$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3234203d3e20313339343132.roa File: 3130332e3134332e3232342e302f32332d3234203d3e20313339343132.roa (raw, json) Hash identifier: amM1LskNB/yurOOsO/M4ZwjTP9vtjt0xb99qniGK+o8= Subject key identifier: 8F:36:34:23:F5:77:AC:CD:83:D6:05:AF:9A:B7:F4:CF:EA:12:3D:4D Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 4B57BA9B4C187A7E132B14DDCFAF3907F1A8A557 Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3234203d3e20313339343132.roa Signing time: Thu 22 Jun 2023 05:00:01 +0000 ROA not before: Thu 22 Jun 2023 04:55:01 +0000 ROA not after: Thu 20 Jun 2024 05:00:01 +0000 asID: 139412 IP address blocks: 103.143.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jan 2024 23:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:57:ba:9b:4c:18:7a:7e:13:2b:14:dd:cf:af:39:07:f1:a8:a5:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Jun 22 04:55:01 2023 GMT Not After : Jun 20 05:00:01 2024 GMT Subject: CN=8F363423F577ACCD83D605AF9AB7F4CFEA123D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:c8:04:34:2f:2e:24:5b:97:da:bb:e4:dd: 6a:8b:8c:ab:60:bb:af:9b:c0:be:50:72:9c:09:68: 0c:5a:04:f9:fe:08:35:be:06:b8:fe:26:26:71:0c: 5e:32:cc:bf:61:c7:16:e4:20:bd:8e:fd:02:4c:ef: 39:92:4b:2f:f9:19:ac:a4:9d:65:7b:42:d8:86:52: c3:13:90:ae:7b:02:90:99:38:21:bf:26:70:cb:48: 0c:86:64:d0:19:a7:87:43:f9:e3:3d:5c:fc:9d:41: e0:74:0e:a8:8b:25:93:c8:8d:6b:0e:a0:d5:22:99: af:0b:4a:4e:a9:e7:c7:33:0c:1b:78:bd:3e:fa:0a: a2:12:7c:01:c6:0c:34:23:6b:8c:5f:d6:30:25:64: e0:78:91:f1:ae:ae:a5:56:48:e3:8a:cf:bc:2d:5b: a1:67:48:be:47:26:3c:4c:2f:b5:c0:42:67:91:ec: e2:fd:31:15:0a:19:58:6e:89:af:a9:76:dd:89:86: e9:0f:c9:7b:ba:64:d2:f1:0f:b6:e5:a9:4e:96:bd: 14:83:27:09:5a:01:3b:6c:83:3b:91:1c:49:46:20: 25:ff:3c:60:07:0a:3b:90:c1:87:3f:44:fe:7d:7b: 26:1c:af:73:87:b4:71:9b:8f:68:01:3d:cc:36:df: 7d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:36:34:23:F5:77:AC:CD:83:D6:05:AF:9A:B7:F4:CF:EA:12:3D:4D X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3234203d3e20313339343132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.224.0/23 Signature Algorithm: sha256WithRSAEncryption 37:cb:35:e7:af:6f:e7:d7:41:ba:40:73:a3:d8:ad:7c:64:a6: a4:d7:df:7d:d2:7c:35:ab:62:83:86:b6:3d:04:ef:3d:c2:08: e7:fc:55:2c:47:a5:a3:ef:39:06:a1:cf:46:fe:9f:55:02:d2: 4d:f8:c0:d4:da:60:e4:c9:6d:eb:80:8e:6a:5a:21:fc:25:85: d2:9e:09:8c:9d:a6:73:96:6d:57:b0:63:fc:17:99:34:7e:07: 18:7b:e4:e5:7a:3f:07:36:3a:d9:7e:cc:94:df:11:b8:8d:a7: e7:d7:46:0b:29:65:e0:6a:ea:0b:3d:25:1a:14:f5:9a:96:d6: aa:d0:05:5c:74:f6:46:02:7a:93:49:58:1a:9e:a6:2f:07:97: 02:71:67:cc:9f:08:19:98:86:4d:35:ee:ac:4d:c5:10:e8:b6: 0d:ff:06:98:ce:63:2d:9e:f3:e2:88:b0:fc:97:6e:d0:3d:e8: a4:43:65:ab:94:0c:59:61:fe:49:a6:e3:9f:a4:a1:c0:7f:80: 97:d0:34:b3:7d:d8:31:fa:fd:d0:75:70:2a:16:82:cc:5f:0f: 99:15:1d:eb:ce:b8:e4:83:57:85:9e:35:aa:08:0a:b5:7d:26: 5f:5c:a0:db:1e:e1:e8:ce:81:a6:dc:fb:f2:7a:ae:dc:66:af: 08:64:ea:54 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUS1e6m0wYen4TKxTdz685B/GopVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yMzA2MjIwNDU1MDFaFw0yNDA2MjAwNTAwMDFaMDMxMTAvBgNV BAMTKDhGMzYzNDIzRjU3N0FDQ0Q4M0Q2MDVBRjlBQjdGNENGRUExMjNENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkScgENC8uJFuX2rvk3WqLjKtg u6+bwL5QcpwJaAxaBPn+CDW+Brj+JiZxDF4yzL9hxxbkIL2O/QJM7zmSSy/5Gayk nWV7QtiGUsMTkK57ApCZOCG/JnDLSAyGZNAZp4dD+eM9XPydQeB0DqiLJZPIjWsO oNUima8LSk6p58czDBt4vT76CqISfAHGDDQja4xf1jAlZOB4kfGurqVWSOOKz7wt W6FnSL5HJjxML7XAQmeR7OL9MRUKGVhuia+pdt2JhukPyXu6ZNLxD7blqU6WvRSD JwlaATtsgzuRHElGICX/PGAHCjuQwYc/RP59eyYcr3OHtHGbj2gBPcw2330jAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUjzY0I/V3rM2D1gWvmrf0z+oSPU0wHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3NzBmZWViLTJjYWEtNDc2YS1h YjQzLWY2NTJhMTFmZDA4Yy8wLzMxMzAzMzJlMzEzNDMzMmUzMjMyMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzNDMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnj+AwDQYJ KoZIhvcNAQELBQADggEBADfLNeevb+fXQbpAc6PYrXxkpqTX333SfDWrYoOGtj0E 7z3CCOf8VSxHpaPvOQahz0b+n1UC0k34wNTaYOTJbeuAjmpaIfwlhdKeCYydpnOW bVewY/wXmTR+Bxh75OV6Pwc2Otl+zJTfEbiNp+fXRgspZeBq6gs9JRoU9ZqW1qrQ BVx09kYCepNJWBqepi8HlwJxZ8yfCBmYhk017qxNxRDotg3/BpjOYy2e8+KIsPyX btA96KRDZauUDFlh/kmm45+kocB/gJfQNLN92DH6/dB1cCoWgsxfD5kVHevOuOSD V4WeNaoICrV9Jl9coNse4ejOgabc+/J6rtxmrwhk6lQ= -----END CERTIFICATE-----Generated at Sun Jan 7 15:33:04 2024 by rpki-client on console.sobornost.net