$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32372e302f32342d3234203d3e20313530323832.roa File: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (raw, json) Hash identifier: BlULhi+TctVeKV8dE0CflZMYmvk41Sd1spCHrO2rX3k= Subject key identifier: 6A:BA:58:3D:24:6E:D2:CB:28:D4:C4:22:67:45:D8:67:09:66:6A:EB Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 221B93C745B4C8DE6EB55E88DD367C8A70EB2C41 Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32372e302f32342d3234203d3e20313530323832.roa Signing time: Sat 25 Jan 2025 04:00:02 +0000 ROA not before: Sat 25 Jan 2025 03:55:02 +0000 ROA not after: Sat 24 Jan 2026 04:00:02 +0000 asID: 150282 IP address blocks: 103.43.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:1b:93:c7:45:b4:c8:de:6e:b5:5e:88:dd:36:7c:8a:70:eb:2c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Jan 25 03:55:02 2025 GMT Not After : Jan 24 04:00:02 2026 GMT Subject: CN=6ABA583D246ED2CB28D4C4226745D86709666AEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bb:ba:60:3c:e3:3b:a0:ff:be:03:95:1f:b2: 04:f8:82:91:c7:fc:4f:54:82:38:7b:2c:3d:7a:26: 91:ee:61:b7:8e:c8:c9:40:71:04:47:62:84:29:d2: 3c:c6:49:59:02:b4:54:ac:6b:a1:33:d9:a0:44:ce: 95:ff:da:49:c1:89:e8:8b:ea:68:1e:4a:3b:eb:35: 5c:54:83:2f:94:aa:29:31:4e:4c:a1:31:cf:09:4d: fd:ca:cf:57:e7:98:83:87:00:ff:ff:ad:29:f9:11: 48:80:cd:5d:d5:15:af:79:b4:97:df:0a:88:2f:5f: 18:5a:ab:a9:41:87:90:a8:b8:e5:22:02:57:74:d8: e9:28:e3:df:81:96:d8:53:3a:f8:18:c0:3b:53:11: d4:b6:e9:f2:82:57:0c:39:83:c3:d8:bf:cf:c5:72: bb:dc:26:80:02:ad:38:da:99:7c:db:13:ae:16:22: d3:c9:78:66:c0:61:d6:36:15:75:71:cf:45:6d:e1: ab:9c:38:6b:b1:a9:30:01:8f:1c:44:2f:ed:b3:44: 68:bf:e1:4f:b9:39:27:80:73:68:46:6a:83:f1:12: d9:e4:50:8e:7b:f8:20:32:47:62:47:ec:9d:1d:16: f0:91:af:39:cc:7e:71:a2:2a:0d:c2:68:48:06:dd: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BA:58:3D:24:6E:D2:CB:28:D4:C4:22:67:45:D8:67:09:66:6A:EB X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32372e302f32342d3234203d3e20313530323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.27.0/24 Signature Algorithm: sha256WithRSAEncryption c8:77:f7:b6:5f:84:d4:f5:00:e6:4d:6f:57:26:65:a7:df:d8: 0d:f5:97:a0:9e:e3:23:a3:a2:56:9b:7d:ad:3d:25:3e:b9:8d: 4c:53:ee:a1:db:fb:a7:9a:ed:3d:be:6f:39:0c:93:7e:ef:be: 66:ca:e9:8a:b6:b2:cb:a6:a8:d6:70:21:d4:40:e0:22:d8:b1: db:ff:4d:5e:9f:40:a6:00:71:30:03:d2:bb:d0:94:25:22:ab: 5b:ab:0a:43:4a:5b:45:74:7a:1a:9f:92:5c:34:91:be:ec:67: 36:2b:2e:07:0e:f5:09:d6:8a:a6:6d:8c:fa:2f:79:1f:27:7e: 70:59:00:e7:b4:c8:f8:a1:77:19:2f:65:e2:75:7d:ca:4b:91: c1:4d:bf:f3:fc:13:82:ff:cd:4e:f2:9f:a3:98:13:34:8a:ed: d6:67:0a:ca:3b:d6:db:74:86:c9:b8:b3:c4:45:53:44:e4:cd: 10:e4:fa:b8:21:22:e3:86:e7:32:12:c4:d3:9e:b2:de:d2:58: fe:bc:98:e3:dd:46:6a:4b:28:64:20:58:48:de:41:b5:59:b5: 91:e6:4c:44:a8:47:67:6a:72:e6:88:0c:bb:91:48:e6:17:09: 72:97:b1:23:8d:d4:b3:53:8b:14:a9:bc:a3:10:f5:fd:c5:9c: f4:90:2b:15 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIhuTx0W0yN5utV6I3TZ8inDrLEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNTAxMjUwMzU1MDJaFw0yNjAxMjQwNDAwMDJaMDMxMTAvBgNV BAMTKDZBQkE1ODNEMjQ2RUQyQ0IyOEQ0QzQyMjY3NDVEODY3MDk2NjZBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCu7pgPOM7oP++A5UfsgT4gpHH /E9Ugjh7LD16JpHuYbeOyMlAcQRHYoQp0jzGSVkCtFSsa6Ez2aBEzpX/2knBieiL 6mgeSjvrNVxUgy+UqikxTkyhMc8JTf3Kz1fnmIOHAP//rSn5EUiAzV3VFa95tJff CogvXxhaq6lBh5CouOUiAld02Oko49+BlthTOvgYwDtTEdS26fKCVww5g8PYv8/F crvcJoACrTjamXzbE64WItPJeGbAYdY2FXVxz0Vt4aucOGuxqTABjxxEL+2zRGi/ 4U+5OSeAc2hGaoPxEtnkUI57+CAyR2JH7J0dFvCRrznMfnGiKg3CaEgG3eI9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUarpYPSRu0sso1MQiZ0XYZwlmauswHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxMjRiNGI1LTc4MTMtNDZjZC05 ZGI0LWEzY2Q1ODVlMGVkNC8wLzMxMzAzMzJlMzQzMzJlMzIzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcrGzANBgkqhkiG 9w0BAQsFAAOCAQEAyHf3tl+E1PUA5k1vVyZlp9/YDfWXoJ7jI6OiVpt9rT0lPrmN TFPuodv7p5rtPb5vOQyTfu++Zsrpirayy6ao1nAh1EDgItix2/9NXp9ApgBxMAPS u9CUJSKrW6sKQ0pbRXR6Gp+SXDSRvuxnNisuBw71CdaKpm2M+i95Hyd+cFkA57TI +KF3GS9l4nV9ykuRwU2/8/wTgv/NTvKfo5gTNIrt1mcKyjvW23SGybizxEVTROTN EOT6uCEi44bnMhLE056y3tJY/ryY491GaksoZCBYSN5BtVm1keZMRKhHZ2py5ogM u5FI5hcJcpexI43Us1OLFKm8oxD1/cWc9JArFQ== -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net