$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa File: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (raw, json) Hash identifier: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I= Subject key identifier: 8E:B4:EF:D0:44:3D:A3:04:41:D9:4B:76:62:A2:12:16:25:A6:28:E8 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 194A6CEB4FF3EAEB71005BD874351043163E5569 Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa Signing time: Sat 19 Apr 2025 17:00:00 +0000 ROA not before: Sat 19 Apr 2025 16:55:00 +0000 ROA not after: Sat 18 Apr 2026 17:00:00 +0000 asID: 149707 IP address blocks: 103.186.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4a:6c:eb:4f:f3:ea:eb:71:00:5b:d8:74:35:10:43:16:3e:55:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Apr 19 16:55:00 2025 GMT Not After : Apr 18 17:00:00 2026 GMT Subject: CN=8EB4EFD0443DA30441D94B7662A2121625A628E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:5f:aa:1f:62:dc:91:39:78:10:cb:4f:94: cd:70:74:9d:2d:1c:f2:a8:11:a5:fc:57:b0:51:ac: da:de:8e:0a:19:9b:d5:e6:c8:ba:ef:70:fc:99:35: c9:04:d4:1b:6f:41:f6:38:fe:28:08:e4:cc:f1:4b: cc:ce:1c:48:83:e3:0f:e8:44:e4:0c:bb:07:7f:4f: 24:cb:ea:39:58:66:44:8b:dc:d3:ed:ad:4a:8e:a2: ff:ee:44:27:cf:10:73:7e:5b:77:d6:c2:52:0a:fc: 2e:36:56:63:d1:21:6a:35:51:33:8b:be:e4:ef:ca: e5:07:aa:4d:34:9e:d2:80:2e:b2:b7:79:c8:e4:d3: 60:e1:49:96:47:3b:19:4c:a5:78:43:65:05:a3:13: 15:b4:11:a9:59:ee:a0:de:3d:38:de:2b:a1:68:ae: 89:01:49:57:f0:d9:1d:a1:5e:8d:37:cb:2a:67:08: ba:7e:9b:f9:62:24:21:dd:ce:51:be:aa:f7:44:a4: ad:8c:0c:aa:35:f3:df:c3:e1:91:7f:49:3d:33:22: 93:81:a3:cc:7f:c0:af:43:12:f1:cf:ce:fd:4e:78: e4:cf:71:ad:c8:85:bc:f5:42:9a:3c:6e:0b:5b:92: 60:48:93:84:b5:70:f9:8c:6f:bf:90:f8:00:64:4d: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B4:EF:D0:44:3D:A3:04:41:D9:4B:76:62:A2:12:16:25:A6:28:E8 X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.90.0/23 Signature Algorithm: sha256WithRSAEncryption 48:db:27:65:60:51:87:9a:64:97:e3:6e:fa:c6:e7:2f:68:33: 69:07:08:69:b1:05:00:30:0f:df:84:e1:ec:64:dc:df:a6:9a: 65:c0:a9:4e:81:02:62:7f:b8:83:6d:dc:4f:8f:1b:35:e2:21: 56:19:39:98:dc:69:42:1d:1b:26:5c:72:50:75:26:26:92:58: e1:09:f5:f9:36:be:41:b5:e1:18:07:2b:75:34:da:73:6f:f6: 91:c4:0a:76:49:2b:11:1d:0f:e1:91:14:c2:e0:9f:ae:b6:17: a3:37:9a:a1:dc:aa:f8:71:7b:3d:d7:66:22:ad:de:91:ee:db: fa:53:00:30:17:b3:61:41:92:2f:2f:35:90:8a:4d:a3:64:ba: e4:44:7c:67:d2:d6:29:b4:0c:2e:36:92:2e:3b:60:44:b0:7b: aa:e5:d9:ff:ae:3e:16:4b:e9:1d:63:4d:ad:74:d9:62:3a:73: f3:58:49:5a:68:ad:7f:18:f5:ea:35:c9:9f:03:5d:8f:97:eb: 00:8b:0b:a5:4a:40:c1:57:08:3b:0b:cd:83:6d:26:ed:bf:ae: 44:97:88:68:4b:40:72:b6:0a:b4:21:35:52:52:ea:20:a9:0a: 7d:03:00:e7:f7:b2:42:d8:7f:0e:f1:f8:13:b0:a0:87:72:b7: 94:f9:dc:f7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGUps60/z6utxAFvYdDUQQxY+VWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTA0MTkxNjU1MDBaFw0yNjA0MTgxNzAwMDBaMDMxMTAvBgNV BAMTKDhFQjRFRkQwNDQzREEzMDQ0MUQ5NEI3NjYyQTIxMjE2MjVBNjI4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASV+qH2LckTl4EMtPlM1wdJ0t HPKoEaX8V7BRrNrejgoZm9XmyLrvcPyZNckE1BtvQfY4/igI5MzxS8zOHEiD4w/o ROQMuwd/TyTL6jlYZkSL3NPtrUqOov/uRCfPEHN+W3fWwlIK/C42VmPRIWo1UTOL vuTvyuUHqk00ntKALrK3ecjk02DhSZZHOxlMpXhDZQWjExW0EalZ7qDePTjeK6Fo rokBSVfw2R2hXo03yypnCLp+m/liJCHdzlG+qvdEpK2MDKo189/D4ZF/ST0zIpOB o8x/wK9DEvHPzv1OeOTPca3Ihbz1Qpo8bgtbkmBIk4S1cPmMb7+Q+ABkTYBrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUjrTv0EQ9owRB2Ut2YqISFiWmKOgwHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I5NGMxZTk1LWE3MzgtNGU0Ny04 ZTVjLTdhZjY4MWIzNmIwMC8wLzMxMzAzMzJlMzEzODM2MmUzOTMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzczMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7paMA0GCSqG SIb3DQEBCwUAA4IBAQBI2ydlYFGHmmSX4276xucvaDNpBwhpsQUAMA/fhOHsZNzf ppplwKlOgQJif7iDbdxPjxs14iFWGTmY3GlCHRsmXHJQdSYmkljhCfX5Nr5BteEY Byt1NNpzb/aRxAp2SSsRHQ/hkRTC4J+uthejN5qh3Kr4cXs912Yird6R7tv6UwAw F7NhQZIvLzWQik2jZLrkRHxn0tYptAwuNpIuO2BEsHuq5dn/rj4WS+kdY02tdNli OnPzWElaaK1/GPXqNcmfA12Pl+sAiwulSkDBVwg7C82DbSbtv65El4hoS0Bytgq0 ITVSUuogqQp9AwDn97JC2H8O8fgTsKCHcreU+dz3 -----END CERTIFICATE-----Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net