$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa File: 3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa (raw, json) Hash identifier: /MSndQdhW7y2Ps5XO1tBE5LRjY41c2iW6OY/QNg9AHs= Subject key identifier: 6E:AA:5E:91:79:25:64:B2:EF:94:86:10:0D:5E:F7:48:0B:B0:46:A8 Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Certificate serial: 03CECB1EB0BC9614214E8B76A6C9324510EE0AA8 Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa Signing time: Sun 06 Apr 2025 15:16:15 +0000 ROA not before: Sun 06 Apr 2025 15:11:15 +0000 ROA not after: Sun 05 Apr 2026 15:16:15 +0000 asID: 45725 IP address blocks: 103.245.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ce:cb:1e:b0:bc:96:14:21:4e:8b:76:a6:c9:32:45:10:ee:0a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Validity Not Before: Apr 6 15:11:15 2025 GMT Not After : Apr 5 15:16:15 2026 GMT Subject: CN=6EAA5E91792564B2EF9486100D5EF7480BB046A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:ae:6d:74:cd:68:95:e8:f2:61:ab:46:b2: 70:89:92:03:10:dc:33:25:34:37:e6:cb:58:91:5c: de:3d:f7:c6:e6:7f:78:28:ea:aa:0a:f9:df:01:3d: 28:7b:36:38:50:4a:e1:e5:22:b3:e5:72:f9:e8:f6: cf:bf:f8:05:4e:9a:b0:9e:ea:00:60:3d:70:f9:76: 74:c5:ca:73:e3:3f:74:78:2b:50:fb:06:59:17:fd: 21:43:47:b2:be:95:c4:e8:77:e6:79:6e:21:6c:1b: 86:3b:78:1d:3b:a2:f2:57:ed:61:bc:83:c1:07:a8: b1:4a:c3:e1:01:42:53:69:b1:b7:48:b1:db:8f:52: 13:a8:37:1c:6f:97:19:16:3e:d7:13:1e:1c:51:77: 10:5c:b0:17:88:b8:6c:ee:dd:42:bb:74:1a:d1:b6: 78:c5:7e:8e:2e:a3:49:8d:03:3c:ff:6c:f6:69:71: b2:12:17:05:68:ed:6b:10:c3:e6:52:a2:d7:5c:09: 60:cd:6d:06:40:91:40:12:41:4e:0b:77:fd:c4:1f: 80:77:b6:b6:74:53:0b:94:a8:5c:5d:4a:34:7c:5f: 16:f9:4a:f2:e9:cf:cf:3b:70:a4:ee:88:09:24:e2: e3:95:54:3d:b0:31:9b:ce:22:b6:60:a9:2b:02:69: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AA:5E:91:79:25:64:B2:EF:94:86:10:0D:5E:F7:48:0B:B0:46:A8 X509v3 Authority Key Identifier: keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.136.0/22 Signature Algorithm: sha256WithRSAEncryption d1:09:e8:d2:4c:70:bb:c4:16:a0:e7:30:cb:3d:a5:4a:41:23: 54:b3:7a:59:5c:fc:b5:48:d6:29:c1:ba:0a:a7:c6:dd:39:6c: 99:d0:aa:ef:35:c5:fb:a2:ab:60:4f:5a:bf:d8:bd:7e:a5:f1: 6a:57:af:bb:20:83:ea:50:5f:f8:b4:3b:06:d9:4e:7b:0c:fb: 8b:00:7d:0e:fb:a1:4a:fe:e6:8e:10:9c:9f:da:59:7e:be:bc: f7:2b:96:eb:75:b5:fe:21:5a:f1:2e:8e:4b:8d:2a:e8:38:0d: 87:d7:68:8b:ac:81:30:33:86:5b:4b:02:ba:24:d4:72:40:4e: bc:70:0c:5a:09:b3:67:09:f8:75:45:d7:58:c8:d2:f3:7f:49: 68:0a:51:05:c7:d8:b4:ac:30:4b:a6:94:66:a9:1d:d8:9f:1a: bf:ba:39:c1:30:57:24:72:f7:32:b4:15:fb:f6:ef:49:ae:d6: 40:24:e7:31:fd:d2:8f:f8:27:b9:f8:dc:97:4f:5d:e1:e6:54: db:f6:82:3d:ca:25:e5:f9:9f:bb:75:51:a8:9f:22:32:55:81: 31:85:ab:c2:6f:a6:85:ca:b6:0d:a6:fb:d0:76:88:e8:69:75: 21:c6:ae:56:7c:e3:00:f6:18:ba:71:f9:9d:dd:5c:d8:f6:33: 07:ad:de:65 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUA87LHrC8lhQhTot2pskyRRDuCqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy NzQ1ODEwMzAeFw0yNTA0MDYxNTExMTVaFw0yNjA0MDUxNTE2MTVaMDMxMTAvBgNV BAMTKDZFQUE1RTkxNzkyNTY0QjJFRjk0ODYxMDBENUVGNzQ4MEJCMDQ2QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0a5tdM1olejyYatGsnCJkgMQ 3DMlNDfmy1iRXN4998bmf3go6qoK+d8BPSh7NjhQSuHlIrPlcvno9s+/+AVOmrCe 6gBgPXD5dnTFynPjP3R4K1D7BlkX/SFDR7K+lcTod+Z5biFsG4Y7eB07ovJX7WG8 g8EHqLFKw+EBQlNpsbdIsduPUhOoNxxvlxkWPtcTHhxRdxBcsBeIuGzu3UK7dBrR tnjFfo4uo0mNAzz/bPZpcbISFwVo7WsQw+ZSotdcCWDNbQZAkUASQU4Ld/3EH4B3 trZ0UwuUqFxdSjR8Xxb5SvLpz887cKTuiAkk4uOVVD2wMZvOIrZgqSsCaZCtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbqpekXklZLLvlIYQDV73SAuwRqgwHwYDVR0j BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1 ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h NzJiLWVjMjczZjQzYmJjMi8wLzMxMzAzMzJlMzIzNDM1MmUzMTMzMzYyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/WIMA0GCSqG SIb3DQEBCwUAA4IBAQDRCejSTHC7xBag5zDLPaVKQSNUs3pZXPy1SNYpwboKp8bd OWyZ0KrvNcX7oqtgT1q/2L1+pfFqV6+7IIPqUF/4tDsG2U57DPuLAH0O+6FK/uaO EJyf2ll+vrz3K5brdbX+IVrxLo5LjSroOA2H12iLrIEwM4ZbSwK6JNRyQE68cAxa CbNnCfh1RddYyNLzf0loClEFx9i0rDBLppRmqR3Ynxq/ujnBMFckcvcytBX79u9J rtZAJOcx/dKP+Ce5+NyXT13h5lTb9oI9yiXl+Z+7dVGonyIyVYExhavCb6aFyrYN pvvQdojoaXUhxq5WfOMA9hi6cfmd3VzY9jMHrd5l -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net