$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa File: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (raw, json) Hash identifier: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8= Subject key identifier: D9:7F:0A:8C:6A:E2:98:BC:B8:66:BC:49:45:AA:72:3E:A7:CF:91:4A Certificate issuer: /CN=115880D133393FF2D96A5861679B5166AFDB1248 Certificate serial: 31B05C1AF410610927499EE5EDCAC30E6F010D61 Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa Signing time: Thu 24 Apr 2025 05:02:21 +0000 ROA not before: Thu 24 Apr 2025 04:57:21 +0000 ROA not after: Thu 23 Apr 2026 05:02:21 +0000 asID: 59282 IP address blocks: 103.161.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b0:5c:1a:f4:10:61:09:27:49:9e:e5:ed:ca:c3:0e:6f:01:0d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248 Validity Not Before: Apr 24 04:57:21 2025 GMT Not After : Apr 23 05:02:21 2026 GMT Subject: CN=D97F0A8C6AE298BCB866BC4945AA723EA7CF914A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:12:f2:ed:9e:cc:38:8b:f6:49:30:e7:ba:7a: 73:36:b7:c3:ab:88:6d:30:6b:d8:c4:d1:8c:b6:f3: 32:23:36:a6:be:f7:96:8f:1f:44:22:5a:8c:bb:54: 11:49:e2:06:23:62:95:79:1c:0f:46:19:80:1d:09: 41:b7:c2:b7:6a:90:6b:d6:3d:53:3f:d0:a1:7d:2a: 13:82:58:53:d3:fe:1d:3e:f2:2e:8e:a1:20:eb:08: 71:4e:c1:12:f7:53:d2:d7:dd:b4:77:a6:08:82:b7: 26:db:b8:3b:b5:ca:62:c8:b9:ef:48:13:16:5a:9d: 86:7c:07:b5:e7:9d:c2:3a:1b:29:b6:fd:9f:59:85: c8:bd:93:46:d3:0d:fa:c8:db:38:bf:f9:67:0f:1b: d2:25:37:74:7c:e9:2d:4e:1f:5a:64:d7:f0:20:f3: 3d:fa:1c:a9:e2:8c:ba:52:89:67:39:20:52:7c:ac: bc:5c:2b:ed:6a:78:44:e8:c7:d5:f8:b2:78:e8:2b: ad:ea:16:87:68:ba:21:a7:e6:4c:44:30:30:16:e4: 43:2f:ec:19:cb:1a:ff:7f:40:ca:11:7a:a8:1f:cc: 72:a7:79:bf:0a:90:d6:68:40:af:8d:db:b1:c8:ad: ef:5a:c6:44:11:f1:f5:26:f5:99:e1:65:b9:d6:0a: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7F:0A:8C:6A:E2:98:BC:B8:66:BC:49:45:AA:72:3E:A7:CF:91:4A X509v3 Authority Key Identifier: keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.135.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:ad:b4:84:32:f1:eb:d4:a7:77:c8:4c:dc:f4:8f:a1:f8:9d: 82:e7:7b:72:a3:68:d7:d6:01:be:5c:b4:7a:ee:f1:a8:3c:9b: 3e:99:87:ce:d1:cd:98:3f:85:b8:c2:ad:f2:46:16:fc:bf:48: be:b6:54:43:0d:df:42:d8:23:d8:5a:3a:f2:c2:e9:2d:12:89: 32:39:a0:fe:76:e7:d4:6e:e2:15:fe:69:5a:00:d0:d4:5c:df: d5:23:4b:66:6f:45:bd:e8:15:e2:91:84:ef:80:ac:0a:a9:d9: 39:f6:1a:74:1c:7f:63:32:e2:52:b7:df:d9:c8:ef:d2:34:87: a4:0c:f6:42:c9:b8:a8:ed:82:c5:20:08:32:aa:2a:4c:68:98: 11:57:fa:a8:05:2c:83:1d:5a:41:fa:7f:58:57:1b:a1:91:7b: 82:28:bc:a3:a0:66:94:da:53:ad:19:87:df:07:9d:d6:e4:25: b6:ca:a0:82:21:c5:ae:88:96:90:70:65:cf:cd:31:f8:4c:d1: 29:e0:ea:ec:16:a4:bf:67:ee:34:69:61:18:6d:16:ec:8a:43: ad:42:3d:ef:06:cc:5e:f2:aa:9f:18:3a:8b:0e:54:d7:3e:03: 74:84:b0:70:66:55:37:0a:b7:9c:1d:aa:86:ed:de:ac:ec:1b: 2f:91:3b:81 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMbBcGvQQYQknSZ7l7crDDm8BDWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB RkRCMTI0ODAeFw0yNTA0MjQwNDU3MjFaFw0yNjA0MjMwNTAyMjFaMDMxMTAvBgNV BAMTKEQ5N0YwQThDNkFFMjk4QkNCODY2QkM0OTQ1QUE3MjNFQTdDRjkxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwEvLtnsw4i/ZJMOe6enM2t8Or iG0wa9jE0Yy28zIjNqa+95aPH0QiWoy7VBFJ4gYjYpV5HA9GGYAdCUG3wrdqkGvW PVM/0KF9KhOCWFPT/h0+8i6OoSDrCHFOwRL3U9LX3bR3pgiCtybbuDu1ymLIue9I ExZanYZ8B7XnncI6Gym2/Z9Zhci9k0bTDfrI2zi/+WcPG9IlN3R86S1OH1pk1/Ag 8z36HKnijLpSiWc5IFJ8rLxcK+1qeETox9X4snjoK63qFodouiGn5kxEMDAW5EMv 7BnLGv9/QMoReqgfzHKneb8KkNZoQK+N27HIre9axkQR8fUm9ZnhZbnWCl9/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2X8KjGrimLy4ZrxJRapyPqfPkUowHwYDVR0j BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC MTI0OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxNTY4MDFmLWE2N2ItNDNkZC04 ZjYyLWI3YjBkNjAzMTdhZi8wLzMxMzAzMzJlMzEzNjMxMmUzMTMzMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6GHMA0GCSqG SIb3DQEBCwUAA4IBAQBfrbSEMvHr1Kd3yEzc9I+h+J2C53tyo2jX1gG+XLR67vGo PJs+mYfO0c2YP4W4wq3yRhb8v0i+tlRDDd9C2CPYWjrywuktEokyOaD+dufUbuIV /mlaANDUXN/VI0tmb0W96BXikYTvgKwKqdk59hp0HH9jMuJSt9/ZyO/SNIekDPZC ybio7YLFIAgyqipMaJgRV/qoBSyDHVpB+n9YVxuhkXuCKLyjoGaU2lOtGYffB53W 5CW2yqCCIcWuiJaQcGXPzTH4TNEp4OrsFqS/Z+40aWEYbRbsikOtQj3vBsxe8qqf GDqLDlTXPgN0hLBwZlU3CrecHaqG7d6s7BsvkTuB -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net