$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32332d3233203d3e203234353235.roa File: 3131342e3139392e3130322e302f32332d3233203d3e203234353235.roa (raw, json) Hash identifier: h6b7gKXmW6crP/opVSGlsBo6ZogK1PhW+4NYs8o7sQc= Subject key identifier: 04:E3:78:6D:52:54:81:77:DD:20:4D:FB:C1:C5:9A:F8:41:B2:90:2C Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 31C1D8B22497B3199257897637F992C1A674D7A8 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32332d3233203d3e203234353235.roa Signing time: Tue 22 Apr 2025 08:03:47 +0000 ROA not before: Tue 22 Apr 2025 07:58:47 +0000 ROA not after: Tue 21 Apr 2026 08:03:47 +0000 asID: 24525 IP address blocks: 114.199.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c1:d8:b2:24:97:b3:19:92:57:89:76:37:f9:92:c1:a6:74:d7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 22 07:58:47 2025 GMT Not After : Apr 21 08:03:47 2026 GMT Subject: CN=04E3786D52548177DD204DFBC1C59AF841B2902C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ab:01:7b:e4:29:eb:04:52:84:88:9e:eb:7f: 8a:c4:40:a0:ac:40:8b:27:d8:4a:d0:bd:fa:f9:1a: db:c4:2c:63:da:7e:08:d1:ba:6b:c9:45:de:41:40: 45:c1:2b:ab:47:c1:73:5d:fc:46:9e:08:77:e0:03: fb:dd:9c:f3:3b:7d:88:60:f8:d6:e0:39:1a:72:01: 3b:a3:b9:95:28:ae:02:9f:f6:02:87:97:42:b4:8e: 52:71:09:8a:54:76:fa:10:f2:2d:49:c6:a0:e8:09: 7f:57:bd:00:ca:7f:ce:97:fa:b8:a3:65:63:fb:f1: 43:51:d7:fb:dc:61:98:6c:2c:c9:3c:04:e8:56:ef: 13:1b:cc:42:ae:28:ee:b5:8f:31:63:02:0c:94:d4: 96:89:4d:7a:79:0b:88:ab:96:ec:50:fc:5f:63:f9: ae:63:cc:73:dc:12:71:8a:63:a2:69:d8:6d:e9:37: d6:9b:9d:7d:61:43:cb:2d:89:78:e4:7c:ab:cf:55: e9:7c:dc:03:94:52:14:43:0f:9b:f7:d1:4d:06:bd: 57:1d:c6:35:83:61:4c:93:e7:08:c5:c6:2f:c8:a7: 2e:6c:46:f3:f9:5a:3f:13:1d:9f:e7:bf:3b:cc:ca: d1:d7:e6:02:7b:98:b1:e2:74:a0:6f:35:24:b8:00: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E3:78:6D:52:54:81:77:DD:20:4D:FB:C1:C5:9A:F8:41:B2:90:2C X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32332d3233203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.102.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:53:d7:f6:a2:8a:2c:f6:a5:d3:fb:ac:e7:c6:86:c4:bb:33: a1:94:e4:39:f0:cc:97:a9:14:bf:6c:de:78:0b:85:af:97:ba: 4b:be:e1:a3:84:68:61:eb:70:2a:d0:58:b3:c3:08:26:f8:66: 84:52:fd:80:92:e0:22:62:90:41:cc:72:6c:bf:a1:73:10:59: b2:3a:08:00:26:7c:a8:61:5d:8c:53:b6:8a:14:d3:bd:1c:c9: da:43:e5:da:8a:47:0c:c6:5a:28:6e:6d:42:cd:46:fd:9b:24: d4:d6:fd:20:0d:4d:f2:75:cc:2f:9c:9a:26:d0:1b:06:e6:09: 52:49:9c:db:46:a8:92:48:e6:c2:9f:04:ee:96:cd:4a:c4:1e: dc:b5:87:90:5a:6c:53:16:0b:2a:97:ab:fd:70:66:6d:0f:75: 1e:09:a0:6c:8c:5c:71:c5:d5:44:b8:23:41:c4:69:75:48:10: 6b:38:75:ee:f8:2c:4a:29:74:90:e2:52:04:dc:4f:9f:c8:9d: 9d:73:52:53:f8:53:bb:ac:33:c5:15:5f:1a:88:33:03:4f:86: d4:e1:ab:a4:d6:f4:fb:5b:bf:cf:18:eb:3a:19:7c:78:0a:d2: 24:8f:7a:43:e9:02:4f:92:f7:11:75:17:4f:7c:e2:cb:27:34: e3:6f:a7:20 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMcHYsiSXsxmSV4l2N/mSwaZ016gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA0MjIwNzU4NDdaFw0yNjA0MjEwODAzNDdaMDMxMTAvBgNV BAMTKDA0RTM3ODZENTI1NDgxNzdERDIwNERGQkMxQzU5QUY4NDFCMjkwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqwF75CnrBFKEiJ7rf4rEQKCs QIsn2ErQvfr5GtvELGPafgjRumvJRd5BQEXBK6tHwXNd/EaeCHfgA/vdnPM7fYhg +NbgORpyATujuZUorgKf9gKHl0K0jlJxCYpUdvoQ8i1JxqDoCX9XvQDKf86X+rij ZWP78UNR1/vcYZhsLMk8BOhW7xMbzEKuKO61jzFjAgyU1JaJTXp5C4irluxQ/F9j +a5jzHPcEnGKY6Jp2G3pN9abnX1hQ8stiXjkfKvPVel83AOUUhRDD5v30U0GvVcd xjWDYUyT5wjFxi/Ipy5sRvP5Wj8THZ/nvzvMytHX5gJ7mLHidKBvNSS4AJ8dAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBON4bVJUgXfdIE37wcWa+EGykCwwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMwMzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBcsdmMA0GCSqG SIb3DQEBCwUAA4IBAQBeU9f2ooos9qXT+6znxobEuzOhlOQ58MyXqRS/bN54C4Wv l7pLvuGjhGhh63Aq0Fizwwgm+GaEUv2AkuAiYpBBzHJsv6FzEFmyOggAJnyoYV2M U7aKFNO9HMnaQ+XaikcMxloobm1CzUb9myTU1v0gDU3ydcwvnJom0BsG5glSSZzb RqiSSObCnwTuls1KxB7ctYeQWmxTFgsql6v9cGZtD3UeCaBsjFxxxdVEuCNBxGl1 SBBrOHXu+CxKKXSQ4lIE3E+fyJ2dc1JT+FO7rDPFFV8aiDMDT4bU4auk1vT7W7/P GOs6GXx4CtIkj3pD6QJPkvcRdRdPfOLLJzTjb6cg -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net