$ rpki-client -vvf repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa File: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (raw, json) Hash identifier: ERIuVwLQ9z+fqdl2+TYtXyXghfTrKtxoiSA29lPcvDc= Subject key identifier: 1E:60:E9:6E:78:4A:97:38:43:D8:40:64:44:A6:F1:A8:C0:EC:A1:2E Certificate issuer: /CN=0D14F274908EB737876B8079A7129AF9936DB91E Certificate serial: 3934654B0266775905684AD166711D3C9B6FFDEE Authority key identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa Signing time: Thu 02 Jan 2025 08:52:56 +0000 ROA not before: Thu 02 Jan 2025 08:47:56 +0000 ROA not after: Thu 01 Jan 2026 08:52:56 +0000 asID: 64030 IP address blocks: 103.214.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:34:65:4b:02:66:77:59:05:68:4a:d1:66:71:1d:3c:9b:6f:fd:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D14F274908EB737876B8079A7129AF9936DB91E Validity Not Before: Jan 2 08:47:56 2025 GMT Not After : Jan 1 08:52:56 2026 GMT Subject: CN=1E60E96E784A973843D8406444A6F1A8C0ECA12E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:1b:07:53:bc:5a:2b:99:87:e9:4d:4e:bf: 85:bd:19:5d:af:40:5f:bc:b1:f4:95:e5:39:86:fc: cf:c0:5b:81:ad:f1:07:30:fa:ea:83:2b:f8:dc:9e: d7:a4:70:30:0a:da:bd:c1:58:c5:03:df:70:78:ae: a5:09:fe:21:8f:0b:5c:70:de:cc:f0:a5:cf:03:5a: 41:be:b3:9e:3e:e7:44:3c:ae:2d:38:1f:50:ba:f5: a1:1c:8a:5f:63:54:65:b4:ef:48:93:5e:c9:c1:0c: b3:d6:a1:82:09:2d:6a:70:2a:d4:71:6f:37:0f:95: cd:af:bc:36:8f:5d:ba:6c:9e:e3:14:14:c8:31:75: 8f:f6:39:13:4c:38:9f:f5:87:dd:61:1c:c9:d3:bb: 70:4d:dc:fd:c7:dd:20:85:7e:f8:6e:bb:05:9f:9b: e1:78:ee:d8:9d:d1:31:e9:95:da:ac:de:a4:be:78: ea:e1:e0:4c:0a:40:f6:b3:cd:60:12:7a:91:69:81: 5b:2e:d5:14:96:77:da:66:bb:e9:01:82:b4:96:d4: 2f:10:0b:4a:e9:3c:74:8e:4c:5d:33:f3:46:ba:e0: b1:b8:82:d3:86:ce:b8:46:5e:55:b9:29:2d:1b:92: 5e:4c:54:bf:ca:da:b5:24:f4:a4:d3:b7:80:e0:5b: 77:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:60:E9:6E:78:4A:97:38:43:D8:40:64:44:A6:F1:A8:C0:EC:A1:2E X509v3 Authority Key Identifier: keyid:0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.229.0/24 Signature Algorithm: sha256WithRSAEncryption 04:f7:63:52:2d:e0:2e:ec:19:99:27:ef:33:c6:0a:4a:19:2e: 96:09:3d:24:0e:6f:a8:a8:ac:97:82:ae:71:27:6f:12:e7:98: 62:ed:0b:68:c3:8e:7d:d6:a1:12:a0:cc:00:05:c7:1d:b5:2f: c8:4e:e2:bd:30:7e:d7:53:ca:c1:77:56:35:3d:02:9b:42:e6: 73:ef:6a:f3:48:90:2a:60:db:23:71:cc:32:28:b3:68:86:c1: 09:c9:ad:89:72:2e:9c:81:ab:b8:26:a2:48:03:5d:89:94:dd: 9e:f0:c7:ea:28:53:f3:b3:3d:10:a6:b7:bd:fe:c8:03:7d:7c: bd:13:08:eb:b7:f4:7f:81:f8:32:1c:04:e9:32:f4:41:8b:f3: 77:f6:99:74:e5:0f:7c:02:58:1d:c8:42:f2:ba:3c:a9:1d:9a: 16:4c:e1:49:5d:7a:8c:f7:01:75:e2:89:a0:cb:3f:2e:79:18: 63:9d:54:d0:2c:e6:62:f6:f3:37:de:de:77:db:8f:c1:b6:bf: 53:87:0c:7f:ca:95:98:d3:6e:12:91:bf:81:4e:36:97:da:5a: 1a:03:3c:42:3d:1f:7c:b3:ee:4a:a9:a8:0f:2f:d0:08:ac:09: ba:22:37:ef:ce:89:17:cc:35:c5:03:38:ed:cd:17:a7:e1:ad: 73:a4:f4:24 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOTRlSwJmd1kFaErRZnEdPJtv/e4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5 MzZEQjkxRTAeFw0yNTAxMDIwODQ3NTZaFw0yNjAxMDEwODUyNTZaMDMxMTAvBgNV BAMTKDFFNjBFOTZFNzg0QTk3Mzg0M0Q4NDA2NDQ0QTZGMUE4QzBFQ0ExMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vRsHU7xaK5mH6U1Ov4W9GV2v QF+8sfSV5TmG/M/AW4Gt8Qcw+uqDK/jcntekcDAK2r3BWMUD33B4rqUJ/iGPC1xw 3szwpc8DWkG+s54+50Q8ri04H1C69aEcil9jVGW070iTXsnBDLPWoYIJLWpwKtRx bzcPlc2vvDaPXbpsnuMUFMgxdY/2ORNMOJ/1h91hHMnTu3BN3P3H3SCFfvhuuwWf m+F47tid0THpldqs3qS+eOrh4EwKQPazzWASepFpgVsu1RSWd9pmu+kBgrSW1C8Q C0rpPHSOTF0z80a64LG4gtOGzrhGXlW5KS0bkl5MVL/K2rUk9KTTt4DgW3fNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUHmDpbnhKlzhD2EBkRKbxqMDsoS4wHwYDVR0j BBgwFoAUDRTydJCOtzeHa4B5pxKa+ZNtuR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzIwNTU2ZC1jYzIxLTRlNTctYTViYS1hMjExMWUwNTliN2EvMC8wRDE0RjI3NDkw OEVCNzM3ODc2QjgwNzlBNzEyOUFGOTkzNkRCOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5MzZE QjkxRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMjA1NTZkLWNjMjEtNGU1Ny1h NWJhLWEyMTExZTA1OWI3YS8wLzMxMzAzMzJlMzIzMTM0MmUzMjMyMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjM0MzAzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9blMA0GCSqG SIb3DQEBCwUAA4IBAQAE92NSLeAu7BmZJ+8zxgpKGS6WCT0kDm+oqKyXgq5xJ28S 55hi7Qtow4591qESoMwABccdtS/ITuK9MH7XU8rBd1Y1PQKbQuZz72rzSJAqYNsj ccwyKLNohsEJya2Jci6cgau4JqJIA12JlN2e8MfqKFPzsz0Qpre9/sgDfXy9Ewjr t/R/gfgyHATpMvRBi/N39pl05Q98AlgdyELyujypHZoWTOFJXXqM9wF14omgyz8u eRhjnVTQLOZi9vM33t5324/Btr9Thwx/ypWY024Skb+BTjaX2loaAzxCPR98s+5K qagPL9AIrAm6IjfvzokXzDXFAzjtzRen4a1zpPQk -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:49 2025 by rpki-client on console.sobornost.net