$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa File: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (raw, json) Hash identifier: fzXYj+/Wlk2+pHJ1gJZrQ6X0Tnu8HMMmPoocnHTOJ8E= Subject key identifier: 4E:F4:BF:F0:10:48:16:4B:6D:FE:4C:E3:E8:9B:4E:1C:56:69:5A:7E Certificate issuer: /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Certificate serial: 2BBBDB1BCF46F904C7C58F51342AB5DD9B6E6FE5 Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa Signing time: Fri 21 Mar 2025 19:00:01 +0000 ROA not before: Fri 21 Mar 2025 18:55:01 +0000 ROA not after: Fri 20 Mar 2026 19:00:01 +0000 asID: 6939 IP address blocks: 103.162.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:bb:db:1b:cf:46:f9:04:c7:c5:8f:51:34:2a:b5:dd:9b:6e:6f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Validity Not Before: Mar 21 18:55:01 2025 GMT Not After : Mar 20 19:00:01 2026 GMT Subject: CN=4EF4BFF01048164B6DFE4CE3E89B4E1C56695A7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:79:f4:27:b1:70:18:49:56:5a:3c:78:08: 4c:d8:3d:1e:eb:75:7f:69:a7:d0:8b:19:8d:45:e7: 27:8b:99:48:bb:30:b0:c6:ca:07:9a:0e:fb:64:66: 23:91:b0:dd:9b:85:8f:c4:45:c3:3a:9a:a2:49:15: ca:07:02:a6:3a:e1:2a:59:fe:84:4f:d3:21:44:82: fb:b4:18:f1:ab:88:e7:c9:2a:7e:01:a2:7d:26:20: b8:52:18:e4:a5:2a:12:d1:07:4e:22:55:b7:49:d8: 33:78:4e:a1:84:7f:3c:e3:39:6d:c7:0a:37:a3:54: 10:49:2d:df:45:8d:9c:bd:df:78:78:cf:40:32:9e: 26:98:72:b5:1d:c1:3d:0b:c4:0b:ff:31:0f:12:a1: 4c:2c:1e:2d:ac:4e:65:0b:11:6a:03:28:22:8e:54: 56:9b:0c:dc:77:f3:0f:f5:91:13:84:05:88:40:02: 4f:bd:77:82:2b:c7:f3:06:40:2d:ec:bd:df:37:7d: 49:d7:84:e9:20:4c:0d:bc:40:05:03:2d:32:69:d5: 25:96:77:52:79:46:a9:02:a6:b7:04:3a:58:3e:80: f1:34:7f:9c:7d:d3:c9:b1:7a:69:23:16:60:72:5c: 57:6f:44:45:67:62:9a:eb:7f:e2:d4:21:24:35:fe: bb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F4:BF:F0:10:48:16:4B:6D:FE:4C:E3:E8:9B:4E:1C:56:69:5A:7E X509v3 Authority Key Identifier: keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.1.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:12:08:02:ec:96:21:ac:db:42:f3:8a:dd:54:a1:87:df:1a: 06:dc:3e:0c:02:55:29:7e:d0:ea:55:b5:6e:a1:1f:5c:24:50: 17:1e:88:87:bb:84:88:ed:22:41:f3:c1:9e:5b:bd:c0:dc:c6: 53:dd:92:49:8e:0b:f4:8f:ea:f9:c1:b6:e2:85:1e:37:8e:d4: cc:75:93:bc:11:f1:f7:fa:3a:35:6a:9b:26:54:11:ee:54:23: 35:43:e0:6e:c2:d4:ba:85:45:3e:80:85:58:6f:fd:92:61:bf: d2:21:31:e9:2a:f5:8a:93:21:1f:47:b3:40:e4:a9:cd:68:9a: 44:be:f9:04:94:0f:f1:22:bb:b3:36:d6:c0:40:36:f4:a8:ea: 01:25:b9:6c:33:de:ce:14:ee:c7:8d:72:a7:57:2f:51:cb:ba: e4:37:31:b1:19:e7:a0:70:53:36:f3:e4:a3:2b:4c:82:39:79: 9b:b0:48:d4:d3:93:2d:b9:56:72:39:4a:1b:f5:b0:9a:1e:a2: 7d:87:f2:c4:cc:11:d1:98:88:1c:83:01:6e:43:ca:ac:a1:90: ba:fb:81:60:2e:19:47:6a:5b:60:90:50:fa:83:46:ab:81:9d: be:f6:2f:38:67:7d:88:dd:e9:2f:b5:e5:7f:9c:21:7e:32:21: 3f:83:8e:84 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUK7vbG89G+QTHxY9RNCq13Ztub+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0Qy ODlBQkZGOTAeFw0yNTAzMjExODU1MDFaFw0yNjAzMjAxOTAwMDFaMDMxMTAvBgNV BAMTKDRFRjRCRkYwMTA0ODE2NEI2REZFNENFM0U4OUI0RTFDNTY2OTVBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5nn0J7FwGElWWjx4CEzYPR7r dX9pp9CLGY1F5yeLmUi7MLDGygeaDvtkZiORsN2bhY/ERcM6mqJJFcoHAqY64SpZ /oRP0yFEgvu0GPGriOfJKn4Bon0mILhSGOSlKhLRB04iVbdJ2DN4TqGEfzzjOW3H CjejVBBJLd9FjZy933h4z0AyniaYcrUdwT0LxAv/MQ8SoUwsHi2sTmULEWoDKCKO VFabDNx38w/1kROEBYhAAk+9d4Irx/MGQC3svd83fUnXhOkgTA28QAUDLTJp1SWW d1J5RqkCprcEOlg+gPE0f5x908mxemkjFmByXFdvREVnYprrf+LUISQ1/rt/AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUTvS/8BBIFktt/kzj6JtOHFZpWn4wHwYDVR0j BBgwFoAUILFclfozUUAtYOlorR2ezSiav/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTQxOTNjNC00YWJkLTRlMmMtYTFkMC0xYjVjZTMyZTQyMGIvMC8yMEIxNUM5NUZB MzM1MTQwMkQ2MEU5NjhBRDFEOUVDRDI4OUFCRkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0QyODlB QkZGOS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvMzEzMDMzMmUzMTM2MzIyZTMxMmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzYzOTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnogEwDQYJKoZIhvcNAQEL BQADggEBAEoSCALsliGs20Lzit1UoYffGgbcPgwCVSl+0OpVtW6hH1wkUBceiIe7 hIjtIkHzwZ5bvcDcxlPdkkmOC/SP6vnBtuKFHjeO1Mx1k7wR8ff6OjVqmyZUEe5U IzVD4G7C1LqFRT6AhVhv/ZJhv9IhMekq9YqTIR9Hs0Dkqc1omkS++QSUD/Eiu7M2 1sBANvSo6gEluWwz3s4U7seNcqdXL1HLuuQ3MbEZ56BwUzbz5KMrTII5eZuwSNTT ky25VnI5Shv1sJoeon2H8sTMEdGYiByDAW5DyqyhkLr7gWAuGUdqW2CQUPqDRquB nb72LzhnfYjd6S+15X+cIX4yIT+DjoQ= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:09 2025 by rpki-client on console.sobornost.net