$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa File: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (raw, json) Hash identifier: aihSJuIZjlYbfPjvBLdvafMIwZ5NASIBmOuqn4SEmM0= Subject key identifier: 69:34:70:B3:64:C4:28:20:A1:62:21:D6:06:D3:37:E9:CE:86:FD:48 Certificate issuer: /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Certificate serial: 2363F39438D4FAF1F9BE107B11B9021D253F5F8F Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa Signing time: Thu 05 Dec 2024 14:00:02 +0000 ROA not before: Thu 05 Dec 2024 13:55:02 +0000 ROA not after: Thu 04 Dec 2025 14:00:02 +0000 asID: 142375 IP address blocks: 103.171.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:63:f3:94:38:d4:fa:f1:f9:be:10:7b:11:b9:02:1d:25:3f:5f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Validity Not Before: Dec 5 13:55:02 2024 GMT Not After : Dec 4 14:00:02 2025 GMT Subject: CN=693470B364C42820A16221D606D337E9CE86FD48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:02:71:42:85:c2:a8:8b:6e:2f:f2:89:5a:72: ea:99:31:60:4f:6d:da:a6:c8:42:dc:aa:eb:cb:69: 31:f1:d4:cb:04:22:78:b0:a9:6a:e0:f3:69:36:a1: 89:9b:f4:94:ec:25:f7:ce:23:eb:f6:be:1d:84:8e: e9:fb:4d:6f:3f:71:52:80:98:ea:11:00:88:84:cb: 47:69:5c:d4:20:9c:78:20:c0:97:02:7a:25:6d:4c: ac:c2:b8:21:43:0c:ba:14:db:ad:fd:8e:a0:f3:a9: 58:61:7b:bb:ec:cf:e7:c6:18:89:2b:c6:c4:e9:a7: ba:c5:d0:79:eb:4c:e5:b2:75:1d:c0:64:55:4d:69: 55:16:f7:ef:ad:a2:cb:e2:fc:b9:e2:55:21:e8:74: 23:72:3e:f7:ce:64:02:7d:11:25:da:84:00:5a:e8: a1:dc:10:fb:42:5d:5d:68:f6:e9:17:9a:12:9c:ca: 56:34:a9:41:d5:04:0d:aa:4c:ee:02:bb:2a:49:f4: a1:3d:42:6b:a8:3b:4c:db:d7:dc:8d:da:85:07:b6: 7a:8c:bd:6e:07:8d:df:7c:2e:3b:92:74:44:70:3b: 70:c7:8d:1a:1b:22:bf:f2:7c:e3:36:43:2c:2a:16: 74:98:81:b0:cd:b9:47:f7:8b:ce:af:a5:49:a9:43: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:34:70:B3:64:C4:28:20:A1:62:21:D6:06:D3:37:E9:CE:86:FD:48 X509v3 Authority Key Identifier: keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.182.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:a4:f9:be:12:eb:ca:6b:86:6b:60:8f:88:a8:a8:ab:a0:1b: a8:22:15:d2:9b:f8:b7:fa:d7:3e:b1:d3:84:d0:4d:4f:da:1a: 94:bd:fe:6b:94:0a:ff:2c:74:35:e5:04:8a:49:c7:eb:6b:6b: c1:d8:16:ba:75:e5:c2:97:2b:ec:87:c4:e1:99:e7:dc:43:74: ce:3c:f2:af:2a:f8:cc:87:01:f9:86:e7:8d:c5:bc:7a:dd:d9: 43:b7:aa:4c:23:11:b9:ec:f2:f7:15:13:32:8c:32:44:ee:7a: e0:f7:7d:ce:15:93:5c:05:b6:e7:ab:f6:85:ab:f7:fc:5e:3c: 7e:e4:2c:01:76:ad:f6:04:34:90:7d:ac:dc:5b:ff:1f:7e:ff: d1:79:07:1f:bd:cc:5e:3a:05:41:1a:66:dc:46:f3:1a:b7:be: 2f:94:0f:f3:af:f1:49:16:f2:4b:aa:cf:7c:fa:24:e7:da:81: e2:d7:bf:b2:32:4d:e8:c3:72:fe:13:56:8b:1f:3c:36:65:78: 9c:90:f5:d4:a3:90:13:db:43:85:5a:33:b7:5f:77:25:00:29: 2d:59:bd:ad:fd:20:a7:38:9f:56:e4:a9:f6:e2:ee:a5:92:35: d8:0b:a2:b2:1a:16:2d:a9:38:87:ec:90:93:b7:cc:21:b0:5b: 12:ae:52:70 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUI2PzlDjU+vH5vhB7EbkCHSU/X48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVG NjUxQkFBQTAeFw0yNDEyMDUxMzU1MDJaFw0yNTEyMDQxNDAwMDJaMDMxMTAvBgNV BAMTKDY5MzQ3MEIzNjRDNDI4MjBBMTYyMjFENjA2RDMzN0U5Q0U4NkZENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeAnFChcKoi24v8olacuqZMWBP bdqmyELcquvLaTHx1MsEIniwqWrg82k2oYmb9JTsJffOI+v2vh2Ejun7TW8/cVKA mOoRAIiEy0dpXNQgnHggwJcCeiVtTKzCuCFDDLoU2639jqDzqVhhe7vsz+fGGIkr xsTpp7rF0HnrTOWydR3AZFVNaVUW9++tosvi/LniVSHodCNyPvfOZAJ9ESXahABa 6KHcEPtCXV1o9ukXmhKcylY0qUHVBA2qTO4CuypJ9KE9QmuoO0zb19yN2oUHtnqM vW4Hjd98LjuSdERwO3DHjRobIr/yfOM2QywqFnSYgbDNuUf3i86vpUmpQzZpAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUaTRws2TEKCChYiHWBtM36c6G/UgwHwYDVR0j BBgwFoAUPs59Lpwv89XTDSlNdJLD/vZRuqowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzUwNWNiMy1iNTVlLTQwZTQtYWM3OS02MzY1NjA2ZjRlZjkvMC8zRUNFN0QyRTlD MkZGM0Q1RDMwRDI5NEQ3NDkyQzNGRUY2NTFCQUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVGNjUx QkFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UzNTA1Y2IzLWI1NWUtNDBlNC1h Yzc5LTYzNjU2MDZmNGVmOS8wLzMxMzAzMzJlMzEzNzMxMmUzMTM4MzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnq7YwDQYJ KoZIhvcNAQELBQADggEBAJ2k+b4S68prhmtgj4ioqKugG6giFdKb+Lf61z6x04TQ TU/aGpS9/muUCv8sdDXlBIpJx+tra8HYFrp15cKXK+yHxOGZ59xDdM488q8q+MyH AfmG543FvHrd2UO3qkwjEbns8vcVEzKMMkTueuD3fc4Vk1wFtuer9oWr9/xePH7k LAF2rfYENJB9rNxb/x9+/9F5Bx+9zF46BUEaZtxG8xq3vi+UD/Ov8UkW8kuqz3z6 JOfageLXv7IyTejDcv4TVosfPDZleJyQ9dSjkBPbQ4VaM7dfdyUAKS1Zva39IKc4 n1bkqfbi7qWSNdgLorIaFi2pOIfskJO3zCGwWxKuUnA= -----END CERTIFICATE-----Generated at Fri Apr 25 22:07:26 2025 by rpki-client on console.sobornost.net