$ rpki-client -vvf repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa File: 3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa (raw, json) Hash identifier: wVNUf+VlURHvtPfJTdBPKqRmCoRq5tMqXCMVvLe41BI= Subject key identifier: 9D:49:6A:8A:77:6C:33:A2:98:C9:A9:EE:67:1C:41:BF:1D:F6:97:DD Certificate issuer: /CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Certificate serial: 6099DFC42E2B49EAE4C5E13674C16512A6B94FCA Authority key identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa Signing time: Tue 17 Dec 2024 17:00:00 +0000 ROA not before: Tue 17 Dec 2024 16:55:00 +0000 ROA not after: Tue 16 Dec 2025 17:00:00 +0000 asID: 139391 IP address blocks: 103.143.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:99:df:c4:2e:2b:49:ea:e4:c5:e1:36:74:c1:65:12:a6:b9:4f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Validity Not Before: Dec 17 16:55:00 2024 GMT Not After : Dec 16 17:00:00 2025 GMT Subject: CN=9D496A8A776C33A298C9A9EE671C41BF1DF697DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3e:2d:b1:d9:c0:59:c2:36:d2:1c:db:71:2b: b9:0c:95:a2:c1:fe:61:2c:17:b9:92:10:45:c6:ea: 14:6d:14:f0:ae:98:19:cb:b2:3e:ba:b7:ef:33:40: a1:14:1f:bf:d4:12:24:c0:6a:0e:a7:2a:28:a6:61: df:bc:a6:78:2c:4d:1f:9a:07:c9:eb:92:5c:9c:8e: 45:67:74:99:18:76:97:e5:09:20:6a:23:a3:ae:10: 12:b6:91:5a:0d:15:0a:ee:94:cc:9c:2d:6c:22:12: f8:4e:a7:87:0b:7e:f9:59:57:9b:77:9c:56:db:23: 6c:1f:2a:a9:1b:b8:e8:74:86:3a:55:e5:2f:a7:48: d3:85:c1:e5:7e:c7:7c:a5:a1:98:48:39:c4:01:2d: 4e:8a:09:68:22:8f:db:64:a2:31:f0:d2:35:06:7e: c3:e4:82:5f:4a:5c:bb:ee:5d:c9:92:3a:f2:19:0a: 6d:a2:ba:70:7c:92:9c:d8:c0:46:ec:f9:39:e7:b7: 94:07:12:42:2f:80:44:60:e4:e9:30:4a:ce:14:f1: 22:64:65:c1:15:55:ec:50:93:1f:6c:27:b6:79:1a: ad:b8:c7:1b:3d:e2:14:db:4c:fd:49:f0:bd:62:19: d6:8b:f9:43:51:43:46:47:49:5c:32:68:2c:22:dc: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:49:6A:8A:77:6C:33:A2:98:C9:A9:EE:67:1C:41:BF:1D:F6:97:DD X509v3 Authority Key Identifier: keyid:8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.68.0/24 Signature Algorithm: sha256WithRSAEncryption 21:88:f7:86:b6:6e:19:a1:50:ec:c5:60:8c:d6:1b:dc:23:70: 46:dc:6d:77:a6:e2:8d:d1:84:7e:00:3f:0a:90:6f:5e:10:d3: d6:77:97:ea:5d:db:58:9b:fd:f9:c7:e0:fb:f2:e3:3e:d9:82: d8:55:db:61:60:d1:95:c7:b7:7c:02:43:35:10:b3:d4:ab:34: 49:ea:c6:64:e9:b6:1e:96:bb:2b:f1:74:7c:50:73:6b:51:26: c5:f5:6a:ff:c1:b8:b4:74:0d:3d:49:f9:3d:0b:9d:c3:28:92: d6:30:f3:e5:a0:53:19:7c:ee:84:ba:3a:f5:28:4b:bb:c7:a7: ae:a8:43:32:f2:d3:79:bb:1c:32:16:da:8e:f4:20:2e:69:b0: 06:a6:50:0e:99:bc:97:8a:af:df:b0:48:92:11:88:bd:a8:80: aa:d9:34:31:72:e8:a2:f3:93:e7:f8:dc:cf:d0:86:db:40:de: 0d:85:52:51:92:10:fc:64:b1:36:9e:da:a7:7e:ed:8e:0f:04: c3:61:ba:2a:ef:12:bb:78:64:af:74:5c:14:bf:ec:95:b1:74: cd:e0:17:a0:2d:47:7d:a5:81:10:7b:bd:13:2b:f2:02:a4:30: b8:a5:aa:f6:7e:76:e8:a4:d5:14:e3:70:b3:c9:49:34:93:db: 66:88:17:d0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYJnfxC4rSerkxeE2dMFlEqa5T8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3 NURCQzQ5MjAeFw0yNDEyMTcxNjU1MDBaFw0yNTEyMTYxNzAwMDBaMDMxMTAvBgNV BAMTKDlENDk2QThBNzc2QzMzQTI5OEM5QTlFRTY3MUM0MUJGMURGNjk3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPi2x2cBZwjbSHNtxK7kMlaLB /mEsF7mSEEXG6hRtFPCumBnLsj66t+8zQKEUH7/UEiTAag6nKiimYd+8pngsTR+a B8nrklycjkVndJkYdpflCSBqI6OuEBK2kVoNFQrulMycLWwiEvhOp4cLfvlZV5t3 nFbbI2wfKqkbuOh0hjpV5S+nSNOFweV+x3yloZhIOcQBLU6KCWgij9tkojHw0jUG fsPkgl9KXLvuXcmSOvIZCm2iunB8kpzYwEbs+Tnnt5QHEkIvgERg5OkwSs4U8SJk ZcEVVexQkx9sJ7Z5Gq24xxs94hTbTP1J8L1iGdaL+UNRQ0ZHSVwyaCwi3PkhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUnUlqindsM6KYyanuZxxBvx32l90wHwYDVR0j BBgwFoAUi0oMEPiKC2755FEPD2EnrXXbxJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTQyNDI4MC0zM2JlLTRlYjctOGRiOS1lMDNkNDE3YzRkOTcvMC84QjRBMEMxMEY4 OEEwQjZFRjlFNDUxMEYwRjYxMjdBRDc1REJDNDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3NURC QzQ5Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1NDI0MjgwLTMzYmUtNGViNy04 ZGI5LWUwM2Q0MTdjNGQ5Ny8wLzMxMzAzMzJlMzEzNDMzMmUzNjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzMzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ49EMA0GCSqG SIb3DQEBCwUAA4IBAQAhiPeGtm4ZoVDsxWCM1hvcI3BG3G13puKN0YR+AD8KkG9e ENPWd5fqXdtYm/35x+D78uM+2YLYVdthYNGVx7d8AkM1ELPUqzRJ6sZk6bYelrsr 8XR8UHNrUSbF9Wr/wbi0dA09Sfk9C53DKJLWMPPloFMZfO6Eujr1KEu7x6euqEMy 8tN5uxwyFtqO9CAuabAGplAOmbyXiq/fsEiSEYi9qICq2TQxcuii85Pn+NzP0Ibb QN4NhVJRkhD8ZLE2ntqnfu2ODwTDYboq7xK7eGSvdFwUv+yVsXTN4BegLUd9pYEQ e70TK/ICpDC4par2fnbopNUU43CzyUk0k9tmiBfQ -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net