$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa File: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (raw, json) Hash identifier: GVGKM4eV+MMT2LsZ6I2vKHLbSn/15kKEM082mCeNaT8= Subject key identifier: 5E:D8:B3:98:3A:27:E5:4A:16:12:B9:E5:41:54:6C:45:85:96:CD:2C Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Certificate serial: 57DF24B36017032AF5862003774074E0C431E6AC Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa Signing time: Mon 31 Mar 2025 13:00:01 +0000 ROA not before: Mon 31 Mar 2025 12:55:01 +0000 ROA not after: Mon 30 Mar 2026 13:00:01 +0000 asID: 141673 IP address blocks: 103.163.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:df:24:b3:60:17:03:2a:f5:86:20:03:77:40:74:e0:c4:31:e6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Validity Not Before: Mar 31 12:55:01 2025 GMT Not After : Mar 30 13:00:01 2026 GMT Subject: CN=5ED8B3983A27E54A1612B9E541546C458596CD2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:7e:e9:b1:85:23:16:ab:44:ca:12:e7:e6: de:42:0f:75:c4:2a:b6:78:82:d1:a7:f2:67:e8:7f: 00:f3:6d:ae:f5:f8:e3:3e:6f:69:4b:53:a5:9e:0c: aa:f7:a8:4d:be:a4:aa:bb:bc:18:3a:fc:8e:9b:b4: f8:36:27:27:ea:bb:21:d1:eb:68:ef:8e:82:12:15: 4d:78:0c:56:1c:9c:6a:85:ef:f4:5b:74:12:49:8e: 48:a4:82:d9:7c:df:eb:02:60:0d:61:d0:23:a3:13: 7a:1a:36:dd:77:0f:db:b1:e7:52:57:49:23:c4:98: e7:fc:56:59:fb:0e:c5:77:23:25:10:6a:51:44:de: 60:e7:aa:da:9f:3f:73:d9:eb:19:e4:25:70:89:53: 54:30:ce:9c:12:8f:77:38:c4:5d:80:52:89:24:ae: 22:e7:3c:af:d9:91:b6:1e:7d:ce:b4:df:ef:79:77: 55:19:07:bb:4c:9c:19:1a:88:00:78:4d:69:04:24: c1:dd:62:c7:8b:63:8d:d4:bb:1b:89:f1:f2:dd:13: d4:c2:86:f5:17:ad:2e:91:05:4f:b1:77:80:86:d1: bb:13:51:36:ff:df:b2:87:71:10:bd:a5:ba:48:c5: 61:7d:64:4b:fd:5d:2d:24:80:6c:b4:f8:cc:82:a5: 16:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D8:B3:98:3A:27:E5:4A:16:12:B9:E5:41:54:6C:45:85:96:CD:2C X509v3 Authority Key Identifier: keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.102.0/23 Signature Algorithm: sha256WithRSAEncryption 84:7f:53:58:72:7b:59:3f:e3:25:78:b8:4e:35:54:79:b6:70: da:d8:b6:b2:ec:a7:77:ce:cf:c2:47:65:0c:2e:1d:0c:6b:c9: 80:89:4d:3b:02:6e:3b:49:ce:90:ff:4b:26:3d:42:2d:6a:71: ca:4a:1d:cd:b2:60:3b:55:db:78:44:57:b5:cf:0c:a2:5b:33: e5:13:f7:b7:30:14:5d:cd:4d:05:7f:d9:92:ae:70:e5:f1:1f: 17:8a:25:84:3c:6a:81:1e:3c:24:28:d1:d8:c6:6a:ca:61:03: 35:77:1c:34:a0:95:d9:ab:d4:e5:30:bc:28:06:0f:f4:12:62: 42:da:2a:4b:78:73:6d:fa:97:bf:71:29:3f:c6:49:ed:0a:ef: 81:33:0a:d3:68:12:36:d6:44:ac:37:8f:e8:c6:d1:81:8c:6e: a0:4a:27:18:70:d3:a5:b6:77:d5:ed:d9:06:7d:a3:ad:ca:16: f9:1f:11:07:90:15:1c:f0:91:13:26:fb:50:6b:51:0e:09:9d: a0:bd:7d:30:b8:62:7a:5a:26:20:3d:e3:a0:cb:ad:c8:64:16: 4c:31:5a:ac:87:c2:2d:08:6a:01:f6:ea:69:4e:c9:43:9e:1d: 05:69:1f:56:1a:62:c8:14:03:f7:29:a0:fb:66:c8:95:ec:96: 7e:2f:9b:90 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUV98ks2AXAyr1hiADd0B04MQx5qwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx RUY0MTJFMDAeFw0yNTAzMzExMjU1MDFaFw0yNjAzMzAxMzAwMDFaMDMxMTAvBgNV BAMTKDVFRDhCMzk4M0EyN0U1NEExNjEyQjlFNTQxNTQ2QzQ1ODU5NkNEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx537psYUjFqtEyhLn5t5CD3XE KrZ4gtGn8mfofwDzba71+OM+b2lLU6WeDKr3qE2+pKq7vBg6/I6btPg2JyfquyHR 62jvjoISFU14DFYcnGqF7/RbdBJJjkikgtl83+sCYA1h0COjE3oaNt13D9ux51JX SSPEmOf8Vln7DsV3IyUQalFE3mDnqtqfP3PZ6xnkJXCJU1QwzpwSj3c4xF2AUokk riLnPK/ZkbYefc603+95d1UZB7tMnBkaiAB4TWkEJMHdYseLY43UuxuJ8fLdE9TC hvUXrS6RBU+xd4CG0bsTUTb/37KHcRC9pbpIxWF9ZEv9XS0kgGy0+MyCpRaxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUXtizmDon5UoWErnlQVRsRYWWzSwwHwYDVR0j BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4 Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0 MTJFMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMWU0OWFiLTUwY2EtNGIzZS04 MjNjLThiM2QzMWJhODVmMi8wLzMxMzAzMzJlMzEzNjMzMmUzMTMwMzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFno2YwDQYJ KoZIhvcNAQELBQADggEBAIR/U1hye1k/4yV4uE41VHm2cNrYtrLsp3fOz8JHZQwu HQxryYCJTTsCbjtJzpD/SyY9Qi1qccpKHc2yYDtV23hEV7XPDKJbM+UT97cwFF3N TQV/2ZKucOXxHxeKJYQ8aoEePCQo0djGasphAzV3HDSgldmr1OUwvCgGD/QSYkLa Kkt4c236l79xKT/GSe0K74EzCtNoEjbWRKw3j+jG0YGMbqBKJxhw06W2d9Xt2QZ9 o63KFvkfEQeQFRzwkRMm+1BrUQ4JnaC9fTC4YnpaJiA946DLrchkFkwxWqyHwi0I agH26mlOyUOeHQVpH1YaYsgUA/cpoPtmyJXsln4vm5A= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net