$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e32332e3233352e302f32342d3234203d3e203536323531.roa File: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (raw, json) Hash identifier: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI= Subject key identifier: 25:A1:CB:CE:1B:A4:D0:57:A5:A2:37:72:6F:93:F4:61:73:F0:BD:FB Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 15DDB1AE401CE251FF95DDCAA3D0F8D93CAF2BC6 Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e32332e3233352e302f32342d3234203d3e203536323531.roa Signing time: Tue 22 Apr 2025 10:00:00 +0000 ROA not before: Tue 22 Apr 2025 09:55:00 +0000 ROA not after: Tue 21 Apr 2026 10:00:00 +0000 asID: 56251 IP address blocks: 103.23.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:dd:b1:ae:40:1c:e2:51:ff:95:dd:ca:a3:d0:f8:d9:3c:af:2b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Apr 22 09:55:00 2025 GMT Not After : Apr 21 10:00:00 2026 GMT Subject: CN=25A1CBCE1BA4D057A5A237726F93F46173F0BDFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0d:9e:fa:6a:d9:d8:b5:4d:06:56:80:b0:01: e6:05:ee:85:4d:d0:5b:22:86:72:12:5e:4a:f9:87: 14:f9:a9:b6:de:ec:8e:c7:2f:c8:f0:b3:17:32:d7: ce:80:ba:cb:fa:4d:02:10:de:1a:77:55:2d:f6:99: 7a:e5:57:d3:d7:88:ab:3c:3f:64:37:21:09:be:b5: 80:c2:2b:79:72:5b:f7:98:a9:97:9c:e6:85:1d:1f: 2a:65:14:d9:55:50:5d:9a:b8:8f:57:8d:be:33:1e: 22:80:9f:ab:9b:b6:4a:1a:82:a2:e0:81:5e:df:97: df:4d:a5:56:e0:ea:ca:1a:b0:4e:c5:b8:5c:3c:90: f2:2e:47:85:cc:9a:e4:85:dc:97:e7:47:3e:72:52: 84:a0:a5:96:23:8d:9f:c0:d0:30:54:72:52:a2:72: 4a:49:7c:a3:47:db:21:9c:0e:b4:89:48:5a:1a:69: 1f:d8:7b:ce:2d:35:af:f4:60:02:6a:a7:89:dc:f8: 9e:9e:65:5e:a4:46:62:85:72:e1:a0:2b:66:6e:4c: 0e:d5:58:05:12:97:6e:57:f7:bf:ae:27:d3:e4:ba: 78:8a:c2:78:77:a6:95:30:38:27:53:0a:cb:0a:53: a6:d2:95:f1:77:aa:4c:98:4a:a7:17:f3:d8:79:80: 2b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A1:CB:CE:1B:A4:D0:57:A5:A2:37:72:6F:93:F4:61:73:F0:BD:FB X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e32332e3233352e302f32342d3234203d3e203536323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.235.0/24 Signature Algorithm: sha256WithRSAEncryption 93:e7:09:05:98:a3:f0:bb:7e:f4:1c:c1:bc:f8:47:72:34:0d: 41:a9:b0:13:e3:ce:4b:63:c0:32:39:8f:ff:54:26:f7:bb:69: 4d:c1:bd:ac:cf:e4:66:8c:9f:2e:2f:6e:b9:b9:e6:73:9f:f7: a1:15:99:fc:32:6c:a2:78:c3:19:7f:13:35:b9:2d:99:e5:4e: 2a:49:4c:8b:11:ce:6a:80:a3:f8:36:4b:5a:26:7e:56:fb:48: f7:ea:38:41:f3:50:1a:a2:bb:fc:a5:0c:db:53:6e:7f:2a:a6: 6c:7e:26:f4:9d:81:d7:97:6e:ba:32:f5:7a:f6:82:4d:93:75: 3d:1c:e9:f3:77:ec:4d:f4:a0:44:4f:ac:e8:3d:10:3a:d8:32: 7d:4c:15:53:a3:66:73:d6:55:7f:9f:21:7a:cc:26:3e:ba:4c: 52:81:62:27:8d:c6:ea:49:64:03:96:8a:44:7e:35:7a:0a:15: 36:37:40:ed:4b:8e:6a:96:a6:78:ff:98:37:a6:b8:59:23:ca: de:db:b8:81:0c:bf:ed:d2:38:07:69:f5:4c:1c:f2:6c:a3:d6: 57:c3:1c:47:0d:d5:a4:38:c7:76:32:44:ed:76:25:1f:31:5d: 6a:57:99:43:ae:dd:93:f9:46:d3:13:8e:35:b1:ad:46:64:2f: 45:71:83:68 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFd2xrkAc4lH/ld3Ko9D42TyvK8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNTA0MjIwOTU1MDBaFw0yNjA0MjExMDAwMDBaMDMxMTAvBgNV BAMTKDI1QTFDQkNFMUJBNEQwNTdBNUEyMzc3MjZGOTNGNDYxNzNGMEJERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsDZ76atnYtU0GVoCwAeYF7oVN 0FsihnISXkr5hxT5qbbe7I7HL8jwsxcy186Ausv6TQIQ3hp3VS32mXrlV9PXiKs8 P2Q3IQm+tYDCK3lyW/eYqZec5oUdHyplFNlVUF2auI9Xjb4zHiKAn6ubtkoagqLg gV7fl99NpVbg6soasE7FuFw8kPIuR4XMmuSF3JfnRz5yUoSgpZYjjZ/A0DBUclKi ckpJfKNH2yGcDrSJSFoaaR/Ye84tNa/0YAJqp4nc+J6eZV6kRmKFcuGgK2ZuTA7V WAUSl25X97+uJ9PkuniKwnh3ppUwOCdTCssKU6bSlfF3qkyYSqcX89h5gCvzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJaHLzhuk0Felojdyb5P0YXPwvfswHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNWY3NjhiLTQyMTgtNGM1ZC04 OTNhLTBmZjY5NjUyNjYzOS8wLzMxMzAzMzJlMzIzMzJlMzIzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcX6zANBgkqhkiG 9w0BAQsFAAOCAQEAk+cJBZij8Lt+9BzBvPhHcjQNQamwE+POS2PAMjmP/1Qm97tp TcG9rM/kZoyfLi9uubnmc5/3oRWZ/DJsonjDGX8TNbktmeVOKklMixHOaoCj+DZL WiZ+VvtI9+o4QfNQGqK7/KUM21NufyqmbH4m9J2B15duujL1evaCTZN1PRzp83fs TfSgRE+s6D0QOtgyfUwVU6Nmc9ZVf58heswmPrpMUoFiJ43G6klkA5aKRH41egoV NjdA7UuOapameP+YN6a4WSPK3tu4gQy/7dI4B2n1TBzybKPWV8McRw3VpDjHdjJE 7XYlHzFdaleZQ67dk/lG0xOONbGtRmQvRXGDaA== -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net