$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa File: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (raw, json) Hash identifier: lW1DAyCSTgRvB6XQz9p6ZQqRRWcAHTlnodsMGbhnNcU= Subject key identifier: 3C:22:3B:1F:AD:7D:75:DA:87:D8:95:2C:92:3A:34:55:5B:77:54:23 Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 4C0505F79D3E18D9FC23AE95DFA5754581965D53 Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa Signing time: Thu 20 Mar 2025 17:00:01 +0000 ROA not before: Thu 20 Mar 2025 16:55:01 +0000 ROA not after: Thu 19 Mar 2026 17:00:01 +0000 asID: 150971 IP address blocks: 103.127.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:05:05:f7:9d:3e:18:d9:fc:23:ae:95:df:a5:75:45:81:96:5d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Mar 20 16:55:01 2025 GMT Not After : Mar 19 17:00:01 2026 GMT Subject: CN=3C223B1FAD7D75DA87D8952C923A34555B775423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:49:2c:a1:45:5f:99:27:5a:f3:9c:fc:f6: 25:7e:fd:1b:3b:eb:3d:cc:27:6e:ec:fa:e3:c6:ad: 20:b7:65:f3:ca:0b:7f:e6:f4:f0:e3:58:7a:7a:4e: 54:58:58:60:27:c7:ba:fe:87:63:86:7a:28:4e:96: f3:e8:ce:71:ea:77:39:3c:07:f7:bb:45:0f:8d:a4: 03:0e:00:18:64:de:0b:17:b8:29:75:63:06:13:5e: cc:56:03:be:cc:3a:5d:5e:95:0e:f9:a0:d6:8a:22: 43:41:bd:dd:41:ab:9c:68:6d:40:25:fc:92:d1:d9: 90:f5:20:c5:ca:52:82:8b:eb:38:b4:fd:25:de:75: 03:38:cc:20:c5:3b:39:1b:b1:05:7d:a5:1c:e5:77: d2:1a:bf:f2:df:16:c9:6c:81:98:db:4e:3e:bd:ef: 06:4f:a6:aa:da:18:97:d5:61:50:0c:1d:62:c9:e1: 1d:ab:a4:32:60:b4:d0:79:f5:2f:a4:b1:ea:55:89: 4a:d2:68:c8:74:a6:9f:65:14:e7:37:48:9b:03:8a: 31:f2:19:6d:30:de:ac:3a:b0:03:c3:f8:97:fa:cf: bf:7a:60:48:ac:94:b7:76:3d:06:40:ce:f4:02:04: dc:21:1e:c0:7f:30:7e:3f:0d:6c:63:ef:1d:82:61: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:22:3B:1F:AD:7D:75:DA:87:D8:95:2C:92:3A:34:55:5B:77:54:23 X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.106.0/23 Signature Algorithm: sha256WithRSAEncryption b0:d9:55:ba:13:e5:4b:f8:b1:69:7b:52:18:1f:3f:91:4d:36: aa:d4:ce:22:c2:33:56:5c:bd:d4:3f:db:7f:68:79:f8:81:24: 9f:94:00:0d:92:c9:71:88:d1:33:e5:3c:86:76:26:bd:31:01: 87:75:d9:cf:2b:9c:88:1f:9c:e3:66:c7:e8:0e:99:21:0a:3c: e7:eb:05:b9:74:4b:4c:16:34:1a:b7:e8:68:25:fd:03:47:e2: 9c:08:54:b2:63:fb:31:21:81:73:1c:0e:90:a0:b4:82:cf:e7: 10:78:36:be:fc:d0:59:c5:30:1d:42:4a:39:93:a0:01:5a:40: 30:2b:79:63:33:b8:3d:87:03:0b:e4:ff:c7:db:5f:ef:86:62: bb:ac:8a:e0:e9:e4:55:b2:9e:40:28:da:7e:ef:d1:5b:65:4f: e0:a8:91:c4:a5:3b:1a:55:a2:08:32:6a:5e:3a:c7:77:37:0e: 2d:4a:43:a5:42:3a:b3:99:bb:a3:bd:a6:95:62:a3:ac:c8:a3: c1:b8:a0:bc:92:cd:5d:2f:4a:8a:13:6b:d2:90:2b:63:c7:14: 11:8f:8d:89:35:9c:80:ac:8b:31:3d:c6:5d:f5:a9:4b:2d:c8: 50:c9:b2:3d:52:ba:90:e8:36:a3:3d:ec:95:e7:de:16:7a:8b: bc:13:3a:1c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTAUF950+GNn8I66V36V1RYGWXVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNTAzMjAxNjU1MDFaFw0yNjAzMTkxNzAwMDFaMDMxMTAvBgNV BAMTKDNDMjIzQjFGQUQ3RDc1REE4N0Q4OTUyQzkyM0EzNDU1NUI3NzU0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXf0ksoUVfmSda85z89iV+/Rs7 6z3MJ27s+uPGrSC3ZfPKC3/m9PDjWHp6TlRYWGAnx7r+h2OGeihOlvPoznHqdzk8 B/e7RQ+NpAMOABhk3gsXuCl1YwYTXsxWA77MOl1elQ75oNaKIkNBvd1Bq5xobUAl /JLR2ZD1IMXKUoKL6zi0/SXedQM4zCDFOzkbsQV9pRzld9Iav/LfFslsgZjbTj69 7wZPpqraGJfVYVAMHWLJ4R2rpDJgtNB59S+ksepViUrSaMh0pp9lFOc3SJsDijHy GW0w3qw6sAPD+Jf6z796YEislLd2PQZAzvQCBNwhHsB/MH4/DWxj7x2CYUqzAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPCI7H619ddqH2JUskjo0VVt3VCMwHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4ZDdhMDM4LWY4YTEtNGVkMC1h MWFmLTU0OTUyZTU0M2M0My8wLzMxMzAzMzJlMzEzMjM3MmUzMTMwMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM3MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnf2owDQYJ KoZIhvcNAQELBQADggEBALDZVboT5Uv4sWl7UhgfP5FNNqrUziLCM1ZcvdQ/239o efiBJJ+UAA2SyXGI0TPlPIZ2Jr0xAYd12c8rnIgfnONmx+gOmSEKPOfrBbl0S0wW NBq36Ggl/QNH4pwIVLJj+zEhgXMcDpCgtILP5xB4Nr780FnFMB1CSjmToAFaQDAr eWMzuD2HAwvk/8fbX++GYrusiuDp5FWynkAo2n7v0VtlT+CokcSlOxpVoggyal46 x3c3Di1KQ6VCOrOZu6O9ppVio6zIo8G4oLySzV0vSooTa9KQK2PHFBGPjYk1nICs izE9xl31qUstyFDJsj1SupDoNqM97JXn3hZ6i7wTOhw= -----END CERTIFICATE-----Generated at Wed Apr 23 17:38:30 2025 by rpki-client on console.sobornost.net