:66:b1:f6:fe:fe:24:ec:db:c0: b5:6c:e5:c1:dd:35:47:cd:d4:fe:55:ea:86:19:67:e4:60:40: e4:f1:b8:ff:fb:51:a8:3e:30:0b:1a:39:e7:a5:4a:48:9b:9a: ca:42:fd:a9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCJF5A2MDnWFmA/2dpz2GZ8gYUbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNTAzMDcwODU1MDJaFw0yNjAzMDYwOTAwMDJaMDMxMTAvBgNV BAMTKEIzMEI0RjIxNzU4NTczQUY0NUFBRENFNUE2RTYwM0Q3MzNEMkVGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsdAZB4G+IWqYQ9jIuXwWPDzz QtM85/mrHy4s6VEsHA0XO6ZJe+ZCmLMo/kB+9CLI0/0feNTZ9VGNNUFl99ZY/++m jOBiwTzcGc23GvDy9qqDl4ChepefzQc2K2QQZ+c3EPOiOEL5IQEkQMGKrHZD4T+0 P8vp7We61ybundZtODsl3aJYdOOuSdiZnGC1h8zCEWyy+JhZH/izDjaq2m4bZCpe mGEpW9/H7i3njA3b1xPi19czBWDscrpIFjnQUqLIA+dKx4WGDxmln39o481m05k9 JKKXn804H7I+YKVn4jtOK29M3kXUwggOJiqxdPzOjMhr4gen/ZqkFczFIlBtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUswtPIXWFc69FqtzlpuYD1zPS7zAwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y4ZGMwODQ5LTgzZmItNGNjOC04 YzIxLWJlNmNhN2EyZWQ4My8wLzMxMzUzNzJlMzYzNjJlMzUzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CNjANBgkqhkiG 9w0BAQsFAAOCAQEAAfu6a/jbQbiBKj95fjm0VHinZItsXvp1vrG85vMhBNN5sWwG gdsuAg/9vIqjZDXwWvBY/jtANSJHqfC/QnqnhqCW3riQR98N4uL6NBDDQeUe1PVc poEVgHgUCH8IYucysSsh1diwh9WWJHz1ncyNI2jmHnM4gA7PQ7T1pD70M3WFPjZp JeAbbUuyA+NBgSuJcc1HpAWoKvm8eE1mv1pKJusncMSlgZuNfpot5QajTPQ+qCrM hMUyeJlgHLLEfrAahruUYcZPfZPbXVEEktWfZrH2/v4k7NvAtWzlwd01R83U/lXq hhln5GBA5PG4//tRqD4wCxo556VKSJuaykL9qQ== -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:25 2025 by rpki-client on console.sobornost.net