$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa File: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (raw, json) Hash identifier: 6pWVSpFXVKH6EqJrCt3rmPa2Bj+n9pO/wL1SNQ2qvtg= Subject key identifier: 9E:B5:EB:F4:64:AA:53:0B:16:ED:E4:55:9A:83:9B:61:7B:F2:3D:BA Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Certificate serial: 35B4A0BA080407398FEBFF46B20EFC32754AFB8E Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa Signing time: Tue 22 Apr 2025 06:00:59 +0000 ROA not before: Tue 22 Apr 2025 05:55:59 +0000 ROA not after: Tue 21 Apr 2026 06:00:59 +0000 asID: 131743 IP address blocks: 103.191.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b4:a0:ba:08:04:07:39:8f:eb:ff:46:b2:0e:fc:32:75:4a:fb:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Validity Not Before: Apr 22 05:55:59 2025 GMT Not After : Apr 21 06:00:59 2026 GMT Subject: CN=9EB5EBF464AA530B16EDE4559A839B617BF23DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:04:36:85:dd:86:52:68:58:1a:58:9c:b8:ed: 42:c6:40:da:d3:1d:c5:5f:7f:c6:d3:86:da:e0:58: 55:a8:91:18:6d:53:df:fb:18:b4:86:e0:e6:f9:30: a6:0f:6b:91:ee:cb:49:54:d2:c9:69:65:a9:8f:fd: c7:60:e4:47:ee:81:24:04:ba:7b:5c:c6:74:0e:82: 14:9b:8e:73:47:cc:cf:87:25:09:05:b0:13:ab:13: 69:25:69:fd:16:8d:1c:10:a9:f6:e1:dc:77:d6:a5: ee:14:8f:dd:f8:04:3d:cc:94:5f:b1:e7:5b:d9:f4: 55:ef:c8:61:8b:2c:50:fc:1c:2f:3a:a8:83:1d:77: 7f:28:f7:36:98:e8:20:2a:35:90:9f:cc:8a:5a:53: e7:d5:75:34:fa:45:e3:7e:dd:19:84:14:52:7a:30: c1:71:f8:cf:93:b8:f3:2d:d1:1e:ed:02:dd:6f:5d: eb:92:39:ec:9f:2d:b7:23:db:78:34:0c:f9:6f:75: 03:c9:e9:67:fe:5d:ed:46:f0:f3:c7:bb:94:9c:93: 20:1a:04:88:ff:5a:ee:d4:9a:81:37:be:c1:dd:87: 24:7b:b3:b7:8c:55:6a:3c:5b:26:48:23:cb:65:59: f3:8b:b6:40:87:a7:63:da:61:f3:b7:ef:75:84:d5: 10:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B5:EB:F4:64:AA:53:0B:16:ED:E4:55:9A:83:9B:61:7B:F2:3D:BA X509v3 Authority Key Identifier: keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.56.0/23 Signature Algorithm: sha256WithRSAEncryption 71:f5:88:61:4e:b3:fd:9b:c5:db:28:8d:a4:4b:2e:fd:41:96: ea:57:8f:49:91:1a:96:5f:c0:94:38:75:90:56:2c:53:30:41: 2a:5d:e7:89:5f:eb:62:1f:8a:32:85:73:85:3e:7b:71:87:5f: 56:f2:49:25:ab:aa:06:e3:79:bc:cd:ef:93:51:47:51:66:92: af:81:23:15:be:0a:b8:5e:17:25:cb:11:a7:5d:ae:58:6e:fb: fc:f6:64:b1:cc:8c:dc:6f:81:cc:7f:ef:c1:18:24:9e:11:f5: 83:2b:14:d0:82:f9:9c:24:d3:bc:84:98:04:86:77:d7:e4:3d: de:0d:0b:bb:16:fc:fe:21:93:4f:78:ea:c3:52:05:9e:a5:41: 73:4b:b0:2e:b7:24:9d:d9:e4:4f:45:ae:b3:d3:0a:60:a3:5e: c8:55:f0:2a:84:d4:62:54:ac:4a:47:ac:08:54:da:d0:32:b1: 04:5c:a7:16:00:05:1b:a3:d9:df:5b:ad:3d:81:40:4f:af:e0: 1c:d6:1a:00:52:e7:a8:be:fe:5b:60:a8:69:35:17:9c:37:28: ad:23:c7:f3:3d:b9:e2:e8:39:f7:4e:83:df:0c:8d:25:ba:10: 12:23:f5:4d:f4:2d:4a:0c:ed:75:70:83:e6:7a:a4:71:bd:e6: 03:c9:68:7d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNbSguggEBzmP6/9Gsg78MnVK+44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC QTBCMzlCQjAeFw0yNTA0MjIwNTU1NTlaFw0yNjA0MjEwNjAwNTlaMDMxMTAvBgNV BAMTKDlFQjVFQkY0NjRBQTUzMEIxNkVERTQ1NTlBODM5QjYxN0JGMjNEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBDaF3YZSaFgaWJy47ULGQNrT HcVff8bThtrgWFWokRhtU9/7GLSG4Ob5MKYPa5Huy0lU0slpZamP/cdg5EfugSQE untcxnQOghSbjnNHzM+HJQkFsBOrE2klaf0WjRwQqfbh3HfWpe4Uj934BD3MlF+x 51vZ9FXvyGGLLFD8HC86qIMdd38o9zaY6CAqNZCfzIpaU+fVdTT6ReN+3RmEFFJ6 MMFx+M+TuPMt0R7tAt1vXeuSOeyfLbcj23g0DPlvdQPJ6Wf+Xe1G8PPHu5SckyAa BIj/Wu7UmoE3vsHdhyR7s7eMVWo8WyZII8tlWfOLtkCHp2PaYfO373WE1RBJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUnrXr9GSqUwsW7eRVmoObYXvyPbowHwYDVR0j BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC MzlCQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyMjljYTUwLWU5NWMtNDViYi05 YzMwLTYzZTEyYWY3YTVlMS8wLzMxMzAzMzJlMzEzOTMxMmUzNTM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzMxMzczNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ784MA0GCSqG SIb3DQEBCwUAA4IBAQBx9YhhTrP9m8XbKI2kSy79QZbqV49JkRqWX8CUOHWQVixT MEEqXeeJX+tiH4oyhXOFPntxh19W8kklq6oG43m8ze+TUUdRZpKvgSMVvgq4Xhcl yxGnXa5Ybvv89mSxzIzcb4HMf+/BGCSeEfWDKxTQgvmcJNO8hJgEhnfX5D3eDQu7 Fvz+IZNPeOrDUgWepUFzS7AutySd2eRPRa6z0wpgo17IVfAqhNRiVKxKR6wIVNrQ MrEEXKcWAAUbo9nfW609gUBPr+Ac1hoAUueovv5bYKhpNRecNyitI8fzPbni6Dn3 ToPfDI0luhASI/VN9C1KDO11cIPmeqRxveYDyWh9 -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net