$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa File: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (raw, json) Hash identifier: Q5pvwdFKL1lgBG6fYcr2yl0tesQth6vA5guIwHg8TXM= Subject key identifier: 83:28:52:08:29:AB:75:91:29:D7:6D:23:6D:57:45:2C:D9:4B:38:5D Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 3C7407D69D82EBE510A327D1742325C73AF2E172 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa Signing time: Sun 12 Jan 2025 09:00:02 +0000 ROA not before: Sun 12 Jan 2025 08:55:02 +0000 ROA not after: Sun 11 Jan 2026 09:00:02 +0000 asID: 9341 IP address blocks: 103.179.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 20:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:74:07:d6:9d:82:eb:e5:10:a3:27:d1:74:23:25:c7:3a:f2:e1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Jan 12 08:55:02 2025 GMT Not After : Jan 11 09:00:02 2026 GMT Subject: CN=8328520829AB759129D76D236D57452CD94B385D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:42:21:ae:e6:bc:c1:63:1c:7f:76:b1:d3: f1:8c:9e:7e:19:c9:47:84:38:06:4f:ff:59:3a:11: cc:c1:9b:2b:7c:e6:f5:46:54:7a:7b:73:6a:08:a9: 70:c6:28:23:fa:a0:d8:74:67:81:35:6f:10:24:26: 49:96:49:c2:ed:fe:ea:6b:e3:d5:31:7e:a8:4d:73: 08:05:a6:14:d3:f4:92:94:a8:ac:44:26:8b:87:99: a4:54:d6:7e:d7:3d:a4:1b:ca:ee:c2:0e:70:f2:1a: 74:7a:4f:4d:0b:62:c8:2e:59:17:6b:8a:8a:91:f7: fe:27:81:07:89:09:02:70:48:f4:e8:fe:2a:f6:3b: c5:07:17:3e:ee:d9:9a:5a:03:28:5e:0d:6c:d0:5f: fd:14:79:8c:fb:fa:12:35:7d:dc:12:35:67:c5:ca: f7:65:99:99:0a:d6:12:70:33:0a:f5:06:c0:d8:99: 33:4f:c9:68:53:71:99:b0:93:ad:ea:1b:52:32:a3: 19:30:4b:07:f4:db:ec:94:6d:b4:2f:f5:f9:f5:6d: 6f:da:1c:45:6c:10:21:db:3a:72:92:57:08:49:c2: ab:2d:7a:da:73:e6:9f:c5:98:36:21:be:63:04:49: 07:3c:d5:89:91:f5:00:34:69:eb:a4:fd:9f:29:7b: 41:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:28:52:08:29:AB:75:91:29:D7:6D:23:6D:57:45:2C:D9:4B:38:5D X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.248.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:a0:d6:e2:5b:03:26:0c:33:de:bd:1b:1b:30:26:6b:db:74: 0e:20:6a:b3:b2:49:29:d9:ad:d2:42:da:c9:72:23:34:af:de: db:27:fd:30:8d:b0:8a:c1:ee:33:b2:12:5c:f5:79:9f:23:40: 6b:6f:91:2f:6a:d2:23:33:4a:cf:6d:b4:96:14:df:b6:90:9c: c5:7e:f3:46:f0:cf:73:e2:70:bc:76:cf:4f:a1:e9:fc:15:0d: 0a:53:21:6c:3d:f7:be:a9:82:82:5a:6e:80:20:77:61:ed:3f: ce:99:ad:78:ec:69:d0:12:a8:66:c6:67:42:a0:67:e0:0c:41: 8f:97:e0:96:7e:87:03:20:4c:9a:7a:73:fd:f0:08:b2:31:5e: 0b:dd:1a:52:32:a1:18:ac:6f:4f:19:dd:aa:f7:0e:e4:78:03: 70:36:27:0d:7c:88:e9:70:30:5c:ea:ee:cb:ec:5a:17:98:68: 45:2c:a6:b8:89:44:7d:cf:5e:25:0c:39:3b:ea:af:cc:f7:28: 46:c2:df:47:0e:c2:9c:8e:2c:46:e8:1c:37:87:31:a7:6a:26: 8a:a0:d0:98:a3:3b:cd:0f:ac:dc:e3:13:c0:93:d1:64:85:04: 42:49:46:76:30:52:57:f9:06:1c:ab:9f:27:6b:8a:38:1d:b6: 88:14:70:f5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPHQH1p2C6+UQoyfRdCMlxzry4XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNTAxMTIwODU1MDJaFw0yNjAxMTEwOTAwMDJaMDMxMTAvBgNV BAMTKDgzMjg1MjA4MjlBQjc1OTEyOUQ3NkQyMzZENTc0NTJDRDk0QjM4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY8kIhrua8wWMcf3ax0/GMnn4Z yUeEOAZP/1k6EczBmyt85vVGVHp7c2oIqXDGKCP6oNh0Z4E1bxAkJkmWScLt/upr 49UxfqhNcwgFphTT9JKUqKxEJouHmaRU1n7XPaQbyu7CDnDyGnR6T00LYsguWRdr ioqR9/4ngQeJCQJwSPTo/ir2O8UHFz7u2ZpaAyheDWzQX/0UeYz7+hI1fdwSNWfF yvdlmZkK1hJwMwr1BsDYmTNPyWhTcZmwk63qG1IyoxkwSwf02+yUbbQv9fn1bW/a HEVsECHbOnKSVwhJwqstetpz5p/FmDYhvmMESQc81YmR9QA0aeuk/Z8pe0HpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUgyhSCCmrdZEp120jbVdFLNlLOF0wHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NTkwMWNjLTFiOGUtNGYzZi1h M2QwLTMyNjlmMGUxNmM0MS8wLzMxMzAzMzJlMzEzNzM5MmUzMjM0MzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWez+DANBgkqhkiG 9w0BAQsFAAOCAQEATKDW4lsDJgwz3r0bGzAma9t0DiBqs7JJKdmt0kLayXIjNK/e 2yf9MI2wisHuM7ISXPV5nyNAa2+RL2rSIzNKz220lhTftpCcxX7zRvDPc+JwvHbP T6Hp/BUNClMhbD33vqmCglpugCB3Ye0/zpmteOxp0BKoZsZnQqBn4AxBj5fgln6H AyBMmnpz/fAIsjFeC90aUjKhGKxvTxndqvcO5HgDcDYnDXyI6XAwXOruy+xaF5ho RSymuIlEfc9eJQw5O+qvzPcoRsLfRw7CnI4sRugcN4cxp2omiqDQmKM7zQ+s3OMT wJPRZIUEQklGdjBSV/kGHKufJ2uKOB22iBRw9Q== -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net