$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa File: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (raw, json) Hash identifier: crt2F/X+RQnPJrrglVZI7zbLddWcN6j7uVz/Xw4zeS8= Subject key identifier: 19:76:07:26:D8:12:63:3C:91:CB:34:FC:2E:4A:6D:08:05:A7:6D:AD Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Certificate serial: 3FF725DD26F1B39F6FE0A701FAEA518F0A44738C Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa Signing time: Fri 20 Dec 2024 09:00:01 +0000 ROA not before: Fri 20 Dec 2024 08:55:01 +0000 ROA not after: Fri 19 Dec 2025 09:00:01 +0000 asID: 141968 IP address blocks: 103.42.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 22:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f7:25:dd:26:f1:b3:9f:6f:e0:a7:01:fa:ea:51:8f:0a:44:73:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Validity Not Before: Dec 20 08:55:01 2024 GMT Not After : Dec 19 09:00:01 2025 GMT Subject: CN=19760726D812633C91CB34FC2E4A6D0805A76DAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:00:cf:38:6e:9f:19:72:e4:83:97:fc:17: 6f:e0:55:06:3c:34:2d:52:58:72:d8:eb:53:37:56: bd:a0:12:d5:f8:63:c3:23:19:1d:0e:cd:49:78:b8: d5:81:77:a5:cb:db:f7:7f:23:77:40:f9:b5:32:09: 66:d1:b6:eb:7b:b3:53:a9:bf:7b:fc:da:7d:e0:62: 1a:13:07:a6:57:3f:5a:23:b2:77:7b:77:2a:7e:fe: 0e:5d:dd:f1:ca:56:6c:05:b2:1c:1a:d2:45:9a:99: 8b:62:8d:4b:24:54:d4:c4:14:c9:f9:6c:df:1e:b4: 40:ae:18:c0:53:05:c2:c1:5e:3c:c6:ba:17:7b:46: 44:df:ee:03:98:ee:f7:16:0b:66:4a:9d:53:df:44: e6:79:a3:11:64:4f:05:6c:9d:eb:05:91:e4:10:90: 63:19:35:ab:05:05:e6:11:5f:c8:39:a1:17:47:29: 12:bb:77:75:53:71:8f:5e:73:b3:12:eb:94:ed:54: 38:29:b2:0a:c8:47:07:6b:f1:b8:77:19:70:93:6c: 99:e9:a8:c9:be:d9:82:94:ff:85:ab:d3:2c:07:72: d4:70:11:11:a4:e1:9c:9d:79:14:e6:86:4d:fa:6d: ff:49:3b:6f:a7:e0:f3:26:af:ae:5f:ad:2c:62:e0: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:76:07:26:D8:12:63:3C:91:CB:34:FC:2E:4A:6D:08:05:A7:6D:AD X509v3 Authority Key Identifier: keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.117.0/24 Signature Algorithm: sha256WithRSAEncryption 23:0f:60:45:38:2a:61:2d:78:ca:b3:82:1a:06:b5:41:80:06: f3:2a:42:7a:e6:92:16:b5:a1:cd:19:16:3b:e5:f9:43:ab:34: ba:30:b1:a4:c8:f3:35:ec:ad:cd:f8:12:15:3f:d5:c8:d3:cb: fb:55:5f:d0:80:f0:13:d4:e3:21:bd:f6:7a:e8:d4:8c:bd:07: e0:99:be:3d:96:10:dc:7e:e7:64:72:a6:e1:23:18:c9:42:27: a4:b4:8b:21:0f:67:42:17:23:99:e4:44:d5:3b:0a:e3:8b:29: 3d:70:70:56:d7:c0:20:50:22:18:6d:53:0d:dc:7c:e8:49:87: 17:86:5c:cc:d8:0d:46:88:36:a4:f9:f5:80:f8:a1:c2:83:12: b5:2d:47:b2:ff:ef:c3:85:43:91:1d:18:73:72:99:e3:09:57: 0e:8b:c2:1e:93:8d:fd:a3:09:8c:72:50:eb:db:b5:e3:84:df: d5:48:3b:f9:08:ab:68:59:f4:b5:2e:43:d9:a9:d9:28:a5:c5: 52:5d:7d:e0:e1:60:38:b1:50:2a:a1:5f:aa:e3:66:d8:12:9e: da:51:28:59:68:1a:68:a8:a9:ca:8d:80:06:0e:61:ba:cf:2b: d6:b4:5b:7a:b4:1f:88:c1:da:95:34:75:76:c9:5e:cb:1d:bb: 30:d1:d1:90 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUP/cl3Sbxs59v4KcB+upRjwpEc4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1 QjQ5OTlEODAeFw0yNDEyMjAwODU1MDFaFw0yNTEyMTkwOTAwMDFaMDMxMTAvBgNV BAMTKDE5NzYwNzI2RDgxMjYzM0M5MUNCMzRGQzJFNEE2RDA4MDVBNzZEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64gDPOG6fGXLkg5f8F2/gVQY8 NC1SWHLY61M3Vr2gEtX4Y8MjGR0OzUl4uNWBd6XL2/d/I3dA+bUyCWbRtut7s1Op v3v82n3gYhoTB6ZXP1ojsnd7dyp+/g5d3fHKVmwFshwa0kWamYtijUskVNTEFMn5 bN8etECuGMBTBcLBXjzGuhd7RkTf7gOY7vcWC2ZKnVPfROZ5oxFkTwVsnesFkeQQ kGMZNasFBeYRX8g5oRdHKRK7d3VTcY9ec7MS65TtVDgpsgrIRwdr8bh3GXCTbJnp qMm+2YKU/4Wr0ywHctRwERGk4ZydeRTmhk36bf9JO2+n4PMmr65frSxi4IazAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGXYHJtgSYzyRyzT8LkptCAWnba0wHwYDVR0j BBgwFoAUb0ha2tIGgzf9+LKP8Ae83FtJmdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjU4OTM0ZC0xYjAwLTQ0ODktOTJlZC0xY2E2ZGM0YjI5MGYvMC82RjQ4NUFEQUQy MDY4MzM3RkRGOEIyOEZGMDA3QkNEQzVCNDk5OUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1QjQ5 OTlEOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNTg5MzRkLTFiMDAtNDQ4OS05 MmVkLTFjYTZkYzRiMjkwZi8wLzMxMzAzMzJlMzQzMjJlMzEzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyp1MA0GCSqG SIb3DQEBCwUAA4IBAQAjD2BFOCphLXjKs4IaBrVBgAbzKkJ65pIWtaHNGRY75flD qzS6MLGkyPM17K3N+BIVP9XI08v7VV/QgPAT1OMhvfZ66NSMvQfgmb49lhDcfudk cqbhIxjJQiektIshD2dCFyOZ5ETVOwrjiyk9cHBW18AgUCIYbVMN3HzoSYcXhlzM 2A1GiDak+fWA+KHCgxK1LUey/+/DhUORHRhzcpnjCVcOi8Iek439owmMclDr27Xj hN/VSDv5CKtoWfS1LkPZqdkopcVSXX3g4WA4sVAqoV+q42bYEp7aUShZaBpoqKnK jYAGDmG6zyvWtFt6tB+IwdqVNHV2yV7LHbsw0dGQ -----END CERTIFICATE-----Generated at Tue Apr 22 16:57:25 2025 by rpki-client on console.sobornost.net