$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132342e302f32322d3232203d3e203234353235.roa File: 3131342e3139392e3132342e302f32322d3232203d3e203234353235.roa (raw, json) Hash identifier: dw4mYQCstI5fxsSHeofDIV8mduHqxSC+FHv57LUPMb8= Subject key identifier: 08:BC:19:A9:4A:43:AC:B6:46:16:82:7A:C2:05:63:4B:35:97:1B:1B Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 2D76445AE15182BB5E5057975A59F3746FB45D13 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132342e302f32322d3232203d3e203234353235.roa Signing time: Tue 22 Apr 2025 08:03:47 +0000 ROA not before: Tue 22 Apr 2025 07:58:47 +0000 ROA not after: Tue 21 Apr 2026 08:03:47 +0000 asID: 24525 IP address blocks: 114.199.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:76:44:5a:e1:51:82:bb:5e:50:57:97:5a:59:f3:74:6f:b4:5d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 22 07:58:47 2025 GMT Not After : Apr 21 08:03:47 2026 GMT Subject: CN=08BC19A94A43ACB64616827AC205634B35971B1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:3f:82:8e:b8:26:d7:e2:76:9b:9d:fe:c9: 01:fb:26:8b:aa:37:01:01:15:23:fb:ed:a7:58:58: a0:39:10:f4:ea:a4:f8:ff:72:65:5f:74:9f:1d:9f: 8a:c6:00:22:e9:a9:a9:0d:4f:06:17:92:20:a4:f3: 83:d0:b2:a7:ed:75:d0:81:11:fa:a1:2e:71:7d:bb: 05:d1:ce:92:29:52:a5:cd:3f:7a:c2:24:30:36:06: 40:b4:6c:c5:e7:10:02:a1:9e:1f:0f:cc:e0:d9:45: 73:3f:01:a9:a6:6c:b6:d8:ff:28:87:46:aa:dc:e8: 5b:b6:9b:8d:66:24:12:47:e6:27:3f:ff:2b:96:96: 00:f5:ab:d6:cf:66:b3:dc:41:f1:dd:7c:47:a3:f6: 07:d6:cf:a6:7d:e9:18:b5:f4:4f:d7:4c:4c:58:a8: 9d:fa:3f:52:82:a8:fb:f9:51:8a:b9:38:a1:88:33: f1:5d:dc:bb:0a:75:13:33:58:0c:c0:10:de:f9:1a: 35:f2:3e:3d:85:b2:7a:94:46:73:71:1b:9a:98:4e: 2f:e3:5f:89:20:89:2a:eb:2e:e9:8e:97:09:fe:5c: 48:55:89:af:ad:00:28:7a:5b:20:96:dc:cc:bc:e3: 7a:2d:c0:c3:a1:1f:e5:50:ad:a5:5c:30:15:01:92: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BC:19:A9:4A:43:AC:B6:46:16:82:7A:C2:05:63:4B:35:97:1B:1B X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132342e302f32322d3232203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.124.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:c2:a7:26:24:3e:b0:29:6e:13:46:7b:9b:57:52:25:46:20: 8b:ec:ef:30:16:7c:82:e7:4a:0e:9e:ac:53:75:7a:5a:d0:f8: f1:17:62:d3:4f:3f:f5:14:c4:88:2d:3a:e6:b1:a2:39:f2:64: ab:cc:de:58:9c:3f:4e:4e:a2:c4:60:c7:3e:79:ff:b9:55:4c: bc:b2:73:68:c7:93:c7:e9:40:25:d0:5c:a9:a0:a8:b3:48:53: 7d:2a:ac:f4:21:32:32:ed:d7:f1:4e:a5:e0:12:09:67:af:90: d7:47:88:56:57:df:cf:4c:60:4e:60:ac:b3:34:6e:37:d8:6e: 79:e1:bc:9a:f2:0d:a0:54:67:55:ee:96:df:23:c9:02:35:70: dc:98:12:38:b7:ce:29:b8:d7:04:6e:54:be:c1:c3:ab:6a:ae: 6c:e7:19:ba:08:84:80:e6:f9:0f:c0:b3:ee:a2:34:8d:34:05: bf:44:2a:e7:5c:fe:43:3e:2f:6c:27:08:f7:27:c3:d6:0f:18: 28:d9:a1:30:49:a8:8e:85:9e:76:a0:49:6d:0c:86:02:f7:1f: 49:fb:0a:6b:22:19:cb:0a:39:ea:b4:f3:a4:f3:fd:ce:2b:9b: 7e:e2:10:97:91:e3:d7:dd:76:59:de:e5:03:74:2b:af:23:62: 8a:f8:d8:b8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULXZEWuFRgrteUFeXWlnzdG+0XRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA0MjIwNzU4NDdaFw0yNjA0MjEwODAzNDdaMDMxMTAvBgNV BAMTKDA4QkMxOUE5NEE0M0FDQjY0NjE2ODI3QUMyMDU2MzRCMzU5NzFCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJwD+Cjrgm1+J2m53+yQH7Jouq NwEBFSP77adYWKA5EPTqpPj/cmVfdJ8dn4rGACLpqakNTwYXkiCk84PQsqftddCB EfqhLnF9uwXRzpIpUqXNP3rCJDA2BkC0bMXnEAKhnh8PzODZRXM/AammbLbY/yiH Rqrc6Fu2m41mJBJH5ic//yuWlgD1q9bPZrPcQfHdfEej9gfWz6Z96Ri19E/XTExY qJ36P1KCqPv5UYq5OKGIM/Fd3LsKdRMzWAzAEN75GjXyPj2FsnqURnNxG5qYTi/j X4kgiSrrLumOlwn+XEhVia+tACh6WyCW3My843otwMOhH+VQraVcMBUBkomVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUCLwZqUpDrLZGFoJ6wgVjSzWXGxswHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzQyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCcsd8MA0GCSqG SIb3DQEBCwUAA4IBAQA7wqcmJD6wKW4TRnubV1IlRiCL7O8wFnyC50oOnqxTdXpa 0PjxF2LTTz/1FMSILTrmsaI58mSrzN5YnD9OTqLEYMc+ef+5VUy8snNox5PH6UAl 0FypoKizSFN9Kqz0ITIy7dfxTqXgEglnr5DXR4hWV9/PTGBOYKyzNG432G554bya 8g2gVGdV7pbfI8kCNXDcmBI4t84puNcEblS+wcOraq5s5xm6CISA5vkPwLPuojSN NAW/RCrnXP5DPi9sJwj3J8PWDxgo2aEwSaiOhZ52oEltDIYC9x9J+wprIhnLCjnq tPOk8/3OK5t+4hCXkePX3XZZ3uUDdCuvI2KK+Ni4 -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net