$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa File: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (raw, json) Hash identifier: YAl9IH945cB6nzFZ+Qtu95xtcvqOant2/UNUilOSLzk= Subject key identifier: 41:86:06:E9:49:39:05:11:4E:55:D8:E1:47:FB:46:31:68:51:AF:58 Certificate issuer: /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Certificate serial: 3FB668C42AAB3AA106BD54BCDED41D858EFF57B1 Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa Signing time: Wed 11 Sep 2024 09:00:53 +0000 ROA not before: Wed 11 Sep 2024 08:55:53 +0000 ROA not after: Wed 10 Sep 2025 09:00:53 +0000 asID: 396982 IP address blocks: 103.157.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b6:68:c4:2a:ab:3a:a1:06:bd:54:bc:de:d4:1d:85:8e:ff:57:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Validity Not Before: Sep 11 08:55:53 2024 GMT Not After : Sep 10 09:00:53 2025 GMT Subject: CN=418606E9493905114E55D8E147FB46316851AF58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:a8:ff:0e:b2:3e:28:1d:47:5f:9e:e8:4e: 25:95:c8:5a:b1:fd:4f:01:20:78:7b:a6:31:fb:d7: ad:00:ec:05:d1:d0:27:ce:fd:78:31:51:b8:b5:59: df:bf:80:69:31:6c:76:32:6a:7b:4f:c8:7d:cb:c2: 10:f2:1a:69:1a:4a:f4:80:f6:fc:58:bf:06:f4:f8: 25:0c:75:50:ae:7f:2d:e5:39:14:bf:9f:1e:4c:ec: 60:51:22:01:89:6f:d1:85:ce:44:48:74:a9:88:26: 70:18:13:85:ea:cc:2a:9d:b8:81:4e:23:d2:55:1d: 3d:f3:3a:f3:b7:7b:52:24:13:bd:2c:23:97:41:12: c4:b3:c7:e4:7b:72:d2:d5:c3:e4:0c:a8:09:e5:e7: 93:ba:c4:f7:2b:61:4c:b8:22:6b:e2:47:a1:f8:2c: 8d:bd:8e:b8:25:bf:0e:fe:32:b3:60:c6:7f:19:8a: b9:66:c6:9e:8c:58:31:c8:43:34:5a:a8:84:c2:c4: a6:c7:25:27:62:c2:07:24:03:fe:c7:b2:26:86:fc: 75:d7:87:7f:d8:4e:13:1e:1a:87:9a:df:47:0d:12: 71:93:3b:e8:a2:b8:4f:f8:21:16:e5:dd:0c:ab:e7: c8:08:2c:36:97:7a:82:36:ab:68:b9:48:04:00:b2: fc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:86:06:E9:49:39:05:11:4E:55:D8:E1:47:FB:46:31:68:51:AF:58 X509v3 Authority Key Identifier: keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.55.0/24 Signature Algorithm: sha256WithRSAEncryption 96:bc:b2:f6:67:42:d3:f7:72:43:b2:f1:d7:ae:43:0c:76:9d: 2c:64:1f:f3:9f:1e:db:33:ed:03:7a:17:c7:18:d1:62:a8:7e: cd:a1:17:48:79:2b:0f:64:03:09:85:d5:2b:29:53:0b:a5:2a: a4:95:55:a4:bd:1b:46:ed:fa:44:bc:54:ee:67:d8:bb:1e:99: e3:36:7f:77:eb:1f:01:89:62:d2:1e:6e:15:47:da:f7:32:84: a0:cb:01:43:c5:78:aa:96:89:94:ed:2c:f1:4c:b3:0d:a0:21: 3a:18:e8:a9:3e:ea:18:77:b9:68:54:a4:da:53:74:92:35:f5: 71:8c:40:dd:7b:a6:f2:b6:9b:5d:64:4a:31:89:40:18:29:ea: 3a:a3:50:13:d1:21:8b:85:eb:60:cb:6d:70:f1:0d:7d:9e:6f: e6:6d:6f:a5:cc:88:c9:26:c3:82:75:97:69:0b:70:e2:42:bf: 1f:75:9b:4c:7f:a3:5a:57:07:27:ab:61:6c:3d:51:8f:7a:67: 4f:a8:2a:00:c9:e2:f5:81:d8:8a:59:ff:6d:db:b1:67:c9:8c: 3e:87:cd:aa:45:e9:b8:8d:62:02:47:97:6e:f1:47:bc:b1:79: 6b:b1:3d:dd:a0:38:56:73:e5:97:f9:5e:fe:a0:3d:5c:cc:9f: e6:59:1a:a8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUP7ZoxCqrOqEGvVS83tQdhY7/V7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2 RjNGRTBCMzAeFw0yNDA5MTEwODU1NTNaFw0yNTA5MTAwOTAwNTNaMDMxMTAvBgNV BAMTKDQxODYwNkU5NDkzOTA1MTE0RTU1RDhFMTQ3RkI0NjMxNjg1MUFGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvFaj/DrI+KB1HX57oTiWVyFqx /U8BIHh7pjH7160A7AXR0CfO/XgxUbi1Wd+/gGkxbHYyantPyH3LwhDyGmkaSvSA 9vxYvwb0+CUMdVCufy3lORS/nx5M7GBRIgGJb9GFzkRIdKmIJnAYE4XqzCqduIFO I9JVHT3zOvO3e1IkE70sI5dBEsSzx+R7ctLVw+QMqAnl55O6xPcrYUy4ImviR6H4 LI29jrglvw7+MrNgxn8Zirlmxp6MWDHIQzRaqITCxKbHJSdiwgckA/7HsiaG/HXX h3/YThMeGoea30cNEnGTO+iiuE/4IRbl3Qyr58gILDaXeoI2q2i5SAQAsvwvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQYYG6Uk5BRFOVdjhR/tGMWhRr1gwHwYDVR0j BBgwFoAUoKKlyowgp89toTJcm9XDN28/4LMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjM3NzcxMS0xZTNkLTRlNWEtYTRhYy0wNWExYzUwMmFkMjgvMC9BMEEyQTVDQThD MjBBN0NGNkRBMTMyNUM5QkQ1QzMzNzZGM0ZFMEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2RjNG RTBCMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmMzc3NzExLTFlM2QtNGU1YS1h NGFjLTA1YTFjNTAyYWQyOC8wLzMxMzAzMzJlMzEzNTM3MmUzNTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM2MzkzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ503MA0GCSqG SIb3DQEBCwUAA4IBAQCWvLL2Z0LT93JDsvHXrkMMdp0sZB/znx7bM+0DehfHGNFi qH7NoRdIeSsPZAMJhdUrKVMLpSqklVWkvRtG7fpEvFTuZ9i7HpnjNn936x8BiWLS Hm4VR9r3MoSgywFDxXiqlomU7SzxTLMNoCE6GOipPuoYd7loVKTaU3SSNfVxjEDd e6bytptdZEoxiUAYKeo6o1AT0SGLhetgy21w8Q19nm/mbW+lzIjJJsOCdZdpC3Di Qr8fdZtMf6NaVwcnq2FsPVGPemdPqCoAyeL1gdiKWf9t27FnyYw+h82qRem4jWIC R5du8Ue8sXlrsT3doDhWc+WX+V7+oD1czJ/mWRqo -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net