$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131362e302f32322d3232203d3e203234353235.roa File: 3131342e3139392e3131362e302f32322d3232203d3e203234353235.roa (raw, json) Hash identifier: QlCDAY+YD/zj/Nqv1sHRgITxFrmhS4PfTTPh5RRg3G8= Subject key identifier: DE:71:AF:DE:87:42:ED:2D:2D:6C:49:9B:C8:47:9C:99:C5:DB:47:C4 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 0B3339752F4F265C97176D518CF3EF31BC88E63A Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131362e302f32322d3232203d3e203234353235.roa Signing time: Tue 22 Apr 2025 07:00:07 +0000 ROA not before: Tue 22 Apr 2025 06:55:07 +0000 ROA not after: Tue 21 Apr 2026 07:00:07 +0000 asID: 24525 IP address blocks: 114.199.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:33:39:75:2f:4f:26:5c:97:17:6d:51:8c:f3:ef:31:bc:88:e6:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 22 06:55:07 2025 GMT Not After : Apr 21 07:00:07 2026 GMT Subject: CN=DE71AFDE8742ED2D2D6C499BC8479C99C5DB47C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:48:4a:6b:fe:4c:ef:43:3e:4b:6c:49:d6: 22:de:28:c3:ae:88:32:d7:32:71:8c:02:f1:24:c1: 20:93:43:dc:50:64:5d:42:69:83:eb:38:9e:c8:e4: 31:15:9e:51:b7:0c:44:0b:90:88:0b:39:2a:5b:47: 04:33:76:a1:e8:16:ef:f8:54:1e:0d:74:0c:71:37: a5:4f:29:10:6d:a7:a6:2e:e7:74:d7:52:54:ed:cb: e2:84:26:87:65:57:d2:18:50:54:39:7a:2d:9a:98: 35:fd:ff:4a:d4:00:41:68:0e:20:36:ff:b0:50:20: bc:19:ea:ea:fc:b5:02:ff:af:58:8d:0e:86:36:d3: c2:5d:17:5e:d1:03:b5:80:d5:7a:e3:5f:ce:c3:55: 37:80:43:36:41:7b:49:e3:b3:fa:cd:7f:6a:2e:2c: 20:8d:fc:a3:1e:44:e6:b6:c7:82:22:8b:82:ef:e7: 48:c2:89:cc:93:d1:1a:b2:d7:db:f7:88:69:19:e5: 6f:fe:40:8f:41:5c:2f:48:3d:0f:a2:ec:0c:ae:9f: cc:98:84:86:c8:6d:4d:60:9d:fe:a7:9a:64:d4:bc: 7d:14:1b:1c:f4:c1:92:fc:7b:05:ad:df:23:e0:bf: b3:aa:78:a3:b0:c5:92:6a:15:13:fe:40:87:78:d9: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:71:AF:DE:87:42:ED:2D:2D:6C:49:9B:C8:47:9C:99:C5:DB:47:C4 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131362e302f32322d3232203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.116.0/22 Signature Algorithm: sha256WithRSAEncryption ab:e7:b0:58:8e:ea:49:bd:5b:20:33:84:39:6a:f3:a4:19:1d: b8:2f:09:c7:c5:a1:c7:74:5b:b7:34:48:18:2c:5b:1e:66:59: 8e:50:e5:a4:91:6d:69:7d:96:68:7a:0a:d7:15:03:b7:f9:25: fa:7d:0e:7d:79:1b:6f:64:b7:dd:c1:48:e8:52:ab:aa:97:fa: af:7f:50:46:60:12:5e:27:38:76:2a:85:06:6f:ac:6e:12:c5: 83:bf:f4:be:a4:82:ce:90:af:2d:84:b7:b0:72:02:29:1f:06: a1:95:1b:3f:fa:c5:7e:bc:20:8f:91:8d:34:7d:52:5d:89:40: c3:6f:5e:42:fb:b2:64:ba:7c:4d:a4:48:a1:f5:ce:22:63:7f: 5c:29:53:3e:af:c2:fe:09:3c:bd:77:9f:df:b3:bd:8a:95:fd: 02:cf:ac:86:b3:4e:a2:a2:bb:4d:7e:55:22:f1:72:c9:34:b6: ae:59:7b:9d:64:24:52:e0:2a:1d:32:9d:5d:15:72:07:3f:a4: 09:0d:a1:3e:cb:be:b2:d3:9b:03:79:a4:bc:76:e4:b7:88:2d: ee:5d:8f:aa:c4:db:52:5a:cb:14:bc:59:dd:03:91:e6:88:0b: 8d:8d:1e:da:89:a1:7d:65:08:ac:a9:f9:d0:4b:15:43:64:ab: cd:c3:14:fb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCzM5dS9PJlyXF21RjPPvMbyI5jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA0MjIwNjU1MDdaFw0yNjA0MjEwNzAwMDdaMDMxMTAvBgNV BAMTKERFNzFBRkRFODc0MkVEMkQyRDZDNDk5QkM4NDc5Qzk5QzVEQjQ3QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtZ0hKa/5M70M+S2xJ1iLeKMOu iDLXMnGMAvEkwSCTQ9xQZF1CaYPrOJ7I5DEVnlG3DEQLkIgLOSpbRwQzdqHoFu/4 VB4NdAxxN6VPKRBtp6Yu53TXUlTty+KEJodlV9IYUFQ5ei2amDX9/0rUAEFoDiA2 /7BQILwZ6ur8tQL/r1iNDoY208JdF17RA7WA1XrjX87DVTeAQzZBe0njs/rNf2ou LCCN/KMeROa2x4Iii4Lv50jCicyT0Rqy19v3iGkZ5W/+QI9BXC9IPQ+i7Ayun8yY hIbIbU1gnf6nmmTUvH0UGxz0wZL8ewWt3yPgv7OqeKOwxZJqFRP+QId42R2LAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3nGv3odC7S0tbEmbyEecmcXbR8QwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzYyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCcsd0MA0GCSqG SIb3DQEBCwUAA4IBAQCr57BYjupJvVsgM4Q5avOkGR24LwnHxaHHdFu3NEgYLFse ZlmOUOWkkW1pfZZoegrXFQO3+SX6fQ59eRtvZLfdwUjoUquql/qvf1BGYBJeJzh2 KoUGb6xuEsWDv/S+pILOkK8thLewcgIpHwahlRs/+sV+vCCPkY00fVJdiUDDb15C +7JkunxNpEih9c4iY39cKVM+r8L+CTy9d5/fs72Klf0Cz6yGs06iortNflUi8XLJ NLauWXudZCRS4CodMp1dFXIHP6QJDaE+y76y05sDeaS8duS3iC3uXY+qxNtSWssU vFndA5HmiAuNjR7aiaF9ZQisqfnQSxVDZKvNwxT7 -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net