$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa File: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (raw, json) Hash identifier: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk= Subject key identifier: D3:09:2E:EE:A5:AC:13:B0:AC:01:D7:7A:65:B3:22:62:69:A9:2D:F0 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 16EEAC83CF0E51FD008454D6BBD9F73BC1E6B9AD Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa Signing time: Fri 28 Feb 2025 06:00:00 +0000 ROA not before: Fri 28 Feb 2025 05:55:00 +0000 ROA not after: Fri 27 Feb 2026 06:00:00 +0000 asID: 140443 IP address blocks: 103.168.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ee:ac:83:cf:0e:51:fd:00:84:54:d6:bb:d9:f7:3b:c1:e6:b9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Feb 28 05:55:00 2025 GMT Not After : Feb 27 06:00:00 2026 GMT Subject: CN=D3092EEEA5AC13B0AC01D77A65B3226269A92DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b4:d2:03:26:d2:90:c2:00:a5:d3:57:d9:98: 5a:48:8d:20:08:ef:95:08:53:ab:4b:80:3d:7e:22: ef:a1:ca:d3:96:eb:44:7b:66:73:8f:5a:1d:18:17: bf:75:d4:72:40:d2:27:e9:01:fe:ca:ea:bb:44:c6: 1f:51:fc:01:4d:14:cf:57:e6:38:e1:6a:59:63:1e: 0f:61:4f:fb:ce:ac:df:c4:97:6b:33:39:f7:90:fd: 7d:c3:c8:41:9f:48:e6:5f:09:2a:51:58:3c:f1:dc: ed:1c:52:cb:d3:9f:83:48:bd:f8:1b:c1:60:7a:63: d4:09:a3:de:0e:ac:5c:0c:be:a9:44:34:4c:a6:d9: 6a:3f:43:e5:e2:d5:1b:65:ea:e1:21:76:cc:95:60: 6e:6e:5c:45:ba:13:a9:c2:69:eb:e6:12:70:2d:fb: 15:d7:d0:61:49:a2:36:22:b6:34:50:c0:52:6e:35: f4:74:82:6f:d1:85:26:05:1b:81:e2:36:d7:99:0d: 2e:c2:ec:3b:07:5f:5b:4e:66:8a:70:d3:4b:fe:29: 88:11:c2:74:71:f2:46:7f:52:e8:0a:af:55:13:d1: ed:ae:b8:91:0e:ae:86:ce:16:43:4d:84:db:f2:0b: 47:1c:38:d3:f5:fd:de:b4:ef:b5:fb:60:fc:d9:ef: 10:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:09:2E:EE:A5:AC:13:B0:AC:01:D7:7A:65:B3:22:62:69:A9:2D:F0 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.146.0/23 Signature Algorithm: sha256WithRSAEncryption 15:92:6b:7d:2a:81:60:3d:f5:9a:93:e1:d4:ec:98:76:dd:4e: 34:49:c7:4b:f5:a4:86:b6:ff:f5:9c:50:ca:68:35:6e:ab:e9: 55:df:b3:9e:6c:39:68:41:16:30:59:00:61:e3:84:70:0e:74: 85:11:c7:2f:74:cd:35:d7:4f:ee:ce:3b:c7:53:c4:3c:4c:d1: 11:2c:ce:8e:e9:fe:16:ac:ff:df:82:07:75:1d:d2:93:30:d2: f1:77:9b:5f:b0:a3:e4:2a:1d:5b:18:68:f6:76:ed:95:74:98: 96:38:70:28:ab:09:76:e6:77:b7:f8:bc:c6:eb:e5:7c:00:68: 0f:84:3d:86:73:d0:9c:76:bf:7d:04:f6:a8:41:b7:0f:1b:fb: 0e:7e:1a:b1:e8:d4:84:b3:90:13:c7:15:2e:10:a6:c0:a1:55: 56:9f:d8:22:ec:39:80:1d:68:e7:18:64:68:5c:35:50:f3:4f: 52:0a:c2:3d:56:a8:00:ef:73:ec:72:82:e9:85:02:c8:20:7b: 38:fc:23:e5:1f:65:68:9c:2f:1c:76:0c:d4:21:9b:bd:33:3d: 4f:c0:dc:c2:cb:b1:b8:42:77:95:c2:5a:f9:3b:04:67:10:6b: d2:3f:ff:3f:85:79:91:e8:43:ee:80:7e:a3:67:bb:bb:a2:73: 87:31:a6:5f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUFu6sg88OUf0AhFTWu9n3O8Hmua0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTAyMjgwNTU1MDBaFw0yNjAyMjcwNjAwMDBaMDMxMTAvBgNV BAMTKEQzMDkyRUVFQTVBQzEzQjBBQzAxRDc3QTY1QjMyMjYyNjlBOTJERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmtNIDJtKQwgCl01fZmFpIjSAI 75UIU6tLgD1+Iu+hytOW60R7ZnOPWh0YF7911HJA0ifpAf7K6rtExh9R/AFNFM9X 5jjhalljHg9hT/vOrN/El2szOfeQ/X3DyEGfSOZfCSpRWDzx3O0cUsvTn4NIvfgb wWB6Y9QJo94OrFwMvqlENEym2Wo/Q+Xi1Rtl6uEhdsyVYG5uXEW6E6nCaevmEnAt +xXX0GFJojYitjRQwFJuNfR0gm/RhSYFG4HiNteZDS7C7DsHX1tOZopw00v+KYgR wnRx8kZ/UugKr1UT0e2uuJEOrobOFkNNhNvyC0ccONP1/d6077X7YPzZ7xDHAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU0wku7qWsE7CsAdd6ZbMiYmmpLfAwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNDYzNjBkLTY2MmItNGY3ZC1i YjE3LWQ4NjA4MjE1MjQ3MS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM0MzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqJIwDQYJ KoZIhvcNAQELBQADggEBABWSa30qgWA99ZqT4dTsmHbdTjRJx0v1pIa2//WcUMpo NW6r6VXfs55sOWhBFjBZAGHjhHAOdIURxy90zTXXT+7OO8dTxDxM0REszo7p/has /9+CB3Ud0pMw0vF3m1+wo+QqHVsYaPZ27ZV0mJY4cCirCXbmd7f4vMbr5XwAaA+E PYZz0Jx2v30E9qhBtw8b+w5+GrHo1ISzkBPHFS4QpsChVVaf2CLsOYAdaOcYZGhc NVDzT1IKwj1WqADvc+xygumFAsggezj8I+UfZWicLxx2DNQhm70zPU/A3MLLsbhC d5XCWvk7BGcQa9I//z+FeZHoQ+6AfqNnu7uic4cxpl8= -----END CERTIFICATE-----Generated at Fri Apr 25 22:07:25 2025 by rpki-client on console.sobornost.net