$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa File: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (raw, json) Hash identifier: XbN3LxifTwY+vVTUMpMOqOr29jBN2u/bmUS0N8LyhH0= Subject key identifier: EB:DA:95:CD:70:C3:9F:1C:49:FE:79:E1:8D:6D:94:79:74:47:65:C6 Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 570A8899E3D101193E02E4BAC2856A57FEB04B16 Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa Signing time: Wed 04 Dec 2024 15:00:00 +0000 ROA not before: Wed 04 Dec 2024 14:55:00 +0000 ROA not after: Wed 03 Dec 2025 15:00:00 +0000 asID: 149949 IP address blocks: 103.187.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 06:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0a:88:99:e3:d1:01:19:3e:02:e4:ba:c2:85:6a:57:fe:b0:4b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Dec 4 14:55:00 2024 GMT Not After : Dec 3 15:00:00 2025 GMT Subject: CN=EBDA95CD70C39F1C49FE79E18D6D9479744765C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:16:ec:97:9d:cb:ce:62:1c:a2:e0:85:81:d7: 9b:dc:28:20:48:d0:e3:39:28:3e:f7:6f:a7:ab:32: f7:55:29:92:81:d9:a3:e3:52:0e:7d:d8:e9:fa:88: 0f:81:c6:36:d7:56:d3:1f:a3:8c:b6:95:af:7e:83: 98:91:25:0a:f4:33:0a:02:f6:7f:91:19:bc:f1:87: ae:ed:e5:97:b1:ba:eb:4f:70:f2:36:13:76:50:55: b1:17:0c:b6:cf:3e:96:21:66:a4:f6:42:33:7b:36: e6:be:86:e6:45:9c:3a:42:1d:81:1b:ca:a3:33:d2: 48:bf:a2:a2:56:17:d3:71:f5:6f:ea:02:10:67:19: 82:af:7f:c3:18:d6:4b:2f:d9:2a:0e:8c:21:63:a0: c7:3b:b0:6d:1a:9a:ec:53:a8:be:9b:29:34:87:b7: 26:3d:0f:3f:df:92:2c:e2:ff:1a:8b:50:c8:24:24: c4:89:68:6c:18:6a:8a:05:07:6d:0d:9f:c2:e1:51: f2:67:7f:37:26:b3:37:1e:af:c2:7c:8a:44:64:d5: 52:2a:18:91:40:15:57:60:e8:e8:15:bc:aa:6a:70: ed:3a:40:2e:b4:ad:b0:44:75:7c:05:81:ce:d7:48: 12:c8:0c:cb:e0:c8:13:4b:40:0b:a7:c0:0b:d4:9d: 1a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DA:95:CD:70:C3:9F:1C:49:FE:79:E1:8D:6D:94:79:74:47:65:C6 X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.88.0/23 Signature Algorithm: sha256WithRSAEncryption 47:5d:95:14:36:98:28:80:81:95:ef:91:32:46:8e:59:9f:3c: 84:b7:37:bc:5f:b7:00:7c:8a:46:c2:93:20:27:94:21:6b:93: fc:49:49:67:90:48:18:3c:23:c4:7f:84:c4:c8:7c:28:b7:a7: e6:34:58:d6:c0:ba:d9:54:0a:81:5f:ba:6f:ab:bb:30:11:85: f5:03:ec:55:60:8e:4c:70:f9:a4:e4:e3:3f:ac:21:34:10:5f: 2f:69:48:70:d9:2b:e6:71:51:e6:38:06:cc:5b:11:ad:c8:b6: b0:a3:62:1c:7a:fc:72:d5:9b:38:3c:b0:34:63:89:9f:fc:66: d2:9e:29:95:e1:40:f7:6c:56:24:02:58:d5:87:f9:70:72:b3: 04:e8:2d:88:aa:63:86:7a:b5:a6:8a:f1:ce:26:14:aa:ce:fb: c0:ea:90:20:a7:85:f6:b5:70:db:f3:01:09:f5:48:0a:88:10: 27:bf:3d:50:9e:78:93:b2:b5:14:f6:57:43:ca:94:fd:6e:42: 90:78:bd:55:69:6a:23:65:b9:7f:e3:9d:3f:41:a8:09:26:46: 97:8b:61:52:5a:dd:0f:f0:12:0d:6f:d6:31:97:99:fe:c3:8e: 09:84:fb:8a:bc:9f:bc:d5:ba:b1:39:2f:c1:09:0c:5d:f8:b1: 57:f0:69:5c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVwqImePRARk+AuS6woVqV/6wSxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNDEyMDQxNDU1MDBaFw0yNTEyMDMxNTAwMDBaMDMxMTAvBgNV BAMTKEVCREE5NUNENzBDMzlGMUM0OUZFNzlFMThENkQ5NDc5NzQ0NzY1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYFuyXncvOYhyi4IWB15vcKCBI 0OM5KD73b6erMvdVKZKB2aPjUg592On6iA+BxjbXVtMfo4y2la9+g5iRJQr0MwoC 9n+RGbzxh67t5ZexuutPcPI2E3ZQVbEXDLbPPpYhZqT2QjN7Nua+huZFnDpCHYEb yqMz0ki/oqJWF9Nx9W/qAhBnGYKvf8MY1ksv2SoOjCFjoMc7sG0amuxTqL6bKTSH tyY9Dz/fkizi/xqLUMgkJMSJaGwYaooFB20Nn8LhUfJnfzcmszcer8J8ikRk1VIq GJFAFVdg6OgVvKpqcO06QC60rbBEdXwFgc7XSBLIDMvgyBNLQAunwAvUnRrnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU69qVzXDDnxxJ/nnhjW2UeXRHZcYwHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NTBmMGY1LWI4ODMtNGIyNC05 NzkyLTdlOTU3YWY4OGJmOC8wLzMxMzAzMzJlMzEzODM3MmUzODM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7tYMA0GCSqG SIb3DQEBCwUAA4IBAQBHXZUUNpgogIGV75EyRo5ZnzyEtze8X7cAfIpGwpMgJ5Qh a5P8SUlnkEgYPCPEf4TEyHwot6fmNFjWwLrZVAqBX7pvq7swEYX1A+xVYI5McPmk 5OM/rCE0EF8vaUhw2SvmcVHmOAbMWxGtyLawo2Icevxy1Zs4PLA0Y4mf/GbSnimV 4UD3bFYkAljVh/lwcrME6C2IqmOGerWmivHOJhSqzvvA6pAgp4X2tXDb8wEJ9UgK iBAnvz1QnniTsrUU9ldDypT9bkKQeL1VaWojZbl/450/QagJJkaXi2FSWt0P8BIN b9Yxl5n+w44JhPuKvJ+81bqxOS/BCQxd+LFX8Glc -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:49 2025 by rpki-client on console.sobornost.net