$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa File: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (raw, json) Hash identifier: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo= Subject key identifier: B5:31:AD:95:07:60:FF:C9:BA:EF:6D:27:99:40:CB:63:0A:12:56:AD Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 228E2F960005D271511F0783A1631E506D4A0309 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa Signing time: Tue 08 Apr 2025 10:00:03 +0000 ROA not before: Tue 08 Apr 2025 09:55:03 +0000 ROA not after: Tue 07 Apr 2026 10:00:03 +0000 asID: 149675 IP address blocks: 103.184.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8e:2f:96:00:05:d2:71:51:1f:07:83:a1:63:1e:50:6d:4a:03:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Apr 8 09:55:03 2025 GMT Not After : Apr 7 10:00:03 2026 GMT Subject: CN=B531AD950760FFC9BAEF6D279940CB630A1256AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:08:9a:b3:96:8a:08:f0:e8:c1:b6:dc:49: 3b:13:ff:b2:28:57:60:8a:df:0f:c8:9b:44:af:4d: 8f:4e:b1:5e:87:11:5c:e4:87:92:28:b6:d8:31:b7: 9a:7b:06:f1:e9:26:de:18:18:9a:af:03:eb:27:5b: 53:59:86:b3:bf:68:38:a8:2a:81:df:79:31:43:3d: ff:be:05:c2:ce:72:34:96:2d:8d:b7:85:ff:6f:f6: 24:7c:de:a9:df:cb:a7:2d:dd:9b:f5:5a:6c:fe:1d: 83:fe:55:1c:a9:81:d9:39:52:59:32:fe:aa:d0:90: d8:e7:07:86:29:6c:6f:c3:31:3c:81:0b:84:bb:b0: 83:c1:1e:5b:8d:8a:be:47:ce:dd:77:0a:5b:37:ae: 79:fb:b0:84:be:7a:63:4a:0e:66:e9:8f:78:44:19: 98:d1:5d:9b:c4:2c:a0:51:8e:cf:d0:c9:c4:87:34: 8a:64:9a:01:9a:dc:5f:20:db:f1:ba:f3:70:25:42: d2:87:1e:f7:64:e6:6d:2d:4c:3b:1a:3b:74:c5:0b: 51:f2:d2:10:19:f0:47:16:1b:60:b5:d5:f4:77:7e: 20:2a:83:65:f4:59:98:0b:b8:b3:be:a4:d7:b5:28: c6:d8:72:76:f7:43:6a:3b:df:89:c4:2d:5d:9a:10: 67:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:AD:95:07:60:FF:C9:BA:EF:6D:27:99:40:CB:63:0A:12:56:AD X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.19.0/24 Signature Algorithm: sha256WithRSAEncryption b8:38:fc:f2:a6:95:a9:09:98:7b:6d:d3:79:fe:ff:38:45:8a: 16:2b:83:11:39:90:cb:f3:37:fb:c6:ce:c3:4a:b3:15:ba:9a: 7e:42:8a:3f:8b:83:b2:7b:6e:e1:83:18:78:16:af:fd:50:77: 10:2c:b5:39:9a:37:21:5a:8c:0b:45:ee:aa:7b:e1:b0:ad:ef: 33:a1:b5:e4:d4:e8:81:be:e7:6d:17:e7:58:89:11:46:6b:28: ce:6a:db:20:e3:04:05:ef:24:0c:76:39:d2:65:02:30:80:73: 63:c7:20:5e:84:ca:6b:d2:e1:9e:d1:b4:63:77:0c:9c:f6:a9: 85:df:1c:4d:ce:9a:88:74:82:57:3c:f0:df:37:4d:b0:a2:c5: f8:fa:73:75:56:6d:27:57:4f:35:09:ed:82:1f:15:04:9c:b6: 0d:e7:c6:40:6a:eb:03:90:f8:6f:dc:6e:db:f5:66:ce:35:d7: 9a:fe:0a:e4:4d:bd:4a:2b:c8:2e:b8:39:21:a5:51:82:b8:c0: 98:5b:9f:10:7c:01:18:0a:fd:6c:29:7b:ea:95:ab:7b:31:f5: f3:ce:57:34:e8:42:60:6a:81:48:f8:18:d9:c8:18:8a:ab:1f: 17:9f:5d:f9:cf:cd:d1:ba:f1:9d:0d:dd:48:99:7b:97:61:77: 54:4c:1e:47 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIo4vlgAF0nFRHweDoWMeUG1KAwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTA0MDgwOTU1MDNaFw0yNjA0MDcxMDAwMDNaMDMxMTAvBgNV BAMTKEI1MzFBRDk1MDc2MEZGQzlCQUVGNkQyNzk5NDBDQjYzMEExMjU2QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcawias5aKCPDowbbcSTsT/7Io V2CK3w/Im0SvTY9OsV6HEVzkh5Iottgxt5p7BvHpJt4YGJqvA+snW1NZhrO/aDio KoHfeTFDPf++BcLOcjSWLY23hf9v9iR83qnfy6ct3Zv1Wmz+HYP+VRypgdk5Ulky /qrQkNjnB4YpbG/DMTyBC4S7sIPBHluNir5Hzt13Cls3rnn7sIS+emNKDmbpj3hE GZjRXZvELKBRjs/QycSHNIpkmgGa3F8g2/G683AlQtKHHvdk5m0tTDsaO3TFC1Hy 0hAZ8EcWG2C11fR3fiAqg2X0WZgLuLO+pNe1KMbYcnb3Q2o734nELV2aEGeNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtTGtlQdg/8m6720nmUDLYwoSVq0wHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwZDkxNGVmLTBiMWYtNDkwYi04 MDhkLWEyN2I4M2ZmOWEzZS8wLzMxMzAzMzJlMzEzODM0MmUzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7gTMA0GCSqG SIb3DQEBCwUAA4IBAQC4OPzyppWpCZh7bdN5/v84RYoWK4MROZDL8zf7xs7DSrMV upp+Qoo/i4Oye27hgxh4Fq/9UHcQLLU5mjchWowLRe6qe+Gwre8zobXk1OiBvudt F+dYiRFGayjOatsg4wQF7yQMdjnSZQIwgHNjxyBehMpr0uGe0bRjdwyc9qmF3xxN zpqIdIJXPPDfN02wosX4+nN1Vm0nV081Ce2CHxUEnLYN58ZAausDkPhv3G7b9WbO Ndea/grkTb1KK8guuDkhpVGCuMCYW58QfAEYCv1sKXvqlat7MfXzzlc06EJgaoFI +BjZyBiKqx8Xn135z83RuvGdDd1ImXuXYXdUTB5H -----END CERTIFICATE-----Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net