$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235342e302f32342d3234203d3e203338343936.roa File: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (raw, json) Hash identifier: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI= Subject key identifier: 6E:7E:06:C6:38:58:39:E5:11:5F:B2:EE:CC:55:3D:9D:E5:2D:C6:A9 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 5468C0592E13C2420A99213F8B698C2A960E6547 Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235342e302f32342d3234203d3e203338343936.roa Signing time: Tue 04 Mar 2025 06:00:00 +0000 ROA not before: Tue 04 Mar 2025 05:55:00 +0000 ROA not after: Tue 03 Mar 2026 06:00:00 +0000 asID: 38496 IP address blocks: 103.90.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 16:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:68:c0:59:2e:13:c2:42:0a:99:21:3f:8b:69:8c:2a:96:0e:65:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: Mar 4 05:55:00 2025 GMT Not After : Mar 3 06:00:00 2026 GMT Subject: CN=6E7E06C6385839E5115FB2EECC553D9DE52DC6A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e5:c0:f8:f7:ae:5b:f9:44:37:f3:58:95:e0: 4b:9e:a2:a0:ed:9b:c2:7a:c1:ba:a3:d6:90:4f:30: a9:a4:f5:2a:8a:c5:d3:c4:d5:35:fd:27:86:8f:7e: 37:2c:76:78:5c:ed:0a:ee:16:67:7b:7a:cc:33:4b: bc:01:67:32:67:5a:a0:78:04:f8:63:73:be:19:71: fd:b6:73:86:05:ae:d6:d6:b8:56:28:4b:f2:40:6b: 69:61:59:c4:46:58:22:04:69:4a:d4:8a:25:33:d0: 4b:05:4b:a3:27:25:d1:92:a0:90:0b:13:0c:fb:c5: 83:af:1b:29:4c:46:df:d8:5f:35:77:3d:b9:ce:54: 05:02:6c:01:e2:bd:3b:a1:13:e7:dc:d0:fe:bd:8c: 77:a4:a0:0e:1e:4d:06:0a:4f:37:ee:53:66:f6:49: 20:04:eb:fd:30:bd:cd:f3:77:2c:a2:99:97:8a:a4: bc:65:c6:1c:f6:49:d1:8f:e1:2f:af:e5:74:f4:77: 12:82:f5:71:fe:fe:1d:57:62:3b:7c:5e:92:f3:67: ba:d6:af:e6:0d:af:d4:a8:62:f8:41:d6:23:1e:bc: 18:78:52:7b:f6:63:3f:60:9c:c9:fb:6f:f7:4f:27: 73:ea:ac:05:0f:6a:b7:13:1b:36:2c:b2:ec:a7:50: f4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7E:06:C6:38:58:39:E5:11:5F:B2:EE:CC:55:3D:9D:E5:2D:C6:A9 X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235342e302f32342d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.254.0/24 Signature Algorithm: sha256WithRSAEncryption 17:cf:0d:8c:03:3c:c4:1e:94:ec:d1:fe:6b:11:2e:81:3e:e4: 6f:56:79:5a:25:f7:83:f1:b9:1f:e2:30:db:3a:8f:46:2c:bf: b8:21:59:e3:8f:a4:7e:33:b6:c0:97:51:a4:8c:44:40:d4:92: 23:fd:4c:bb:48:e4:4d:c5:73:75:79:31:76:df:74:84:8d:ed: 50:73:62:a0:60:6c:b9:fa:f7:5d:98:af:cd:f1:4d:64:a9:72: e7:c4:83:d5:f8:40:f6:93:0e:69:a2:6a:43:21:6b:cc:11:b1: eb:da:53:df:3b:85:ed:d9:ac:e5:e5:6b:37:1d:6a:cc:1e:88: 00:bb:df:5f:f2:62:43:31:62:4d:72:22:94:24:46:1e:50:c4: 33:ea:c5:e7:e1:37:a7:49:1c:cb:d7:66:ae:9f:d7:08:6f:0e: cc:09:9d:b5:41:0b:dc:34:4d:51:62:b5:f8:d5:9c:c8:a2:64: 90:bb:88:c0:44:02:da:3b:24:33:47:db:a6:52:e2:02:76:cf: cb:4b:cc:23:da:c8:5f:e4:e2:8e:97:9e:10:36:74:00:f7:7d: ec:c2:27:a7:f8:1d:f7:0b:ef:27:a1:0e:f9:af:a8:96:fb:af: ef:07:46:43:7a:cd:25:7b:a6:75:bc:5a:21:0f:49:de:45:cd: 53:b2:69:e8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVGjAWS4TwkIKmSE/i2mMKpYOZUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNTAzMDQwNTU1MDBaFw0yNjAzMDMwNjAwMDBaMDMxMTAvBgNV BAMTKDZFN0UwNkM2Mzg1ODM5RTUxMTVGQjJFRUNDNTUzRDlERTUyREM2QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5cD4965b+UQ381iV4EueoqDt m8J6wbqj1pBPMKmk9SqKxdPE1TX9J4aPfjcsdnhc7QruFmd7eswzS7wBZzJnWqB4 BPhjc74Zcf22c4YFrtbWuFYoS/JAa2lhWcRGWCIEaUrUiiUz0EsFS6MnJdGSoJAL Ewz7xYOvGylMRt/YXzV3PbnOVAUCbAHivTuhE+fc0P69jHekoA4eTQYKTzfuU2b2 SSAE6/0wvc3zdyyimZeKpLxlxhz2SdGP4S+v5XT0dxKC9XH+/h1XYjt8XpLzZ7rW r+YNr9SoYvhB1iMevBh4Unv2Yz9gnMn7b/dPJ3PqrAUParcTGzYssuynUPTfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUbn4GxjhYOeURX7LuzFU9neUtxqkwHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3NzRiMThjLWYyNjMtNGZlMS04 ZGY4LTFlN2M2OGJmYmVmYy8wLzMxMzAzMzJlMzkzMDJlMzIzNTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGda/jANBgkqhkiG 9w0BAQsFAAOCAQEAF88NjAM8xB6U7NH+axEugT7kb1Z5WiX3g/G5H+Iw2zqPRiy/ uCFZ44+kfjO2wJdRpIxEQNSSI/1Mu0jkTcVzdXkxdt90hI3tUHNioGBsufr3XZiv zfFNZKly58SD1fhA9pMOaaJqQyFrzBGx69pT3zuF7dms5eVrNx1qzB6IALvfX/Ji QzFiTXIilCRGHlDEM+rF5+E3p0kcy9dmrp/XCG8OzAmdtUEL3DRNUWK1+NWcyKJk kLuIwEQC2jskM0fbplLiAnbPy0vMI9rIX+TijpeeEDZ0APd97MInp/gd9wvvJ6EO +a+olvuv7wdGQ3rNJXumdbxaIQ9J3kXNU7Jp6A== -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net