$ rpki-client -vvf repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa File: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (raw, json) Hash identifier: NcRBqt1Wn/tuGvM1xfS0JFewwd6sRo22gfKxjNahc88= Subject key identifier: CA:8E:87:C5:52:1A:4D:11:D6:F8:27:BE:0A:04:3D:43:9F:76:E0:1B Certificate issuer: /CN=285A5330FE006D3660B306BEE40EC7FEABA96574 Certificate serial: 0A145C431E8B9AEB2639E473C9A15C77F3860D61 Authority key identifier: 28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa Signing time: Fri 25 Apr 2025 05:00:00 +0000 ROA not before: Fri 25 Apr 2025 04:55:00 +0000 ROA not after: Fri 24 Apr 2026 05:00:00 +0000 asID: 149920 IP address blocks: 103.191.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:14:5c:43:1e:8b:9a:eb:26:39:e4:73:c9:a1:5c:77:f3:86:0d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285A5330FE006D3660B306BEE40EC7FEABA96574 Validity Not Before: Apr 25 04:55:00 2025 GMT Not After : Apr 24 05:00:00 2026 GMT Subject: CN=CA8E87C5521A4D11D6F827BE0A043D439F76E01B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:5b:5c:fd:e5:ac:a3:b7:93:d3:e6:0c:56: 44:d4:19:af:7c:a8:11:b6:89:7d:65:21:df:c3:ff: 04:07:91:97:00:72:bc:32:d3:43:ca:38:7d:dd:85: 6d:34:10:61:8e:63:52:b7:7c:24:56:ce:b0:5e:7c: a1:04:a8:4e:9b:d1:1d:20:54:3d:ad:eb:9d:6b:aa: 69:d2:f9:23:95:af:cd:69:4a:c2:ed:db:ed:f7:5a: 23:00:97:77:50:37:bc:9b:81:d0:0b:7d:6e:f2:56: 01:3e:5e:c8:a5:1e:85:0a:dc:1e:2b:41:19:c1:2a: 2f:5e:c2:58:f2:e1:2a:07:24:7f:f2:62:f0:51:11: 84:d2:34:55:fa:a2:9e:18:53:d3:56:3b:63:e1:50: e3:e5:fe:df:2e:c6:29:01:84:7c:09:91:05:61:77: e0:d3:b3:97:58:47:fb:2b:39:70:3e:f8:32:7e:f4: d1:31:9f:cc:78:83:a8:33:97:d1:ff:98:57:ec:90: 4a:76:4b:9f:62:23:06:69:37:9f:f5:67:c3:a6:19: 30:c3:d8:f7:0c:74:5a:61:6a:b6:5b:f0:05:b4:7f: a0:c4:61:07:22:d6:7d:6e:3e:51:75:7d:29:d6:df: c6:46:28:eb:ee:ed:e9:e7:cd:cf:13:6f:5d:15:6d: 2b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8E:87:C5:52:1A:4D:11:D6:F8:27:BE:0A:04:3D:43:9F:76:E0:1B X509v3 Authority Key Identifier: keyid:28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.129.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:ab:f6:9a:4d:c3:6e:c9:a8:e8:e5:48:e1:c1:6c:6c:d3:37: f1:c1:6a:21:3f:d4:c5:b6:ec:50:d9:a8:16:3f:84:30:a7:8e: 78:99:64:3d:da:a6:57:55:a3:8b:af:cd:2e:7f:f1:8d:be:25: 52:fe:7c:d3:1f:fb:e2:42:41:d1:ed:a1:cb:eb:9e:78:c6:db: 95:f9:6a:c2:b1:e6:16:bc:42:4c:65:ed:3c:66:a6:08:f6:d8: 62:c9:6a:e7:51:ce:22:18:1b:42:95:0c:f6:95:ad:0b:f7:8d: 92:cb:3f:e4:55:67:64:fd:14:b6:27:15:15:92:7a:0a:1b:a7: 2f:8f:a5:06:d8:88:16:bf:e4:2b:7d:73:d6:bb:89:86:b9:45: 1e:6f:ef:d8:2f:e9:48:93:7f:22:ea:24:bb:53:3f:35:30:8a: d6:67:4f:a4:23:b0:e4:bd:a2:6a:02:44:da:bc:1f:d5:f2:c9: fc:01:a0:28:02:40:8c:a0:6a:8d:f6:08:9d:84:60:31:6e:98: 97:17:fb:58:cc:c1:07:f4:ec:e6:4c:ed:d9:5a:38:5b:b1:da: 0a:55:9d:8c:0e:7c:8d:e2:62:d1:d7:ae:58:16:cf:01:70:00: 51:46:51:45:48:2c:5b:c6:04:8e:5f:2a:a6:e1:a2:19:7d:51: 6e:cd:e1:51 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUChRcQx6LmusmOeRzyaFcd/OGDWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3RkVB QkE5NjU3NDAeFw0yNTA0MjUwNDU1MDBaFw0yNjA0MjQwNTAwMDBaMDMxMTAvBgNV BAMTKENBOEU4N0M1NTIxQTREMTFENkY4MjdCRTBBMDQzRDQzOUY3NkUwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03ltc/eWso7eT0+YMVkTUGa98 qBG2iX1lId/D/wQHkZcAcrwy00PKOH3dhW00EGGOY1K3fCRWzrBefKEEqE6b0R0g VD2t651rqmnS+SOVr81pSsLt2+33WiMAl3dQN7ybgdALfW7yVgE+XsilHoUK3B4r QRnBKi9ewljy4SoHJH/yYvBREYTSNFX6op4YU9NWO2PhUOPl/t8uxikBhHwJkQVh d+DTs5dYR/srOXA++DJ+9NExn8x4g6gzl9H/mFfskEp2S59iIwZpN5/1Z8OmGTDD 2PcMdFpharZb8AW0f6DEYQci1n1uPlF1fSnW38ZGKOvu7ennzc8Tb10VbStLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUyo6HxVIaTRHW+Ce+CgQ9Q5924BswHwYDVR0j BBgwFoAUKFpTMP4AbTZgswa+5A7H/qupZXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWQzMzc3MC1mMTUxLTQzZjMtOTU2OS02YTI3ZDc1MDQyNDAvMC8yODVBNTMzMEZF MDA2RDM2NjBCMzA2QkVFNDBFQzdGRUFCQTk2NTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3RkVBQkE5 NjU3NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhZDMzNzcwLWYxNTEtNDNmMy05 NTY5LTZhMjdkNzUwNDI0MC8wLzMxMzAzMzJlMzEzOTMxMmUzMTMyMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMyMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnv4EwDQYJ KoZIhvcNAQELBQADggEBABqr9ppNw27JqOjlSOHBbGzTN/HBaiE/1MW27FDZqBY/ hDCnjniZZD3apldVo4uvzS5/8Y2+JVL+fNMf++JCQdHtocvrnnjG25X5asKx5ha8 Qkxl7Txmpgj22GLJaudRziIYG0KVDPaVrQv3jZLLP+RVZ2T9FLYnFRWSegobpy+P pQbYiBa/5Ct9c9a7iYa5RR5v79gv6UiTfyLqJLtTPzUwitZnT6QjsOS9omoCRNq8 H9XyyfwBoCgCQIygao32CJ2EYDFumJcX+1jMwQf07OZM7dlaOFux2gpVnYwOfI3i YtHXrlgWzwFwAFFGUUVILFvGBI5fKqbhohl9UW7N4VE= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net