$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa File: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (raw, json) Hash identifier: GKmBfpKDeFOAn/hth0t5+jc0CLfcCDiIkzuoYyGRF6A= Subject key identifier: 49:92:07:0E:2E:7F:78:EE:5D:0C:63:29:EC:B9:6F:58:47:32:C7:9B Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 0F2CD531FADE419C35976722B4F7698E02C4558E Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa Signing time: Tue 01 Apr 2025 12:00:02 +0000 ROA not before: Tue 01 Apr 2025 11:55:02 +0000 ROA not after: Tue 31 Mar 2026 12:00:02 +0000 asID: 140423 IP address blocks: 103.191.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2c:d5:31:fa:de:41:9c:35:97:67:22:b4:f7:69:8e:02:c4:55:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Apr 1 11:55:02 2025 GMT Not After : Mar 31 12:00:02 2026 GMT Subject: CN=4992070E2E7F78EE5D0C6329ECB96F584732C79B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:ee:63:73:19:3a:af:b6:20:af:8d:82:b2: 77:8f:33:04:b3:75:95:8f:ac:c7:ca:78:36:37:a7: 4b:bf:75:cb:74:64:6a:53:1c:ab:22:af:a3:6a:27: 4e:e8:e1:9e:9f:16:93:50:70:e6:ff:4e:d9:9c:a3: 8d:16:53:68:40:f4:6f:69:ce:9f:a8:1e:b2:9e:dd: 8f:75:78:dc:b0:2c:e4:b2:a6:91:32:ff:07:5a:35: ef:a3:a8:bd:2a:6b:66:19:fe:c8:c9:d1:03:9c:07: 0f:01:06:3b:f2:03:b2:3d:38:2e:a7:e4:64:3e:d6: e3:83:fe:5f:1c:f0:2c:30:2a:38:2c:c1:04:1f:14: b3:e3:95:81:73:fa:fb:42:ad:6b:b5:46:d7:f8:5e: 4d:14:b5:5f:79:eb:d4:a6:f2:72:80:00:06:b7:0f: 5a:7e:74:84:43:d6:cb:f2:79:56:9b:33:7f:a8:c5: de:7e:33:37:ee:c7:7c:63:47:d9:7b:7f:b4:b4:d2: d0:db:7f:cd:f4:8a:c3:2f:ba:bb:a9:fd:e8:eb:d5: f4:67:86:b5:8b:57:2e:83:25:5b:9d:de:4c:cc:d6: 26:31:81:39:de:8a:9c:92:d5:41:37:e6:97:b6:5f: f9:c7:e3:b5:f5:13:59:fe:bd:98:84:3b:4c:4a:37: 99:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:07:0E:2E:7F:78:EE:5D:0C:63:29:EC:B9:6F:58:47:32:C7:9B X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.61.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:30:49:fc:00:84:70:33:23:15:6c:5d:f8:04:76:b7:ca:64: b1:4f:af:d3:6d:ee:58:8b:2a:9a:61:4f:79:0b:58:a3:da:04: 89:5e:59:e7:52:89:85:3d:a4:4b:dc:49:7e:ff:b1:1d:be:e7: 74:9e:05:dd:34:2e:5a:21:d3:3d:7b:b3:19:6e:04:9a:e6:d8: c9:d8:7d:25:bd:85:8e:40:38:81:d1:e9:8b:0a:59:93:dc:89: 30:0e:2c:32:b1:26:93:84:cf:e3:25:d5:b0:75:c6:5e:60:1d: 28:ec:12:56:d9:cd:67:b9:9e:98:86:24:ee:32:b8:ef:b5:b0: cd:46:42:40:a3:75:2b:91:5d:d6:09:a8:d3:8b:bc:6f:04:64: 94:0c:b3:5e:31:70:12:fe:23:dc:b8:4a:08:6e:d7:e6:7e:8d: 61:35:5d:95:3c:11:aa:45:89:26:d0:16:19:9b:32:67:06:2e: 2d:1b:89:0d:37:5e:61:88:b5:63:e9:5e:d3:c6:45:a7:73:3e: fb:b6:2e:71:8f:27:3d:d8:60:d3:a8:2d:a8:15:40:ac:87:24: fb:cd:f7:eb:90:77:f7:75:5e:2c:18:2f:57:1e:71:e0:28:47: bd:c4:ba:ac:a9:41:17:fa:9e:81:1c:f4:05:9c:26:0e:91:c7: 69:a4:53:d0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDyzVMfreQZw1l2citPdpjgLEVY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNTA0MDExMTU1MDJaFw0yNjAzMzExMjAwMDJaMDMxMTAvBgNV BAMTKDQ5OTIwNzBFMkU3Rjc4RUU1RDBDNjMyOUVDQjk2RjU4NDczMkM3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11O5jcxk6r7Ygr42CsnePMwSz dZWPrMfKeDY3p0u/dct0ZGpTHKsir6NqJ07o4Z6fFpNQcOb/Ttmco40WU2hA9G9p zp+oHrKe3Y91eNywLOSyppEy/wdaNe+jqL0qa2YZ/sjJ0QOcBw8BBjvyA7I9OC6n 5GQ+1uOD/l8c8CwwKjgswQQfFLPjlYFz+vtCrWu1Rtf4Xk0UtV9569Sm8nKAAAa3 D1p+dIRD1svyeVabM3+oxd5+Mzfux3xjR9l7f7S00tDbf830isMvurup/ejr1fRn hrWLVy6DJVud3kzM1iYxgTneipyS1UE35pe2X/nH47X1E1n+vZiEO0xKN5nDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSZIHDi5/eO5dDGMp7LlvWEcyx5swHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMzRkMmQ4LTM0YWYtNDc1Ny04 YWQ5LTkyZGEzNWQ5MjE2OC8wLzMxMzAzMzJlMzEzOTMxMmUzNjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ789MA0GCSqG SIb3DQEBCwUAA4IBAQAvMEn8AIRwMyMVbF34BHa3ymSxT6/Tbe5YiyqaYU95C1ij 2gSJXlnnUomFPaRL3El+/7Edvud0ngXdNC5aIdM9e7MZbgSa5tjJ2H0lvYWOQDiB 0emLClmT3IkwDiwysSaThM/jJdWwdcZeYB0o7BJW2c1nuZ6YhiTuMrjvtbDNRkJA o3UrkV3WCajTi7xvBGSUDLNeMXAS/iPcuEoIbtfmfo1hNV2VPBGqRYkm0BYZmzJn Bi4tG4kNN15hiLVj6V7TxkWncz77ti5xjyc92GDTqC2oFUCshyT7zffrkHf3dV4s GC9XHnHgKEe9xLqsqUEX+p6BHPQFnCYOkcdppFPQ -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net