$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa File: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (raw, json) Hash identifier: wv8n7StfxDFbmD7Ly60Xxhfvtx0y7e5MyzLxrZhGA1A= Subject key identifier: 5A:C0:C5:53:A4:AA:A4:B7:36:34:B6:E7:10:15:FB:7D:5E:12:85:F1 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 0FA85DE0226DDA2B266A32DEE87AB6490A5175BB Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa Signing time: Tue 04 Mar 2025 06:00:36 +0000 ROA not before: Tue 04 Mar 2025 05:55:36 +0000 ROA not after: Tue 03 Mar 2026 06:00:36 +0000 asID: 38496 IP address blocks: 103.91.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a8:5d:e0:22:6d:da:2b:26:6a:32:de:e8:7a:b6:49:0a:51:75:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Mar 4 05:55:36 2025 GMT Not After : Mar 3 06:00:36 2026 GMT Subject: CN=5AC0C553A4AAA4B73634B6E71015FB7D5E1285F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:61:f6:71:6a:58:b8:3c:d3:0d:ed:ab:a6:62: d0:fe:28:4d:8b:3a:a5:25:73:8d:50:1c:37:59:37: b3:bd:cb:9b:78:9a:f6:e3:73:3e:2c:b8:78:0f:1c: af:e0:68:14:ea:44:ba:4f:e9:bc:eb:1a:ed:7f:61: 85:c7:10:a3:bf:1f:5e:79:e6:b6:6b:8e:39:ae:3e: 80:67:5d:b7:cc:a7:73:b7:5f:4c:65:a0:4e:c6:ea: 2c:d9:50:e8:dc:e0:9e:7b:3e:d2:ff:ca:74:fe:8d: a7:f7:ab:c3:ec:21:c2:b0:7e:02:83:2e:9e:37:67: 12:71:0c:07:aa:59:ff:c6:32:5f:63:a0:4c:80:3c: 7e:eb:a8:51:4d:2b:b2:e1:4f:19:1c:ee:fd:23:27: 7a:f7:9e:3a:64:bc:74:8e:9a:2e:dd:78:a3:5a:b8: 69:3a:6b:81:7a:18:9c:14:08:93:ef:42:77:2a:1d: a1:ef:49:49:e4:8e:94:cc:a0:f7:ef:99:09:3f:35: 99:46:a9:8c:12:35:33:d6:e9:11:a3:dd:7c:f0:8f: dd:6a:2d:2a:9e:aa:b0:04:30:27:c5:0d:39:0b:4d: db:c5:06:e3:26:57:b5:df:90:b0:52:9a:f5:42:45: 88:41:d8:b6:7e:02:d2:9d:9e:a3:5a:32:6c:a8:c9: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C0:C5:53:A4:AA:A4:B7:36:34:B6:E7:10:15:FB:7D:5E:12:85:F1 X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.0.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:17:4b:fa:ce:e8:e3:a1:31:b2:0e:4f:27:2f:a6:9f:40:1f: 51:95:48:8f:ba:0f:65:03:bf:aa:20:da:1d:a3:29:66:73:c3: b6:ed:9f:b6:d1:9f:4c:33:aa:ad:cd:0d:62:1b:e1:03:71:ec: bf:e2:37:92:64:03:a8:a4:20:05:fc:f8:a3:1c:85:10:51:b6: 57:6a:2e:ea:49:09:67:b2:8e:cd:52:78:47:f2:c3:e4:c0:f3: b3:e5:01:22:70:70:2e:a1:54:23:18:88:e5:b2:1f:a5:63:3e: b1:c3:38:8d:66:e3:8b:dc:af:19:97:23:65:8c:21:9e:5e:50: 72:ea:ba:54:36:24:91:7f:e8:27:6b:a7:b2:43:90:68:06:93: aa:ed:f9:8f:03:e5:13:13:41:69:10:60:42:10:a2:b2:f7:c3: 3e:fe:a9:1f:9c:ae:d8:af:2a:0f:ad:fb:31:8a:12:12:b8:27: 11:d4:eb:7f:ac:1f:71:3a:db:91:8f:f2:17:c3:c1:57:ad:2a: ee:1a:f5:cd:f7:9e:32:fe:9b:87:a5:58:ce:c9:0b:d2:ae:fd: f6:53:c1:ff:a5:a9:c4:ee:41:22:78:2b:7e:af:ac:71:19:40: 24:88:05:15:af:92:95:fd:bb:b2:97:69:c6:99:82:28:94:31: ae:61:21:4a -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUD6hd4CJt2ismajLe6Hq2SQpRdbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNTAzMDQwNTU1MzZaFw0yNjAzMDMwNjAwMzZaMDMxMTAvBgNV BAMTKDVBQzBDNTUzQTRBQUE0QjczNjM0QjZFNzEwMTVGQjdENUUxMjg1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZYfZxali4PNMN7aumYtD+KE2L OqUlc41QHDdZN7O9y5t4mvbjcz4suHgPHK/gaBTqRLpP6bzrGu1/YYXHEKO/H155 5rZrjjmuPoBnXbfMp3O3X0xloE7G6izZUOjc4J57PtL/ynT+jaf3q8PsIcKwfgKD Lp43ZxJxDAeqWf/GMl9joEyAPH7rqFFNK7LhTxkc7v0jJ3r3njpkvHSOmi7deKNa uGk6a4F6GJwUCJPvQncqHaHvSUnkjpTMoPfvmQk/NZlGqYwSNTPW6RGj3Xzwj91q LSqeqrAEMCfFDTkLTdvFBuMmV7XfkLBSmvVCRYhB2LZ+AtKdnqNaMmyoyR0HAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUWsDFU6SqpLc2NLbnEBX7fV4ShfEwHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMzEzMDMzMmUzOTMxMmUzMDJlMzAyZjMyMzIyZDMy MzQyMDNkM2UyMDMzMzgzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnWwAwDQYJKoZIhvcNAQEL BQADggEBAI4XS/rO6OOhMbIOTycvpp9AH1GVSI+6D2UDv6og2h2jKWZzw7btn7bR n0wzqq3NDWIb4QNx7L/iN5JkA6ikIAX8+KMchRBRtldqLupJCWeyjs1SeEfyw+TA 87PlASJwcC6hVCMYiOWyH6VjPrHDOI1m44vcrxmXI2WMIZ5eUHLqulQ2JJF/6Cdr p7JDkGgGk6rt+Y8D5RMTQWkQYEIQorL3wz7+qR+crtivKg+t+zGKEhK4JxHU63+s H3E625GP8hfDwVetKu4a9c33njL+m4elWM7JC9Ku/fZTwf+lqcTuQSJ4K36vrHEZ QCSIBRWvkpX9u7KXacaZgiiUMa5hIUo= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:38 2025 by rpki-client on console.sobornost.net