$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/3130332e38372e36302e302f32322d3234203d3e20313336303932.roa File: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (raw, json) Hash identifier: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw= Subject key identifier: 92:A1:0B:09:0F:93:8C:7F:C8:2F:17:2F:E8:EB:8B:21:D4:56:03:F6 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 771B4218C643A161B5775C4254B866CC8C5847AF Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/3130332e38372e36302e302f32322d3234203d3e20313336303932.roa Signing time: Thu 10 Apr 2025 22:00:00 +0000 ROA not before: Thu 10 Apr 2025 21:55:00 +0000 ROA not after: Thu 09 Apr 2026 22:00:00 +0000 asID: 136092 IP address blocks: 103.87.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:1b:42:18:c6:43:a1:61:b5:77:5c:42:54:b8:66:cc:8c:58:47:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Apr 10 21:55:00 2025 GMT Not After : Apr 9 22:00:00 2026 GMT Subject: CN=92A10B090F938C7FC82F172FE8EB8B21D45603F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:31:f2:c9:7a:5d:89:38:36:a7:ec:7f:b2: de:c5:cf:ce:a7:c6:66:26:e9:50:78:cd:9a:48:a5: e5:86:30:18:60:ac:0a:dd:f7:25:e8:32:7c:75:30: 49:7f:41:ae:ef:76:cf:de:f0:0b:7a:98:97:97:1e: eb:db:4b:aa:f5:33:9c:fb:04:00:2c:2d:f8:57:ee: a6:3d:82:96:34:c2:cd:e1:1c:a2:55:4d:37:bd:ca: ec:5b:52:88:00:4c:3a:28:db:44:87:84:0d:ce:cb: 77:95:60:a5:ae:2e:ae:fd:ab:e2:37:4d:79:e5:16: 5a:ae:fd:e1:98:41:bc:62:20:ce:f8:e4:42:ea:20: dc:4d:92:5a:f5:0c:44:f1:ce:99:d7:d3:06:a4:3b: fd:70:53:7d:02:94:1a:1d:05:b2:ef:a6:a8:da:c3: 9d:a6:0b:5d:ae:b5:54:49:35:cb:47:1f:a0:32:e1: 34:b9:4e:bb:1b:6b:c7:4b:a7:f0:f6:a2:89:1d:ea: a1:e4:e0:82:ea:c8:ec:23:18:74:73:f6:a8:65:51: 2a:25:80:d0:2f:f3:cd:75:3a:06:70:38:6e:dd:8a: b3:6e:96:9d:62:09:d3:0d:fa:bd:bc:3c:10:5f:a2: b8:d7:9a:79:c8:4a:30:b5:ae:a2:95:0f:a5:ba:f4: 51:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A1:0B:09:0F:93:8C:7F:C8:2F:17:2F:E8:EB:8B:21:D4:56:03:F6 X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/3130332e38372e36302e302f32322d3234203d3e20313336303932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.60.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:95:40:e7:76:3c:da:c3:b9:7d:ad:d9:e4:d2:c9:45:de:65: b3:48:7b:9e:32:c6:78:fc:63:42:f8:80:cd:f9:8d:21:53:98: 02:d9:69:68:e8:a8:6a:41:7b:36:b5:0c:d1:13:b9:69:c5:f9: 05:36:21:ac:94:2c:96:1b:54:36:30:d2:96:c9:48:54:da:9d: a2:07:97:4b:5f:31:40:1a:33:53:ce:70:34:75:4d:73:a7:a4: 5d:9b:49:f8:9f:46:2e:1d:83:eb:b2:89:c0:2f:55:92:bd:40: 7c:fe:ef:74:81:65:d7:de:2a:18:50:c8:8f:0d:e7:1e:5e:30: db:a7:47:dc:8e:ae:8e:24:15:8d:bd:22:f2:05:e6:95:61:ae: a8:26:4f:99:09:63:fe:8c:3b:81:23:54:0d:ba:c6:60:3d:29: 26:33:9d:cc:eb:25:d3:7f:3c:f3:d5:80:54:15:fb:f2:17:87: 0d:ce:cd:fe:03:08:d2:54:58:1a:5a:78:35:ae:9b:32:30:4e: da:f7:6d:7e:b1:9e:bb:f5:d8:ff:c3:5a:2a:72:a9:a7:36:16: 20:e8:bb:d8:ba:8f:68:d8:81:00:f3:93:83:5c:d0:d5:4d:e5: 17:26:9e:30:36:33:f7:40:08:d2:93:ff:2e:91:08:74:e7:01: d4:cc:68:63 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdxtCGMZDoWG1d1xCVLhmzIxYR68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNTA0MTAyMTU1MDBaFw0yNjA0MDkyMjAwMDBaMDMxMTAvBgNV BAMTKDkyQTEwQjA5MEY5MzhDN0ZDODJGMTcyRkU4RUI4QjIxRDQ1NjAzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2uzHyyXpdiTg2p+x/st7Fz86n xmYm6VB4zZpIpeWGMBhgrArd9yXoMnx1MEl/Qa7vds/e8At6mJeXHuvbS6r1M5z7 BAAsLfhX7qY9gpY0ws3hHKJVTTe9yuxbUogATDoo20SHhA3Oy3eVYKWuLq79q+I3 TXnlFlqu/eGYQbxiIM745ELqINxNklr1DETxzpnX0wakO/1wU30ClBodBbLvpqja w52mC12utVRJNctHH6Ay4TS5Trsba8dLp/D2ookd6qHk4ILqyOwjGHRz9qhlUSol gNAv8811OgZwOG7dirNulp1iCdMN+r28PBBforjXmnnISjC1rqKVD6W69FF7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUkqELCQ+TjH/ILxcv6OuLIdRWA/YwHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiYTBiM2YxLTk3NGYtNDIwNS1i ZGNlLTBmOWY1YjcyNTBkYy8wLzMxMzAzMzJlMzgzNzJlMzYzMDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdXPDANBgkqhkiG 9w0BAQsFAAOCAQEAi5VA53Y82sO5fa3Z5NLJRd5ls0h7njLGePxjQviAzfmNIVOY AtlpaOioakF7NrUM0RO5acX5BTYhrJQslhtUNjDSlslIVNqdogeXS18xQBozU85w NHVNc6ekXZtJ+J9GLh2D67KJwC9Vkr1AfP7vdIFl194qGFDIjw3nHl4w26dH3I6u jiQVjb0i8gXmlWGuqCZPmQlj/ow7gSNUDbrGYD0pJjOdzOsl038889WAVBX78heH Dc7N/gMI0lRYGlp4Na6bMjBO2vdtfrGeu/XY/8NaKnKppzYWIOi72LqPaNiBAPOT g1zQ1U3lFyaeMDYz90AI0pP/LpEIdOcB1MxoYw== -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net