$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa File: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (raw, json) Hash identifier: XPciT66Xx06GRwXZ0ZEhgnmHRmTDySk8mHEntenab4o= Subject key identifier: 09:7F:34:9A:6B:13:7F:64:25:84:6D:92:25:0F:ED:C8:F4:E7:6B:E7 Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Certificate serial: 4CD9EA57B81DFB69AD7EC019BAE8A608DD0294A0 Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa Signing time: Wed 05 Mar 2025 02:00:02 +0000 ROA not before: Wed 05 Mar 2025 01:55:02 +0000 ROA not after: Wed 04 Mar 2026 02:00:02 +0000 asID: 149693 IP address blocks: 103.186.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d9:ea:57:b8:1d:fb:69:ad:7e:c0:19:ba:e8:a6:08:dd:02:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Validity Not Before: Mar 5 01:55:02 2025 GMT Not After : Mar 4 02:00:02 2026 GMT Subject: CN=097F349A6B137F6425846D92250FEDC8F4E76BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:7b:59:5c:63:f5:4d:05:7b:32:01:35:fe: 56:43:8e:de:82:34:0a:a3:2f:e4:ef:18:e6:ef:12: 8a:a6:91:53:7c:c4:f7:29:04:36:c8:56:04:60:4d: d6:32:21:a5:2c:08:df:b6:97:58:e8:07:4a:b0:c0: 02:bb:40:6f:1c:30:26:48:81:82:52:a9:31:60:53: 0b:13:89:1d:83:1b:c4:85:e0:0f:47:0a:59:95:fb: 8f:84:a0:7f:df:8f:4e:57:b4:05:ac:01:db:5e:32: 25:65:be:05:bf:a4:5b:c7:87:2c:52:06:19:36:5c: c6:e1:f2:d3:42:d9:27:a0:da:04:3b:bf:fb:b3:d6: 2d:73:de:6c:a8:fc:9b:0f:d6:bf:be:65:97:3a:2f: f7:65:d6:f7:d8:16:08:a7:1d:2c:ae:65:6d:16:06: 2e:94:8a:14:1b:c6:75:0c:2c:28:04:1a:c1:4a:c3: 4a:92:a4:b9:0a:ae:5d:26:54:ee:e4:ba:43:96:98: f6:cf:c7:49:a1:fe:a2:cc:41:ef:8f:91:9b:45:ad: 7b:0a:ce:66:cc:cc:fc:48:de:00:68:2b:68:32:f0: 4e:ac:23:24:99:4a:a1:b6:57:14:21:1d:5f:1b:15: 67:9b:61:ef:7c:c8:94:02:80:75:89:ea:5b:b0:f9: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7F:34:9A:6B:13:7F:64:25:84:6D:92:25:0F:ED:C8:F4:E7:6B:E7 X509v3 Authority Key Identifier: keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.97.0/24 Signature Algorithm: sha256WithRSAEncryption 83:3c:74:62:7d:f8:bd:75:4d:d1:a7:68:c8:2f:3d:fc:4f:47: 98:fc:09:f1:92:08:53:71:00:68:77:35:15:15:3d:c2:f0:74: dc:61:83:d6:cb:49:6e:3b:62:df:5c:21:f3:f6:09:db:2c:78: 6a:76:63:06:ea:a5:e7:ae:e2:41:4f:95:05:70:d3:d7:52:ab: 8b:f6:c1:f7:f0:64:0c:6f:6d:6e:52:04:98:0d:cb:9a:ba:11: 07:4a:e6:da:5d:5d:a8:d2:8d:84:9d:fc:3a:1a:18:b3:5f:12: e9:d9:80:be:ee:ed:1d:c0:00:7a:d7:45:95:b9:50:df:a9:c8: 04:68:da:37:f0:06:d7:dd:d2:c7:cb:5a:78:c7:c4:c0:06:94: cc:ef:85:57:cf:b9:89:2b:c7:5a:9a:76:73:35:a6:3f:eb:96: e7:5d:f7:f9:a4:08:37:66:f9:9e:06:d4:4e:82:4d:e6:80:fc: 8d:3f:e6:34:df:64:4c:68:c2:9c:1d:d1:a6:31:b1:78:4c:d5: d8:c3:36:69:e5:8f:ef:65:3e:e0:61:3b:92:58:13:78:1b:1c: a5:38:a0:63:03:86:3b:77:0e:4d:e0:af:e5:38:a7:2a:95:4c: 9e:f5:ed:02:0b:5c:34:42:69:31:21:89:c9:71:d7:b1:f2:5b: 07:90:c8:e2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTNnqV7gd+2mtfsAZuuimCN0ClKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1 OTY4MDMyNDAeFw0yNTAzMDUwMTU1MDJaFw0yNjAzMDQwMjAwMDJaMDMxMTAvBgNV BAMTKDA5N0YzNDlBNkIxMzdGNjQyNTg0NkQ5MjI1MEZFREM4RjRFNzZCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWntZXGP1TQV7MgE1/lZDjt6C NAqjL+TvGObvEoqmkVN8xPcpBDbIVgRgTdYyIaUsCN+2l1joB0qwwAK7QG8cMCZI gYJSqTFgUwsTiR2DG8SF4A9HClmV+4+EoH/fj05XtAWsAdteMiVlvgW/pFvHhyxS Bhk2XMbh8tNC2Seg2gQ7v/uz1i1z3myo/JsP1r++ZZc6L/dl1vfYFginHSyuZW0W Bi6UihQbxnUMLCgEGsFKw0qSpLkKrl0mVO7kukOWmPbPx0mh/qLMQe+PkZtFrXsK zmbMzPxI3gBoK2gy8E6sIySZSqG2VxQhHV8bFWebYe98yJQCgHWJ6luw+axJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUCX80mmsTf2QlhG2SJQ/tyPTna+cwHwYDVR0j BBgwFoAU9h0KhbVtj4JGWKgoe+jU9lloAyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMC9GNjFEMEE4NUI1 NkQ4RjgyNDY1OEE4Mjg3QkU4RDRGNjU5NjgwMzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1OTY4 MDMyNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MWU5ZGUyLWE0ZWMtNDdhMi05 YmI4LTEwODIxZGRhNjdmMy8wLzMxMzAzMzJlMzEzODM2MmUzOTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7phMA0GCSqG SIb3DQEBCwUAA4IBAQCDPHRiffi9dU3Rp2jILz38T0eY/AnxkghTcQBodzUVFT3C 8HTcYYPWy0luO2LfXCHz9gnbLHhqdmMG6qXnruJBT5UFcNPXUquL9sH38GQMb21u UgSYDcuauhEHSubaXV2o0o2Enfw6GhizXxLp2YC+7u0dwAB610WVuVDfqcgEaNo3 8AbX3dLHy1p4x8TABpTM74VXz7mJK8damnZzNaY/65bnXff5pAg3ZvmeBtROgk3m gPyNP+Y032RMaMKcHdGmMbF4TNXYwzZp5Y/vZT7gYTuSWBN4GxylOKBjA4Y7dw5N 4K/lOKcqlUye9e0CC1w0QmkxIYnJcdex8lsHkMji -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net