$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa File: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (raw, json) Hash identifier: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s= Subject key identifier: A2:00:B6:3D:2A:1D:B9:39:E3:11:DB:A3:6C:3B:A5:D8:E1:0F:67:67 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 6481DDD52A1E60DBCDD0571B4B957E367BE157EA Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa Signing time: Thu 17 Apr 2025 11:00:01 +0000 ROA not before: Thu 17 Apr 2025 10:55:01 +0000 ROA not after: Thu 16 Apr 2026 11:00:01 +0000 asID: 151599 IP address blocks: 103.7.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:81:dd:d5:2a:1e:60:db:cd:d0:57:1b:4b:95:7e:36:7b:e1:57:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Apr 17 10:55:01 2025 GMT Not After : Apr 16 11:00:01 2026 GMT Subject: CN=A200B63D2A1DB939E311DBA36C3BA5D8E10F6767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:16:83:85:40:4f:a3:07:6b:bc:36:e6:66:7f: 7e:19:67:47:58:7d:2e:7b:12:e5:e8:01:8d:2a:98: 5b:f0:d2:3c:0d:ff:55:d1:c5:16:f1:22:f3:70:6e: 45:30:51:c0:5c:42:50:30:11:9b:3e:0d:02:e3:43: 82:43:05:24:63:77:9a:89:87:06:c9:26:8d:f1:64: 7c:72:e6:9b:47:02:9d:e1:43:7f:5f:29:6e:1b:a2: 69:f0:c2:01:8e:9a:a5:55:40:83:bb:24:05:f7:ae: cd:21:72:27:60:74:0f:7b:54:a3:f7:c5:f7:0a:9f: 57:6d:75:23:64:15:97:19:88:83:81:2d:bf:db:a2: 7d:55:c3:9e:6f:ec:0c:bb:b8:a4:53:60:1b:5b:af: ee:19:6e:da:a1:05:d7:9e:6a:03:29:16:04:af:04: 4f:f1:0a:c5:62:a4:9a:f0:42:15:6b:53:4e:b3:0e: 10:19:28:81:d5:03:84:c6:86:0b:5e:bc:4c:c6:d2: db:60:8c:a7:22:3a:82:5e:d6:f3:b6:23:a0:cb:11: 15:62:d6:5b:37:59:e4:7f:52:e7:c2:15:55:b5:fd: db:c2:eb:89:94:4d:ab:41:69:c0:d4:f3:fc:3e:14: 38:4e:9a:2e:6c:ac:08:70:90:15:62:16:80:73:99: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:00:B6:3D:2A:1D:B9:39:E3:11:DB:A3:6C:3B:A5:D8:E1:0F:67:67 X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.106.0/23 Signature Algorithm: sha256WithRSAEncryption 18:49:68:ed:a1:1f:3c:e1:c4:db:3c:db:0c:c4:a4:44:d5:c8: 66:ce:68:39:9f:a0:ea:e4:7a:a8:9b:a2:61:41:72:3a:bb:43: 90:46:e0:cd:dc:11:06:5b:49:15:29:a3:ba:0a:07:f7:ea:1b: 8e:f8:2f:c4:5b:9a:4b:ac:a8:ba:39:c2:03:8d:37:0c:97:ea: 8c:7a:df:d2:60:23:b6:f9:c0:92:05:c8:19:7c:ed:81:d5:fd: 24:29:7b:af:cc:b7:c8:cf:59:50:0b:48:dc:0e:6b:0f:3b:3f: ec:da:e8:83:ac:43:1b:49:71:5c:f6:45:33:5e:66:50:a9:85: 1e:04:40:b8:d4:75:98:56:88:35:f8:53:aa:b1:8b:23:24:ba: 62:6c:0e:35:80:77:b6:0e:d0:57:6b:a9:11:64:ab:b4:ff:dc: c4:07:12:b6:7a:72:da:1f:b2:6b:d6:10:38:98:bb:2c:c1:63: 08:44:33:50:97:95:f2:1f:f7:fb:09:7b:00:a2:49:dd:cc:22: 90:6a:d1:cb:7e:29:fd:5d:0d:f4:2c:fd:a4:07:4f:c4:6e:ab: 0e:4b:2d:6d:85:a5:db:e1:24:bc:0d:af:19:f2:95:2e:5d:26: 23:64:81:de:d6:ec:71:67:66:b9:54:f8:60:83:b4:66:16:a4: 56:fb:bf:21 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZIHd1SoeYNvN0FcbS5V+NnvhV+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNTA0MTcxMDU1MDFaFw0yNjA0MTYxMTAwMDFaMDMxMTAvBgNV BAMTKEEyMDBCNjNEMkExREI5MzlFMzExREJBMzZDM0JBNUQ4RTEwRjY3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZFoOFQE+jB2u8NuZmf34ZZ0dY fS57EuXoAY0qmFvw0jwN/1XRxRbxIvNwbkUwUcBcQlAwEZs+DQLjQ4JDBSRjd5qJ hwbJJo3xZHxy5ptHAp3hQ39fKW4bomnwwgGOmqVVQIO7JAX3rs0hcidgdA97VKP3 xfcKn1dtdSNkFZcZiIOBLb/bon1Vw55v7Ay7uKRTYBtbr+4ZbtqhBdeeagMpFgSv BE/xCsVipJrwQhVrU06zDhAZKIHVA4TGhgtevEzG0ttgjKciOoJe1vO2I6DLERVi 1ls3WeR/UufCFVW1/dvC64mUTatBacDU8/w+FDhOmi5srAhwkBViFoBzmakBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUogC2PSoduTnjEdujbDul2OEPZ2cwHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhMTI0ZTZhLWY1MWItNDZkMC04 ZWEzLTc2YjI3NDQ1NThhNi8wLzMxMzAzMzJlMzcyZTMxMzAzNjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMTM1MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcHajANBgkqhkiG 9w0BAQsFAAOCAQEAGElo7aEfPOHE2zzbDMSkRNXIZs5oOZ+g6uR6qJuiYUFyOrtD kEbgzdwRBltJFSmjugoH9+objvgvxFuaS6youjnCA403DJfqjHrf0mAjtvnAkgXI GXztgdX9JCl7r8y3yM9ZUAtI3A5rDzs/7Nrog6xDG0lxXPZFM15mUKmFHgRAuNR1 mFaINfhTqrGLIyS6YmwONYB3tg7QV2upEWSrtP/cxAcStnpy2h+ya9YQOJi7LMFj CEQzUJeV8h/3+wl7AKJJ3cwikGrRy34p/V0N9Cz9pAdPxG6rDkstbYWl2+EkvA2v GfKVLl0mI2SB3tbscWdmuVT4YIO0ZhakVvu/IQ== -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net