$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa File: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (raw, json) Hash identifier: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U= Subject key identifier: FA:8F:A6:80:86:22:EC:33:6B:7B:A7:52:CB:8B:06:0F:2C:85:33:DB Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 7D8070EB780FBB78F80D94EB02EB62A397F78B6F Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa Signing time: Sun 06 Apr 2025 21:00:01 +0000 ROA not before: Sun 06 Apr 2025 20:55:01 +0000 ROA not after: Sun 05 Apr 2026 21:00:01 +0000 asID: 142342 IP address blocks: 103.169.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:80:70:eb:78:0f:bb:78:f8:0d:94:eb:02:eb:62:a3:97:f7:8b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Apr 6 20:55:01 2025 GMT Not After : Apr 5 21:00:01 2026 GMT Subject: CN=FA8FA6808622EC336B7BA752CB8B060F2C8533DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:c4:00:9b:c8:53:89:6f:f1:52:d2:dc:bc: 2b:32:50:f1:ec:67:72:98:65:46:52:f0:86:cf:98: 0b:67:47:2e:b4:80:1c:78:80:61:bf:b2:96:58:b4: 16:c9:57:7b:41:03:16:f4:75:c5:05:72:20:c4:43: fc:47:5d:2c:47:a8:dd:68:5c:36:a0:d9:1a:65:41: c6:f2:ec:25:c1:72:17:d3:94:df:01:36:59:69:95: 92:cf:7a:d3:a7:2c:a0:69:a4:2e:65:24:6d:31:6d: 76:c4:b0:84:ec:b7:f1:29:93:b6:46:1e:08:c5:69: 59:b7:12:c2:0f:60:78:08:59:d0:eb:57:82:54:27: 3d:f2:86:bd:f7:95:ea:02:ac:2e:24:ac:9d:81:bb: 1f:a6:cb:67:b4:c2:10:8b:53:20:bf:ca:d1:8c:92: 75:0e:c1:bb:49:4a:a6:03:32:0f:5b:24:42:02:cb: dc:93:1b:d6:1b:c5:1f:7e:48:65:d9:16:d9:de:2e: a7:d7:fc:7a:a4:4e:35:c2:c0:db:05:1c:2c:aa:9b: 9f:ee:b4:21:bd:4f:6f:6d:6a:d1:cc:c3:78:64:17: 52:96:93:67:a7:f3:cc:33:2d:85:8e:41:1d:ef:5b: fc:1c:ae:93:4b:e6:ab:aa:df:7e:ba:dc:e7:36:e3: 8e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8F:A6:80:86:22:EC:33:6B:7B:A7:52:CB:8B:06:0F:2C:85:33:DB X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.128.0/23 Signature Algorithm: sha256WithRSAEncryption 42:86:c8:d7:5f:c1:2e:1e:74:85:a4:60:7e:07:6f:0c:72:04: 1a:a5:57:51:ca:5f:4e:fa:b6:32:7a:4a:d8:5f:53:d6:83:69: c6:1c:47:df:9f:3f:86:cc:6f:78:54:63:94:af:ce:1a:cf:2d: b7:2a:2a:7b:ab:53:74:3c:22:69:07:b3:e0:79:58:38:23:d0: 29:41:55:0f:de:20:84:81:ed:08:b6:6e:f0:30:6b:64:14:e3: fe:a5:1c:6b:75:34:eb:d4:42:60:75:2e:9c:75:db:99:2d:c2: 2e:ab:2e:37:b4:a3:0c:51:fe:50:8a:64:93:78:a6:32:71:2a: de:b1:2d:74:1d:15:53:cd:e4:77:f4:de:05:d4:f7:b4:fb:97: 53:8a:5a:ac:39:16:c0:bc:a3:c2:81:09:e8:d6:45:76:6b:66: 38:ca:ae:35:79:46:fa:3e:c2:34:59:ef:7c:ed:41:b5:ff:28: ad:44:c5:26:ca:60:4a:28:1d:e5:25:11:d7:b8:1a:ba:e2:27: 2c:c6:3f:a0:61:dd:16:91:0a:71:af:10:42:3f:88:eb:ae:0c: 48:7a:ec:a9:40:04:84:1d:62:9c:89:0e:1a:1a:1b:45:d0:45: eb:16:6f:3f:78:b5:11:8e:ee:5a:bd:cb:9a:0e:3f:38:9f:29: b9:20:c8:55 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUfYBw63gPu3j4DZTrAutio5f3i28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNTA0MDYyMDU1MDFaFw0yNjA0MDUyMTAwMDFaMDMxMTAvBgNV BAMTKEZBOEZBNjgwODYyMkVDMzM2QjdCQTc1MkNCOEIwNjBGMkM4NTMzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBj8QAm8hTiW/xUtLcvCsyUPHs Z3KYZUZS8IbPmAtnRy60gBx4gGG/spZYtBbJV3tBAxb0dcUFciDEQ/xHXSxHqN1o XDag2RplQcby7CXBchfTlN8BNllplZLPetOnLKBppC5lJG0xbXbEsITst/Epk7ZG HgjFaVm3EsIPYHgIWdDrV4JUJz3yhr33leoCrC4krJ2Bux+my2e0whCLUyC/ytGM knUOwbtJSqYDMg9bJEICy9yTG9YbxR9+SGXZFtneLqfX/HqkTjXCwNsFHCyqm5/u tCG9T29tatHMw3hkF1KWk2en88wzLYWOQR3vW/wcrpNL5quq33663Oc2445LAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU+o+mgIYi7DNre6dSy4sGDyyFM9swHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiMGUzNjRiLTc3OWUtNDBkNS1h ZDBlLWQ5MTc4Nzc4ZDZiMS8wLzMxMzAzMzJlMzEzNjM5MmUzMTMyMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM0MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqYAwDQYJ KoZIhvcNAQELBQADggEBAEKGyNdfwS4edIWkYH4HbwxyBBqlV1HKX076tjJ6Sthf U9aDacYcR9+fP4bMb3hUY5SvzhrPLbcqKnurU3Q8ImkHs+B5WDgj0ClBVQ/eIISB 7Qi2bvAwa2QU4/6lHGt1NOvUQmB1Lpx125ktwi6rLje0owxR/lCKZJN4pjJxKt6x LXQdFVPN5Hf03gXU97T7l1OKWqw5FsC8o8KBCejWRXZrZjjKrjV5Rvo+wjRZ73zt QbX/KK1ExSbKYEooHeUlEde4GrriJyzGP6Bh3RaRCnGvEEI/iOuuDEh67KlABIQd YpyJDhoaG0XQResWbz94tRGO7lq9y5oOPzifKbkgyFU= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net