$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa File: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (raw, json) Hash identifier: DACxlfdaRrzYV99yR/yeAhjiMh8XR4kIKAf+dkh/dOU= Subject key identifier: 30:FC:04:C5:97:C3:65:22:E1:CE:E8:96:8F:D6:56:2D:43:C4:34:BB Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 19851A80A188D0E50C93F4CDA7C23B5C22C385FB Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa Signing time: Sat 05 Apr 2025 17:00:00 +0000 ROA not before: Sat 05 Apr 2025 16:55:00 +0000 ROA not after: Sat 04 Apr 2026 17:00:00 +0000 asID: 133799 IP address blocks: 123.108.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:85:1a:80:a1:88:d0:e5:0c:93:f4:cd:a7:c2:3b:5c:22:c3:85:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Apr 5 16:55:00 2025 GMT Not After : Apr 4 17:00:00 2026 GMT Subject: CN=30FC04C597C36522E1CEE8968FD6562D43C434BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:6a:fa:46:28:24:a8:9e:51:e4:1a:c9:1a: ec:3b:db:48:70:92:12:09:77:68:8c:30:b0:06:b4: 8b:b1:e6:75:3b:51:eb:ef:06:88:24:e2:a4:33:bf: 3c:4a:d7:48:07:ef:d3:40:ab:66:3b:99:ba:a2:47: b1:68:a3:12:59:d7:59:5e:a1:62:81:0e:e3:f5:33: db:fa:9b:dd:a7:57:93:35:8c:35:f7:7b:4e:ac:28: 98:bd:ce:21:cd:e4:6b:82:50:03:85:cd:28:3d:9f: 60:87:cd:ce:c0:32:e3:55:64:86:0c:bf:e8:eb:15: a5:15:89:bd:04:46:81:46:0b:94:4a:6e:e0:d1:85: 00:08:f6:56:a9:01:a5:c2:b9:9c:ea:34:5d:0f:9a: 16:77:44:16:31:8e:54:cb:c3:16:0c:66:b1:33:5f: 71:ab:2e:70:33:71:c9:8e:6b:31:0c:fb:1c:01:c4: 33:00:fc:15:4f:99:91:61:19:7b:1d:ed:cc:18:54: 16:f9:4e:ca:2d:24:5c:b6:ec:0e:d9:88:8e:84:ff: 54:7e:c5:f9:83:65:a2:c0:03:a3:b7:d2:0c:d4:c2: 65:31:46:e4:6c:f2:f1:56:60:f7:d2:9a:6d:97:c7: 96:72:b2:35:8e:68:e7:b9:d5:90:e0:75:5f:de:87: 7d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FC:04:C5:97:C3:65:22:E1:CE:E8:96:8F:D6:56:2D:43:C4:34:BB X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.108.66.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:68:c5:45:a3:e2:b5:b9:b5:5d:a8:09:c9:30:b4:a0:f0:ff: e7:f2:b5:e3:00:1a:cd:5b:19:f7:5c:55:9d:73:fc:35:bc:99: 50:64:c8:9c:09:9c:11:c8:9e:5e:d3:af:6b:e2:25:44:a6:32: 7e:48:c1:f2:f4:e7:86:d6:0a:c5:69:f5:d2:af:63:3c:a3:b7: 78:df:ac:4d:cf:d1:48:6e:53:5d:0c:77:75:df:ee:fc:6d:67: 1a:a7:24:64:26:c9:f7:aa:00:c1:50:86:d0:19:80:43:11:09: a6:0a:1a:a1:3c:24:97:de:28:e7:3a:1d:85:8a:6a:a2:15:0c: 4d:ae:e4:33:d1:40:62:14:3e:00:fb:16:40:94:23:d2:cc:d0: c2:07:2b:d8:f2:8a:b7:41:2e:f3:e3:a2:1f:b0:ee:27:9d:a3: ab:be:08:04:35:08:a2:3d:76:0f:15:21:e3:ec:c3:82:17:95: 57:56:d7:5a:2c:82:4d:ae:04:34:e2:be:8a:a5:3f:8a:0c:18: ae:50:b9:97:7c:ff:7d:39:4f:7c:16:25:53:f0:46:0a:4b:0c: b8:b6:f0:bb:31:08:dd:d2:6d:8b:18:5a:d4:c2:30:95:7e:85: f3:e7:46:bf:43:3c:ad:f2:5e:42:b4:ab:2e:d3:1b:e1:8c:df: 72:d7:38:db -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGYUagKGI0OUMk/TNp8I7XCLDhfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNTA0MDUxNjU1MDBaFw0yNjA0MDQxNzAwMDBaMDMxMTAvBgNV BAMTKDMwRkMwNEM1OTdDMzY1MjJFMUNFRTg5NjhGRDY1NjJENDNDNDM0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5emr6RigkqJ5R5BrJGuw720hw khIJd2iMMLAGtIux5nU7UevvBogk4qQzvzxK10gH79NAq2Y7mbqiR7FooxJZ11le oWKBDuP1M9v6m92nV5M1jDX3e06sKJi9ziHN5GuCUAOFzSg9n2CHzc7AMuNVZIYM v+jrFaUVib0ERoFGC5RKbuDRhQAI9lapAaXCuZzqNF0PmhZ3RBYxjlTLwxYMZrEz X3GrLnAzccmOazEM+xwBxDMA/BVPmZFhGXsd7cwYVBb5TsotJFy27A7ZiI6E/1R+ xfmDZaLAA6O30gzUwmUxRuRs8vFWYPfSmm2Xx5ZysjWOaOe51ZDgdV/eh33FAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMPwExZfDZSLhzuiWj9ZWLUPENLswHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMxMzIzMzJlMzEzMDM4MmUzNjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAe2xCMA0GCSqG SIb3DQEBCwUAA4IBAQAeaMVFo+K1ubVdqAnJMLSg8P/n8rXjABrNWxn3XFWdc/w1 vJlQZMicCZwRyJ5e069r4iVEpjJ+SMHy9OeG1grFafXSr2M8o7d436xNz9FIblNd DHd13+78bWcapyRkJsn3qgDBUIbQGYBDEQmmChqhPCSX3ijnOh2FimqiFQxNruQz 0UBiFD4A+xZAlCPSzNDCByvY8oq3QS7z46IfsO4nnaOrvggENQiiPXYPFSHj7MOC F5VXVtdaLIJNrgQ04r6KpT+KDBiuULmXfP99OU98FiVT8EYKSwy4tvC7MQjd0m2L GFrUwjCVfoXz50a/Qzyt8l5CtKsu0xvhjN9y1zjb -----END CERTIFICATE-----Generated at Sat Apr 26 08:46:13 2025 by rpki-client on console.sobornost.net