$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa File: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (raw, json) Hash identifier: HtvdbgNzbep41tsSwxpJVENDrPCo93IVN9YGCXSL+Js= Subject key identifier: 15:A6:20:9A:08:2B:0E:B6:A8:4B:10:07:B0:19:B2:46:96:42:FC:BC Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 5CECA052ECAF72C956277DC2E82C69D4D685B941 Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa Signing time: Wed 09 Apr 2025 10:02:03 +0000 ROA not before: Wed 09 Apr 2025 09:57:03 +0000 ROA not after: Wed 08 Apr 2026 10:02:03 +0000 asID: 17995 IP address blocks: 103.158.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ec:a0:52:ec:af:72:c9:56:27:7d:c2:e8:2c:69:d4:d6:85:b9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Apr 9 09:57:03 2025 GMT Not After : Apr 8 10:02:03 2026 GMT Subject: CN=15A6209A082B0EB6A84B1007B019B2469642FCBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:6a:17:f8:21:ac:90:ce:63:fe:b0:f4:ed: dd:cf:ff:3d:01:4e:1f:91:90:cb:6a:1a:42:0b:e5: f0:b2:1a:d5:88:c9:c7:6f:9c:4b:69:38:6a:a4:cd: 47:86:76:5f:ea:71:59:62:30:ef:4a:5c:e8:d0:35: fa:f9:1a:94:66:c7:74:86:f2:c6:1c:c4:3d:db:66: ec:a5:1f:4f:8d:4a:22:54:4d:a9:28:ff:37:69:50: 14:72:35:c6:72:e3:dc:18:92:98:c6:87:40:53:ed: fb:74:9c:02:ad:5d:2a:c1:96:de:97:de:fe:5a:8a: 70:6b:60:81:dc:50:87:bf:25:69:9b:ff:57:8f:f4: 5f:6b:74:79:33:7d:be:8c:b9:0b:72:cb:cd:39:22: d7:ce:aa:a5:6f:7b:d0:10:3e:c1:90:fb:03:b0:98: 82:24:e8:ee:d1:0f:9b:4b:86:f1:1a:d2:83:c7:2f: 87:3d:71:99:08:7c:fe:5f:c4:ba:f6:9e:28:d8:a3: 70:b4:d5:ab:0b:5f:a9:29:03:42:3c:56:41:71:ee: 8a:3a:99:c1:73:5a:22:57:09:ee:61:35:3d:63:48: ab:8d:87:64:c5:be:c5:76:00:f1:6c:00:d2:21:bb: b1:b4:ab:6b:fe:ed:ee:05:48:fe:09:18:fd:e6:1b: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A6:20:9A:08:2B:0E:B6:A8:4B:10:07:B0:19:B2:46:96:42:FC:BC X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.162.0/23 Signature Algorithm: sha256WithRSAEncryption 33:cd:2b:e7:e4:e6:ef:33:78:c8:ff:00:b2:06:dd:86:d2:a6: aa:62:72:2a:18:5a:77:bc:6b:47:a3:45:d5:12:6a:01:0b:dd: 28:aa:8b:0f:3f:38:02:cf:92:96:fb:e4:61:ef:24:e4:56:73: 42:4f:ca:29:2f:d4:d0:f0:93:3a:99:d1:1f:39:35:20:59:44: 48:54:9c:bd:28:d2:83:70:d4:3d:bf:cd:03:cc:4e:06:34:96: 04:00:36:6f:6b:45:cc:89:2f:f6:60:46:49:a3:45:2f:14:af: 0c:06:a9:6c:5a:62:eb:97:e3:61:93:08:4e:27:dc:14:04:bf: bd:ea:4e:9d:d2:b5:b4:d7:82:b0:ce:02:09:d0:1a:6b:36:b9: be:35:3f:28:4e:e4:0a:89:ac:21:86:dc:d1:8e:e5:4a:bf:ef: 07:38:6a:10:e7:91:0c:18:cf:12:27:f8:6a:13:09:8c:cf:80: 27:22:be:2f:37:d1:18:2d:6d:60:f6:5c:0f:69:e7:64:54:eb: bf:eb:68:59:f8:80:32:f3:d9:18:67:a9:4f:69:73:31:a1:2f: f5:18:04:e1:e2:27:55:8c:e3:70:e4:98:ec:0c:70:9a:40:75: 1a:60:9e:5b:53:34:9e:e7:16:92:ed:ca:72:1b:b6:a3:a1:3b: 3a:a9:e3:08 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXOygUuyvcslWJ33C6Cxp1NaFuUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNTA0MDkwOTU3MDNaFw0yNjA0MDgxMDAyMDNaMDMxMTAvBgNV BAMTKDE1QTYyMDlBMDgyQjBFQjZBODRCMTAwN0IwMTlCMjQ2OTY0MkZDQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdWoX+CGskM5j/rD07d3P/z0B Th+RkMtqGkIL5fCyGtWIycdvnEtpOGqkzUeGdl/qcVliMO9KXOjQNfr5GpRmx3SG 8sYcxD3bZuylH0+NSiJUTako/zdpUBRyNcZy49wYkpjGh0BT7ft0nAKtXSrBlt6X 3v5ainBrYIHcUIe/JWmb/1eP9F9rdHkzfb6MuQtyy805ItfOqqVve9AQPsGQ+wOw mIIk6O7RD5tLhvEa0oPHL4c9cZkIfP5fxLr2nijYo3C01asLX6kpA0I8VkFx7oo6 mcFzWiJXCe5hNT1jSKuNh2TFvsV2APFsANIhu7G0q2v+7e4FSP4JGP3mG14HAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFaYgmggrDraoSxAHsBmyRpZC/LwwHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YzFjNTI5LTYyNDQtNDUwMy1h ZjU2LTY5NDU5ZTRhNzYwZi8wLzMxMzAzMzJlMzEzNTM4MmUzMTM2MzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ56iMA0GCSqG SIb3DQEBCwUAA4IBAQAzzSvn5ObvM3jI/wCyBt2G0qaqYnIqGFp3vGtHo0XVEmoB C90oqosPPzgCz5KW++Rh7yTkVnNCT8opL9TQ8JM6mdEfOTUgWURIVJy9KNKDcNQ9 v80DzE4GNJYEADZva0XMiS/2YEZJo0UvFK8MBqlsWmLrl+NhkwhOJ9wUBL+96k6d 0rW014KwzgIJ0BprNrm+NT8oTuQKiawhhtzRjuVKv+8HOGoQ55EMGM8SJ/hqEwmM z4AnIr4vN9EYLW1g9lwPaedkVOu/62hZ+IAy89kYZ6lPaXMxoS/1GATh4idVjONw 5JjsDHCaQHUaYJ5bUzSe5xaS7cpyG7ajoTs6qeMI -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:21 2025 by rpki-client on console.sobornost.net