$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa File: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (raw, json) Hash identifier: WIWr0cwH7QhkTpNLIiEs2aPSMVA6P1W6AWTBZtE9A08= Subject key identifier: A3:57:67:E0:5B:E0:9C:39:68:10:15:62:DD:40:E6:A5:33:19:A9:4E Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 67AE5CCFA1A60CAA14B71B5402AD1CE88F279333 Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa Signing time: Sun 12 Jan 2025 04:00:01 +0000 ROA not before: Sun 12 Jan 2025 03:55:01 +0000 ROA not after: Sun 11 Jan 2026 04:00:01 +0000 asID: 140459 IP address blocks: 103.153.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ae:5c:cf:a1:a6:0c:aa:14:b7:1b:54:02:ad:1c:e8:8f:27:93:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Jan 12 03:55:01 2025 GMT Not After : Jan 11 04:00:01 2026 GMT Subject: CN=A35767E05BE09C3968101562DD40E6A53319A94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:9e:7f:ac:72:47:26:f7:aa:02:a3:fc:22: f5:06:38:48:23:18:6c:78:8d:c9:0a:d4:db:7a:32: b1:a2:97:7e:f6:4c:20:52:17:1d:9e:6f:a1:62:5a: 2f:b4:92:2f:c5:46:95:51:c5:44:01:c4:9b:a0:b8: 73:18:65:c5:7d:12:a3:51:d2:02:7c:e0:c6:7e:a8: 03:5e:f7:f1:80:0a:f7:56:c5:62:eb:4e:e7:ea:40: 99:08:3e:a6:10:82:84:26:35:70:3f:60:a0:4e:a6: 89:4a:3b:49:e5:97:78:55:0f:91:ed:13:b3:eb:b9: 78:39:f0:c7:39:c4:7b:3a:27:c9:3f:c6:78:88:6e: cd:fb:9c:52:7f:57:46:84:ff:06:54:83:17:d5:cc: e0:88:05:da:85:72:af:3b:1f:e9:bf:eb:76:4e:c9: d3:06:73:36:71:e4:50:5b:73:ee:5f:7b:1a:45:35: 0f:22:10:70:43:b8:8c:43:2a:de:49:20:df:8c:31: 3a:3d:6a:3f:73:a6:43:e5:4a:2d:15:d2:65:d3:9f: ec:38:56:a2:da:c1:66:47:c7:c2:54:50:8d:f2:49: 09:15:5b:88:29:a6:db:16:fe:e5:88:ba:9f:fc:21: 58:d5:06:cc:5b:70:d8:df:8e:8b:b2:3d:c9:ab:6f: 7a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:57:67:E0:5B:E0:9C:39:68:10:15:62:DD:40:E6:A5:33:19:A9:4E X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.82.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:a2:62:4d:dc:a3:5a:cf:cb:d3:e4:7e:54:60:9d:36:79:ed: 4b:0f:eb:29:a4:7a:7a:8a:26:52:40:24:77:e2:2b:88:21:ab: 62:44:52:b2:48:c9:87:89:29:89:4b:c2:ff:b7:ef:07:17:86: f5:37:20:0d:f2:d7:fe:9b:7d:f8:1c:d5:c0:5f:e3:72:8c:a1: 7f:6d:e2:bd:6c:12:72:3e:f8:2a:46:5f:5c:70:08:1c:4f:4b: e1:df:d2:01:3a:12:5d:ad:54:22:75:26:5f:b1:36:1d:87:4e: c1:a2:53:31:9f:a1:63:db:07:2c:7b:29:e7:36:34:d0:d4:0c: 21:96:c0:0b:84:69:64:3e:5f:6a:f3:0e:90:c6:d7:bc:3c:28: 89:39:91:0d:b9:7e:10:d1:10:44:99:bd:a6:4f:2f:d9:f1:06: 01:ff:9d:b8:c4:d0:41:f5:67:72:b9:b6:8a:0f:42:4b:83:03: f9:68:ee:27:13:fd:2d:bd:1a:d1:9e:65:e4:b4:a8:b2:7d:55: be:cb:11:a8:ec:34:56:33:22:42:a8:24:c9:72:32:88:18:41: 22:3f:67:7f:31:fc:a6:1f:c8:a3:b5:7c:dc:f0:63:a1:19:dd: ca:00:51:f9:70:cf:c4:80:9c:ff:e3:65:06:d4:36:5d:6b:dc: 05:5f:11:37 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZ65cz6GmDKoUtxtUAq0c6I8nkzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNTAxMTIwMzU1MDFaFw0yNjAxMTEwNDAwMDFaMDMxMTAvBgNV BAMTKEEzNTc2N0UwNUJFMDlDMzk2ODEwMTU2MkRENDBFNkE1MzMxOUE5NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgp5/rHJHJveqAqP8IvUGOEgj GGx4jckK1Nt6MrGil372TCBSFx2eb6FiWi+0ki/FRpVRxUQBxJuguHMYZcV9EqNR 0gJ84MZ+qANe9/GACvdWxWLrTufqQJkIPqYQgoQmNXA/YKBOpolKO0nll3hVD5Ht E7PruXg58Mc5xHs6J8k/xniIbs37nFJ/V0aE/wZUgxfVzOCIBdqFcq87H+m/63ZO ydMGczZx5FBbc+5fexpFNQ8iEHBDuIxDKt5JIN+MMTo9aj9zpkPlSi0V0mXTn+w4 VqLawWZHx8JUUI3ySQkVW4gpptsW/uWIup/8IVjVBsxbcNjfjouyPcmrb3oNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUo1dn4FvgnDloEBVi3UDmpTMZqU4wHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNzZkYjFlLWJmOWEtNDlhOC1i Zjc2LTlmMzE0ZTdkMWQ4ZS8wLzMxMzAzMzJlMzEzNTMzMmUzODMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5lSMA0GCSqG SIb3DQEBCwUAA4IBAQBromJN3KNaz8vT5H5UYJ02ee1LD+sppHp6iiZSQCR34iuI IatiRFKySMmHiSmJS8L/t+8HF4b1NyAN8tf+m334HNXAX+NyjKF/beK9bBJyPvgq Rl9ccAgcT0vh39IBOhJdrVQidSZfsTYdh07BolMxn6Fj2wcseynnNjTQ1AwhlsAL hGlkPl9q8w6Qxte8PCiJOZENuX4Q0RBEmb2mTy/Z8QYB/524xNBB9WdyubaKD0JL gwP5aO4nE/0tvRrRnmXktKiyfVW+yxGo7DRWMyJCqCTJcjKIGEEiP2d/MfymH8ij tXzc8GOhGd3KAFH5cM/EgJz/42UG1DZda9wFXxE3 -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:32 2025 by rpki-client on console.sobornost.net