$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa File: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (raw, json) Hash identifier: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE= Subject key identifier: 67:DA:A8:61:D3:58:AA:BF:7E:0D:D4:AA:38:25:8E:C8:3A:98:AC:10 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 1296CAFE5DA0AE1DBCF1F5F4485796E707F6D837 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa Signing time: Sat 01 Feb 2025 12:02:22 +0000 ROA not before: Sat 01 Feb 2025 11:57:22 +0000 ROA not after: Sat 31 Jan 2026 12:02:22 +0000 asID: 147081 IP address blocks: 103.173.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:96:ca:fe:5d:a0:ae:1d:bc:f1:f5:f4:48:57:96:e7:07:f6:d8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Feb 1 11:57:22 2025 GMT Not After : Jan 31 12:02:22 2026 GMT Subject: CN=67DAA861D358AABF7E0DD4AA38258EC83A98AC10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:84:8f:d9:76:b5:c5:37:19:8a:c3:ee:aa: e2:74:d3:72:37:5c:2f:41:ba:ae:fe:e8:89:ee:36: 92:aa:b9:69:7c:8d:13:d6:7d:48:7f:71:21:b3:c6: 49:ed:aa:47:f6:27:bf:af:62:f8:e9:3e:06:04:60: 46:d0:65:97:ae:6f:30:ff:86:65:34:5d:31:66:f6: b8:3b:a1:eb:fc:4a:06:20:a4:23:3e:c6:e4:62:56: dc:56:73:7d:88:91:e0:6a:74:08:87:0d:0b:ae:07: 6f:e1:28:c2:d0:02:55:24:01:42:03:77:fa:55:20: 3b:2a:7e:10:74:13:18:99:c6:7e:44:c3:1b:37:9f: 85:7c:ab:85:25:41:1c:d4:17:f2:75:32:c6:fb:cc: 7f:ee:cd:1c:ed:64:3f:7c:6c:52:9d:98:02:5e:10: 61:98:da:50:b3:e6:e5:f4:a7:ac:16:18:2b:8a:7d: 95:e6:63:87:7f:3a:ba:c3:3c:83:71:32:9c:0c:9f: e5:b1:31:5a:6e:ed:4d:1b:0d:65:5f:01:b1:a3:01: 8c:be:20:dc:3e:7f:fa:eb:a9:f4:30:d4:47:78:c0: 58:14:5e:72:3e:69:a8:0d:ff:8b:40:22:75:98:b1: f4:dc:c1:b9:e4:22:1d:d4:61:c5:f4:f7:4e:1e:e8: a2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DA:A8:61:D3:58:AA:BF:7E:0D:D4:AA:38:25:8E:C8:3A:98:AC:10 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.164.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:08:bb:29:b3:97:8c:d3:3d:a9:c1:2e:db:e9:13:38:36:a0: 0d:f9:a2:b5:b3:0a:be:35:3d:4e:42:d8:1c:ee:58:00:fa:b8: 68:4d:03:b2:60:ad:22:9c:91:8b:ea:03:7b:f8:06:b9:67:91: 0c:59:fb:7a:51:32:cc:dd:9d:77:52:9b:5f:f1:02:4c:7a:a5: 70:36:1d:4e:8c:49:a6:6b:b4:b1:0d:9e:13:78:71:70:03:39: f1:d1:fc:3e:19:6b:15:1e:24:e8:f2:83:c7:1c:01:50:ac:8e: 1d:b7:0d:8f:29:48:82:d7:f8:89:d7:89:58:cb:dc:58:a9:8b: f5:c6:c4:67:fd:8e:35:5a:05:8a:2b:e9:67:52:10:78:6f:7e: e3:70:64:95:a7:aa:a7:bd:d3:80:45:e3:9b:43:19:93:10:72: 19:0d:9b:6a:4c:af:68:9d:a2:7a:23:e8:ce:9d:4d:16:ba:50: 23:86:d8:b8:41:9b:f2:c0:db:f4:d8:83:db:f0:69:36:d0:fc: 30:2b:0a:f4:d5:b8:a0:2b:d0:1d:8b:9e:f1:78:a3:b4:6e:49: 62:39:3f:00:8b:f3:bb:fe:39:d3:b8:43:7a:6d:0f:f0:c9:15: 54:a4:1e:1a:7e:ff:a9:12:24:76:c6:1c:07:a1:dc:b7:60:df: 7c:2e:a3:94 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEpbK/l2grh288fX0SFeW5wf22DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTAyMDExMTU3MjJaFw0yNjAxMzExMjAyMjJaMDMxMTAvBgNV BAMTKDY3REFBODYxRDM1OEFBQkY3RTBERDRBQTM4MjU4RUM4M0E5OEFDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+W4SP2Xa1xTcZisPuquJ003I3 XC9Buq7+6InuNpKquWl8jRPWfUh/cSGzxkntqkf2J7+vYvjpPgYEYEbQZZeubzD/ hmU0XTFm9rg7oev8SgYgpCM+xuRiVtxWc32IkeBqdAiHDQuuB2/hKMLQAlUkAUID d/pVIDsqfhB0ExiZxn5Ewxs3n4V8q4UlQRzUF/J1Msb7zH/uzRztZD98bFKdmAJe EGGY2lCz5uX0p6wWGCuKfZXmY4d/OrrDPINxMpwMn+WxMVpu7U0bDWVfAbGjAYy+ INw+f/rrqfQw1Ed4wFgUXnI+aagN/4tAInWYsfTcwbnkIh3UYcX0904e6KJdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUZ9qoYdNYqr9+DdSqOCWOyDqYrBAwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkNDZhOWNhLTEwOTYtNGZlNC04 OTkzLWQwYmU5N2I1NGE3Ni8wLzMxMzAzMzJlMzEzNzMzMmUzMTM2MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnraQwDQYJ KoZIhvcNAQELBQADggEBAC8Iuymzl4zTPanBLtvpEzg2oA35orWzCr41PU5C2Bzu WAD6uGhNA7JgrSKckYvqA3v4BrlnkQxZ+3pRMszdnXdSm1/xAkx6pXA2HU6MSaZr tLENnhN4cXADOfHR/D4ZaxUeJOjyg8ccAVCsjh23DY8pSILX+InXiVjL3Fipi/XG xGf9jjVaBYor6WdSEHhvfuNwZJWnqqe904BF45tDGZMQchkNm2pMr2idonoj6M6d TRa6UCOG2LhBm/LA2/TYg9vwaTbQ/DArCvTVuKAr0B2LnvF4o7RuSWI5PwCL87v+ OdO4Q3ptD/DJFVSkHhp+/6kSJHbGHAeh3Ldg33wuo5Q= -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:50 2025 by rpki-client on console.sobornost.net