$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3130332e32342e3134382e302f32322d3234203d3e203233393439.roa File: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (raw, json) Hash identifier: QcCFSy1tRIsKFSX6IkNuBrgL6WXKmEv8YDcrJ9oZAms= Subject key identifier: C9:92:56:80:29:2C:9D:40:02:5C:09:33:4C:AC:83:A1:2B:EE:4F:53 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 6DA743E40325A8D1FA705286CA629FA139EC6C92 Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3130332e32342e3134382e302f32322d3234203d3e203233393439.roa Signing time: Mon 01 Jul 2024 01:02:52 +0000 ROA not before: Mon 01 Jul 2024 00:57:52 +0000 ROA not after: Mon 30 Jun 2025 01:02:52 +0000 asID: 23949 IP address blocks: 103.24.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a7:43:e4:03:25:a8:d1:fa:70:52:86:ca:62:9f:a1:39:ec:6c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Jul 1 00:57:52 2024 GMT Not After : Jun 30 01:02:52 2025 GMT Subject: CN=C9925680292C9D40025C09334CAC83A12BEE4F53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:96:66:ff:76:89:fa:4b:24:7b:a1:a2:42: 56:8a:9b:aa:01:80:db:fd:15:57:bc:1f:06:4c:2f: d3:2f:ff:73:5e:56:a6:47:c0:88:8c:f6:ba:51:55: e9:68:79:50:ac:7d:fa:99:06:30:e0:37:d3:4a:e0: 8e:6c:11:a8:6e:b5:c9:3c:40:0b:98:bf:1f:6a:d1: 6d:6e:4f:f7:0d:39:0a:2d:a8:01:09:d6:45:3c:45: c5:d7:8a:24:07:57:24:a3:49:1c:67:7e:9b:34:7d: 39:ab:32:9b:41:6d:0c:02:e0:53:54:58:f6:eb:d7: 18:08:00:74:0a:c4:c1:fa:fb:eb:93:a2:60:0e:7b: 93:88:25:68:72:71:49:74:09:72:72:22:32:4e:d7: b8:6e:c9:c7:c5:ef:d0:a0:09:0c:17:14:53:d6:83: b6:b1:f6:46:12:c9:e1:53:ca:91:48:dd:dc:17:ad: ae:95:46:d3:4f:59:b1:99:37:11:69:aa:6a:87:79: f3:b5:26:3f:16:56:98:dc:05:59:e8:46:19:b0:d1: ad:28:94:37:2b:17:16:ea:ce:16:9f:c0:90:b0:29: 44:15:89:ec:13:0e:b5:de:ab:9e:17:fd:51:9c:71: bc:a4:05:e1:6a:c3:a4:1c:e8:06:93:98:62:82:c4: de:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:92:56:80:29:2C:9D:40:02:5C:09:33:4C:AC:83:A1:2B:EE:4F:53 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3130332e32342e3134382e302f32322d3234203d3e203233393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.148.0/22 Signature Algorithm: sha256WithRSAEncryption 83:68:69:f6:52:d2:17:b2:29:2e:5e:c6:65:78:77:c4:bb:25: 28:f2:04:d6:c4:08:ea:34:63:c6:32:08:f5:bf:ae:3d:d1:f2: 00:20:27:e0:09:16:c0:77:5e:65:96:a7:a8:45:98:a8:ec:70: e1:95:31:7b:57:c7:5d:8d:90:13:94:01:2b:cb:30:c9:ee:b4: 5a:38:ff:ae:af:d6:b6:23:74:c4:96:15:4e:30:eb:89:be:d5: d9:ab:9e:d9:7b:13:91:56:1a:34:40:51:99:5a:dc:8d:af:5c: 1f:3a:62:cf:48:ae:23:7e:9b:5c:20:5a:7a:d6:d2:6d:5e:4f: 24:86:1a:ba:f5:67:a8:17:ac:8d:04:e7:0e:51:10:10:e5:eb: 77:0c:b6:7b:a1:4d:bc:1a:a3:b1:b9:ca:40:e3:66:a4:13:52: e9:15:43:79:22:02:95:ce:4e:e1:e9:1e:bf:2a:f2:0f:88:28: 3b:81:d4:e0:00:d5:4e:ec:64:54:2a:f7:94:7f:21:62:a4:f8: 63:bc:d1:cb:41:e7:f1:b5:69:de:53:f3:80:3d:1c:67:5a:a7: ab:ac:05:97:95:3b:63:37:84:02:19:df:8e:6c:d7:ac:10:e8: 2d:3a:e3:c3:96:86:0f:79:60:e9:56:12:2d:ca:06:61:aa:bd: f5:72:db:0d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbadD5AMlqNH6cFKGymKfoTnsbJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNDA3MDEwMDU3NTJaFw0yNTA2MzAwMTAyNTJaMDMxMTAvBgNV BAMTKEM5OTI1NjgwMjkyQzlENDAwMjVDMDkzMzRDQUM4M0ExMkJFRTRGNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUJZZm/3aJ+kske6GiQlaKm6oB gNv9FVe8HwZML9Mv/3NeVqZHwIiM9rpRVeloeVCsffqZBjDgN9NK4I5sEahutck8 QAuYvx9q0W1uT/cNOQotqAEJ1kU8RcXXiiQHVySjSRxnfps0fTmrMptBbQwC4FNU WPbr1xgIAHQKxMH6++uTomAOe5OIJWhycUl0CXJyIjJO17huycfF79CgCQwXFFPW g7ax9kYSyeFTypFI3dwXra6VRtNPWbGZNxFpqmqHefO1Jj8WVpjcBVnoRhmw0a0o lDcrFxbqzhafwJCwKUQViewTDrXeq54X/VGccbykBeFqw6Qc6AaTmGKCxN4tAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUyZJWgCksnUACXAkzTKyDoSvuT1MwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiNjk4MjJjLTJlMjItNDhiZS04 YmEyLTYzNGY1ODJjMmVjYi8wLzMxMzAzMzJlMzIzNDJlMzEzNDM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzIzMzM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcYlDANBgkqhkiG 9w0BAQsFAAOCAQEAg2hp9lLSF7IpLl7GZXh3xLslKPIE1sQI6jRjxjII9b+uPdHy ACAn4AkWwHdeZZanqEWYqOxw4ZUxe1fHXY2QE5QBK8swye60Wjj/rq/WtiN0xJYV TjDrib7V2aue2XsTkVYaNEBRmVrcja9cHzpiz0iuI36bXCBaetbSbV5PJIYauvVn qBesjQTnDlEQEOXrdwy2e6FNvBqjsbnKQONmpBNS6RVDeSIClc5O4ekevyryD4go O4HU4ADVTuxkVCr3lH8hYqT4Y7zRy0Hn8bVp3lPzgD0cZ1qnq6wFl5U7YzeEAhnf jmzXrBDoLTrjw5aGD3lg6VYSLcoGYaq99XLbDQ== -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net