$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa File: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (raw, json) Hash identifier: 3F5ryh384+w3GpvdHsyBJS1AxEbRZUnJ/gwprNobPkU= Subject key identifier: 79:09:AE:11:DC:83:0D:50:DF:10:FD:BF:B7:E1:2B:A5:4A:C1:C6:48 Certificate issuer: /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Certificate serial: 68AAF73B201455ECF4081CFD6223D82FD7D1D7C1 Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa Signing time: Tue 15 Apr 2025 06:02:22 +0000 ROA not before: Tue 15 Apr 2025 05:57:22 +0000 ROA not after: Tue 14 Apr 2026 06:02:22 +0000 asID: 142366 IP address blocks: 103.170.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:aa:f7:3b:20:14:55:ec:f4:08:1c:fd:62:23:d8:2f:d7:d1:d7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Validity Not Before: Apr 15 05:57:22 2025 GMT Not After : Apr 14 06:02:22 2026 GMT Subject: CN=7909AE11DC830D50DF10FDBFB7E12BA54AC1C648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:e7:a5:4d:ac:71:65:43:3c:97:41:8b:53: 76:5d:c6:5c:d3:dc:8b:95:2d:33:bc:a4:e7:5f:9a: c9:6c:fc:92:67:4f:0c:3c:49:bb:12:80:4e:fe:26: 5a:59:0d:88:45:87:fc:98:2c:92:c6:bb:ff:2d:28: 4c:ff:a0:b8:40:5d:69:ef:a2:3f:ee:c0:bb:04:a8: 03:67:d9:68:19:1a:12:40:c6:f5:0e:7c:44:a0:ab: 1a:70:80:65:36:1f:6f:92:e6:11:4c:f5:83:f0:8c: e8:9f:5d:2f:0a:9d:43:22:20:bb:78:64:68:0a:1d: 6e:79:60:80:fd:77:d3:20:9c:f0:b7:0e:18:8d:d4: d2:78:27:43:9b:18:5b:67:e5:ea:df:1c:fa:9b:41: e5:41:bf:1a:46:1e:6a:5c:99:27:c1:c3:c4:70:74: a7:b8:3b:97:df:04:3f:7d:d1:74:74:d1:6a:db:8e: 9f:52:9a:dd:7c:9a:8e:b4:fb:17:00:1b:a8:bc:36: e8:f4:22:b4:e5:e9:33:54:c1:e0:6c:13:28:af:4d: 9f:88:d2:15:bb:19:82:86:41:d6:03:03:8e:c2:44: a4:06:2b:d6:8c:a9:90:da:e6:af:cc:7b:32:67:69: 9a:ed:9d:98:56:a7:4d:b4:d2:07:4a:2f:31:76:35: 36:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:09:AE:11:DC:83:0D:50:DF:10:FD:BF:B7:E1:2B:A5:4A:C1:C6:48 X509v3 Authority Key Identifier: keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.31.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:d5:b8:54:de:f4:d5:6f:d3:c3:bc:11:06:51:f6:45:42:bd: f3:f7:03:c7:67:5a:9d:32:34:43:67:28:a8:bb:25:a3:fe:2b: cb:fa:62:d2:c1:50:c0:38:82:d8:5f:ba:7d:0c:e0:48:a1:3e: 3f:2d:93:5f:0e:0c:31:40:05:1f:c7:de:e0:0b:4a:37:19:95: d4:eb:d6:4f:16:65:01:21:55:6d:7c:e3:8a:33:5e:f9:ef:10: 37:56:16:a1:19:9a:d4:be:a0:51:14:e3:49:85:c6:6f:79:07: 28:c1:d7:ab:99:e9:6a:dc:6e:f6:94:74:03:cd:2c:34:31:6b: b3:b3:d5:f1:fa:50:45:37:b6:1f:9b:5b:7e:b5:ed:d0:3b:25: 54:70:92:5d:23:aa:78:7a:aa:78:f6:9b:13:19:b6:6c:6b:15: be:32:96:9b:15:2a:ab:f0:02:de:a9:7f:c5:bf:8e:06:c4:c5: 18:1c:7c:88:2b:2b:07:c3:db:c5:b3:ee:0f:db:30:2f:33:33: 28:d3:22:a8:c7:2e:d5:cb:4b:15:4e:08:07:e9:eb:d6:fc:f4: 5d:98:c7:f7:c8:c7:81:d4:09:20:d9:07:44:63:15:f4:99:59: 66:b3:77:43:0b:80:79:c1:43:fa:d9:37:03:43:10:65:74:dd: f2:d9:4c:0c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaKr3OyAUVez0CBz9YiPYL9fR18EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5 NTc3RDMxQzAeFw0yNTA0MTUwNTU3MjJaFw0yNjA0MTQwNjAyMjJaMDMxMTAvBgNV BAMTKDc5MDlBRTExREM4MzBENTBERjEwRkRCRkI3RTEyQkE1NEFDMUM2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLleelTaxxZUM8l0GLU3ZdxlzT 3IuVLTO8pOdfmsls/JJnTww8SbsSgE7+JlpZDYhFh/yYLJLGu/8tKEz/oLhAXWnv oj/uwLsEqANn2WgZGhJAxvUOfESgqxpwgGU2H2+S5hFM9YPwjOifXS8KnUMiILt4 ZGgKHW55YID9d9MgnPC3DhiN1NJ4J0ObGFtn5erfHPqbQeVBvxpGHmpcmSfBw8Rw dKe4O5ffBD990XR00Wrbjp9Smt18mo60+xcAG6i8Nuj0IrTl6TNUweBsEyivTZ+I 0hW7GYKGQdYDA47CRKQGK9aMqZDa5q/MezJnaZrtnZhWp0200gdKLzF2NTYfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUeQmuEdyDDVDfEP2/t+ErpUrBxkgwHwYDVR0j BBgwFoAUARCnwsXnt0yJsDb/94l0YZV30xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzBkZmI1YS04NDVlLTRkZGYtYWNhNy1hOWIzMWMzMWRmZjQvMC8wMTEwQTdDMkM1 RTdCNzRDODlCMDM2RkZGNzg5NzQ2MTk1NzdEMzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5NTc3 RDMxQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3MGRmYjVhLTg0NWUtNGRkZi1h Y2E3LWE5YjMxYzMxZGZmNC8wLzMxMzAzMzJlMzEzNzMwMmUzMzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6ofMA0GCSqG SIb3DQEBCwUAA4IBAQCf1bhU3vTVb9PDvBEGUfZFQr3z9wPHZ1qdMjRDZyiouyWj /ivL+mLSwVDAOILYX7p9DOBIoT4/LZNfDgwxQAUfx97gC0o3GZXU69ZPFmUBIVVt fOOKM1757xA3VhahGZrUvqBRFONJhcZveQcowdermelq3G72lHQDzSw0MWuzs9Xx +lBFN7Yfm1t+te3QOyVUcJJdI6p4eqp49psTGbZsaxW+MpabFSqr8ALeqX/Fv44G xMUYHHyIKysHw9vFs+4P2zAvMzMo0yKoxy7Vy0sVTggH6evW/PRdmMf3yMeB1Akg 2QdEYxX0mVlms3dDC4B5wUP62TcDQxBldN3y2UwM -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:18 2025 by rpki-client on console.sobornost.net