$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa File: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (raw, json) Hash identifier: u22TiDBqhxRDgDXVHX7pAHC7nu8jAukDNtzJmORzlts= Subject key identifier: EC:89:19:76:6A:0A:80:0F:6F:17:C5:7E:49:B5:6A:46:00:E3:17:0C Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 4DA03C60B26AA882E23768098C15FE195C5AC2DE Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa Signing time: Fri 20 Dec 2024 12:00:01 +0000 ROA not before: Fri 20 Dec 2024 11:55:01 +0000 ROA not after: Fri 19 Dec 2025 12:00:01 +0000 asID: 141055 IP address blocks: 103.149.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a0:3c:60:b2:6a:a8:82:e2:37:68:09:8c:15:fe:19:5c:5a:c2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Dec 20 11:55:01 2024 GMT Not After : Dec 19 12:00:01 2025 GMT Subject: CN=EC8919766A0A800F6F17C57E49B56A4600E3170C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:d5:84:4e:f2:42:82:08:e9:af:1c:aa:95:54: 5f:da:90:50:ac:5c:db:b8:b5:1d:7a:83:d8:b2:77: 2a:d5:3c:09:f1:a1:ed:43:be:aa:b7:94:e4:9e:94: 63:d1:b3:10:9a:1b:62:0e:af:65:f2:6c:f4:69:0e: 53:38:71:99:21:bb:79:65:0e:dd:a2:49:18:a4:0b: 3b:38:5b:91:64:70:32:cd:4e:81:86:08:8b:e5:b5: 9d:4c:d8:10:c3:67:5e:ff:21:9c:ef:75:83:31:8e: f3:c4:a6:88:63:8c:a3:35:ba:03:90:85:86:ff:20: b2:5d:eb:6f:2e:ca:f3:85:b3:9d:8f:4d:ff:fc:b2: ab:79:67:c4:f3:20:4c:88:7a:63:ab:7b:8f:e3:53: 1c:d0:d5:c5:56:c2:42:a2:f9:75:45:2e:7a:e2:ff: 07:db:1a:44:41:85:e0:21:f3:e8:55:47:c9:a3:c6: 90:a1:69:fd:eb:38:7a:b3:4d:b2:17:56:a6:7a:a1: 13:14:5d:c1:b9:43:c2:4a:12:ee:32:09:f1:a1:53: d5:ec:f9:98:b8:af:94:b8:a3:8a:13:d1:28:61:33: ee:06:36:90:97:33:e3:b3:80:06:dc:7c:d5:73:74: e7:a0:4e:59:a2:4c:c0:7f:d9:1a:27:38:7f:2e:68: 63:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:89:19:76:6A:0A:80:0F:6F:17:C5:7E:49:B5:6A:46:00:E3:17:0C X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.118.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:cf:9e:c5:53:cb:4a:e7:17:8b:72:96:46:bc:07:50:3c:4f: 34:52:3d:00:79:9d:7f:ea:9a:aa:3a:ff:10:0b:ba:a0:9c:07: 65:f2:e8:72:de:72:b8:b0:fc:f3:c7:5a:58:19:fe:c7:8e:9e: 23:f4:a7:7e:bd:91:20:c9:12:5c:7e:ee:ea:05:33:20:eb:65: 6c:de:c3:eb:66:ab:5a:b5:e1:ac:17:4d:a7:4e:42:97:d3:d5: af:db:f6:56:c4:78:00:21:0c:ce:54:b0:73:19:29:83:8d:70: da:dd:46:a1:40:e0:e2:c4:ff:d7:d6:e2:85:18:48:87:91:6a: 3f:6a:c6:24:3e:ba:dc:98:70:94:db:91:a5:93:44:91:17:4d: 7a:d1:5e:e5:c2:ee:39:41:24:e8:65:d3:ea:e5:3a:6b:df:ea: f3:ee:e8:4d:87:76:27:38:5a:4e:6c:c0:ec:98:ec:d4:dc:12: d7:5d:ef:cf:2a:13:56:02:83:59:84:65:2a:3e:1a:0e:c5:55: 8e:1b:98:7c:99:d9:bb:49:e4:92:a1:96:dd:e6:bc:1a:95:82: e4:a2:67:2a:46:7b:d5:e9:09:be:cc:db:29:da:99:a5:e4:74: d0:ea:15:96:40:76:8c:cc:38:e9:31:d6:bc:d5:71:90:16:4a: db:cc:40:64 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTaA8YLJqqILiN2gJjBX+GVxawt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNDEyMjAxMTU1MDFaFw0yNTEyMTkxMjAwMDFaMDMxMTAvBgNV BAMTKEVDODkxOTc2NkEwQTgwMEY2RjE3QzU3RTQ5QjU2QTQ2MDBFMzE3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD91YRO8kKCCOmvHKqVVF/akFCs XNu4tR16g9iydyrVPAnxoe1Dvqq3lOSelGPRsxCaG2IOr2XybPRpDlM4cZkhu3ll Dt2iSRikCzs4W5FkcDLNToGGCIvltZ1M2BDDZ17/IZzvdYMxjvPEpohjjKM1ugOQ hYb/ILJd628uyvOFs52PTf/8sqt5Z8TzIEyIemOre4/jUxzQ1cVWwkKi+XVFLnri /wfbGkRBheAh8+hVR8mjxpChaf3rOHqzTbIXVqZ6oRMUXcG5Q8JKEu4yCfGhU9Xs +Zi4r5S4o4oT0ShhM+4GNpCXM+OzgAbcfNVzdOegTlmiTMB/2RonOH8uaGOFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU7IkZdmoKgA9vF8V+SbVqRgDjFwwwHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjYzcwZjdkLTMzZmUtNGRmMi04 MWU1LWRjMGQ1NWFjNTE3MC8wLzMxMzAzMzJlMzEzNDM5MmUzMTMxMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM1MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlXYwDQYJ KoZIhvcNAQELBQADggEBAI7PnsVTy0rnF4tylka8B1A8TzRSPQB5nX/qmqo6/xAL uqCcB2Xy6HLecriw/PPHWlgZ/seOniP0p369kSDJElx+7uoFMyDrZWzew+tmq1q1 4awXTadOQpfT1a/b9lbEeAAhDM5UsHMZKYONcNrdRqFA4OLE/9fW4oUYSIeRaj9q xiQ+utyYcJTbkaWTRJEXTXrRXuXC7jlBJOhl0+rlOmvf6vPu6E2Hdic4Wk5swOyY 7NTcEtdd788qE1YCg1mEZSo+Gg7FVY4bmHyZ2btJ5JKhlt3mvBqVguSiZypGe9Xp Cb7M2ynamaXkdNDqFZZAdozMOOkx1rzVcZAWStvMQGQ= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net