$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa File: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (raw, json) Hash identifier: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY= Subject key identifier: AC:E4:06:62:3A:51:93:3A:B8:7D:24:61:84:7F:B4:CB:B0:C6:08:62 Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 2BAF2115409EBAD60ED2266532E2B7F8F89CEF7A Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa Signing time: Mon 20 Jan 2025 10:01:10 +0000 ROA not before: Mon 20 Jan 2025 09:56:10 +0000 ROA not after: Mon 19 Jan 2026 10:01:10 +0000 asID: 149350 IP address blocks: 103.179.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:af:21:15:40:9e:ba:d6:0e:d2:26:65:32:e2:b7:f8:f8:9c:ef:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Jan 20 09:56:10 2025 GMT Not After : Jan 19 10:01:10 2026 GMT Subject: CN=ACE406623A51933AB87D2461847FB4CBB0C60862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:5e:09:ab:eb:ce:8c:99:a1:16:8d:cb:26: 4f:d6:f4:dd:5a:f4:8f:51:e8:64:c9:ba:3c:76:7e: 8d:4e:9e:0a:9f:6b:d5:9a:78:e2:fe:18:3e:7b:a0: b3:d4:59:10:a5:e5:2a:78:86:fe:5e:7e:26:aa:d7: e9:b8:42:dd:93:8e:7e:c5:c5:18:23:82:e6:19:9e: 64:c3:bb:bb:c2:43:8d:f7:79:0d:c2:97:cc:3f:7a: b5:1e:c3:61:70:84:9d:ab:2e:6c:bf:94:3d:37:48: 6d:58:56:a8:25:ee:05:f9:31:fb:0a:1c:96:f2:8e: 89:ee:6e:b8:f5:40:73:47:2d:a1:66:27:1a:27:46: 35:6b:3d:48:21:f1:69:df:53:60:18:45:97:94:b6: da:02:82:d7:83:32:28:9f:3f:97:80:05:6d:9c:0e: df:60:a9:b1:72:fd:8a:4a:42:bb:a6:53:84:88:3f: c8:b4:89:d6:ce:30:c5:26:a0:bd:55:15:89:52:d2: 26:d8:75:50:25:07:8b:e6:12:70:29:8f:97:25:18: 6a:ca:cf:32:ed:89:0b:a7:d2:25:89:3b:1c:03:51: 0f:4d:2d:46:6e:fd:f8:78:de:4a:ae:2f:70:a8:05: 44:03:e5:3d:7b:1b:e1:98:e0:a1:81:13:9c:38:b7: 9d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E4:06:62:3A:51:93:3A:B8:7D:24:61:84:7F:B4:CB:B0:C6:08:62 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.252.0/23 Signature Algorithm: sha256WithRSAEncryption 42:db:f2:1e:09:5f:3d:69:7b:4b:ed:85:af:6c:16:a8:16:f8: d9:12:47:23:19:05:ce:23:ef:7d:55:97:d0:8a:cd:2b:05:ba: 04:cf:d4:4a:dc:f3:27:c3:b6:13:4a:e1:45:b9:c3:0c:32:cd: 9e:88:4a:7f:3d:4b:f2:1e:41:62:91:66:18:6e:a5:6f:30:9a: 36:98:cc:71:a0:95:e6:69:de:55:c2:04:c5:4b:c1:f0:6d:b9: 8a:08:c2:30:af:21:28:c2:a8:3d:ff:01:26:8b:c1:c1:ec:50: 00:af:df:20:b2:a9:ad:13:cc:fe:6a:d3:03:72:2f:55:ed:c0: 36:63:71:a5:08:d7:75:2b:6d:1c:06:38:77:ad:ee:b0:c5:0a: 7f:2b:55:11:8f:a3:34:9b:1b:c8:32:65:0d:5a:f8:13:de:7f: 53:b1:26:78:6a:7c:16:de:84:9c:49:1e:09:34:e7:7d:98:52: a9:12:7f:f6:e7:4e:15:e7:cb:da:81:19:78:e7:6b:21:80:01: f2:42:c4:b5:05:92:f9:3a:f0:6f:2c:17:55:07:d7:c5:b7:6f: 8c:71:00:ab:f8:ec:28:74:89:61:6a:c4:ee:78:06:b5:c3:a5: 3a:01:69:30:59:8d:a5:a9:44:14:50:95:d0:80:ca:a3:8b:24: dc:8d:a5:63 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUK68hFUCeutYO0iZlMuK3+Pic73owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTAxMjAwOTU2MTBaFw0yNjAxMTkxMDAxMTBaMDMxMTAvBgNV BAMTKEFDRTQwNjYyM0E1MTkzM0FCODdEMjQ2MTg0N0ZCNENCQjBDNjA4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDN14Jq+vOjJmhFo3LJk/W9N1a 9I9R6GTJujx2fo1Ongqfa9WaeOL+GD57oLPUWRCl5Sp4hv5efiaq1+m4Qt2Tjn7F xRgjguYZnmTDu7vCQ433eQ3Cl8w/erUew2FwhJ2rLmy/lD03SG1YVqgl7gX5MfsK HJbyjonubrj1QHNHLaFmJxonRjVrPUgh8WnfU2AYRZeUttoCgteDMiifP5eABW2c Dt9gqbFy/YpKQrumU4SIP8i0idbOMMUmoL1VFYlS0ibYdVAlB4vmEnApj5clGGrK zzLtiQun0iWJOxwDUQ9NLUZu/fh43kquL3CoBUQD5T17G+GY4KGBE5w4t51TAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUrOQGYjpRkzq4fSRhhH+0y7DGCGIwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc4NWJmZjQxLTI0MjAtNDJiMS05 YjgzLWQ0MWMxODA0M2Q2NS8wLzMxMzAzMzJlMzEzNzM5MmUzMjM1MzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzMzM1MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFns/wwDQYJ KoZIhvcNAQELBQADggEBAELb8h4JXz1pe0vtha9sFqgW+NkSRyMZBc4j731Vl9CK zSsFugTP1Erc8yfDthNK4UW5wwwyzZ6ISn89S/IeQWKRZhhupW8wmjaYzHGgleZp 3lXCBMVLwfBtuYoIwjCvISjCqD3/ASaLwcHsUACv3yCyqa0TzP5q0wNyL1XtwDZj caUI13UrbRwGOHet7rDFCn8rVRGPozSbG8gyZQ1a+BPef1OxJnhqfBbehJxJHgk0 532YUqkSf/bnThXny9qBGXjnayGAAfJCxLUFkvk68G8sF1UH18W3b4xxAKv47Ch0 iWFqxO54BrXDpToBaTBZjaWpRBRQldCAyqOLJNyNpWM= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:32 2025 by rpki-client on console.sobornost.net