$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa File: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (raw, json) Hash identifier: +2iIBKPqxi3ITGgsrY9PgXx230T1r0owkzHTREjnaJo= Subject key identifier: 86:D6:5B:50:B2:A6:AF:5B:18:E6:69:54:6B:2F:0E:AB:0A:47:3C:86 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 301A4ED1C55D5B697A171DF9D1FB4A8D32FC8C59 Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa Signing time: Mon 01 Jul 2024 01:05:02 +0000 ROA not before: Mon 01 Jul 2024 01:00:02 +0000 ROA not after: Mon 30 Jun 2025 01:05:02 +0000 asID: 136879 IP address blocks: 103.107.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1a:4e:d1:c5:5d:5b:69:7a:17:1d:f9:d1:fb:4a:8d:32:fc:8c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: Jul 1 01:00:02 2024 GMT Not After : Jun 30 01:05:02 2025 GMT Subject: CN=86D65B50B2A6AF5B18E669546B2F0EAB0A473C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:66:f2:05:f0:ac:d9:6e:d6:ba:8c:41:74: de:b9:a6:be:df:64:be:cf:1e:56:b9:42:5d:ae:52: 9e:39:fe:ee:2a:50:1a:f3:ba:db:b1:12:e1:4e:32: 90:c5:60:86:e1:29:f2:75:c3:90:cf:98:52:6d:07: 1c:e5:ae:86:51:7e:74:36:08:96:23:01:a4:91:2b: d1:c4:14:0e:f9:af:67:81:6f:65:5f:9c:83:8f:df: 41:27:15:1c:1d:87:00:a5:f7:51:f4:b8:3a:dc:08: 2c:f2:8c:23:89:19:e3:72:6d:fc:60:20:4e:78:ee: 6e:3f:25:8a:ca:91:6c:ff:5a:34:e7:27:e0:79:73: bf:d8:ac:0c:74:52:00:16:dc:00:c9:e9:9b:38:87: 45:ec:6a:7b:e9:72:5f:8a:0f:91:7b:d2:be:ce:3a: d7:a6:2c:ca:ee:ee:ce:5e:ae:9c:27:61:0a:7c:bf: a5:e6:20:4d:97:09:34:e7:63:1c:12:e4:9a:75:8b: 65:ea:2e:59:1a:0a:91:e8:88:84:10:cb:fe:de:66: ef:9c:82:16:b9:1e:45:c8:f2:10:64:9a:6b:e1:21: 4f:23:d5:89:a7:56:3a:3c:86:0b:7a:4e:5c:8d:a3: 4f:6f:5c:1c:bc:e4:88:aa:20:ad:ff:e6:4e:71:53: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D6:5B:50:B2:A6:AF:5B:18:E6:69:54:6B:2F:0E:AB:0A:47:3C:86 X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.85.0/24 Signature Algorithm: sha256WithRSAEncryption 25:7d:10:82:40:3b:69:96:15:b6:98:1e:72:ff:e7:b6:a8:ac: 49:9c:60:cf:01:7f:f5:9d:fd:1d:5a:dd:4a:c2:9c:f6:5c:54: d9:e2:b2:12:95:eb:fe:60:fe:e4:e2:51:97:f8:f6:4e:39:0b: b8:d9:8d:4e:23:5e:22:4b:fb:b1:43:aa:50:aa:46:f4:c8:ec: 0a:95:3b:b4:ee:ae:53:e8:df:08:63:a6:bf:6e:43:41:16:86: 94:da:cf:35:6e:5d:7a:a1:b7:16:8a:37:1f:47:7c:91:29:3e: 40:d6:f2:52:81:a7:bf:5c:97:a2:ea:2c:39:65:6f:7c:03:d0: 99:e3:db:0a:4c:92:65:a7:b3:e5:3e:5d:f1:e6:27:5d:f7:94: b7:ab:e3:41:8e:22:c8:bd:97:96:f5:f2:a7:13:73:dd:59:03: 89:ca:9d:11:4f:b9:8b:d8:62:2b:ed:82:35:9c:99:ab:9f:8f: 2f:31:1f:aa:89:8c:c5:5b:96:d8:62:f1:a4:85:4d:43:01:b0: aa:15:f9:e9:93:ab:90:51:d0:31:31:e0:bd:dd:93:05:bb:d4: be:65:c7:2d:32:64:f9:bf:71:86:96:2d:12:cd:5f:52:92:58: 8e:bf:1e:c1:11:00:04:86:6a:7c:ec:e8:98:12:ef:2f:7a:21: be:a4:f4:43 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMBpO0cVdW2l6Fx350ftKjTL8jFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNDA3MDEwMTAwMDJaFw0yNTA2MzAwMTA1MDJaMDMxMTAvBgNV BAMTKDg2RDY1QjUwQjJBNkFGNUIxOEU2Njk1NDZCMkYwRUFCMEE0NzNDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3UGbyBfCs2W7WuoxBdN65pr7f ZL7PHla5Ql2uUp45/u4qUBrzutuxEuFOMpDFYIbhKfJ1w5DPmFJtBxzlroZRfnQ2 CJYjAaSRK9HEFA75r2eBb2VfnIOP30EnFRwdhwCl91H0uDrcCCzyjCOJGeNybfxg IE547m4/JYrKkWz/WjTnJ+B5c7/YrAx0UgAW3ADJ6Zs4h0Xsanvpcl+KD5F70r7O OtemLMru7s5erpwnYQp8v6XmIE2XCTTnYxwS5Jp1i2XqLlkaCpHoiIQQy/7eZu+c gha5HkXI8hBkmmvhIU8j1YmnVjo8hgt6TlyNo09vXBy85IiqIK3/5k5xUyxJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhtZbULKmr1sY5mlUay8OqwpHPIYwHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkZGYxODFmLTFlODktNDAyMi04 MmY4LWUwZGJhODU5ZWUyZS8wLzMxMzAzMzJlMzEzMDM3MmUzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2tVMA0GCSqG SIb3DQEBCwUAA4IBAQAlfRCCQDtplhW2mB5y/+e2qKxJnGDPAX/1nf0dWt1Kwpz2 XFTZ4rISlev+YP7k4lGX+PZOOQu42Y1OI14iS/uxQ6pQqkb0yOwKlTu07q5T6N8I Y6a/bkNBFoaU2s81bl16obcWijcfR3yRKT5A1vJSgae/XJei6iw5ZW98A9CZ49sK TJJlp7PlPl3x5idd95S3q+NBjiLIvZeW9fKnE3PdWQOJyp0RT7mL2GIr7YI1nJmr n48vMR+qiYzFW5bYYvGkhU1DAbCqFfnpk6uQUdAxMeC93ZMFu9S+ZcctMmT5v3GG li0SzV9SkliOvx7BEQAEhmp87OiYEu8veiG+pPRD -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net