$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa File: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE= Subject key identifier: C8:18:2D:46:55:B9:EC:F7:85:BD:F8:84:7C:88:10:3E:3C:44:9E:8D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 622C4CCE1D9A3F6817C7E29366BAEB83B3DC9E76 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa Signing time: Wed 02 Apr 2025 03:00:01 +0000 ROA not before: Wed 02 Apr 2025 02:55:01 +0000 ROA not after: Wed 01 Apr 2026 03:00:01 +0000 asID: 55685 IP address blocks: 103.108.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2c:4c:ce:1d:9a:3f:68:17:c7:e2:93:66:ba:eb:83:b3:dc:9e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Apr 2 02:55:01 2025 GMT Not After : Apr 1 03:00:01 2026 GMT Subject: CN=C8182D4655B9ECF785BDF8847C88103E3C449E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:c3:9b:da:14:62:9e:67:a8:e1:cc:50:83: f4:67:36:e3:2f:e5:49:5b:fc:2b:cc:5b:19:98:bd: f9:99:d7:9b:a4:d8:2b:41:44:82:f6:dc:ff:a2:e0: 1a:99:03:80:0e:c8:42:39:90:02:14:ae:df:b4:7f: 6e:fe:fa:59:b6:9d:35:3e:be:4e:d1:42:16:21:92: 55:96:fb:e4:84:ee:33:b7:4c:6f:26:cb:8b:50:ba: 98:23:7c:fb:cf:b4:57:b1:00:ba:4f:78:a6:2e:17: 98:f9:90:51:4c:85:a1:4d:09:48:6b:c8:f8:d1:2b: e0:80:1a:c4:25:97:34:58:b9:58:1c:f5:68:e2:72: 9b:e3:29:52:b4:bb:0d:95:ba:0a:fa:2d:60:ac:74: c7:29:91:4f:e3:da:70:9e:bf:4c:40:3d:90:40:f8: 72:14:3e:05:51:c2:b1:c3:df:28:0d:f8:68:9e:7f: 14:c4:e2:d3:45:1e:f1:6b:58:26:0b:02:9e:5f:9e: 56:af:b9:f1:21:05:41:48:b4:19:f8:45:c1:d4:f9: 5a:e6:b7:e6:4a:04:83:cb:14:ad:3f:95:d5:e0:60: d2:45:13:96:6a:07:3e:4a:41:45:51:3e:73:95:71: 72:db:63:96:d1:a5:8f:6e:9b:f0:db:ae:54:a6:40: ec:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:18:2D:46:55:B9:EC:F7:85:BD:F8:84:7C:88:10:3E:3C:44:9E:8D X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.131.0/24 Signature Algorithm: sha256WithRSAEncryption 83:56:d5:ff:12:66:35:97:6d:d8:2b:26:f8:e2:8b:8f:20:78: 6b:71:13:14:9a:2e:9f:fa:d5:bd:6b:eb:7f:d8:e6:e5:c0:8d: f4:86:c3:93:29:79:b0:d2:f3:15:3e:ff:43:a2:ff:c6:52:1b: 43:6e:16:64:6d:29:40:0f:6e:d0:a9:da:59:d6:64:05:ef:c5: de:c7:58:82:60:b2:6c:aa:8e:e0:21:eb:da:39:39:e3:f9:89: dd:c6:07:1e:f2:67:ca:a7:3c:1b:1d:47:ea:56:d5:0c:b7:66: ef:7e:4a:5f:02:91:fb:7c:f5:cb:7c:5d:2d:74:c5:07:94:a5: 18:91:c4:04:03:3b:fd:bb:e3:83:0b:56:a7:28:f2:56:7b:ba: 5c:46:ce:54:33:81:29:1a:3e:4d:27:64:c7:ab:83:56:c0:43: f9:e6:49:92:7d:68:02:70:ad:23:c8:77:cf:f8:ad:37:ce:3c: cc:77:07:3d:ed:1f:40:f8:61:3b:b7:54:41:c1:fe:b8:c4:1b: 4e:da:a5:e3:11:13:02:cd:2c:06:7d:b8:f8:10:c2:4a:45:8a: 73:e9:64:fc:30:71:ca:29:7c:3e:8e:59:4c:11:c5:af:34:58: 02:27:e7:19:a8:e1:1e:ec:77:35:68:a3:e2:f6:0b:1d:18:5c: fd:47:bc:5b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYixMzh2aP2gXx+KTZrrrg7PcnnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNTA0MDIwMjU1MDFaFw0yNjA0MDEwMzAwMDFaMDMxMTAvBgNV BAMTKEM4MTgyRDQ2NTVCOUVDRjc4NUJERjg4NDdDODgxMDNFM0M0NDlFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKysOb2hRinmeo4cxQg/RnNuMv 5Ulb/CvMWxmYvfmZ15uk2CtBRIL23P+i4BqZA4AOyEI5kAIUrt+0f27++lm2nTU+ vk7RQhYhklWW++SE7jO3TG8my4tQupgjfPvPtFexALpPeKYuF5j5kFFMhaFNCUhr yPjRK+CAGsQllzRYuVgc9WjicpvjKVK0uw2Vugr6LWCsdMcpkU/j2nCev0xAPZBA +HIUPgVRwrHD3ygN+GiefxTE4tNFHvFrWCYLAp5fnlavufEhBUFItBn4RcHU+Vrm t+ZKBIPLFK0/ldXgYNJFE5ZqBz5KQUVRPnOVcXLbY5bRpY9um/DbrlSmQOwxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyBgtRlW57PeFvfiEfIgQPjxEno0wHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzEzMDM4MmUzMTMzMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2yDMA0GCSqG SIb3DQEBCwUAA4IBAQCDVtX/EmY1l23YKyb44ouPIHhrcRMUmi6f+tW9a+t/2Obl wI30hsOTKXmw0vMVPv9Dov/GUhtDbhZkbSlAD27QqdpZ1mQF78Xex1iCYLJsqo7g IevaOTnj+Yndxgce8mfKpzwbHUfqVtUMt2bvfkpfApH7fPXLfF0tdMUHlKUYkcQE Azv9u+ODC1anKPJWe7pcRs5UM4EpGj5NJ2THq4NWwEP55kmSfWgCcK0jyHfP+K03 zjzMdwc97R9A+GE7t1RBwf64xBtO2qXjERMCzSwGfbj4EMJKRYpz6WT8MHHKKXw+ jllMEcWvNFgCJ+cZqOEe7Hc1aKPi9gsdGFz9R7xb -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:16 2025 by rpki-client on console.sobornost.net