$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e31312e302f32342d3234203d3e20313335343838.roa File: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (raw, json) Hash identifier: uRQw+5QQP0wXxplDqYvXD7a/PuPwjnqYNZPmeOG1eFc= Subject key identifier: C1:9F:D5:AF:5B:BF:E5:7C:01:E2:79:D9:EA:B6:5D:B6:63:FB:24:E3 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 3B4376186A2D0CC45CB2287F78F25143226A8893 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e31312e302f32342d3234203d3e20313335343838.roa Signing time: Mon 24 Feb 2025 04:01:04 +0000 ROA not before: Mon 24 Feb 2025 03:56:04 +0000 ROA not after: Mon 23 Feb 2026 04:01:04 +0000 asID: 135488 IP address blocks: 103.95.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:43:76:18:6a:2d:0c:c4:5c:b2:28:7f:78:f2:51:43:22:6a:88:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Feb 24 03:56:04 2025 GMT Not After : Feb 23 04:01:04 2026 GMT Subject: CN=C19FD5AF5BBFE57C01E279D9EAB65DB663FB24E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cb:79:cc:49:58:b1:a0:5f:e5:03:5b:64:24: 65:d0:a0:99:78:91:0c:0c:6a:e6:f3:f7:aa:0b:23: 31:df:a7:6a:56:57:88:45:74:7c:e4:8a:f5:2e:90: ec:99:03:4b:36:ad:78:f7:5d:06:7a:37:81:13:9e: 12:50:14:3a:07:1e:76:29:04:d0:e4:bc:c6:4c:60: 74:55:75:2d:2a:14:f5:12:6a:74:eb:cf:1b:53:06: 67:66:7a:09:88:ae:74:6d:d3:c4:89:26:be:4e:a6: ee:9d:70:bd:25:d7:a6:34:0f:de:ba:37:b2:85:97: 88:11:69:fa:13:54:98:f7:db:54:a1:1b:2c:a5:b4: e1:8d:0d:52:6a:fb:f8:3d:aa:7b:2c:89:9f:f7:29: 23:85:b8:4e:dd:45:dd:a5:ec:dc:94:9a:bf:b1:12: 31:d6:f5:13:1c:3a:de:b7:ad:d3:e6:63:f2:9e:a2: e0:aa:81:43:7c:eb:7a:f6:0f:36:c2:89:ee:de:f3: 04:45:27:10:ac:ae:c5:44:72:81:d6:13:2a:3a:8b: 4d:2d:40:d5:55:94:21:d2:ac:91:2a:af:a4:3c:d4: 58:f7:01:3c:5a:58:74:4b:2e:02:4b:d6:ad:af:5a: 64:93:44:69:b4:b2:76:9c:6d:a3:21:40:75:13:fb: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9F:D5:AF:5B:BF:E5:7C:01:E2:79:D9:EA:B6:5D:B6:63:FB:24:E3 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e31312e302f32342d3234203d3e20313335343838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.11.0/24 Signature Algorithm: sha256WithRSAEncryption 09:4d:64:ab:18:44:82:3c:55:6b:e3:ec:33:14:91:f3:2c:9a: 21:f6:49:b1:e6:34:e9:ff:4f:f9:22:48:4a:4e:96:86:a6:7d: 8e:ad:ed:78:cf:ec:e5:3e:13:19:f9:01:03:34:80:45:34:f1: dd:ba:82:e9:36:c4:6a:c7:a0:29:71:82:fd:2b:fe:43:a6:ac: dc:d9:e8:7b:cb:ec:0e:98:37:ef:b6:13:46:25:08:da:64:a5: 29:99:ff:ef:1b:f4:a6:df:94:a5:19:f0:26:84:e4:18:07:3c: 9e:ca:7a:62:d7:e0:67:b0:c5:c3:cf:22:df:c4:5a:61:6e:70: 05:9e:00:45:ff:b1:8e:c5:1d:dd:2b:ba:78:72:33:e2:6c:d8: ea:73:01:07:fe:0a:4b:4d:26:5d:92:ed:08:b7:88:85:c4:c0: d2:6a:7c:e6:3b:b0:69:e6:60:fd:69:77:bf:f3:9f:93:d5:17: e0:54:ae:fb:92:03:0f:45:5e:9f:b0:6b:53:d1:9d:82:89:1b: 79:2f:27:3e:15:fc:74:0f:67:f2:3b:69:da:ae:4e:d5:26:c9: 6d:08:59:43:48:fb:64:43:db:38:95:ea:c4:8d:d7:43:02:91: 10:8e:c3:17:ee:83:3f:0b:93:02:44:23:02:48:11:fc:80:ad: 0b:5a:11:db -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUO0N2GGotDMRcsih/ePJRQyJqiJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNTAyMjQwMzU2MDRaFw0yNjAyMjMwNDAxMDRaMDMxMTAvBgNV BAMTKEMxOUZENUFGNUJCRkU1N0MwMUUyNzlEOUVBQjY1REI2NjNGQjI0RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqy3nMSVixoF/lA1tkJGXQoJl4 kQwMaubz96oLIzHfp2pWV4hFdHzkivUukOyZA0s2rXj3XQZ6N4ETnhJQFDoHHnYp BNDkvMZMYHRVdS0qFPUSanTrzxtTBmdmegmIrnRt08SJJr5Opu6dcL0l16Y0D966 N7KFl4gRafoTVJj321ShGyyltOGNDVJq+/g9qnssiZ/3KSOFuE7dRd2l7NyUmr+x EjHW9RMcOt63rdPmY/KeouCqgUN863r2DzbCie7e8wRFJxCsrsVEcoHWEyo6i00t QNVVlCHSrJEqr6Q81Fj3ATxaWHRLLgJL1q2vWmSTRGm0snacbaMhQHUT+zaBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwZ/Vr1u/5XwB4nnZ6rZdtmP7JOMwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNjQ2NWVjLTkxNjAtNDU5Yi04 ZDExLTk0OGZjMjZkYTFjMC8wLzMxMzAzMzJlMzkzNTJlMzEzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdfCzANBgkqhkiG 9w0BAQsFAAOCAQEACU1kqxhEgjxVa+PsMxSR8yyaIfZJseY06f9P+SJISk6WhqZ9 jq3teM/s5T4TGfkBAzSARTTx3bqC6TbEasegKXGC/Sv+Q6as3Nnoe8vsDpg377YT RiUI2mSlKZn/7xv0pt+UpRnwJoTkGAc8nsp6YtfgZ7DFw88i38RaYW5wBZ4ARf+x jsUd3Su6eHIz4mzY6nMBB/4KS00mXZLtCLeIhcTA0mp85juwaeZg/Wl3v/Ofk9UX 4FSu+5IDD0Ven7BrU9GdgokbeS8nPhX8dA9n8jtp2q5O1SbJbQhZQ0j7ZEPbOJXq xI3XQwKREI7DF+6DPwuTAkQjAkgR/ICtC1oR2w== -----END CERTIFICATE-----Generated at Sat Apr 26 13:37:03 2025 by rpki-client on console.sobornost.net