$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa File: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (raw, json) Hash identifier: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM= Subject key identifier: 81:7A:44:40:AB:3E:1B:13:4B:69:F9:E5:48:5B:4F:56:C2:EA:1F:47 Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 1C6888FA620564595251BFE120CAC2A583ED1532 Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa Signing time: Mon 07 Apr 2025 12:00:02 +0000 ROA not before: Mon 07 Apr 2025 11:55:02 +0000 ROA not after: Mon 06 Apr 2026 12:00:02 +0000 asID: 138070 IP address blocks: 103.123.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:68:88:fa:62:05:64:59:52:51:bf:e1:20:ca:c2:a5:83:ed:15:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Apr 7 11:55:02 2025 GMT Not After : Apr 6 12:00:02 2026 GMT Subject: CN=817A4440AB3E1B134B69F9E5485B4F56C2EA1F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7f:0d:0d:23:bd:2e:d8:5d:6b:b4:e2:03:8c: 09:e2:ee:c7:48:c2:5a:e6:10:bd:e0:cf:7c:53:50: 73:63:ba:8f:50:c8:98:0f:9a:2c:7b:5e:eb:83:c7: 3c:bb:a0:d1:c4:e7:42:aa:4e:47:68:70:ce:4c:bb: bd:1a:b0:5c:dd:e6:98:f6:95:96:7a:13:41:c7:32: a9:d8:16:ee:02:75:87:c3:19:b3:a9:fd:55:c1:fd: 6c:f1:91:88:de:85:ac:09:e3:75:c0:97:91:df:e6: 20:f6:8d:23:ef:94:5c:17:04:7c:cc:8f:cb:e2:b1: e3:91:05:fe:ed:df:f3:61:68:4e:c0:e6:4c:b5:ea: 56:58:12:d4:3f:f6:60:a2:7d:78:49:ae:ef:c2:b5: 42:9c:0f:fe:f9:33:e5:eb:9e:a2:a2:3e:a2:c6:f8: fe:41:c3:01:c2:94:38:18:1e:3f:cd:13:51:70:68: 87:04:f7:08:9a:9a:ea:5d:74:6f:4f:59:0e:ca:91: 51:66:5b:fa:27:a1:4d:ce:9f:c6:1f:d0:89:8e:3d: c4:7c:cb:2b:0a:50:92:40:0f:b7:94:c2:d3:fc:36: d3:85:8f:a1:24:81:da:b9:df:7f:4b:40:be:54:53: 20:30:bf:70:44:75:b7:dd:fe:82:65:0b:e1:a4:62: 7d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7A:44:40:AB:3E:1B:13:4B:69:F9:E5:48:5B:4F:56:C2:EA:1F:47 X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.107.0/24 Signature Algorithm: sha256WithRSAEncryption a4:5c:ff:c6:dc:db:90:69:f6:bc:38:c4:83:a9:e6:cf:ad:9e: d0:b6:c0:25:06:6e:02:6d:e6:49:0a:11:51:ee:21:f5:fc:0a: 39:49:33:75:77:2b:26:19:fa:2f:47:0a:d3:06:7f:2c:c8:92: 57:57:3c:2b:d4:9c:da:cb:bb:93:32:a8:84:46:9b:1e:f3:cc: 0d:e8:c4:76:ae:b6:2c:64:f6:9a:de:ca:8c:9c:17:b0:5e:9d: 19:d1:76:29:bc:bc:37:22:f1:66:95:56:32:5d:3a:24:b7:ca: 9c:88:8e:2d:26:b4:8c:b4:30:2a:f1:0e:a9:ba:9d:c7:6e:88: c8:ef:ba:01:79:ff:dc:e4:95:43:f0:4a:8e:33:5d:f8:b4:9c: d6:ba:2f:54:b0:13:97:f6:f3:e9:d0:32:de:9e:03:7b:29:e6: 94:e9:b5:03:57:7d:03:0d:3b:cb:23:70:d8:8a:fc:3b:31:d1: ab:12:e5:e9:52:25:75:b3:54:41:e7:2a:4b:c2:78:3a:5a:ee: 73:96:95:10:14:8e:2d:53:e7:e4:b5:27:a6:54:a5:3a:cb:c5: 90:b8:52:14:29:26:d4:b0:64:dd:f8:10:17:28:a7:cd:e3:50: f6:59:98:77:71:30:67:62:cc:32:6e:cc:43:1e:1e:9d:f3:83: 10:2f:3c:eb -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHGiI+mIFZFlSUb/hIMrCpYPtFTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNTA0MDcxMTU1MDJaFw0yNjA0MDYxMjAwMDJaMDMxMTAvBgNV BAMTKDgxN0E0NDQwQUIzRTFCMTM0QjY5RjlFNTQ4NUI0RjU2QzJFQTFGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzfw0NI70u2F1rtOIDjAni7sdI wlrmEL3gz3xTUHNjuo9QyJgPmix7XuuDxzy7oNHE50KqTkdocM5Mu70asFzd5pj2 lZZ6E0HHMqnYFu4CdYfDGbOp/VXB/WzxkYjehawJ43XAl5Hf5iD2jSPvlFwXBHzM j8viseORBf7t3/NhaE7A5ky16lZYEtQ/9mCifXhJru/CtUKcD/75M+XrnqKiPqLG +P5BwwHClDgYHj/NE1FwaIcE9wiamupddG9PWQ7KkVFmW/onoU3On8Yf0ImOPcR8 yysKUJJAD7eUwtP8NtOFj6Ekgdq5339LQL5UUyAwv3BEdbfd/oJlC+GkYn3PAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUgXpEQKs+GxNLafnlSFtPVsLqH0cwHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhZDY3ZDVmLTU3MTMtNDE1My04 NzFiLTFiMDA4ZjdmZmRkMi8wLzMxMzAzMzJlMzEzMjMzMmUzMTMwMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM3MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABne2swDQYJ KoZIhvcNAQELBQADggEBAKRc/8bc25Bp9rw4xIOp5s+tntC2wCUGbgJt5kkKEVHu IfX8CjlJM3V3KyYZ+i9HCtMGfyzIkldXPCvUnNrLu5MyqIRGmx7zzA3oxHautixk 9preyoycF7BenRnRdim8vDci8WaVVjJdOiS3ypyIji0mtIy0MCrxDqm6ncduiMjv ugF5/9zklUPwSo4zXfi0nNa6L1SwE5f28+nQMt6eA3sp5pTptQNXfQMNO8sjcNiK /Dsx0asS5elSJXWzVEHnKkvCeDpa7nOWlRAUji1T5+S1J6ZUpTrLxZC4UhQpJtSw ZN34EBcop83jUPZZmHdxMGdizDJuzEMeHp3zgxAvPOs= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:09 2025 by rpki-client on console.sobornost.net