$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa File: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (raw, json) Hash identifier: jZdzzwUnE5NySNtgaEjKcLOBnZGLd0OeUfLgUNjS8h8= Subject key identifier: A3:51:59:55:DD:BB:89:14:F1:03:CF:18:6D:F4:28:E3:98:C5:0F:48 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 53B3D7B90BB68081C44924E4182B972AEB0CB13C Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa Signing time: Wed 16 Apr 2025 11:00:05 +0000 ROA not before: Wed 16 Apr 2025 10:55:05 +0000 ROA not after: Wed 15 Apr 2026 11:00:05 +0000 asID: 141591 IP address blocks: 103.159.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 17:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b3:d7:b9:0b:b6:80:81:c4:49:24:e4:18:2b:97:2a:eb:0c:b1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Apr 16 10:55:05 2025 GMT Not After : Apr 15 11:00:05 2026 GMT Subject: CN=A3515955DDBB8914F103CF186DF428E398C50F48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:f8:f2:a8:3b:f9:6d:8f:c9:e7:b7:3e:7b: c4:bc:2b:94:0f:e9:04:18:cb:0a:a1:65:c6:20:78: 44:0d:95:97:ef:a4:7f:b7:3e:a5:33:cb:0b:33:84: 92:c7:ad:dd:83:c7:4d:e5:51:b1:23:a4:e9:ad:0c: 16:2f:84:46:b1:76:e5:6f:72:c7:bd:43:18:90:f8: 3e:4b:60:23:0d:40:09:33:82:c8:c4:2f:4d:18:09: 4f:48:db:6d:29:46:d4:35:84:6e:77:d2:f9:cf:c9: 17:61:51:58:55:45:22:b8:74:f9:fc:e4:de:79:d6: f2:fc:03:a3:4e:e6:bd:71:b3:df:7d:87:ea:14:f8: 22:a8:6c:e8:56:3a:49:20:b0:80:31:21:0b:71:b2: 30:84:2f:c3:7f:30:59:33:7b:17:07:01:21:67:0f: e7:fe:a8:03:bf:a0:5a:50:61:2c:7a:1c:dc:6a:d2: c6:29:73:10:cd:9e:36:01:d8:49:8f:3d:da:ce:81: 78:7a:ed:18:a5:d3:3e:ab:8f:e8:24:34:fb:18:5d: c7:fd:55:18:79:49:92:4a:5e:f1:3b:3f:25:b7:12: e5:66:c8:89:ff:3a:5f:02:29:fb:e1:f8:30:10:0e: af:74:09:b4:5c:84:7e:91:16:63:68:cc:3b:20:94: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:51:59:55:DD:BB:89:14:F1:03:CF:18:6D:F4:28:E3:98:C5:0F:48 X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.63.0/24 Signature Algorithm: sha256WithRSAEncryption 71:a5:3a:cc:0f:43:5d:87:7c:d5:f0:c9:35:0b:75:13:16:89: 65:c5:4a:dc:7b:09:dc:57:d0:c1:6d:df:fc:3b:a2:54:fb:bd: 64:03:c2:48:3e:d8:e7:6e:df:10:5c:c8:20:61:c9:02:48:81: 47:02:d4:fa:00:7a:c8:55:97:15:e3:3c:b3:7a:93:87:30:27: b5:1a:83:19:42:ff:c8:2e:af:85:af:7e:b4:4d:21:c3:78:8c: ce:53:5d:52:be:35:8a:23:19:41:e5:95:88:95:29:fb:02:ac: ae:a7:61:7f:17:b6:3e:0f:dc:02:d8:2f:1f:87:c1:c2:7f:1f: b3:33:07:5d:35:18:e5:fb:6b:3c:46:5c:fa:ba:97:83:93:40: b5:18:11:6e:0d:43:01:f5:48:2b:04:57:33:3b:6a:a2:18:74: 6a:4d:23:ea:3f:23:ef:2b:09:71:02:52:7b:73:37:1c:c9:4a: 5a:6b:2a:c0:e6:7f:c1:be:00:2f:57:87:11:4d:a5:04:f2:91: a7:c3:26:2d:91:ab:ef:21:40:84:68:80:9c:02:8f:b5:60:8a: 3e:2b:f6:4a:42:e5:2d:7f:8f:17:37:c9:23:22:e9:d5:f3:6f: fa:03:34:f1:37:05:79:85:e1:74:7e:91:29:8b:bc:4c:fb:3c: ea:25:d3:49 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUU7PXuQu2gIHESSTkGCuXKusMsTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNTA0MTYxMDU1MDVaFw0yNjA0MTUxMTAwMDVaMDMxMTAvBgNV BAMTKEEzNTE1OTU1RERCQjg5MTRGMTAzQ0YxODZERjQyOEUzOThDNTBGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAvjyqDv5bY/J57c+e8S8K5QP 6QQYywqhZcYgeEQNlZfvpH+3PqUzywszhJLHrd2Dx03lUbEjpOmtDBYvhEaxduVv cse9QxiQ+D5LYCMNQAkzgsjEL00YCU9I220pRtQ1hG530vnPyRdhUVhVRSK4dPn8 5N551vL8A6NO5r1xs999h+oU+CKobOhWOkkgsIAxIQtxsjCEL8N/MFkzexcHASFn D+f+qAO/oFpQYSx6HNxq0sYpcxDNnjYB2EmPPdrOgXh67Ril0z6rj+gkNPsYXcf9 VRh5SZJKXvE7PyW3EuVmyIn/Ol8CKfvh+DAQDq90CbRchH6RFmNozDsglH2DAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUo1FZVd27iRTxA88YbfQo45jFD0gwHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwYzE3MWY0LWJkMTEtNDhlZC04 N2YwLTI3ZWExMjA5MDY0Zi8wLzMxMzAzMzJlMzEzNTM5MmUzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzUzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ58/MA0GCSqG SIb3DQEBCwUAA4IBAQBxpTrMD0Ndh3zV8Mk1C3UTFollxUrcewncV9DBbd/8O6JU +71kA8JIPtjnbt8QXMggYckCSIFHAtT6AHrIVZcV4zyzepOHMCe1GoMZQv/ILq+F r360TSHDeIzOU11SvjWKIxlB5ZWIlSn7Aqyup2F/F7Y+D9wC2C8fh8HCfx+zMwdd NRjl+2s8Rlz6upeDk0C1GBFuDUMB9UgrBFczO2qiGHRqTSPqPyPvKwlxAlJ7czcc yUpaayrA5n/BvgAvV4cRTaUE8pGnwyYtkavvIUCEaICcAo+1YIo+K/ZKQuUtf48X N8kjIunV82/6AzTxNwV5heF0fpEpi7xM+zzqJdNJ -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net