$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3234203d3e20313530323736.roa File: 3130332e34312e3234382e302f32332d3234203d3e20313530323736.roa (raw, json) Hash identifier: 8uxRYWUgHIUfwr7n9e7HylSwtUQGrI8/5t+zL346WDc= Subject key identifier: 29:DB:38:D5:F5:FA:99:D1:DE:E0:08:48:DB:CF:44:95:9A:0F:06:E3 Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 6B9D75731DF45D5346AFA13F36727DCA6A78BBAD Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3234203d3e20313530323736.roa Signing time: Tue 22 Apr 2025 08:22:25 +0000 ROA not before: Tue 22 Apr 2025 08:17:25 +0000 ROA not after: Tue 21 Apr 2026 08:22:25 +0000 asID: 150276 IP address blocks: 103.41.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9d:75:73:1d:f4:5d:53:46:af:a1:3f:36:72:7d:ca:6a:78:bb:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Apr 22 08:17:25 2025 GMT Not After : Apr 21 08:22:25 2026 GMT Subject: CN=29DB38D5F5FA99D1DEE00848DBCF44959A0F06E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:ce:c4:6b:6c:90:b2:65:55:47:5c:68:23: 50:77:83:02:76:92:4e:83:86:23:d4:eb:e3:c8:86: 7b:f2:05:76:33:a3:15:19:2b:f4:8a:34:1f:bd:cf: 8f:0d:8e:2e:2b:9b:ee:6c:46:ae:0e:23:9e:37:c6: 9a:b5:7e:48:b7:09:ae:73:76:20:ac:5b:00:4d:bb: f8:18:6a:e3:03:ca:0a:d9:31:7b:cc:f6:ca:29:c9: f0:be:a1:00:62:30:29:ee:0e:d1:a3:81:21:e8:1f: 92:21:b2:ed:d7:6d:65:cb:97:ca:c5:8a:77:b8:37: d3:07:e2:2c:be:45:80:21:39:cd:39:b9:a0:a6:a1: f3:84:35:7e:05:e0:63:70:dd:b6:53:37:93:9f:ce: d3:90:d6:61:96:15:9e:8f:28:83:4a:7d:a4:89:a7: 0e:1b:b6:e3:be:f6:cc:69:f6:b3:e5:79:26:a8:75: 9e:dd:a5:3e:9b:b4:d5:56:10:2e:ea:69:97:f2:3c: a8:06:dc:2a:0a:9c:f5:03:09:1a:78:0e:ad:34:e3: e4:b9:b8:14:e6:22:de:85:7b:49:42:a7:0c:5a:22: 57:d3:59:21:55:fb:20:8b:41:d4:79:f5:bc:3f:51: 3d:9d:8e:df:6a:d4:05:08:32:f5:0d:e5:9e:24:67: 3b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DB:38:D5:F5:FA:99:D1:DE:E0:08:48:DB:CF:44:95:9A:0F:06:E3 X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3234203d3e20313530323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.248.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:35:f6:6c:83:52:4c:db:ce:54:12:15:04:e6:8f:99:de:be: a5:9b:42:be:a1:5e:0b:a4:91:cd:fa:f0:e3:ba:14:b2:aa:e2: a2:17:e1:1a:8b:da:c4:8b:ca:8c:de:50:b3:21:c9:78:81:12: 88:ff:7b:51:53:e0:75:01:c6:fe:88:e8:d4:27:6f:0e:dd:a6: 53:bb:d4:71:eb:f6:21:e0:d5:78:a5:6e:d6:b4:90:ef:2e:83: 11:e7:17:fc:64:8e:70:49:ff:8f:47:f7:fb:86:5c:3a:8a:63: c2:9d:45:45:eb:ab:20:b2:7d:84:49:a7:c9:d7:98:01:43:40: d2:44:4f:f8:6c:bb:8b:a5:0f:4f:76:4f:b9:50:3a:2f:8b:20: 3e:33:4f:fa:75:bd:a2:c4:03:dd:e7:31:33:ae:5f:f9:70:78: b4:e6:bc:0d:ac:84:81:70:03:e6:2a:2b:21:6a:c6:b4:a0:49: a0:31:7e:86:21:30:45:2f:55:f2:25:a5:a1:51:04:72:a3:2e: 99:c9:11:b4:8c:c7:ee:b6:00:ce:2e:b9:ff:ec:5d:4b:ae:12: 47:ee:00:a9:02:57:b4:57:84:88:89:d3:f9:2b:ab:b8:29:d6: 53:88:99:72:f6:ba:d2:f5:76:a9:80:93:a7:f5:36:35:9f:5b: 64:88:bc:3d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUa511cx30XVNGr6E/NnJ9ymp4u60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNTA0MjIwODE3MjVaFw0yNjA0MjEwODIyMjVaMDMxMTAvBgNV BAMTKDI5REIzOEQ1RjVGQTk5RDFERUUwMDg0OERCQ0Y0NDk1OUEwRjA2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADs7Ea2yQsmVVR1xoI1B3gwJ2 kk6DhiPU6+PIhnvyBXYzoxUZK/SKNB+9z48Nji4rm+5sRq4OI543xpq1fki3Ca5z diCsWwBNu/gYauMDygrZMXvM9sopyfC+oQBiMCnuDtGjgSHoH5Ihsu3XbWXLl8rF ine4N9MH4iy+RYAhOc05uaCmofOENX4F4GNw3bZTN5OfztOQ1mGWFZ6PKINKfaSJ pw4btuO+9sxp9rPleSaodZ7dpT6btNVWEC7qaZfyPKgG3CoKnPUDCRp4Dq004+S5 uBTmIt6Fe0lCpwxaIlfTWSFV+yCLQdR59bw/UT2djt9q1AUIMvUN5Z4kZzvVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKds41fX6mdHe4AhI289ElZoPBuMwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3NTI3N2U4LTdkMGYtNDE4NC05 YzI4LWE2NjM1ZWZlZjI5Yy8wLzMxMzAzMzJlMzQzMTJlMzIzNDM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZyn4MA0GCSqG SIb3DQEBCwUAA4IBAQA+NfZsg1JM285UEhUE5o+Z3r6lm0K+oV4LpJHN+vDjuhSy quKiF+Eai9rEi8qM3lCzIcl4gRKI/3tRU+B1Acb+iOjUJ28O3aZTu9Rx6/Yh4NV4 pW7WtJDvLoMR5xf8ZI5wSf+PR/f7hlw6imPCnUVF66sgsn2ESafJ15gBQ0DSRE/4 bLuLpQ9Pdk+5UDoviyA+M0/6db2ixAPd5zEzrl/5cHi05rwNrISBcAPmKishasa0 oEmgMX6GITBFL1XyJaWhUQRyoy6ZyRG0jMfutgDOLrn/7F1LrhJH7gCpAle0V4SI idP5K6u4KdZTiJly9rrS9XapgJOn9TY1n1tkiLw9 -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net