$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/3130332e3133352e34382e302f32322d3234203d3e203338333230.roa File: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU= Subject key identifier: 7A:1C:12:D2:05:AF:13:D6:8F:07:06:EC:CA:D9:2B:A1:DC:78:00:9C Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 0B2818B74FEBD0DCE5EB2E248873C77E24EE2FCC Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/3130332e3133352e34382e302f32322d3234203d3e203338333230.roa Signing time: Wed 16 Apr 2025 06:02:23 +0000 ROA not before: Wed 16 Apr 2025 05:57:23 +0000 ROA not after: Wed 15 Apr 2026 06:02:23 +0000 asID: 38320 IP address blocks: 103.135.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:28:18:b7:4f:eb:d0:dc:e5:eb:2e:24:88:73:c7:7e:24:ee:2f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Apr 16 05:57:23 2025 GMT Not After : Apr 15 06:02:23 2026 GMT Subject: CN=7A1C12D205AF13D68F0706ECCAD92BA1DC78009C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:8c:2d:fe:f3:e3:d2:70:cb:26:76:ce:d6: ca:b2:12:49:d1:fa:c0:d2:7a:9a:26:0b:23:62:c2: 90:e0:54:45:f3:60:96:34:50:81:7a:19:b9:2c:6c: c3:39:19:86:b5:97:3e:02:81:e8:c2:ae:01:13:f2: e6:3c:da:33:8f:1c:bc:9d:58:e0:58:57:5c:66:7f: 8d:64:44:e6:0f:23:32:0b:4b:77:62:d7:81:6e:a8: e3:31:61:b5:98:b2:dd:6b:fe:ba:69:15:d4:94:68: 2a:a3:ef:b9:c7:24:be:41:d0:55:2d:e5:34:79:81: 66:47:99:dd:76:20:b3:e8:7b:43:46:ab:cd:63:86: fd:d3:6a:cf:bb:43:e6:ce:e9:9f:2c:7f:cb:04:17: 0e:15:14:b1:b5:38:ae:30:cc:54:ec:f1:9e:02:4a: 7d:f0:93:e6:1b:52:40:3f:1f:f5:aa:63:d7:c0:5e: 61:16:18:c6:4b:59:df:5e:06:93:3c:55:5f:87:bc: 4f:4f:08:09:53:b0:81:d5:85:bd:10:ed:9a:a6:e8: 94:5f:d7:54:b8:eb:98:40:91:e3:d5:65:74:6d:c1: eb:f4:c8:84:7c:6c:67:0e:24:5e:8a:c9:44:0d:15: 8b:3c:5e:f5:ab:82:21:f0:da:e5:49:94:a0:cb:90: 8d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1C:12:D2:05:AF:13:D6:8F:07:06:EC:CA:D9:2B:A1:DC:78:00:9C X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/3130332e3133352e34382e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.48.0/22 Signature Algorithm: sha256WithRSAEncryption 72:5d:1d:93:2c:99:95:e8:29:43:02:7b:ee:20:9c:c8:e9:de: e9:1b:7d:2d:11:89:14:3c:13:60:0e:aa:78:ac:34:d6:97:4d: 32:d5:4b:38:d4:ac:a8:0c:f8:8c:ec:8e:6a:87:62:04:30:32: c0:3f:2e:13:c6:36:39:af:d7:29:9f:5a:e7:c5:b4:6b:bc:82: fe:f9:19:e4:96:7e:ed:62:d0:ca:72:40:d9:78:5d:62:13:16: c6:3c:c9:36:30:0b:17:85:c9:5d:a2:7a:32:ff:3b:55:b0:a1: 92:2a:03:b4:bf:35:e9:aa:ab:09:d8:f5:ff:8d:a0:1a:6a:df: b2:82:c1:33:35:ea:e3:d3:cd:a0:6b:48:b2:f8:e8:d8:67:0a: d4:c8:7f:fc:9b:4f:43:d1:c0:3c:19:90:d2:f7:db:24:99:7a: 68:e2:62:c1:a2:9b:60:23:9d:56:f8:d3:1f:41:92:a0:28:81: 5c:70:7c:08:05:81:60:d8:c3:b7:26:bd:2f:7c:ff:4e:1e:58: e0:f6:f7:d8:fe:f7:62:5b:7a:fa:23:03:de:15:58:95:f4:04: 8c:43:af:49:f6:a0:cc:49:43:9b:95:7d:d6:50:d1:96:cf:c2: 2e:1f:f3:4e:89:43:b7:cd:a4:23:0d:b7:56:96:3a:48:1c:67: c5:2b:b8:5b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCygYt0/r0Nzl6y4kiHPHfiTuL8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNTA0MTYwNTU3MjNaFw0yNjA0MTUwNjAyMjNaMDMxMTAvBgNV BAMTKDdBMUMxMkQyMDVBRjEzRDY4RjA3MDZFQ0NBRDkyQkExREM3ODAwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbowt/vPj0nDLJnbO1sqyEknR +sDSepomCyNiwpDgVEXzYJY0UIF6GbksbMM5GYa1lz4CgejCrgET8uY82jOPHLyd WOBYV1xmf41kROYPIzILS3di14FuqOMxYbWYst1r/rppFdSUaCqj77nHJL5B0FUt 5TR5gWZHmd12ILPoe0NGq81jhv3Tas+7Q+bO6Z8sf8sEFw4VFLG1OK4wzFTs8Z4C Sn3wk+YbUkA/H/WqY9fAXmEWGMZLWd9eBpM8VV+HvE9PCAlTsIHVhb0Q7Zqm6JRf 11S465hAkePVZXRtwev0yIR8bGcOJF6KyUQNFYs8XvWrgiHw2uVJlKDLkI3xAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUehwS0gWvE9aPBwbsytkrodx4AJwwHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRjY2MyYWY0LWE2MmQtNDcwOC1i Njg4LTE4OTI1OTRiYTk4OS8wLzMxMzAzMzJlMzEzMzM1MmUzNDM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmeHMDANBgkqhkiG 9w0BAQsFAAOCAQEAcl0dkyyZlegpQwJ77iCcyOne6Rt9LRGJFDwTYA6qeKw01pdN MtVLONSsqAz4jOyOaodiBDAywD8uE8Y2Oa/XKZ9a58W0a7yC/vkZ5JZ+7WLQynJA 2XhdYhMWxjzJNjALF4XJXaJ6Mv87VbChkioDtL816aqrCdj1/42gGmrfsoLBMzXq 49PNoGtIsvjo2GcK1Mh//JtPQ9HAPBmQ0vfbJJl6aOJiwaKbYCOdVvjTH0GSoCiB XHB8CAWBYNjDtya9L3z/Th5Y4Pb32P73Ylt6+iMD3hVYlfQEjEOvSfagzElDm5V9 1lDRls/CLh/zTolDt82kIw23VpY6SBxnxSu4Ww== -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net