$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32312d3231203d3e203234353235.roa File: 3131342e3139392e3131322e302f32312d3231203d3e203234353235.roa (raw, json) Hash identifier: vrq9cVVPoSkc0Z6UnZ4PMuNHacSDXwsNn5sohV2uSSc= Subject key identifier: 89:52:A6:DD:1B:DF:B2:84:0D:70:E2:62:71:19:06:EF:0F:41:DB:46 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 43D6E2DAC7D9F93EFFA81E35865A9C39B60396FB Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32312d3231203d3e203234353235.roa Signing time: Tue 22 Apr 2025 08:03:49 +0000 ROA not before: Tue 22 Apr 2025 07:58:49 +0000 ROA not after: Tue 21 Apr 2026 08:03:49 +0000 asID: 24525 IP address blocks: 114.199.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d6:e2:da:c7:d9:f9:3e:ff:a8:1e:35:86:5a:9c:39:b6:03:96:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 22 07:58:49 2025 GMT Not After : Apr 21 08:03:49 2026 GMT Subject: CN=8952A6DD1BDFB2840D70E262711906EF0F41DB46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:ec:d1:89:82:4a:6d:5d:5c:0c:5c:6a:2f: 74:65:dc:e0:8f:9e:91:09:5f:83:c4:95:95:88:da: 59:85:2f:fc:c5:f7:fa:fc:f6:77:dd:62:64:4b:b3: 46:ac:74:9e:48:88:02:de:6c:cd:33:43:8a:8e:43: 0b:e6:8e:10:45:ab:d0:ca:b0:6c:ec:47:88:90:cc: 81:40:b8:6d:ff:66:77:a5:ad:c4:c6:db:39:f9:26: 93:33:31:79:68:28:e4:4e:20:2d:23:e8:6f:b5:30: f7:7c:3b:21:77:b9:02:b5:48:52:d3:5e:2a:30:8a: 44:af:73:34:8f:58:5b:1b:9d:5f:7e:5f:0c:4a:bc: e1:56:74:ac:33:87:b7:ae:87:cc:98:30:54:64:0e: 45:c7:57:59:aa:01:94:65:0c:49:a2:dd:6b:bc:8b: 41:a7:f9:c9:16:67:37:35:d8:c2:2f:73:03:a7:b6: fc:39:b7:8d:98:c3:84:b9:9f:f8:51:de:56:08:db: ff:fb:da:eb:b8:f6:7a:34:77:cb:23:bf:b7:1b:6b: 28:f8:32:09:1d:ce:d4:23:96:4c:d8:f0:37:76:fd: 63:fb:18:50:36:0d:99:7f:43:2a:fb:47:5f:1e:1e: a4:66:93:16:0e:a8:a4:9b:17:32:58:fb:24:6c:ed: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:52:A6:DD:1B:DF:B2:84:0D:70:E2:62:71:19:06:EF:0F:41:DB:46 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32312d3231203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.112.0/21 Signature Algorithm: sha256WithRSAEncryption 55:08:c7:cf:e7:bd:46:70:a0:1c:11:8a:d7:2d:95:7b:48:59: 92:f9:7e:18:fe:da:d6:95:03:53:ce:c7:51:42:39:72:bc:e8: bb:b5:96:3c:f7:46:de:23:c9:ea:fa:d8:4e:5e:a0:ca:09:1a: 1e:e8:00:bd:72:72:bf:47:ce:0c:64:56:48:3a:c7:fe:b3:a1: ab:12:0a:e7:ba:8b:81:2e:ba:eb:35:c7:85:08:04:4d:f5:e7: cf:30:a7:c9:4e:cf:9d:3a:a2:26:f7:cb:43:a6:74:54:13:f9: 10:1c:4b:18:01:63:b2:fd:e4:84:98:7c:e7:2f:9e:82:d9:e6: ba:a0:96:61:c7:af:f3:6b:d4:ba:7d:39:37:39:7b:a6:47:da: f8:e1:da:a3:54:03:6f:49:d3:41:68:8c:53:ac:e7:29:78:a0: c9:d3:09:51:1e:d1:0c:cd:7e:0f:17:a0:2f:ca:63:10:8b:46: ca:34:ca:5f:b8:29:4e:54:db:26:6e:42:c9:41:19:f3:e5:7e: 63:e5:d7:90:bb:0e:7b:ee:93:f0:35:8c:e8:20:e0:a1:46:9b: f6:94:e3:90:6d:f3:5c:ee:3e:9d:6c:ed:40:aa:f2:58:cb:bc: 95:6a:5c:4d:5e:54:16:ff:70:cc:95:97:82:fa:a2:a8:ac:c8: cb:21:08:01 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQ9bi2sfZ+T7/qB41hlqcObYDlvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA0MjIwNzU4NDlaFw0yNjA0MjEwODAzNDlaMDMxMTAvBgNV BAMTKDg5NTJBNkREMUJERkIyODQwRDcwRTI2MjcxMTkwNkVGMEY0MURCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfuzRiYJKbV1cDFxqL3Rl3OCP npEJX4PElZWI2lmFL/zF9/r89nfdYmRLs0asdJ5IiALebM0zQ4qOQwvmjhBFq9DK sGzsR4iQzIFAuG3/ZnelrcTG2zn5JpMzMXloKOROIC0j6G+1MPd8OyF3uQK1SFLT XiowikSvczSPWFsbnV9+XwxKvOFWdKwzh7euh8yYMFRkDkXHV1mqAZRlDEmi3Wu8 i0Gn+ckWZzc12MIvcwOntvw5t42Yw4S5n/hR3lYI2//72uu49no0d8sjv7cbayj4 MgkdztQjlkzY8Dd2/WP7GFA2DZl/Qyr7R18eHqRmkxYOqKSbFzJY+yRs7aB1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUiVKm3RvfsoQNcOJicRkG7w9B20YwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzIyZTMwMmYz MjMxMmQzMjMxMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDcsdwMA0GCSqG SIb3DQEBCwUAA4IBAQBVCMfP571GcKAcEYrXLZV7SFmS+X4Y/trWlQNTzsdRQjly vOi7tZY890beI8nq+thOXqDKCRoe6AC9cnK/R84MZFZIOsf+s6GrEgrnuouBLrrr NceFCARN9efPMKfJTs+dOqIm98tDpnRUE/kQHEsYAWOy/eSEmHznL56C2ea6oJZh x6/za9S6fTk3OXumR9r44dqjVANvSdNBaIxTrOcpeKDJ0wlRHtEMzX4PF6AvymMQ i0bKNMpfuClOVNsmbkLJQRnz5X5j5deQuw577pPwNYzoIOChRpv2lOOQbfNc7j6d bO1AqvJYy7yValxNXlQW/3DMlZeC+qKorMjLIQgB -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net