$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa File: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (raw, json) Hash identifier: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE= Subject key identifier: FF:63:41:DB:6A:5F:92:38:BA:4B:79:BE:23:75:54:D8:7C:2C:D6:EE Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 4DE928AAE71EA6C897D421BCA685AF8EEB634BD5 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa Signing time: Thu 12 Dec 2024 06:25:11 +0000 ROA not before: Thu 12 Dec 2024 06:20:11 +0000 ROA not after: Thu 11 Dec 2025 06:25:11 +0000 asID: 9312 IP address blocks: 45.124.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 00:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e9:28:aa:e7:1e:a6:c8:97:d4:21:bc:a6:85:af:8e:eb:63:4b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Dec 12 06:20:11 2024 GMT Not After : Dec 11 06:25:11 2025 GMT Subject: CN=FF6341DB6A5F9238BA4B79BE237554D87C2CD6EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:7e:dc:80:7e:74:01:87:c3:6f:be:d0:3c: 61:88:d7:d0:c1:fb:11:67:65:19:34:1c:09:36:91: cd:15:94:63:6b:9e:10:cf:af:82:07:f3:a9:4c:36: 0d:d0:1e:94:4e:7e:cb:80:e0:86:2c:ae:6e:51:1b: 44:b8:08:94:38:a4:76:cf:2c:1d:ef:59:71:59:69: cc:c7:22:a9:32:1e:c1:f0:45:4e:d2:6f:34:4b:b3: e8:0d:50:63:3b:84:d0:1f:bb:8f:78:16:cb:30:b3: 4a:b0:8c:d1:70:14:cf:32:4f:45:41:67:26:a3:03: 79:4b:61:e6:70:a7:f2:3c:9d:b5:22:82:fb:bf:1f: 3d:0d:64:50:3e:df:60:7f:57:4b:a1:47:00:f0:0b: 49:dc:50:9e:7e:43:06:a3:32:60:a0:77:cb:0f:ef: f4:8b:41:f8:92:e0:be:ac:73:0a:5d:7b:8d:be:b0: fd:3c:a3:ac:ae:5b:79:7f:7e:6e:31:10:a2:b9:ce: 7b:cb:7b:cb:82:23:6d:1a:82:f1:bb:4f:cc:e0:3d: 66:be:7b:b4:b4:a2:b8:6f:65:d5:81:d6:84:90:b1: 03:f0:a1:55:b3:30:f8:e6:06:0b:62:ed:98:ff:17: 62:bd:cb:c9:6e:ca:60:de:28:1e:9d:41:4e:51:2e: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:63:41:DB:6A:5F:92:38:BA:4B:79:BE:23:75:54:D8:7C:2C:D6:EE X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.124.112.0/22 Signature Algorithm: sha256WithRSAEncryption 78:6a:70:69:68:82:21:dc:4d:6f:99:01:bc:4a:99:f2:bd:72: 75:83:f7:32:ef:97:16:57:34:f8:9b:e1:7a:77:de:b1:45:72: 80:06:dc:3b:c5:da:3d:21:38:70:5d:24:75:49:7e:4f:4e:72: e2:f6:b8:11:6f:e5:dd:da:a1:56:8c:bd:4e:ed:57:58:77:4d: 99:53:20:98:f8:de:a4:27:db:86:d7:08:00:ec:2d:bc:4e:d3: 36:de:56:82:d6:c4:0b:be:40:c5:a6:47:13:23:a4:d1:2b:8e: 91:1e:d7:3c:44:dc:de:06:6d:da:91:bd:af:6b:f0:54:bc:36: 6b:a1:79:17:92:f7:ef:b9:c4:1e:46:95:cd:dc:ea:af:24:ba: b8:fb:ef:07:d6:5f:ab:aa:e1:41:dd:ad:17:60:86:03:cc:e2: 7f:26:49:e2:ec:d9:f3:e8:f6:10:a3:36:44:e6:5e:38:a7:72: a5:1d:1a:b7:c0:dd:15:7f:fb:4c:a5:47:96:9d:2c:b4:6e:b5: 9f:68:0d:80:d6:91:82:c5:0d:a9:0f:93:7a:e4:1b:83:7c:96: ef:f6:e3:23:b3:cf:d4:f1:22:dc:ae:6a:a3:5e:3c:8f:ba:45: cf:cb:e8:49:32:83:e5:c3:37:f8:27:8d:bc:03:78:9a:2d:d7: b8:25:31:41 -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUTekoqucepsiX1CG8poWvjutjS9UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI0MTIxMjA2MjAxMVoX DTI1MTIxMTA2MjUxMVowMzExMC8GA1UEAxMoRkY2MzQxREI2QTVGOTIzOEJBNEI3 OUJFMjM3NTU0RDg3QzJDRDZFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQPftyAfnQBh8NvvtA8YYjX0MH7EWdlGTQcCTaRzRWUY2ueEM+vggfzqUw2 DdAelE5+y4DghiyublEbRLgIlDikds8sHe9ZcVlpzMciqTIewfBFTtJvNEuz6A1Q YzuE0B+7j3gWyzCzSrCM0XAUzzJPRUFnJqMDeUth5nCn8jydtSKC+78fPQ1kUD7f YH9XS6FHAPALSdxQnn5DBqMyYKB3yw/v9ItB+JLgvqxzCl17jb6w/TyjrK5beX9+ bjEQornOe8t7y4IjbRqC8btPzOA9Zr57tLSiuG9l1YHWhJCxA/ChVbMw+OYGC2Lt mP8XYr3LyW7KYN4oHp1BTlEuYzkCAwEAAaOCAegwggHkMB0GA1UdDgQWBBT/Y0Hb al+SOLpLeb4jdVTYfCzW7jAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzQzNTJlMzEzMjM0MmUzMTMxMzIyZTMwMmYzMjMy MmQzMjM0MjAzZDNlMjAzOTMzMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi18cDANBgkqhkiG9w0B AQsFAAOCAQEAeGpwaWiCIdxNb5kBvEqZ8r1ydYP3Mu+XFlc0+JvhenfesUVygAbc O8XaPSE4cF0kdUl+T05y4va4EW/l3dqhVoy9Tu1XWHdNmVMgmPjepCfbhtcIAOwt vE7TNt5WgtbEC75AxaZHEyOk0SuOkR7XPETc3gZt2pG9r2vwVLw2a6F5F5L377nE HkaVzdzqryS6uPvvB9Zfq6rhQd2tF2CGA8zifyZJ4uzZ8+j2EKM2ROZeOKdypR0a t8DdFX/7TKVHlp0stG61n2gNgNaRgsUNqQ+TeuQbg3yW7/bjI7PP1PEi3K5qo148 j7pFz8voSTKD5cM3+CeNvAN4mi3XuCUxQQ== -----END CERTIFICATE-----Generated at Sat Apr 26 06:22:59 2025 by rpki-client on console.sobornost.net