$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa File: 3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (raw, json) Hash identifier: 1DOr2e/kf4/EN1V5niFiCSQ4eIv5NPl/rOgqgpH4ZuI= Subject key identifier: 5B:C5:79:45:10:4D:98:E6:8F:13:0B:30:EF:8C:47:CC:46:B6:0C:94 Certificate issuer: /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Certificate serial: 29D5334110E01D96BC14FFBBBA97EA4310093EB0 Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa Signing time: Wed 16 Oct 2024 08:02:49 +0000 ROA not before: Wed 16 Oct 2024 07:57:49 +0000 ROA not after: Wed 15 Oct 2025 08:02:49 +0000 asID: 139382 IP address blocks: 103.142.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d5:33:41:10:e0:1d:96:bc:14:ff:bb:ba:97:ea:43:10:09:3e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Validity Not Before: Oct 16 07:57:49 2024 GMT Not After : Oct 15 08:02:49 2025 GMT Subject: CN=5BC57945104D98E68F130B30EF8C47CC46B60C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c2:81:af:44:7a:78:ee:3b:22:d8:9e:ca:2b: c1:2f:91:38:fc:58:64:0e:e7:5e:00:dd:56:1e:f2: f5:0f:cf:08:81:57:da:8e:d3:70:ee:d4:a4:be:f4: 8c:b1:90:ab:56:ee:aa:ee:3f:64:bd:62:52:2e:35: 52:07:90:fe:2b:63:8a:d5:54:45:dd:e6:86:71:b8: fc:d7:e8:3b:4f:17:4c:98:5d:d1:fe:46:a5:54:0a: 90:30:a2:34:75:65:b3:a6:d0:c2:52:6f:6b:f0:81: c1:63:fb:03:02:46:be:3f:ad:19:4d:16:86:09:8e: 5d:c5:34:74:1c:2d:06:22:cb:27:87:6f:81:ae:1a: 8e:a4:85:60:f0:f7:58:d1:41:22:26:ff:42:2f:89: 5a:65:09:77:92:b1:34:5f:30:19:4d:58:45:f4:87: d2:86:8f:39:3d:c6:04:42:c7:9f:4e:5d:61:f3:0f: f0:87:8d:63:09:60:c4:32:ed:13:20:24:e8:30:8a: c7:90:e8:b6:36:f8:58:14:c3:66:e6:eb:88:88:9d: 9a:1a:78:36:ad:85:ea:e3:d0:44:2f:5b:57:f7:c3: 48:39:a0:ac:f8:e1:14:a3:db:37:5f:bf:54:dd:98: 5e:7e:9f:89:7a:33:36:d1:69:34:06:b9:11:9c:24: 6e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C5:79:45:10:4D:98:E6:8F:13:0B:30:EF:8C:47:CC:46:B6:0C:94 X509v3 Authority Key Identifier: keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.240.0/24 Signature Algorithm: sha256WithRSAEncryption d1:f0:da:50:6b:2e:c5:30:10:d1:7e:ba:82:3d:48:31:21:cf: f6:4d:6b:1b:32:25:e7:00:74:62:48:8a:51:2b:1b:a3:2a:e6: 89:c8:e0:38:b6:af:24:db:5f:2d:db:12:9d:95:21:41:6d:8b: 26:ea:63:ab:33:91:2b:cb:34:f5:3f:7c:bb:ec:72:50:35:e5: f7:fa:4e:9d:42:cd:81:19:e6:98:2d:5a:9c:d2:e7:4c:8a:cf: 33:43:77:12:e7:58:fa:9c:05:0c:c5:d1:d7:4b:78:41:de:b7: eb:fc:27:62:27:70:62:8d:fc:f8:cc:36:15:b3:8f:ce:25:fc: 25:47:5b:4c:0e:8e:52:95:d4:33:61:df:85:ed:d9:c0:94:02: 4b:10:97:a5:83:ba:74:c7:c2:07:1b:a0:90:4c:93:24:be:78: 3b:a3:8a:61:72:10:a3:a2:76:d9:6c:61:f7:33:b1:64:75:e3: d0:1f:36:ad:8b:21:f4:98:1a:40:dc:c1:aa:0a:f4:38:6d:d6: aa:73:e8:8d:34:f0:c2:12:95:51:66:59:52:6e:3e:ff:fb:f6: 6b:aa:41:39:c3:24:5c:df:50:0e:c4:16:77:dd:2a:f6:bd:b7: 0b:9f:09:d5:ad:9d:35:18:3c:ec:ee:62:5e:10:ce:8f:24:6f: 75:5c:b9:ce -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKdUzQRDgHZa8FP+7upfqQxAJPrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYy OTNDQjQxRTAeFw0yNDEwMTYwNzU3NDlaFw0yNTEwMTUwODAyNDlaMDMxMTAvBgNV BAMTKDVCQzU3OTQ1MTA0RDk4RTY4RjEzMEIzMEVGOEM0N0NDNDZCNjBDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFwoGvRHp47jsi2J7KK8EvkTj8 WGQO514A3VYe8vUPzwiBV9qO03Du1KS+9IyxkKtW7qruP2S9YlIuNVIHkP4rY4rV VEXd5oZxuPzX6DtPF0yYXdH+RqVUCpAwojR1ZbOm0MJSb2vwgcFj+wMCRr4/rRlN FoYJjl3FNHQcLQYiyyeHb4GuGo6khWDw91jRQSIm/0IviVplCXeSsTRfMBlNWEX0 h9KGjzk9xgRCx59OXWHzD/CHjWMJYMQy7RMgJOgwiseQ6LY2+FgUw2bm64iInZoa eDatherj0EQvW1f3w0g5oKz44RSj2zdfv1TdmF5+n4l6MzbRaTQGuRGcJG5dAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUW8V5RRBNmOaPEwsw74xHzEa2DJQwHwYDVR0j BBgwFoAUWjPmuCAASHsgTS4oS8oQryk8tB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTQxYmE3ZS02YzQyLTRjMjItYjEzYy01NDhmYzcyNzJhM2QvMC81QTMzRTZCODIw MDA0ODdCMjA0RDJFMjg0QkNBMTBBRjI5M0NCNDFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYyOTND QjQxRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlNDFiYTdlLTZjNDItNGMyMi1i MTNjLTU0OGZjNzI3MmEzZC8wLzMxMzAzMzJlMzEzNDMyMmUzMjM0MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjvAwDQYJ KoZIhvcNAQELBQADggEBANHw2lBrLsUwENF+uoI9SDEhz/ZNaxsyJecAdGJIilEr G6Mq5onI4Di2ryTbXy3bEp2VIUFtiybqY6szkSvLNPU/fLvsclA15ff6Tp1CzYEZ 5pgtWpzS50yKzzNDdxLnWPqcBQzF0ddLeEHet+v8J2IncGKN/PjMNhWzj84l/CVH W0wOjlKV1DNh34Xt2cCUAksQl6WDunTHwgcboJBMkyS+eDujimFyEKOidtlsYfcz sWR149AfNq2LIfSYGkDcwaoK9Dht1qpz6I008MISlVFmWVJuPv/79muqQTnDJFzf UA7EFnfdKva9twufCdWtnTUYPOzuYl4Qzo8kb3Vcuc4= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net