$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa File: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (raw, json) Hash identifier: pfMM3/ygiEY34vdGoVOYeg8tWN4ZaCnJmX0NJOGEX00= Subject key identifier: 2C:97:78:86:79:3D:D2:10:25:7C:6A:6A:6A:3D:55:5E:31:28:06:31 Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB Certificate serial: 5653CFCE1C2DF91FB996EE5CD4EA6B44345176FF Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa Signing time: Tue 04 Mar 2025 06:00:58 +0000 ROA not before: Tue 04 Mar 2025 05:55:58 +0000 ROA not after: Tue 03 Mar 2026 06:00:58 +0000 asID: 136841 IP address blocks: 103.100.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:53:cf:ce:1c:2d:f9:1f:b9:96:ee:5c:d4:ea:6b:44:34:51:76:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB Validity Not Before: Mar 4 05:55:58 2025 GMT Not After : Mar 3 06:00:58 2026 GMT Subject: CN=2C977886793DD210257C6A6A6A3D555E31280631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:f6:22:01:69:c2:af:20:a2:7a:c9:05:ea: 37:47:54:23:50:5e:bc:90:29:0f:0c:2f:a0:80:7f: 73:06:79:e2:1a:a8:7e:41:cd:62:36:2f:98:4d:8e: c2:c1:e7:4e:65:27:5c:89:b2:aa:8e:31:17:5f:9b: e1:e8:9b:0f:a9:b0:e6:b3:b6:fa:3b:96:c3:cc:c8: 78:3f:74:2d:fe:d9:b3:d6:3b:59:e1:f8:fe:a5:da: b5:c2:36:18:57:5a:6f:bb:69:f0:6a:e1:3c:b1:38: ac:0e:95:ba:7e:5e:a7:0b:86:e1:0e:a8:08:29:a2: 25:42:20:5e:3f:55:5e:f9:b7:58:af:07:33:c8:68: fe:51:1a:b3:16:66:07:dd:e7:17:e0:45:22:34:3a: f4:0d:ee:04:64:f4:18:f8:f3:cf:50:1a:1f:d1:60: f3:48:b3:d3:d7:b5:73:9e:fe:bb:15:1a:a9:8c:53: d6:8a:98:e2:c1:22:92:95:be:50:b8:12:4e:e6:fc: d8:eb:8c:45:ee:35:5d:31:86:75:a4:c3:88:46:d8: a0:92:de:1d:6f:c7:58:c2:6e:e3:9f:eb:3c:d5:e6: d5:1e:9b:6c:2c:a2:64:2b:d5:35:97:6d:16:c3:33: ed:d1:67:2a:83:29:f7:5a:02:3c:f4:66:b4:72:d4: 20:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:97:78:86:79:3D:D2:10:25:7C:6A:6A:6A:3D:55:5E:31:28:06:31 X509v3 Authority Key Identifier: keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.174.0/24 Signature Algorithm: sha256WithRSAEncryption 17:70:9f:8d:a1:b0:29:43:95:ca:0a:42:6d:1e:4a:3a:05:87: 3a:a0:00:81:68:b3:87:0f:88:fc:a5:c8:62:00:ba:20:6d:81: c9:ac:09:0f:33:3a:79:59:c0:df:a2:b1:fe:1c:cf:1d:4c:dc: 5b:13:56:5c:ea:d7:d4:4d:b5:ae:9d:94:34:ce:e1:1c:88:3f: 06:82:84:d6:47:6b:81:d1:e3:24:96:71:0c:4f:97:6c:01:8e: 6d:f7:fd:17:ea:3d:72:13:8e:49:5d:9b:0c:6a:84:a1:5d:79: 5a:48:fb:89:7c:5e:05:df:1a:d9:59:33:18:4b:7f:ca:72:03: ac:6b:98:22:0f:51:b6:ba:85:3e:f4:08:9a:6a:7c:e2:af:d9: 8c:7a:b5:23:5a:50:14:28:5b:f8:7a:10:1e:03:88:d1:06:c5: 35:ef:8a:e2:c3:63:79:b7:9c:21:d0:89:19:b3:cb:a5:37:f5: 12:55:45:0b:10:01:c3:b9:a1:fa:39:f5:23:0d:51:83:56:d6: 4f:c9:a2:86:dc:8d:bc:d6:b1:35:5d:d9:13:15:c6:0d:55:6f: 80:37:3b:a0:d2:c6:43:c9:d5:a2:d1:33:e9:3c:ff:62:65:6e: ec:eb:6e:e1:c0:c5:3e:62:79:c5:2b:e6:4d:bc:9c:f7:67:19: 1b:0e:46:94 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUVlPPzhwt+R+5lu5c1OprRDRRdv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYz RTk2MkNBQjAeFw0yNTAzMDQwNTU1NThaFw0yNjAzMDMwNjAwNThaMDMxMTAvBgNV BAMTKDJDOTc3ODg2NzkzREQyMTAyNTdDNkE2QTZBM0Q1NTVFMzEyODA2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1GPYiAWnCryCieskF6jdHVCNQ XryQKQ8ML6CAf3MGeeIaqH5BzWI2L5hNjsLB505lJ1yJsqqOMRdfm+Homw+psOaz tvo7lsPMyHg/dC3+2bPWO1nh+P6l2rXCNhhXWm+7afBq4TyxOKwOlbp+XqcLhuEO qAgpoiVCIF4/VV75t1ivBzPIaP5RGrMWZgfd5xfgRSI0OvQN7gRk9Bj4889QGh/R YPNIs9PXtXOe/rsVGqmMU9aKmOLBIpKVvlC4Ek7m/NjrjEXuNV0xhnWkw4hG2KCS 3h1vx1jCbuOf6zzV5tUem2wsomQr1TWXbRbDM+3RZyqDKfdaAjz0ZrRy1CCNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQULJd4hnk90hAlfGpqaj1VXjEoBjEwHwYDVR0j BBgwFoAUZFydRFsnlmYu6YoD5QwSTz6WLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzMwNGI4My0zMGFhLTRiYmYtOWZkNy0yZmNlYWRiZjAwMzAvMC82NDVDOUQ0NDVC Mjc5NjY2MkVFOThBMDNFNTBDMTI0RjNFOTYyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYzRTk2 MkNBQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMxMzAzMzJlMzEzMDMwMmUzMTM3MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZK4wDQYJ KoZIhvcNAQELBQADggEBABdwn42hsClDlcoKQm0eSjoFhzqgAIFos4cPiPylyGIA uiBtgcmsCQ8zOnlZwN+isf4czx1M3FsTVlzq19RNta6dlDTO4RyIPwaChNZHa4HR 4ySWcQxPl2wBjm33/RfqPXITjkldmwxqhKFdeVpI+4l8XgXfGtlZMxhLf8pyA6xr mCIPUba6hT70CJpqfOKv2Yx6tSNaUBQoW/h6EB4DiNEGxTXviuLDY3m3nCHQiRmz y6U39RJVRQsQAcO5ofo59SMNUYNW1k/JoobcjbzWsTVd2RMVxg1Vb4A3O6DSxkPJ 1aLRM+k8/2JlbuzrbuHAxT5iecUr5k28nPdnGRsORpQ= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:05 2025 by rpki-client on console.sobornost.net