$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa File: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (raw, json) Hash identifier: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0= Subject key identifier: 42:BC:42:87:56:0A:17:27:55:84:49:0D:72:E9:35:BF:42:2C:F7:58 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 4EF8FD36F7D2900697AA856995AD91477FE402C9 Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa Signing time: Wed 19 Mar 2025 11:02:21 +0000 ROA not before: Wed 19 Mar 2025 10:57:21 +0000 ROA not after: Wed 18 Mar 2026 11:02:21 +0000 asID: 138855 IP address blocks: 103.170.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f8:fd:36:f7:d2:90:06:97:aa:85:69:95:ad:91:47:7f:e4:02:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Mar 19 10:57:21 2025 GMT Not After : Mar 18 11:02:21 2026 GMT Subject: CN=42BC4287560A17275584490D72E935BF422CF758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f4:7e:ac:e8:cd:9a:a9:73:45:a6:75:46:1d: 57:15:44:a7:5f:9f:f3:3f:c4:18:3c:cb:d6:ba:48: d5:70:e8:38:19:50:4b:b0:f7:63:8f:60:45:2f:ce: cd:d6:59:f3:cf:c5:16:58:79:f5:7a:e0:84:44:fb: 86:94:0a:e3:b3:ce:9d:3b:bb:ea:98:0a:1a:08:df: e7:c9:47:ca:42:cd:61:19:f1:b1:16:6a:63:b1:0c: 16:d3:40:2b:63:fc:da:37:59:de:63:d2:42:79:30: 87:6e:9e:c5:be:a2:77:c0:04:a5:95:b5:db:f7:98: cb:b6:c4:0a:18:03:fa:81:fb:56:3a:dc:ad:e8:af: ed:8d:c0:f8:98:7c:6a:65:d9:26:77:d9:e3:d9:93: be:9b:05:80:3b:9d:3a:de:18:12:f1:45:cb:1d:ab: 25:ef:33:e7:29:3c:39:7d:db:28:d3:a1:bb:15:c2: 82:e0:a7:1b:e2:74:d2:ac:9b:2f:d0:33:e5:c8:f4: fe:e0:d3:7a:fd:9d:6e:ac:7d:40:0c:73:1e:82:05: d8:45:f2:f8:2b:6c:12:ea:1a:ae:ed:81:9a:ef:41: 89:bb:c7:37:cd:ab:01:45:95:fa:fd:e3:3a:3c:3e: 6e:0c:6c:47:5e:38:29:c4:30:ef:ef:b7:fb:dd:0b: 03:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BC:42:87:56:0A:17:27:55:84:49:0D:72:E9:35:BF:42:2C:F7:58 X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.234.0/23 Signature Algorithm: sha256WithRSAEncryption 88:9d:14:4a:cd:f4:61:3a:d0:5e:f4:63:14:d6:30:4d:dd:fb: 80:f3:63:ab:41:35:e4:7c:4c:bb:db:2b:37:c0:6a:5a:df:a5: 45:6b:b4:99:31:05:af:9a:4f:36:dd:1c:0f:4a:53:f6:87:cb: 6e:f8:9f:bd:42:75:20:c4:72:5a:05:08:93:90:92:07:58:46: 23:e7:e8:22:04:02:61:09:f2:c3:c8:7d:23:27:d3:32:77:a6: 1d:75:69:55:c3:66:ef:aa:2d:ae:13:53:7c:69:f2:b2:5f:72: 52:66:2f:93:ee:a8:23:7c:7e:85:f9:e0:da:9d:4e:a3:1e:42: d8:29:7a:35:20:e2:4b:e2:02:c4:58:0f:5e:b7:79:4c:dd:0d: e0:a4:3c:b8:41:5d:9a:94:f9:c8:c8:18:b3:a1:df:8d:06:ef: 77:24:f7:2b:c9:8f:66:5c:49:4f:89:5f:6f:50:03:0a:ec:da: 3b:c0:42:3b:0e:ed:0d:1b:05:31:03:11:b8:1b:f2:24:94:3e: 06:13:5a:83:42:9c:06:a1:04:5f:d9:be:77:7b:fa:e1:08:ad: d7:41:3d:42:e2:b7:52:12:08:e6:b5:c7:fc:93:6d:95:ea:ed: 64:3f:0c:33:71:80:3d:45:2c:cb:28:d0:d5:5f:fe:6a:74:5a: c6:ba:8a:6b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTvj9NvfSkAaXqoVpla2RR3/kAskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTAzMTkxMDU3MjFaFw0yNjAzMTgxMTAyMjFaMDMxMTAvBgNV BAMTKDQyQkM0Mjg3NTYwQTE3Mjc1NTg0NDkwRDcyRTkzNUJGNDIyQ0Y3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9H6s6M2aqXNFpnVGHVcVRKdf n/M/xBg8y9a6SNVw6DgZUEuw92OPYEUvzs3WWfPPxRZYefV64IRE+4aUCuOzzp07 u+qYChoI3+fJR8pCzWEZ8bEWamOxDBbTQCtj/No3Wd5j0kJ5MIdunsW+onfABKWV tdv3mMu2xAoYA/qB+1Y63K3or+2NwPiYfGpl2SZ32ePZk76bBYA7nTreGBLxRcsd qyXvM+cpPDl92yjTobsVwoLgpxvidNKsmy/QM+XI9P7g03r9nW6sfUAMcx6CBdhF 8vgrbBLqGq7tgZrvQYm7xzfNqwFFlfr94zo8Pm4MbEdeOCnEMO/vt/vdCwN7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUQrxCh1YKFydVhEkNcuk1v0Is91gwHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxNDRkNTc2LTM4MTgtNDlkNi04 NjYyLWY4ZGY4OWFiMjg2My8wLzMxMzAzMzJlMzEzNzMwMmUzMjMzMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM1MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnquowDQYJ KoZIhvcNAQELBQADggEBAIidFErN9GE60F70YxTWME3d+4DzY6tBNeR8TLvbKzfA alrfpUVrtJkxBa+aTzbdHA9KU/aHy274n71CdSDEcloFCJOQkgdYRiPn6CIEAmEJ 8sPIfSMn0zJ3ph11aVXDZu+qLa4TU3xp8rJfclJmL5PuqCN8foX54NqdTqMeQtgp ejUg4kviAsRYD163eUzdDeCkPLhBXZqU+cjIGLOh340G73ck9yvJj2ZcSU+JX29Q Awrs2jvAQjsO7Q0bBTEDEbgb8iSUPgYTWoNCnAahBF/Zvnd7+uEIrddBPULit1IS COa1x/yTbZXq7WQ/DDNxgD1FLMso0NVf/mp0Wsa6ims= -----END CERTIFICATE-----Generated at Sat Apr 26 18:17:59 2025 by rpki-client on console.sobornost.net