$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa File: 3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa (raw, json) Hash identifier: Q7oR6NKZGXY8DHaHlVAvWcnULfkvQCbqeQgMaal3+CE= Subject key identifier: 80:70:33:0C:03:F7:1F:09:82:8C:10:72:86:E7:20:C2:0F:EF:F5:7F Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 72388F42A9C87DA31C6A642B9BE6EAC856C26AD1 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa Signing time: Tue 22 Apr 2025 07:00:07 +0000 ROA not before: Tue 22 Apr 2025 06:55:07 +0000 ROA not after: Tue 21 Apr 2026 07:00:07 +0000 asID: 24525 IP address blocks: 114.199.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:38:8f:42:a9:c8:7d:a3:1c:6a:64:2b:9b:e6:ea:c8:56:c2:6a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 22 06:55:07 2025 GMT Not After : Apr 21 07:00:07 2026 GMT Subject: CN=8070330C03F71F09828C107286E720C20FEFF57F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:d8:58:54:df:74:79:79:ce:0a:13:8c:2f: 0c:3c:ba:db:80:bd:b9:8f:95:e2:42:c9:fc:63:d9: cf:5b:68:fa:27:09:5b:c8:a6:45:7d:22:5d:7e:10: cc:dc:41:91:1f:90:eb:cd:47:12:dd:3f:41:c2:2b: 49:6f:61:c4:b4:07:ab:73:82:18:f2:ba:e4:49:51: 5d:01:e5:26:1a:c3:60:fe:fc:09:7e:7d:db:4c:ca: f8:20:4f:64:c2:a2:f3:dc:3b:6f:7e:d1:35:1b:f3: 21:ba:07:a2:46:2c:3d:ab:6d:ff:01:16:25:7e:17: 1f:f5:24:ed:8d:c6:5c:ff:23:99:9d:f9:db:79:eb: a2:c3:e3:b9:c7:05:e2:05:62:46:3a:61:7f:9e:4b: 0c:ea:ed:24:11:c6:a9:e6:82:45:28:81:eb:ae:91: 00:71:bf:6a:89:31:14:09:bf:d6:22:35:5c:f3:a1: 26:b2:45:b8:71:53:f6:0e:37:f8:d4:bc:72:f3:d6: 29:04:15:7c:84:6c:de:e8:05:3f:43:9d:80:54:43: 66:b5:9f:32:85:84:6b:d1:3b:64:43:72:ff:e7:d8: f5:c3:f1:86:4c:08:d4:ec:f1:0e:b1:2f:aa:26:80: 80:27:e6:e0:6a:da:a0:8f:0b:b2:a9:bf:5f:ec:09: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:70:33:0C:03:F7:1F:09:82:8C:10:72:86:E7:20:C2:0F:EF:F5:7F X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.120.0/23 Signature Algorithm: sha256WithRSAEncryption 81:f3:3c:bc:0f:00:ee:9c:b2:cc:86:5d:c3:38:0f:67:af:aa: 31:b1:6d:a6:d3:32:d2:34:de:20:18:e6:fc:27:0a:2e:18:36: a2:07:73:0d:6a:12:6e:d1:62:ba:12:d4:f3:aa:69:47:23:e3: 02:6e:08:8e:75:0a:30:c0:b7:e3:69:6c:9c:05:18:02:96:2f: 6e:70:86:a4:79:03:e2:a6:f3:c8:84:93:b1:8f:4b:47:20:5d: 45:00:c1:08:06:d4:53:32:b8:73:2d:d2:aa:ac:1c:30:0f:e4: 38:0b:31:f3:73:96:80:3c:6d:66:98:f6:9e:cb:f7:7a:6e:f0: fb:b6:37:ed:58:1b:80:66:ce:ee:b9:41:48:59:d6:c6:b5:e4: 64:53:e4:a7:a6:ab:65:d1:2b:41:59:b2:af:3b:bb:2e:74:ae: a0:97:10:f6:af:4c:de:78:0f:62:53:ee:25:d9:46:ef:8a:d6: d5:4d:8d:0e:11:04:a9:20:f0:a3:b2:1c:55:72:11:4a:00:e3: d0:b1:2b:f7:42:6b:d2:fb:29:52:19:6b:b3:e3:d1:03:55:05: 80:4a:1e:eb:5b:46:14:c5:85:5c:54:53:b4:9d:99:14:30:37: 58:4d:dc:8d:bc:dd:76:c1:8a:2c:13:c6:77:e3:bd:14:07:b5: c6:15:e2:62 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcjiPQqnIfaMcamQrm+bqyFbCatEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA0MjIwNjU1MDdaFw0yNjA0MjEwNzAwMDdaMDMxMTAvBgNV BAMTKDgwNzAzMzBDMDNGNzFGMDk4MjhDMTA3Mjg2RTcyMEMyMEZFRkY1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3NhYVN90eXnOChOMLww8utuA vbmPleJCyfxj2c9baPonCVvIpkV9Il1+EMzcQZEfkOvNRxLdP0HCK0lvYcS0B6tz ghjyuuRJUV0B5SYaw2D+/Al+fdtMyvggT2TCovPcO29+0TUb8yG6B6JGLD2rbf8B FiV+Fx/1JO2Nxlz/I5md+dt566LD47nHBeIFYkY6YX+eSwzq7SQRxqnmgkUogeuu kQBxv2qJMRQJv9YiNVzzoSayRbhxU/YON/jUvHLz1ikEFXyEbN7oBT9DnYBUQ2a1 nzKFhGvRO2RDcv/n2PXD8YZMCNTs8Q6xL6omgIAn5uBq2qCPC7Kpv1/sCfo9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgHAzDAP3HwmCjBByhucgwg/v9X8wHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBcsd4MA0GCSqG SIb3DQEBCwUAA4IBAQCB8zy8DwDunLLMhl3DOA9nr6oxsW2m0zLSNN4gGOb8Jwou GDaiB3MNahJu0WK6EtTzqmlHI+MCbgiOdQowwLfjaWycBRgCli9ucIakeQPipvPI hJOxj0tHIF1FAMEIBtRTMrhzLdKqrBwwD+Q4CzHzc5aAPG1mmPaey/d6bvD7tjft WBuAZs7uuUFIWdbGteRkU+Snpqtl0StBWbKvO7sudK6glxD2r0zeeA9iU+4l2Ubv itbVTY0OEQSpIPCjshxVchFKAOPQsSv3QmvS+ylSGWuz49EDVQWASh7rW0YUxYVc VFO0nZkUMDdYTdyNvN12wYosE8Z3470UB7XGFeJi -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net