$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa File: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (raw, json) Hash identifier: 4xFtj009j2KyXApXnh4MToBnYNS6TXxPJe0g07ZPzfw= Subject key identifier: 3A:0A:17:E7:12:85:65:28:AB:37:26:95:FD:71:12:0A:38:90:2A:1B Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 3DBB7DE954330B1528151272793A1DAF5991704F Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa Signing time: Fri 27 Dec 2024 14:03:36 +0000 ROA not before: Fri 27 Dec 2024 13:58:36 +0000 ROA not after: Fri 26 Dec 2025 14:03:36 +0000 asID: 138821 IP address blocks: 103.136.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:bb:7d:e9:54:33:0b:15:28:15:12:72:79:3a:1d:af:59:91:70:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Dec 27 13:58:36 2024 GMT Not After : Dec 26 14:03:36 2025 GMT Subject: CN=3A0A17E712856528AB372695FD71120A38902A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:53:5a:b1:6e:a3:a0:80:24:d6:95:84:3d:83: 9f:32:84:3b:8b:de:24:38:a6:fa:11:e7:f5:35:99: 04:36:c5:df:17:1f:9f:4a:ab:f3:cb:c0:04:31:14: c4:c8:0c:9c:19:ca:2f:9a:1c:22:bb:1a:4e:2a:da: 02:28:22:de:10:18:de:85:2b:d7:92:fc:76:69:6c: 31:2a:c3:85:cf:c5:f3:03:92:d7:95:8d:9a:c9:d5: 76:bc:e8:f6:bb:11:5f:23:f2:0f:c4:91:9f:60:10: de:54:02:84:5d:b6:c2:43:bc:01:c7:ed:83:cd:cd: 60:54:50:60:91:a4:bb:f3:69:cd:81:01:80:a4:9f: ea:f4:2b:d3:50:37:be:4c:e3:5b:87:90:a6:ee:39: 5d:a5:37:e1:69:8b:f3:2a:5b:94:2e:01:37:2f:54: 0c:f6:ba:16:f0:cd:99:36:dd:75:36:cb:10:9b:81: 0f:3e:4d:17:b9:b4:b2:3c:20:3e:3d:1f:7b:ff:ea: 3f:cc:06:d6:4e:1e:56:3a:11:d8:db:ee:68:f6:0a: bf:30:9b:aa:80:48:09:88:96:0a:61:30:ea:74:42: e7:7e:aa:76:85:1a:eb:d5:ea:a8:7e:ad:fe:6e:fe: 17:a1:ea:9e:40:bb:57:8d:8c:37:01:e9:20:8e:63: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0A:17:E7:12:85:65:28:AB:37:26:95:FD:71:12:0A:38:90:2A:1B X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.15.0/24 Signature Algorithm: sha256WithRSAEncryption 47:f7:72:28:bb:12:6b:70:64:7c:87:ff:eb:ca:e1:f2:0e:c7: 3b:07:af:84:bb:45:5f:67:a3:0f:2a:35:d5:e4:ed:78:69:70: f3:71:0b:4b:6e:d2:8d:c0:80:11:d4:71:08:83:df:22:58:b2: 4d:22:a1:2b:ef:44:3e:7a:ef:b5:d5:64:7f:8b:42:50:b4:0b: d7:32:d9:cd:df:6f:1e:80:bc:21:e5:8e:3c:22:f0:a2:24:43: 7b:a8:23:8b:19:71:3c:7a:eb:65:ee:ac:76:77:36:e5:a2:57: 61:55:76:35:21:44:6e:ee:90:38:87:06:ec:64:c3:f1:6c:50: 09:1e:da:b2:ca:94:85:ff:da:7c:e4:1f:14:44:53:9d:56:39: 59:d8:e5:49:c4:2e:55:8b:7f:0a:67:28:24:89:67:9d:41:a7: 4b:51:d3:43:33:4e:30:1e:7e:b5:01:e5:7b:49:9a:51:b6:dc: ff:15:f9:d7:2b:c6:08:df:ad:8d:c9:c4:57:7c:f4:5a:75:c9: 0f:cd:37:6e:23:17:94:34:1b:2d:f8:dc:f3:41:07:3c:f0:a3: 52:f0:f7:11:14:5f:63:d0:56:09:7a:18:ca:52:0f:22:80:af: f7:b2:6c:1b:2d:be:83:e5:ab:1b:24:0e:9a:d9:79:2a:38:a6: af:8e:66:52 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPbt96VQzCxUoFRJyeTodr1mRcE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNDEyMjcxMzU4MzZaFw0yNTEyMjYxNDAzMzZaMDMxMTAvBgNV BAMTKDNBMEExN0U3MTI4NTY1MjhBQjM3MjY5NUZENzExMjBBMzg5MDJBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvU1qxbqOggCTWlYQ9g58yhDuL 3iQ4pvoR5/U1mQQ2xd8XH59Kq/PLwAQxFMTIDJwZyi+aHCK7Gk4q2gIoIt4QGN6F K9eS/HZpbDEqw4XPxfMDkteVjZrJ1Xa86Pa7EV8j8g/EkZ9gEN5UAoRdtsJDvAHH 7YPNzWBUUGCRpLvzac2BAYCkn+r0K9NQN75M41uHkKbuOV2lN+Fpi/MqW5QuATcv VAz2uhbwzZk23XU2yxCbgQ8+TRe5tLI8ID49H3v/6j/MBtZOHlY6Edjb7mj2Cr8w m6qASAmIlgphMOp0Qud+qnaFGuvV6qh+rf5u/heh6p5Au1eNjDcB6SCOY7VjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOgoX5xKFZSirNyaV/XESCjiQKhswHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMWIxYzFiLTY1NmMtNDg5ZC05 ZWQzLWNjYzc3YzgzMDE4ZC8wLzMxMzAzMzJlMzEzMzM2MmUzMTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4gPMA0GCSqG SIb3DQEBCwUAA4IBAQBH93IouxJrcGR8h//ryuHyDsc7B6+Eu0VfZ6MPKjXV5O14 aXDzcQtLbtKNwIAR1HEIg98iWLJNIqEr70Q+eu+11WR/i0JQtAvXMtnN328egLwh 5Y48IvCiJEN7qCOLGXE8eutl7qx2dzbloldhVXY1IURu7pA4hwbsZMPxbFAJHtqy ypSF/9p85B8URFOdVjlZ2OVJxC5Vi38KZygkiWedQadLUdNDM04wHn61AeV7SZpR ttz/FfnXK8YI362NycRXfPRadckPzTduIxeUNBst+NzzQQc88KNS8PcRFF9j0FYJ ehjKUg8igK/3smwbLb6D5asbJA6a2XkqOKavjmZS -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net