$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa File: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (raw, json) Hash identifier: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA= Subject key identifier: 4C:FD:05:9B:CA:DC:F1:28:BD:AA:E1:4E:79:95:BC:D3:43:F6:1C:1C Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 0EF8682179732F5170C1FC7DD85ABD0A7A7290A9 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa Signing time: Fri 25 Apr 2025 17:00:02 +0000 ROA not before: Fri 25 Apr 2025 16:55:02 +0000 ROA not after: Fri 24 Apr 2026 17:00:02 +0000 asID: 141909 IP address blocks: 103.121.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f8:68:21:79:73:2f:51:70:c1:fc:7d:d8:5a:bd:0a:7a:72:90:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Apr 25 16:55:02 2025 GMT Not After : Apr 24 17:00:02 2026 GMT Subject: CN=4CFD059BCADCF128BDAAE14E7995BCD343F61C1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5f:be:a8:70:40:1c:80:c5:e3:50:e8:8e:b8: 48:a6:14:0b:fa:48:19:9f:1f:01:bd:49:9d:0d:43: cd:e8:79:07:b5:16:87:e9:1a:2b:60:a5:dc:a2:64: a7:5e:01:e4:f0:68:99:48:9c:73:a4:35:15:a6:d5: b4:cc:42:8b:75:ac:5d:9d:3a:1d:9d:3e:47:fb:af: f0:28:0f:2f:f5:98:8d:4b:40:5a:05:0a:24:41:d0: 6d:e3:c4:49:7c:db:73:5f:32:cd:78:f8:79:fb:d8: 62:91:18:4b:bd:4f:22:aa:6a:52:ea:68:c9:6a:5d: f1:3d:24:e0:4a:d5:58:ff:e7:bc:bb:76:0d:80:c6: 46:e9:3f:09:12:d3:de:2a:9b:e7:9c:77:7f:27:78: 47:4d:ea:7e:50:d1:00:0b:95:7f:fb:29:4b:db:85: ba:f2:b7:6e:23:74:11:8d:5b:d7:23:49:56:1b:24: fd:ce:25:7a:44:1a:d1:4a:c1:f6:da:25:f0:6c:2f: af:a9:bb:4a:74:45:5e:17:6d:1f:b6:48:9b:f9:8f: cf:56:4b:9a:ff:6c:eb:c0:3a:ad:4d:9c:f5:bd:95: 51:a6:4d:bf:62:09:27:0f:a0:ac:86:fd:75:e4:4c: c5:99:d1:1f:f1:9c:12:08:57:97:f6:ab:d4:33:c3: fc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FD:05:9B:CA:DC:F1:28:BD:AA:E1:4E:79:95:BC:D3:43:F6:1C:1C X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.187.0/24 Signature Algorithm: sha256WithRSAEncryption 26:ef:c1:73:cd:86:a2:26:46:50:48:6b:1c:00:f9:86:d8:47: 9e:23:1b:d0:ee:08:11:ed:7c:1a:da:50:3e:19:5f:15:f9:19: 85:d6:34:ac:0d:b0:5d:d6:64:fc:bc:01:54:b0:96:52:03:ba: f3:bc:b2:f5:74:ca:ee:57:d0:88:56:4e:f7:4c:e9:e6:2f:1f: 73:0f:3e:2d:d0:9c:8c:6c:a1:d8:42:5e:98:f0:a1:d2:a8:ce: ac:dd:49:73:43:6d:b4:8f:f0:3d:2f:e8:f3:6d:53:68:43:93: 57:50:55:01:c4:a1:27:40:32:a4:dd:37:04:a3:af:b5:05:e3: 29:0a:37:12:7c:c5:b4:26:d4:06:0c:1b:b1:54:24:25:3a:18: cb:d4:23:4d:3a:e8:df:2b:3a:42:04:fd:12:06:32:9e:f4:df: 33:0b:59:9f:26:2c:dc:b5:1e:51:cc:0c:a2:69:e5:17:37:d4: c6:a1:2d:94:05:22:27:27:3d:a5:bd:82:3c:1d:92:96:e4:de: fc:27:c7:9f:7b:96:80:c0:49:0a:23:23:5c:f6:81:57:99:f9: 51:1b:00:1d:a9:d2:e2:a2:f7:b2:03:20:18:44:4b:b1:0a:6b: 62:03:7a:44:1d:4c:bf:7e:bc:d4:9f:05:e2:9e:3b:d1:e1:b0: ad:ad:66:2c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDvhoIXlzL1Fwwfx92Fq9CnpykKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTA0MjUxNjU1MDJaFw0yNjA0MjQxNzAwMDJaMDMxMTAvBgNV BAMTKDRDRkQwNTlCQ0FEQ0YxMjhCREFBRTE0RTc5OTVCQ0QzNDNGNjFDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWX76ocEAcgMXjUOiOuEimFAv6 SBmfHwG9SZ0NQ83oeQe1FofpGitgpdyiZKdeAeTwaJlInHOkNRWm1bTMQot1rF2d Oh2dPkf7r/AoDy/1mI1LQFoFCiRB0G3jxEl823NfMs14+Hn72GKRGEu9TyKqalLq aMlqXfE9JOBK1Vj/57y7dg2AxkbpPwkS094qm+ecd38neEdN6n5Q0QALlX/7KUvb hbryt24jdBGNW9cjSVYbJP3OJXpEGtFKwfbaJfBsL6+pu0p0RV4XbR+2SJv5j89W S5r/bOvAOq1NnPW9lVGmTb9iCScPoKyG/XXkTMWZ0R/xnBIIV5f2q9Qzw/xRAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUTP0Fm8rc8Si9quFOeZW800P2HBwwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwNjIwY2ZjLWI0NmMtNDU3Yy05 ZmRlLTI5NzcxMGM1NDZhOS8wLzMxMzAzMzJlMzEzMjMxMmUzMTM4MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnebswDQYJ KoZIhvcNAQELBQADggEBACbvwXPNhqImRlBIaxwA+YbYR54jG9DuCBHtfBraUD4Z XxX5GYXWNKwNsF3WZPy8AVSwllIDuvO8svV0yu5X0IhWTvdM6eYvH3MPPi3QnIxs odhCXpjwodKozqzdSXNDbbSP8D0v6PNtU2hDk1dQVQHEoSdAMqTdNwSjr7UF4ykK NxJ8xbQm1AYMG7FUJCU6GMvUI0066N8rOkIE/RIGMp703zMLWZ8mLNy1HlHMDKJp 5Rc31MahLZQFIicnPaW9gjwdkpbk3vwnx597loDASQojI1z2gVeZ+VEbAB2p0uKi 97IDIBhES7EKa2IDekQdTL9+vNSfBeKeO9HhsK2tZiw= -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:51 2025 by rpki-client on console.sobornost.net