$ rpki-client -vvf repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa File: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (raw, json) Hash identifier: iXlr6ynCJTWhRXgxuJ3jQPCoK8YD+Mi69YQAcWlh+5g= Subject key identifier: 98:07:DE:08:80:DE:B7:09:F2:BB:38:3C:B5:0B:30:A4:6E:5A:D7:89 Certificate issuer: /CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF Certificate serial: 5AA9EE1F6A80F7921AC2016F63DA04DEEC7DB824 Authority key identifier: E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa Signing time: Tue 17 Dec 2024 12:36:51 +0000 ROA not before: Tue 17 Dec 2024 12:31:51 +0000 ROA not after: Tue 16 Dec 2025 12:36:51 +0000 asID: 142309 IP address blocks: 103.152.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a9:ee:1f:6a:80:f7:92:1a:c2:01:6f:63:da:04:de:ec:7d:b8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF Validity Not Before: Dec 17 12:31:51 2024 GMT Not After : Dec 16 12:36:51 2025 GMT Subject: CN=9807DE0880DEB709F2BB383CB50B30A46E5AD789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:49:8d:51:a9:d2:49:f2:a5:ee:c0:4f:61: 04:0c:de:88:ba:c7:f6:20:cc:5e:15:78:4d:d7:8d: fe:44:9b:85:cd:20:52:9c:37:67:70:3b:8c:8b:7a: fe:da:d8:a1:f7:ba:7c:22:89:3b:ec:b1:de:a0:3d: e8:0b:d7:d5:84:01:2a:22:af:44:71:c1:d3:87:65: bc:3e:6d:ec:91:26:21:4b:bf:27:98:e1:d3:22:91: 64:f3:fb:23:02:0a:85:61:b8:e4:73:37:a8:dd:9c: 2f:f5:72:93:f9:bf:e2:64:51:4a:7e:26:0d:23:26: ad:2b:e2:99:c8:7d:08:3f:41:48:a6:26:30:84:31: 8c:36:83:93:97:4a:c5:a5:66:4b:8d:6a:66:96:41: d6:dd:44:02:c6:f5:c6:1c:a2:7b:fe:14:d0:c2:fb: e7:1d:0a:a7:23:79:1c:f2:34:56:95:d4:1a:15:a2: 2a:85:f2:17:18:69:96:0f:76:08:54:25:35:7b:6d: ab:43:08:62:a0:f1:82:3e:dd:ef:18:4d:df:aa:61: 69:de:70:97:ab:2f:cb:08:39:c4:63:25:84:0b:90: 94:ae:90:5e:a6:b1:1b:a9:34:db:19:76:13:d3:a0: 82:ba:9c:14:0b:61:cf:63:54:11:d3:6b:0f:7a:04: 2b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:07:DE:08:80:DE:B7:09:F2:BB:38:3C:B5:0B:30:A4:6E:5A:D7:89 X509v3 Authority Key Identifier: keyid:E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.95.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:5b:56:19:d8:b1:fe:f5:de:7f:45:4a:c7:87:9a:ed:74:11: d8:ab:45:83:e8:1a:ca:40:96:c2:00:b8:dc:05:6b:57:ed:08: 0c:ae:b3:a7:b0:6d:dc:40:79:63:85:92:88:a8:4c:5a:90:57: 82:08:d5:ef:7b:e6:cb:a8:1f:e5:d0:f8:14:f8:4c:60:f6:06: f1:9c:63:86:b4:e4:02:63:06:f4:81:30:f9:a0:09:f8:de:50: 25:29:0f:7e:f0:7e:13:73:08:cd:05:c8:15:fe:77:ac:30:1b: 2f:49:58:c5:22:a3:05:32:4d:18:3a:a4:23:45:e0:08:78:bf: 20:3b:ae:77:99:9b:03:1a:07:25:a6:bc:3d:a2:4c:29:93:09: c9:56:aa:e8:2d:38:85:5b:b6:69:11:ec:0e:64:51:97:57:8a: 0f:a3:26:fe:c2:9d:67:4a:db:6e:10:22:1a:d0:42:2b:c0:9e: fe:de:40:39:39:41:8d:ca:e1:55:14:3f:80:46:e0:bb:7d:27: 6e:36:d1:9b:01:58:ef:67:66:6b:c3:b7:0b:95:3d:b5:ba:7a: 91:d9:94:67:19:d6:ba:01:19:57:04:f8:ed:57:02:85:08:aa: 4e:b0:ae:fe:2c:f0:ee:0d:79:c5:a5:37:01:b3:4e:e0:f6:df: 07:4a:53:26 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWqnuH2qA95IawgFvY9oE3ux9uCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNB OEJERjZERjAeFw0yNDEyMTcxMjMxNTFaFw0yNTEyMTYxMjM2NTFaMDMxMTAvBgNV BAMTKDk4MDdERTA4ODBERUI3MDlGMkJCMzgzQ0I1MEIzMEE0NkU1QUQ3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7S0mNUanSSfKl7sBPYQQM3oi6 x/YgzF4VeE3Xjf5Em4XNIFKcN2dwO4yLev7a2KH3unwiiTvssd6gPegL19WEASoi r0RxwdOHZbw+beyRJiFLvyeY4dMikWTz+yMCCoVhuORzN6jdnC/1cpP5v+JkUUp+ Jg0jJq0r4pnIfQg/QUimJjCEMYw2g5OXSsWlZkuNamaWQdbdRALG9cYconv+FNDC ++cdCqcjeRzyNFaV1BoVoiqF8hcYaZYPdghUJTV7batDCGKg8YI+3e8YTd+qYWne cJerL8sIOcRjJYQLkJSukF6msRupNNsZdhPToIK6nBQLYc9jVBHTaw96BCujAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmAfeCIDetwnyuzg8tQswpG5a14kwHwYDVR0j BBgwFoAU4bA/nupxwA9p2Di8HarRE6i99t8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjNkMTRjYi1jY2MyLTQ2ZDItOGUzMS0xNmY1YmVjMGFjZDgvMC9FMUIwM0Y5RUVB NzFDMDBGNjlEODM4QkMxREFBRDExM0E4QkRGNkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNBOEJE RjZERi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiM2QxNGNiLWNjYzItNDZkMi04 ZTMxLTE2ZjViZWMwYWNkOC8wLzMxMzAzMzJlMzEzNTMyMmUzOTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5hfMA0GCSqG SIb3DQEBCwUAA4IBAQBLW1YZ2LH+9d5/RUrHh5rtdBHYq0WD6BrKQJbCALjcBWtX 7QgMrrOnsG3cQHljhZKIqExakFeCCNXve+bLqB/l0PgU+Exg9gbxnGOGtOQCYwb0 gTD5oAn43lAlKQ9+8H4TcwjNBcgV/nesMBsvSVjFIqMFMk0YOqQjReAIeL8gO653 mZsDGgclprw9okwpkwnJVqroLTiFW7ZpEewOZFGXV4oPoyb+wp1nSttuECIa0EIr wJ7+3kA5OUGNyuFVFD+ARuC7fSduNtGbAVjvZ2Zrw7cLlT21unqR2ZRnGda6ARlX BPjtVwKFCKpOsK7+LPDuDXnFpTcBs07g9t8HSlMm -----END CERTIFICATE-----Generated at Fri Apr 25 22:07:24 2025 by rpki-client on console.sobornost.net