$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa File: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (raw, json) Hash identifier: O6HbZbnpwvJlF71+0v/AvXMqBhHi9/+bK/SRCDPbapk= Subject key identifier: 7F:C9:01:51:48:6C:88:CD:DB:14:6D:64:BC:2E:45:E6:B1:6D:94:61 Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 306FA245F1EB50D5726111AE8A1A53493F242708 Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa Signing time: Wed 01 Jan 2025 10:00:00 +0000 ROA not before: Wed 01 Jan 2025 09:55:00 +0000 ROA not after: Wed 31 Dec 2025 10:00:00 +0000 asID: 24312 IP address blocks: 103.195.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6f:a2:45:f1:eb:50:d5:72:61:11:ae:8a:1a:53:49:3f:24:27:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Jan 1 09:55:00 2025 GMT Not After : Dec 31 10:00:00 2025 GMT Subject: CN=7FC90151486C88CDDB146D64BC2E45E6B16D9461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1e:b1:3b:3f:18:34:bf:f4:e6:19:d5:61:45: c0:8f:78:a8:de:6f:2d:28:86:cb:22:6e:6e:c3:40: aa:6a:6b:2b:13:9e:0c:ed:16:cd:bb:ee:6b:86:4b: d1:26:8d:5c:d6:6f:3d:64:e2:5a:4a:85:12:cb:34: 62:57:b9:29:10:62:4f:38:74:ef:49:56:73:24:b4: ce:d7:40:24:4e:97:f0:6c:f9:66:d2:ba:d9:25:52: 94:18:3f:6e:c2:26:9b:d5:68:58:05:44:7e:b1:96: be:cf:9e:5e:e4:75:6d:86:d1:04:d9:45:63:c3:03: 98:31:11:7f:68:c4:8b:20:c1:28:cf:f7:48:c6:cb: 0e:e5:2c:76:89:23:7c:81:06:0d:8b:9a:5e:4c:35: 85:b6:93:9f:86:d6:7d:35:9d:be:b2:a3:b5:bb:bb: 71:27:e4:f6:83:37:f8:93:74:33:10:24:95:12:26: 08:32:14:ae:49:9b:f6:8c:00:79:84:68:a2:0e:83: 58:c8:4b:d1:10:c5:08:c8:b2:6a:49:f7:c5:0f:0a: d6:90:32:bb:ab:c3:46:66:46:e1:24:a5:90:33:92: ee:78:9a:8f:19:76:bf:58:aa:cc:bc:c9:93:17:f0: b0:6f:4f:7c:93:ac:2e:03:4e:0d:b7:80:85:c3:e1: e6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C9:01:51:48:6C:88:CD:DB:14:6D:64:BC:2E:45:E6:B1:6D:94:61 X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.195.65.0/24 Signature Algorithm: sha256WithRSAEncryption a0:ca:cd:20:6a:13:fa:a8:c7:79:83:93:52:23:01:57:21:02: 25:6e:0e:9e:da:7f:c5:6a:9c:b2:8f:4a:6a:4d:ee:6c:39:e4: 1b:34:59:dc:d2:90:41:a4:59:d1:b8:8e:e9:e1:29:b5:cb:c5: 02:c6:96:9c:74:66:11:cc:c1:33:dc:bf:08:d1:53:d2:a9:00: 48:ae:ed:fc:10:05:77:44:65:5c:50:42:e8:c2:f9:6f:2a:d8: 53:7d:74:e7:9a:73:92:88:32:3a:0a:fa:8b:c5:73:3e:53:88: 88:59:1f:c1:e7:95:04:04:53:63:1c:fb:87:44:20:3f:12:dd: e3:51:b6:32:0c:ce:03:20:a9:bc:14:0a:c4:c6:99:88:da:51: 86:d7:6a:65:2e:84:19:f5:63:4c:4b:74:66:71:c3:be:96:47: 42:10:0d:4e:7a:ea:57:01:29:fc:8e:6a:1a:2a:32:df:fc:e4: 54:b7:7b:7a:f7:83:82:de:2e:75:79:b9:8f:0d:6e:91:da:a1: 76:1a:58:44:fd:69:67:3e:7f:be:83:99:1d:00:6e:8f:4f:6a: cd:1d:ea:50:36:b5:8b:20:cb:cf:95:25:41:d1:75:13:66:eb: 53:76:30:64:83:e4:71:32:c3:a5:ac:9b:08:ae:8c:35:4e:6f: c2:79:be:41 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMG+iRfHrUNVyYRGuihpTST8kJwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNTAxMDEwOTU1MDBaFw0yNTEyMzExMDAwMDBaMDMxMTAvBgNV BAMTKDdGQzkwMTUxNDg2Qzg4Q0REQjE0NkQ2NEJDMkU0NUU2QjE2RDk0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvHrE7Pxg0v/TmGdVhRcCPeKje by0ohssibm7DQKpqaysTngztFs277muGS9EmjVzWbz1k4lpKhRLLNGJXuSkQYk84 dO9JVnMktM7XQCROl/Bs+WbSutklUpQYP27CJpvVaFgFRH6xlr7Pnl7kdW2G0QTZ RWPDA5gxEX9oxIsgwSjP90jGyw7lLHaJI3yBBg2Lml5MNYW2k5+G1n01nb6yo7W7 u3En5PaDN/iTdDMQJJUSJggyFK5Jm/aMAHmEaKIOg1jIS9EQxQjIsmpJ98UPCtaQ Mrurw0ZmRuEkpZAzku54mo8Zdr9Yqsy8yZMX8LBvT3yTrC4DTg23gIXD4eapAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUf8kBUUhsiM3bFG1kvC5F5rFtlGEwHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwY2U0Nzk2LTQ5ZGUtNDNiMS1h MTUyLWIxOGQxMWFkYTUyOS8wLzMxMzAzMzJlMzEzOTM1MmUzNjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDMzMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfDQTANBgkqhkiG 9w0BAQsFAAOCAQEAoMrNIGoT+qjHeYOTUiMBVyECJW4Ontp/xWqcso9Kak3ubDnk GzRZ3NKQQaRZ0biO6eEptcvFAsaWnHRmEczBM9y/CNFT0qkASK7t/BAFd0RlXFBC 6ML5byrYU31055pzkogyOgr6i8VzPlOIiFkfweeVBARTYxz7h0QgPxLd41G2MgzO AyCpvBQKxMaZiNpRhtdqZS6EGfVjTEt0ZnHDvpZHQhANTnrqVwEp/I5qGioy3/zk VLd7eveDgt4udXm5jw1ukdqhdhpYRP1pZz5/voOZHQBuj09qzR3qUDa1iyDLz5Ul QdF1E2brU3YwZIPkcTLDpaybCK6MNU5vwnm+QQ== -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net