$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa File: 3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa (raw, json) Hash identifier: qZyyqemZker5mLJct0Ssx2ZQrnylXGFblJRgWoAPLEk= Subject key identifier: 7D:12:22:53:A9:23:1C:63:54:7E:8C:10:EC:BD:A8:FE:61:AC:5E:A9 Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Certificate serial: 081F07D3A30F80DF5C745251194A2F0276AA08CA Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa Signing time: Thu 30 Jan 2025 05:01:18 +0000 ROA not before: Thu 30 Jan 2025 04:56:18 +0000 ROA not after: Thu 29 Jan 2026 05:01:18 +0000 asID: 140389 IP address blocks: 103.16.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1f:07:d3:a3:0f:80:df:5c:74:52:51:19:4a:2f:02:76:aa:08:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Validity Not Before: Jan 30 04:56:18 2025 GMT Not After : Jan 29 05:01:18 2026 GMT Subject: CN=7D122253A9231C63547E8C10ECBDA8FE61AC5EA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:dd:53:aa:b9:78:5e:ac:7f:7b:81:7c:f1: 51:40:57:1b:d5:3f:e8:bf:b2:65:9c:8d:7e:e6:6e: 7b:46:85:dd:8f:15:84:bf:8b:ae:3d:59:b1:ab:4a: 3f:eb:9d:70:3f:f9:da:6d:3f:fb:03:77:d3:62:18: 06:1b:2b:4a:4b:53:d5:2a:dc:e7:dd:06:bd:fa:87: 5d:42:ad:3c:b3:71:5c:f7:8c:00:15:a1:59:c9:ea: 79:14:7c:d1:f9:67:95:ff:2f:b6:84:00:e2:73:ab: 4f:ba:3d:c3:fe:3b:5a:68:c3:ec:7d:ff:14:be:6d: 29:13:f4:b1:63:e1:1f:bb:df:fc:10:fa:46:41:e0: 25:4d:3b:6a:9c:4a:62:4b:62:d1:db:46:17:7a:c2: 23:ca:b8:3c:fa:7e:8d:e5:e7:5f:ff:a1:f6:32:da: 6b:c1:6e:57:4d:8c:39:e6:94:ae:b4:50:94:5f:5c: b2:58:f1:bd:d2:34:d3:f8:3a:97:c0:de:45:9a:48: b7:f1:b5:3a:5f:c8:ef:a0:d4:43:b5:b5:e7:23:ae: a5:a5:1e:0e:24:24:6e:e3:b0:66:db:97:44:9b:e3: 30:1f:b8:49:8b:29:06:88:b1:19:27:b4:b8:6a:de: c3:11:fe:06:90:fc:bc:0a:29:e0:90:b1:9f:4b:ab: 4d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:12:22:53:A9:23:1C:63:54:7E:8C:10:EC:BD:A8:FE:61:AC:5E:A9 X509v3 Authority Key Identifier: keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.139.0/24 Signature Algorithm: sha256WithRSAEncryption 59:11:e7:31:9f:f7:91:e1:27:fd:26:f0:60:ce:4e:cb:cd:a1: 38:3f:81:f7:4d:cd:35:28:63:e0:88:79:d1:4c:44:84:97:49: dc:fe:50:ca:42:f3:f3:4c:f1:07:9b:f9:c3:2f:c8:6a:e2:3b: f5:72:46:c0:f0:a9:03:68:38:12:ae:4f:46:4d:50:79:68:2e: 2e:05:62:6b:e4:9b:fd:f8:04:75:e6:e5:de:7b:88:ce:26:1c: d5:af:2c:8b:73:b1:62:e8:27:7c:8a:f8:e9:12:dd:79:69:2b: 00:8a:bc:c9:e8:14:8f:00:33:66:e5:38:bf:48:39:fb:63:1d: 63:40:ff:35:7d:32:36:0a:bd:db:44:af:0c:d9:15:52:3a:e1: 0d:14:af:73:46:fa:bc:c7:7e:ae:fa:34:d7:ed:10:a3:db:82: 1f:73:a8:4d:cc:5b:f9:71:df:f7:54:a2:51:7d:e7:fb:36:96: 6d:e1:1e:3a:c2:8a:67:1d:58:19:36:cb:bd:49:5b:5f:5b:32: 00:7d:d2:a0:cc:58:f2:9c:f6:b4:7f:cf:47:51:88:ed:63:51: be:1d:39:ec:db:de:c2:18:cf:8a:81:88:f7:97:4a:b2:83:16: d1:cf:df:e8:5a:cf:e0:d5:8a:bd:2f:9b:a0:89:d8:03:89:90: 6f:e4:18:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCB8H06MPgN9cdFJRGUovAnaqCMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1 N0NFQUQ4QzAeFw0yNTAxMzAwNDU2MThaFw0yNjAxMjkwNTAxMThaMDMxMTAvBgNV BAMTKDdEMTIyMjUzQTkyMzFDNjM1NDdFOEMxMEVDQkRBOEZFNjFBQzVFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYxt1Tqrl4Xqx/e4F88VFAVxvV P+i/smWcjX7mbntGhd2PFYS/i649WbGrSj/rnXA/+dptP/sDd9NiGAYbK0pLU9Uq 3OfdBr36h11CrTyzcVz3jAAVoVnJ6nkUfNH5Z5X/L7aEAOJzq0+6PcP+O1pow+x9 /xS+bSkT9LFj4R+73/wQ+kZB4CVNO2qcSmJLYtHbRhd6wiPKuDz6fo3l51//ofYy 2mvBbldNjDnmlK60UJRfXLJY8b3SNNP4OpfA3kWaSLfxtTpfyO+g1EO1tecjrqWl Hg4kJG7jsGbbl0Sb4zAfuEmLKQaIsRkntLhq3sMR/gaQ/LwKKeCQsZ9Lq00RAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfRIiU6kjHGNUfowQ7L2o/mGsXqkwHwYDVR0j BBgwFoAUAZxOJu7CUuph+7Cf2FbN0FfOrYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDVjNDcxNS0yODJlLTQ1N2YtYjg5ZS0wNDFiZjkxMTBhZjgvMC8wMTlDNEUyNkVF QzI1MkVBNjFGQkIwOUZEODU2Q0REMDU3Q0VBRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1N0NF QUQ4Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1LTI4MmUtNDU3Zi1i ODllLTA0MWJmOTExMGFmOC8wLzMxMzAzMzJlMzEzNjJlMzEzMzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxCLMA0GCSqG SIb3DQEBCwUAA4IBAQBZEecxn/eR4Sf9JvBgzk7LzaE4P4H3Tc01KGPgiHnRTESE l0nc/lDKQvPzTPEHm/nDL8hq4jv1ckbA8KkDaDgSrk9GTVB5aC4uBWJr5Jv9+AR1 5uXee4jOJhzVryyLc7Fi6Cd8ivjpEt15aSsAirzJ6BSPADNm5Ti/SDn7Yx1jQP81 fTI2Cr3bRK8M2RVSOuENFK9zRvq8x36u+jTX7RCj24Ifc6hNzFv5cd/3VKJRfef7 NpZt4R46wopnHVgZNsu9SVtfWzIAfdKgzFjynPa0f89HUYjtY1G+HTns297CGM+K gYj3l0qygxbRz9/oWs/g1Yq9L5ugidgDiZBv5Bhm -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:24 2025 by rpki-client on console.sobornost.net