$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa File: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: bwSFGiowGIWFw0Xqwv4OlEcc83VdK0o2KzJnJCZ2DT0= Subject key identifier: F2:61:A0:7C:E3:73:17:52:19:84:20:0E:4E:00:BB:6A:3E:2E:E3:FE Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 32B7C921F1343D99F1ABB5D8C515611892FCFB9F Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa Signing time: Mon 27 Jan 2025 05:00:00 +0000 ROA not before: Mon 27 Jan 2025 04:55:00 +0000 ROA not after: Mon 26 Jan 2026 05:00:00 +0000 asID: 38320 IP address blocks: 103.29.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b7:c9:21:f1:34:3d:99:f1:ab:b5:d8:c5:15:61:18:92:fc:fb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Jan 27 04:55:00 2025 GMT Not After : Jan 26 05:00:00 2026 GMT Subject: CN=F261A07CE37317521984200E4E00BB6A3E2EE3FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8b:48:1f:cf:7c:ce:87:27:8c:d3:e2:ba:23: 18:0f:cd:09:e4:0f:87:d7:e7:52:89:91:61:6e:bd: 3a:46:89:25:df:6d:57:7c:4a:9d:ee:01:c0:76:df: 9f:c9:95:1b:7d:3f:1b:a7:bc:0b:10:24:f3:f4:f2: 37:b5:aa:91:11:3d:b5:56:8a:33:83:8f:75:84:8b: 67:04:0d:9d:6a:a0:32:ac:8f:fb:8e:7f:45:be:0c: 85:40:6c:14:ba:50:8b:ba:76:61:6c:70:3e:87:5b: 99:ce:9a:7f:65:a4:63:a7:ce:f6:ae:0f:d4:39:76: c4:48:4a:68:f1:bb:48:3e:18:32:81:f9:e0:26:31: d9:5f:2d:62:ad:ba:13:ef:a9:1c:9e:28:59:2c:d4: fa:a3:2d:02:c7:af:a3:ac:68:0e:5d:1f:96:72:77: ba:77:7c:79:a7:13:9c:af:6d:58:5b:2b:91:56:8a: 11:37:07:15:29:1a:5d:45:e9:69:49:c8:d5:11:40: 4e:a9:e8:64:13:83:16:04:c4:b3:a9:ff:a9:f2:14: 3d:bf:de:5f:35:2c:15:b0:9c:ec:04:e6:a5:57:55: 7a:82:b4:04:24:d2:f2:ed:b8:f2:92:31:c4:c9:4f: ca:af:3c:63:98:1b:82:42:61:db:df:7e:92:6d:d8: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:61:A0:7C:E3:73:17:52:19:84:20:0E:4E:00:BB:6A:3E:2E:E3:FE X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.164.0/22 Signature Algorithm: sha256WithRSAEncryption 19:49:7d:03:b2:a4:fa:fb:0e:b5:ad:70:68:01:6b:fa:0d:d5: a1:17:6e:9b:89:3f:7c:7e:f4:89:23:fb:06:07:79:6d:50:50: d7:3f:8f:af:4f:ac:02:da:36:2e:81:16:d1:eb:a0:d5:e5:a8: 92:a6:c5:5b:6a:e2:88:4f:6e:5b:21:1d:bb:86:62:ab:bc:fa: 15:c1:c5:e0:03:7b:07:b1:f1:ad:29:f1:0c:21:08:ee:3c:0b: 4c:5d:0b:3d:06:cb:8a:73:c4:9e:06:92:39:11:3d:a5:81:28: c6:33:97:cb:68:19:ed:9f:9c:94:42:dd:9b:3b:11:48:48:ae: 2a:4b:61:50:59:0d:48:87:4c:59:fc:8d:e6:5c:a3:d0:b9:dd: ca:cc:62:40:7f:95:d8:75:ac:1c:71:17:b7:07:e3:ff:88:a3: 33:c8:c2:64:e3:be:c8:e9:a5:dd:94:59:9b:b1:8b:2d:c4:37: 42:7e:eb:fc:d1:cf:be:06:9b:1c:31:0e:9f:87:3d:74:fc:ec: 96:28:d9:c9:f6:33:d5:69:98:84:58:71:a7:34:59:51:11:24: 7f:44:3d:c4:54:e9:e2:52:9e:b7:b0:53:47:a6:79:11:96:65: 3b:d8:60:9e:d1:53:1e:82:d8:ac:88:3e:06:84:f2:50:ea:95: af:c8:d9:06 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMrfJIfE0PZnxq7XYxRVhGJL8+58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTAxMjcwNDU1MDBaFw0yNjAxMjYwNTAwMDBaMDMxMTAvBgNV BAMTKEYyNjFBMDdDRTM3MzE3NTIxOTg0MjAwRTRFMDBCQjZBM0UyRUUzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQi0gfz3zOhyeM0+K6IxgPzQnk D4fX51KJkWFuvTpGiSXfbVd8Sp3uAcB235/JlRt9PxunvAsQJPP08je1qpERPbVW ijODj3WEi2cEDZ1qoDKsj/uOf0W+DIVAbBS6UIu6dmFscD6HW5nOmn9lpGOnzvau D9Q5dsRISmjxu0g+GDKB+eAmMdlfLWKtuhPvqRyeKFks1PqjLQLHr6OsaA5dH5Zy d7p3fHmnE5yvbVhbK5FWihE3BxUpGl1F6WlJyNURQE6p6GQTgxYExLOp/6nyFD2/ 3l81LBWwnOwE5qVXVXqCtAQk0vLtuPKSMcTJT8qvPGOYG4JCYdvffpJt2LOtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU8mGgfONzF1IZhCAOTgC7aj4u4/4wHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzAzMzJlMzIzOTJlMzEzNjM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcdpDANBgkqhkiG 9w0BAQsFAAOCAQEAGUl9A7Kk+vsOta1waAFr+g3VoRdum4k/fH70iSP7Bgd5bVBQ 1z+Pr0+sAto2LoEW0eug1eWokqbFW2riiE9uWyEdu4Ziq7z6FcHF4AN7B7HxrSnx DCEI7jwLTF0LPQbLinPEngaSORE9pYEoxjOXy2gZ7Z+clELdmzsRSEiuKkthUFkN SIdMWfyN5lyj0LndysxiQH+V2HWsHHEXtwfj/4ijM8jCZOO+yOml3ZRZm7GLLcQ3 Qn7r/NHPvgabHDEOn4c9dPzslijZyfYz1WmYhFhxpzRZUREkf0Q9xFTp4lKet7BT R6Z5EZZlO9hgntFTHoLYrIg+BoTyUOqVr8jZBg== -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net