$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa File: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (raw, json) Hash identifier: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg= Subject key identifier: 3E:6A:F9:37:BB:F6:13:3C:7E:C4:A4:06:71:C6:5B:AB:D7:17:B5:E2 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 65A8D359E0FAC3FDBA6F1C05B203EE57D97D174A Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa Signing time: Fri 28 Feb 2025 07:00:05 +0000 ROA not before: Fri 28 Feb 2025 06:55:05 +0000 ROA not after: Fri 27 Feb 2026 07:00:05 +0000 asID: 140443 IP address blocks: 103.168.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a8:d3:59:e0:fa:c3:fd:ba:6f:1c:05:b2:03:ee:57:d9:7d:17:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Feb 28 06:55:05 2025 GMT Not After : Feb 27 07:00:05 2026 GMT Subject: CN=3E6AF937BBF6133C7EC4A40671C65BABD717B5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:09:97:26:2d:cf:27:55:41:cc:2e:61:2e: 38:c4:52:51:e8:97:92:68:6a:3c:7b:97:fe:3e:11: 0d:99:c5:15:20:6a:72:b5:78:c9:31:3a:af:5c:d3: 31:a6:57:ec:c7:c0:c7:f6:45:f4:a2:39:83:57:ce: 1e:d6:af:60:08:98:51:44:fd:07:cb:2f:ef:83:97: 59:38:34:f9:1f:5b:db:80:3f:5e:60:80:e5:5f:e4: 04:60:c2:a3:45:e4:63:07:8d:e8:a5:42:0a:73:0f: 77:d4:f8:02:56:da:ff:bf:42:b0:cb:a2:3c:90:67: bc:9a:7c:9c:c0:6f:34:48:53:68:33:52:6a:aa:e6: 9f:76:b0:ae:59:c5:64:05:fc:85:90:29:37:b9:d0: 0f:35:91:e9:4f:b4:d6:bb:c2:4a:6a:49:42:ba:15: 38:cc:75:7c:b1:6f:1c:b5:57:86:48:1e:96:8a:33: 03:55:9c:34:92:11:7a:51:42:3e:d8:80:e9:48:6b: 53:be:6d:3e:fa:fa:67:09:e8:4e:a0:4c:ea:4e:9e: 97:62:9e:5e:8b:9a:5e:54:42:e2:b8:db:df:dc:74: 46:3b:1c:44:95:33:00:07:e5:ea:64:27:67:30:bf: 0d:54:86:98:63:4f:5d:50:34:d3:42:cd:99:70:64: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6A:F9:37:BB:F6:13:3C:7E:C4:A4:06:71:C6:5B:AB:D7:17:B5:E2 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.146.0/24 Signature Algorithm: sha256WithRSAEncryption 48:e1:9e:91:a3:12:ab:87:4f:b4:39:db:7d:b1:30:be:f7:30: de:ce:98:5e:f0:9e:9c:38:06:06:c2:e8:9d:93:0f:11:45:53: 94:97:5f:6f:d1:96:91:a9:e0:b3:ee:98:75:58:bd:b4:5e:b6: 9b:82:29:21:12:e2:07:37:18:4a:f5:84:cb:c2:08:94:1d:2c: ba:60:99:47:14:bc:27:fa:10:8e:46:37:58:70:7a:7e:f6:8e: 46:bd:ae:2e:ce:fa:df:d4:77:89:c1:89:78:08:fa:81:87:13: 16:9c:17:4a:e7:af:5f:54:20:76:c9:3c:2f:3f:80:f8:cd:3b: 68:7d:1b:df:cf:40:d2:ad:32:64:7f:fe:eb:17:bf:67:f2:4d: 00:d4:fc:41:25:f5:db:15:66:26:3c:ce:15:02:f1:a5:01:28: 85:ea:e3:24:28:31:bf:65:0c:47:16:e8:08:a2:fc:c0:28:5e: 3b:eb:66:71:62:13:de:5d:43:a9:8e:02:c1:b6:17:02:cb:4e: 02:bb:08:40:cb:cc:33:5b:42:12:62:6d:6c:fe:29:42:e2:5a: 1a:ac:79:de:a5:74:67:cb:70:f6:de:f2:8a:86:74:78:54:0c: 39:df:b1:e3:d9:42:00:ec:33:aa:60:57:23:e7:10:16:78:78: 52:1c:b2:de -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZajTWeD6w/26bxwFsgPuV9l9F0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTAyMjgwNjU1MDVaFw0yNjAyMjcwNzAwMDVaMDMxMTAvBgNV BAMTKDNFNkFGOTM3QkJGNjEzM0M3RUM0QTQwNjcxQzY1QkFCRDcxN0I1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjSQmXJi3PJ1VBzC5hLjjEUlHo l5Joajx7l/4+EQ2ZxRUganK1eMkxOq9c0zGmV+zHwMf2RfSiOYNXzh7Wr2AImFFE /QfLL++Dl1k4NPkfW9uAP15ggOVf5ARgwqNF5GMHjeilQgpzD3fU+AJW2v+/QrDL ojyQZ7yafJzAbzRIU2gzUmqq5p92sK5ZxWQF/IWQKTe50A81kelPtNa7wkpqSUK6 FTjMdXyxbxy1V4ZIHpaKMwNVnDSSEXpRQj7YgOlIa1O+bT76+mcJ6E6gTOpOnpdi nl6Lml5UQuK429/cdEY7HESVMwAH5epkJ2cwvw1UhphjT11QNNNCzZlwZH1FAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPmr5N7v2Ezx+xKQGccZbq9cXteIwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNDYzNjBkLTY2MmItNGY3ZC1i YjE3LWQ4NjA4MjE1MjQ3MS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM0MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqJIwDQYJ KoZIhvcNAQELBQADggEBAEjhnpGjEquHT7Q5232xML73MN7OmF7wnpw4BgbC6J2T DxFFU5SXX2/RlpGp4LPumHVYvbRetpuCKSES4gc3GEr1hMvCCJQdLLpgmUcUvCf6 EI5GN1hwen72jka9ri7O+t/Ud4nBiXgI+oGHExacF0rnr19UIHbJPC8/gPjNO2h9 G9/PQNKtMmR//usXv2fyTQDU/EEl9dsVZiY8zhUC8aUBKIXq4yQoMb9lDEcW6Aii /MAoXjvrZnFiE95dQ6mOAsG2FwLLTgK7CEDLzDNbQhJibWz+KULiWhqsed6ldGfL cPbe8oqGdHhUDDnfsePZQgDsM6pgVyPnEBZ4eFIcst4= -----END CERTIFICATE-----Generated at Fri Apr 25 22:07:25 2025 by rpki-client on console.sobornost.net