$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e312e302f32342d3234203d3e20313439383830.roa File: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (raw, json) Hash identifier: lNbPUGA/82mjhGneJ7g/W99enSkyu+j5sTgsqJn2Sk0= Subject key identifier: 20:A0:80:54:8B:F8:8D:94:9F:49:B7:55:BD:0D:85:14:9C:B8:AC:06 Certificate issuer: /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B Certificate serial: 2489855B1CC0325F5A157A7073D5884A7565FF54 Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e312e302f32342d3234203d3e20313439383830.roa Signing time: Thu 20 Mar 2025 07:02:18 +0000 ROA not before: Thu 20 Mar 2025 06:57:18 +0000 ROA not after: Thu 19 Mar 2026 07:02:18 +0000 asID: 149880 IP address blocks: 103.189.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:89:85:5b:1c:c0:32:5f:5a:15:7a:70:73:d5:88:4a:75:65:ff:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B Validity Not Before: Mar 20 06:57:18 2025 GMT Not After : Mar 19 07:02:18 2026 GMT Subject: CN=20A080548BF88D949F49B755BD0D85149CB8AC06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:be:6b:38:7f:d6:30:a0:a2:f3:b2:67:30: a4:45:b8:1a:e7:f7:df:c1:9b:c2:3f:3d:c4:fa:ec: 1d:e6:e7:64:ac:42:6b:c8:0a:a7:36:e3:d9:e7:50: aa:db:7f:bf:8b:51:97:d9:d9:77:0f:44:13:86:ad: 0b:29:dc:eb:20:62:68:3e:2d:95:ad:8a:8d:0e:b1: 85:5f:b2:f1:11:ab:aa:f1:8b:3a:3d:bb:6c:7d:fd: 6d:5e:12:f0:17:64:0f:52:90:57:94:7e:82:86:97: 67:93:6e:3a:2a:de:d5:14:81:10:fe:af:e1:63:df: 1c:94:30:7c:8e:62:73:44:3b:bd:63:1e:84:1d:9d: 58:3c:a7:e8:84:7d:4a:23:b5:e1:53:7c:8e:0b:80: f4:51:2b:65:d7:24:d2:d4:6e:cc:53:8c:3b:98:35: dd:47:c0:b7:f1:28:08:fe:88:f3:d8:a0:9b:9f:fe: 79:ec:c7:ce:6d:1a:01:0b:5b:97:7b:2e:85:35:e2: e8:34:23:80:e1:c7:35:97:59:0f:ce:85:ba:e9:fc: 82:c0:8e:07:d6:75:cc:4b:83:9c:8e:eb:fb:ed:5e: ea:e9:f0:49:c5:89:87:da:cd:d7:0d:36:db:9d:b3: 5f:5c:30:54:5f:dc:03:c0:1d:ee:9e:f6:8c:99:e2: 09:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A0:80:54:8B:F8:8D:94:9F:49:B7:55:BD:0D:85:14:9C:B8:AC:06 X509v3 Authority Key Identifier: keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e312e302f32342d3234203d3e20313439383830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.1.0/24 Signature Algorithm: sha256WithRSAEncryption 02:ce:ba:e2:75:ea:ba:60:27:95:c4:4c:39:0e:a5:21:b9:42: 0c:64:b6:d7:46:6d:af:55:1c:6d:91:78:9b:eb:b1:9b:92:a4: 7c:03:22:9e:8c:94:23:95:d5:c5:6e:6a:e7:be:b2:a3:02:72: 63:7e:16:ab:66:ed:8f:30:90:3c:b5:54:8a:9f:16:46:cf:6d: 82:cf:e7:6d:74:cc:fc:c2:4b:de:10:42:0d:cd:28:e5:bb:6f: 48:72:12:98:6b:68:50:d8:09:7b:43:69:ac:88:82:bd:ec:8f: 1e:45:fc:b4:b5:4c:01:7c:d1:b7:82:bf:2b:3e:5e:60:9f:fc: 75:e6:c5:87:8b:d2:4e:74:e1:1f:2d:9a:02:90:83:e1:1e:89: 57:2f:25:d9:3d:f6:42:77:72:23:b4:06:04:e8:6d:52:71:bd: 2b:6d:38:a4:88:18:cb:89:dd:7f:80:2b:a1:22:7c:0f:82:79: b3:5e:57:48:90:66:ef:c9:89:19:8f:c5:d2:fd:cb:bb:55:04: 66:28:89:d6:bb:ff:b7:af:0b:61:47:12:b1:8b:fd:66:e8:66: 4b:d3:35:13:2b:1d:e1:d3:d0:7d:a1:d5:30:80:e1:74:42:1c: dc:e8:b2:72:1d:cb:0c:f3:69:2c:87:bf:92:ee:f8:e4:8e:0e: 34:a2:f6:a0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJImFWxzAMl9aFXpwc9WISnVl/1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0 RkY3QTQ4QjAeFw0yNTAzMjAwNjU3MThaFw0yNjAzMTkwNzAyMThaMDMxMTAvBgNV BAMTKDIwQTA4MDU0OEJGODhEOTQ5RjQ5Qjc1NUJEMEQ4NTE0OUNCOEFDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oL5rOH/WMKCi87JnMKRFuBrn 99/Bm8I/PcT67B3m52SsQmvICqc249nnUKrbf7+LUZfZ2XcPRBOGrQsp3OsgYmg+ LZWtio0OsYVfsvERq6rxizo9u2x9/W1eEvAXZA9SkFeUfoKGl2eTbjoq3tUUgRD+ r+Fj3xyUMHyOYnNEO71jHoQdnVg8p+iEfUojteFTfI4LgPRRK2XXJNLUbsxTjDuY Nd1HwLfxKAj+iPPYoJuf/nnsx85tGgELW5d7LoU14ug0I4DhxzWXWQ/Ohbrp/ILA jgfWdcxLg5yO6/vtXurp8EnFiYfazdcNNtuds19cMFRf3APAHe6e9oyZ4gnrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUIKCAVIv4jZSfSbdVvQ2FFJy4rAYwHwYDVR0j BBgwFoAUJtXAY761gLOPKPPMFrlYY0/3pIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWE3NGFjOS04ZmE1LTQzOWItOGYyMS0wOGYyODQ2NzdhYTMvMC8yNkQ1QzA2M0JF QjU4MEIzOEYyOEYzQ0MxNkI5NTg2MzRGRjdBNDhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0RkY3 QTQ4Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5YTc0YWM5LThmYTUtNDM5Yi04 ZjIxLTA4ZjI4NDY3N2FhMy8wLzMxMzAzMzJlMzEzODM5MmUzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzOTM4MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe9ATANBgkqhkiG 9w0BAQsFAAOCAQEAAs664nXqumAnlcRMOQ6lIblCDGS210Ztr1UcbZF4m+uxm5Kk fAMinoyUI5XVxW5q576yowJyY34Wq2btjzCQPLVUip8WRs9tgs/nbXTM/MJL3hBC Dc0o5btvSHISmGtoUNgJe0NprIiCveyPHkX8tLVMAXzRt4K/Kz5eYJ/8debFh4vS TnThHy2aApCD4R6JVy8l2T32QndyI7QGBOhtUnG9K204pIgYy4ndf4AroSJ8D4J5 s15XSJBm78mJGY/F0v3Lu1UEZiiJ1rv/t68LYUcSsYv9ZuhmS9M1Eysd4dPQfaHV MIDhdEIc3Oiych3LDPNpLIe/ku745I4ONKL2oA== -----END CERTIFICATE-----Generated at Sat Apr 26 08:46:12 2025 by rpki-client on console.sobornost.net