$ rpki-client -vvf repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa File: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (raw, json) Hash identifier: bnY3Rdf5tjyvjTmTZpR60TzQq/Y/scdeVckhMsSJm4w= Subject key identifier: 78:80:A9:02:B5:C7:1A:F2:21:08:17:B1:C4:25:D9:83:F8:1D:32:37 Certificate issuer: /CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Certificate serial: 0F0AF391B6D6495A2A3B9A64420FEC077C8ED732 Authority key identifier: 40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa Signing time: Wed 14 Aug 2024 05:11:30 +0000 ROA not before: Wed 14 Aug 2024 05:06:30 +0000 ROA not after: Wed 13 Aug 2025 05:11:30 +0000 asID: 137384 IP address blocks: 103.120.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 20:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0a:f3:91:b6:d6:49:5a:2a:3b:9a:64:42:0f:ec:07:7c:8e:d7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Validity Not Before: Aug 14 05:06:30 2024 GMT Not After : Aug 13 05:11:30 2025 GMT Subject: CN=7880A902B5C71AF2210817B1C425D983F81D3237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:1f:c9:a9:ca:31:6a:50:d3:32:de:ec:16: 7a:1d:9f:57:bf:8c:e9:6f:5a:b0:9d:94:eb:dc:c8: 44:62:b7:06:5c:2c:71:cf:21:dc:68:ab:f2:44:85: 07:e8:29:09:b1:96:6c:e4:a6:13:e8:5d:b5:cc:aa: 60:82:a5:29:e8:b8:b1:97:55:2a:3f:ce:72:36:8f: 23:f3:ad:be:4e:cd:1d:8f:42:3f:22:9f:39:99:83: 2c:4c:94:97:5c:15:d8:2f:98:51:a9:42:69:26:5e: c9:8d:cc:bc:bc:f6:0d:68:64:e1:45:3a:bf:8b:aa: d9:7b:93:07:24:f8:d7:77:69:2c:f7:37:ad:83:ac: b5:f8:5a:69:9a:a3:39:2a:7e:0e:a7:d5:c9:80:fb: 1a:c6:e3:f0:4f:81:cc:39:1a:81:0e:66:21:d3:08: 8a:f0:d9:d3:70:30:d0:31:e1:a0:86:87:0a:e6:db: 71:70:5e:57:42:a1:5b:9b:45:33:8f:67:22:09:77: 7a:8a:a3:52:39:3e:6a:54:7e:7d:ae:49:6b:6f:c1: 59:79:6d:26:a2:d2:eb:c9:7e:12:5d:ee:c4:4f:5a: 3c:51:fd:43:b6:99:6b:5e:04:03:08:1f:8c:a0:3b: de:56:51:0d:2a:73:01:97:9e:78:a2:4e:35:e9:8b: 4a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:80:A9:02:B5:C7:1A:F2:21:08:17:B1:C4:25:D9:83:F8:1D:32:37 X509v3 Authority Key Identifier: keyid:40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.232.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:a0:59:ac:fe:54:5e:2e:35:92:d2:00:18:9e:25:c4:19:0a: e4:91:3c:2e:e4:3a:fe:4f:1c:59:97:c3:e8:b5:06:97:ed:5a: 1e:8b:55:53:1c:02:cb:0a:82:41:ea:33:11:e4:fa:f5:00:54: 11:0e:48:e3:70:e0:16:19:be:67:2f:a2:f3:44:43:55:04:2c: 41:e1:bd:c7:48:0b:1f:20:5a:7f:28:01:08:a3:e9:35:e0:fd: 87:78:86:c5:a8:75:33:87:e5:52:9d:8e:da:14:fb:ac:97:56: 85:85:e3:30:f7:98:df:05:02:04:11:d5:51:26:d6:23:c4:f3: 9e:ca:89:97:6a:21:2e:ef:5d:8c:fc:a6:c3:95:79:67:e6:2f: b1:43:e7:94:5d:b6:c5:cc:f2:ed:9c:a9:00:a2:c8:e0:d3:79: 51:01:6e:cf:90:01:5c:57:9c:66:2d:f6:8d:95:0b:17:1e:a9: d1:c6:63:05:6f:0a:3c:e0:25:d3:fc:e9:1f:16:7e:30:82:ec: b6:9e:d1:c4:33:a0:8f:26:21:22:14:04:28:ca:43:c6:16:7e: a0:d2:79:eb:2e:a8:52:ab:0c:ba:94:82:34:62:79:f6:3b:81: f6:10:20:00:bc:03:18:df:c5:3e:9a:3e:00:40:47:5c:c8:04: ba:05:30:92 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDwrzkbbWSVoqO5pkQg/sB3yO1zIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcw NzNBNTUxMjAeFw0yNDA4MTQwNTA2MzBaFw0yNTA4MTMwNTExMzBaMDMxMTAvBgNV BAMTKDc4ODBBOTAyQjVDNzFBRjIyMTA4MTdCMUM0MjVEOTgzRjgxRDMyMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbpR/JqcoxalDTMt7sFnodn1e/ jOlvWrCdlOvcyERitwZcLHHPIdxoq/JEhQfoKQmxlmzkphPoXbXMqmCCpSnouLGX VSo/znI2jyPzrb5OzR2PQj8inzmZgyxMlJdcFdgvmFGpQmkmXsmNzLy89g1oZOFF Or+Lqtl7kwck+Nd3aSz3N62DrLX4Wmmaozkqfg6n1cmA+xrG4/BPgcw5GoEOZiHT CIrw2dNwMNAx4aCGhwrm23FwXldCoVubRTOPZyIJd3qKo1I5PmpUfn2uSWtvwVl5 bSai0uvJfhJd7sRPWjxR/UO2mWteBAMIH4ygO95WUQ0qcwGXnniiTjXpi0oZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUeICpArXHGvIhCBexxCXZg/gdMjcwHwYDVR0j BBgwFoAUQHkZ/2mlEt2ufM1IviiPFwc6VRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmMwMGY3OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC80MDc5MTlGRjY5 QTUxMkREQUU3Q0NENDhCRTI4OEYxNzA3M0E1NTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcwNzNB NTUxMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyYzAwZjc5LTQ5ZWItNDUyNS05 MDI2LWEyMzhmZjQ0ODA3MC8wLzMxMzAzMzJlMzEzMjMwMmUzMjMzMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzM4MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneOgwDQYJ KoZIhvcNAQELBQADggEBAI2gWaz+VF4uNZLSABieJcQZCuSRPC7kOv5PHFmXw+i1 BpftWh6LVVMcAssKgkHqMxHk+vUAVBEOSONw4BYZvmcvovNEQ1UELEHhvcdICx8g Wn8oAQij6TXg/Yd4hsWodTOH5VKdjtoU+6yXVoWF4zD3mN8FAgQR1VEm1iPE857K iZdqIS7vXYz8psOVeWfmL7FD55RdtsXM8u2cqQCiyODTeVEBbs+QAVxXnGYt9o2V CxceqdHGYwVvCjzgJdP86R8WfjCC7Lae0cQzoI8mISIUBCjKQ8YWfqDSeesuqFKr DLqUgjRiefY7gfYQIAC8AxjfxT6aPgBAR1zIBLoFMJI= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:51 2025 by rpki-client on console.sobornost.net