$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa File: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (raw, json) Hash identifier: YxNi6/uAllHxRs/TmMjIhKw+j/AevGbXCAwCtWlO7/Y= Subject key identifier: 48:E1:1D:8F:84:69:66:7B:F2:B9:6B:F1:09:3D:7E:8F:A1:C7:5D:89 Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 17BB84CF7B4F8FBEF12D25E3C10C96AA2D12B9A3 Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa Signing time: Sat 15 Mar 2025 21:36:22 +0000 ROA not before: Sat 15 Mar 2025 21:31:22 +0000 ROA not after: Sat 14 Mar 2026 21:36:22 +0000 asID: 142381 IP address blocks: 103.155.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:bb:84:cf:7b:4f:8f:be:f1:2d:25:e3:c1:0c:96:aa:2d:12:b9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: Mar 15 21:31:22 2025 GMT Not After : Mar 14 21:36:22 2026 GMT Subject: CN=48E11D8F8469667BF2B96BF1093D7E8FA1C75D89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:34:a4:04:4e:f8:19:69:71:cb:50:9c:f1: 4d:ba:a0:0c:2a:98:2d:3a:9e:0c:d3:dc:43:ce:83: e0:e9:9b:a8:ca:0a:57:c4:e1:5b:d3:91:99:18:c6: 91:8e:bc:db:58:63:ac:9f:71:cb:68:53:15:a8:36: f2:5f:90:4f:90:d5:e8:a2:20:0f:28:b1:5f:f2:10: 57:13:27:f5:f0:b7:2f:95:1d:8b:e2:07:fb:e0:5e: ef:6f:e5:58:4c:ab:a9:ed:7d:e7:4d:0f:7e:f2:b2: 5e:9d:db:27:58:c1:c5:f6:49:f1:75:b9:b1:19:92: fd:fe:bf:0c:c7:ed:96:af:53:27:df:cd:20:9e:6b: e5:69:e3:72:e4:a8:84:16:97:3f:ca:1a:24:ec:24: 9d:df:ef:07:70:de:15:42:2a:28:f3:9b:c7:ba:a4: 21:95:fc:e4:6b:35:9d:5c:d0:f6:17:75:4f:83:68: 6f:b0:01:e2:71:2a:fa:0d:b6:d9:21:1d:55:67:22: 98:e9:30:63:49:43:d1:3b:11:fb:06:67:59:fd:91: 20:fa:79:37:9f:7d:f5:c7:98:da:fa:6a:89:e0:e1: c8:2e:29:6b:5c:7b:88:8e:ee:1c:57:16:a1:ea:73: be:60:1a:df:3f:0a:4a:2c:bc:a4:08:55:ed:7b:9d: 26:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E1:1D:8F:84:69:66:7B:F2:B9:6B:F1:09:3D:7E:8F:A1:C7:5D:89 X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.64.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:32:a7:76:7e:71:84:09:f3:da:b7:74:56:38:3c:5f:63:a5: 62:5d:61:64:30:bd:67:ec:67:b9:06:f3:09:2b:66:b8:33:fe: 56:bc:f0:2a:35:90:c5:47:0c:1d:f1:8d:18:ef:24:3b:15:b6: 27:19:87:ce:d2:7c:fa:c3:6a:80:bd:61:01:0d:17:91:f6:b9: 56:ae:02:00:01:60:d2:e3:86:ab:93:4c:11:8b:17:e3:18:a2: a1:2a:2e:7a:68:69:47:63:dd:16:20:72:63:08:8f:7c:77:0b: ed:2d:57:01:cf:a8:5f:01:0d:76:53:ed:ea:8c:f7:81:54:7c: bc:1c:ae:7c:e3:c4:9d:03:54:66:31:cb:e7:b4:96:7b:b9:39: 82:61:b2:90:cf:63:7f:f3:9e:46:61:74:77:40:c7:83:12:62: 7a:b4:17:19:44:86:d1:ec:ae:d0:eb:e6:97:23:45:46:fa:02: 0e:4f:97:26:f8:e1:ab:01:64:11:61:6d:d2:32:70:a5:95:5d: 22:50:7f:57:17:ff:dc:2d:c9:e4:6d:3b:87:b1:a4:56:c8:c6: 83:e8:4a:a7:8d:50:a0:61:52:8c:30:e7:d9:26:90:5b:95:42: cc:19:82:ce:91:47:0a:6b:10:ee:0d:1c:8c:7a:64:a7:2b:19: 44:c3:2f:48 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUF7uEz3tPj77xLSXjwQyWqi0SuaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNTAzMTUyMTMxMjJaFw0yNjAzMTQyMTM2MjJaMDMxMTAvBgNV BAMTKDQ4RTExRDhGODQ2OTY2N0JGMkI5NkJGMTA5M0Q3RThGQTFDNzVEODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMTSkBE74GWlxy1Cc8U26oAwq mC06ngzT3EPOg+Dpm6jKClfE4VvTkZkYxpGOvNtYY6yfcctoUxWoNvJfkE+Q1eii IA8osV/yEFcTJ/Xwty+VHYviB/vgXu9v5VhMq6ntfedND37ysl6d2ydYwcX2SfF1 ubEZkv3+vwzH7ZavUyffzSCea+Vp43LkqIQWlz/KGiTsJJ3f7wdw3hVCKijzm8e6 pCGV/ORrNZ1c0PYXdU+DaG+wAeJxKvoNttkhHVVnIpjpMGNJQ9E7EfsGZ1n9kSD6 eTefffXHmNr6aong4cguKWtce4iO7hxXFqHqc75gGt8/CkosvKQIVe17nSY1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSOEdj4RpZnvyuWvxCT1+j6HHXYkwHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1NjRhYmZiLTE5NjItNDRhOS04 Mzc2LWNiZmIxZWZjZGFiYS8wLzMxMzAzMzJlMzEzNTM1MmUzNjM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMyMzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5tAMA0GCSqG SIb3DQEBCwUAA4IBAQBcMqd2fnGECfPat3RWODxfY6ViXWFkML1n7Ge5BvMJK2a4 M/5WvPAqNZDFRwwd8Y0Y7yQ7FbYnGYfO0nz6w2qAvWEBDReR9rlWrgIAAWDS44ar k0wRixfjGKKhKi56aGlHY90WIHJjCI98dwvtLVcBz6hfAQ12U+3qjPeBVHy8HK58 48SdA1RmMcvntJZ7uTmCYbKQz2N/855GYXR3QMeDEmJ6tBcZRIbR7K7Q6+aXI0VG +gIOT5cm+OGrAWQRYW3SMnCllV0iUH9XF//cLcnkbTuHsaRWyMaD6EqnjVCgYVKM MOfZJpBblULMGYLOkUcKaxDuDRyMemSnKxlEwy9I -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:54 2025 by rpki-client on console.sobornost.net