$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32342d3234203d3e203536323630.roa File: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (raw, json) Hash identifier: PxQIpqbQq2jLhpu3Xowhx5fys0b4IY/JPo7Tka0HdFo= Subject key identifier: B7:7D:54:CD:1A:5D:97:38:5B:7B:0D:A7:A6:37:FD:6D:64:8C:57:7E Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE Certificate serial: 28E423C00BC90A1071761BE26FA1D98F65185093 Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32342d3234203d3e203536323630.roa Signing time: Tue 26 Nov 2024 10:02:34 +0000 ROA not before: Tue 26 Nov 2024 09:57:34 +0000 ROA not after: Tue 25 Nov 2025 10:02:34 +0000 asID: 56260 IP address blocks: 103.29.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 04:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e4:23:c0:0b:c9:0a:10:71:76:1b:e2:6f:a1:d9:8f:65:18:50:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Validity Not Before: Nov 26 09:57:34 2024 GMT Not After : Nov 25 10:02:34 2025 GMT Subject: CN=B77D54CD1A5D97385B7B0DA7A637FD6D648C577E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:b2:35:91:f8:46:7e:5a:8b:81:d9:d1:fc: 78:bb:bb:5c:e7:ac:22:53:a6:e7:45:98:a8:bb:bf: 67:95:1c:fe:d8:9c:c9:c2:d9:38:ef:58:a6:87:8c: fe:5d:61:d3:b7:08:34:03:26:57:e8:b9:f7:23:d7: 95:65:67:8e:e3:52:03:44:63:96:6c:3a:44:e5:55: 14:f9:02:09:49:2b:03:b2:90:62:c5:d1:14:07:d3: 67:17:a7:46:11:b0:78:b8:3c:be:90:03:52:a0:58: a5:51:55:d2:1d:36:b3:18:27:0e:6d:74:0a:10:a8: 5c:a7:4b:48:f7:64:4b:31:c8:4f:52:10:ab:9f:05: f4:84:fa:25:68:5e:ab:bd:e9:2b:7b:45:68:e1:f1: be:91:59:5a:91:d5:1c:27:17:fa:ed:df:c7:e5:41: ab:66:4c:a9:42:f8:18:88:3c:7d:91:69:43:49:60: 7d:89:8a:cf:e3:d2:be:33:a6:85:57:da:31:e2:09: a1:d2:52:30:cb:74:e4:af:61:1e:ca:7d:26:d3:a0: d7:c1:9e:88:0a:b7:e4:2a:7d:57:61:73:cb:85:cb: 11:f7:2f:b3:4a:1c:16:f5:05:22:fd:56:89:4d:83: 02:1e:b9:06:81:4e:1e:63:ac:18:a1:2a:2e:63:13: 4a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7D:54:CD:1A:5D:97:38:5B:7B:0D:A7:A6:37:FD:6D:64:8C:57:7E X509v3 Authority Key Identifier: keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32342d3234203d3e203536323630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.184.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:34:91:a3:9e:ac:77:04:5b:f3:63:27:15:c6:0b:c0:c3:78: b2:d3:13:47:b9:ff:f6:92:b4:6a:4b:d3:f8:89:be:d4:98:e3: 49:fd:59:5a:a0:f0:83:45:1c:5e:35:de:40:ce:e3:00:ef:0a: 8d:19:a9:c1:2c:e7:57:65:14:b9:fe:4b:8c:05:6d:fe:5c:70: 83:6c:b5:4a:7a:84:13:53:fa:23:3e:de:13:c4:05:4c:0a:7c: 09:63:70:d2:4a:7b:4e:05:6c:7a:a5:99:e8:71:01:de:97:85: 08:f1:cc:cf:26:44:d6:4d:0d:86:d4:11:44:7d:17:80:e5:a4: b1:c7:45:ae:4d:96:53:b5:37:b3:08:67:cf:72:42:45:42:41: e4:04:e8:20:5f:a3:cb:6a:82:a3:36:b1:3d:87:ab:d7:33:0f: f0:c1:2d:cc:2f:14:9e:46:9c:d4:b4:e5:72:a7:9a:56:81:45: ee:80:a1:77:ac:c9:68:cc:8f:4c:83:04:02:49:e9:84:7b:97: 68:bd:9a:ac:95:ee:3a:b9:e9:4d:1b:b9:46:90:9b:54:43:f6: 3c:53:5b:7c:8f:d0:cd:da:6e:2c:4d:7a:d3:8a:9c:1b:5f:32: 5e:1b:94:49:5d:b3:8a:93:03:82:2d:7d:db:c0:49:ba:9b:ab: 3c:28:2c:89 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKOQjwAvJChBxdhvib6HZj2UYUJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQw NzY3MkJERTAeFw0yNDExMjYwOTU3MzRaFw0yNTExMjUxMDAyMzRaMDMxMTAvBgNV BAMTKEI3N0Q1NENEMUE1RDk3Mzg1QjdCMERBN0E2MzdGRDZENjQ4QzU3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4bI1kfhGflqLgdnR/Hi7u1zn rCJTpudFmKi7v2eVHP7YnMnC2TjvWKaHjP5dYdO3CDQDJlfoufcj15VlZ47jUgNE Y5ZsOkTlVRT5AglJKwOykGLF0RQH02cXp0YRsHi4PL6QA1KgWKVRVdIdNrMYJw5t dAoQqFynS0j3ZEsxyE9SEKufBfSE+iVoXqu96St7RWjh8b6RWVqR1RwnF/rt38fl QatmTKlC+BiIPH2RaUNJYH2Jis/j0r4zpoVX2jHiCaHSUjDLdOSvYR7KfSbToNfB nogKt+QqfVdhc8uFyxH3L7NKHBb1BSL9VolNgwIeuQaBTh5jrBihKi5jE0ptAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUt31UzRpdlzhbew2npjf9bWSMV34wHwYDVR0j BBgwFoAUTET29UO9u4WNNlbUGjZmBAdnK94wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMC80QzQ0RjZGNTQz QkRCQjg1OEQzNjU2RDQxQTM2NjYwNDA3NjcyQkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQwNzY3 MkJERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZjJjNjZjLTFmODctNGQ5OC1h NDY3LTMyMThiNjQ1YjNhYy8wLzMxMzAzMzJlMzIzOTJlMzEzODM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcduDANBgkqhkiG 9w0BAQsFAAOCAQEAPDSRo56sdwRb82MnFcYLwMN4stMTR7n/9pK0akvT+Im+1Jjj Sf1ZWqDwg0UcXjXeQM7jAO8KjRmpwSznV2UUuf5LjAVt/lxwg2y1SnqEE1P6Iz7e E8QFTAp8CWNw0kp7TgVseqWZ6HEB3peFCPHMzyZE1k0NhtQRRH0XgOWkscdFrk2W U7U3swhnz3JCRUJB5AToIF+jy2qCozaxPYer1zMP8MEtzC8Unkac1LTlcqeaVoFF 7oChd6zJaMyPTIMEAknphHuXaL2arJXuOrnpTRu5RpCbVEP2PFNbfI/QzdpuLE16 04qcG18yXhuUSV2zipMDgi1928BJupurPCgsiQ== -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:38 2025 by rpki-client on console.sobornost.net