$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa File: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (raw, json) Hash identifier: OCAMhceoK6FqEu5cqv0eRfxFnTETlN562dCqSYdjkuU= Subject key identifier: 0E:32:19:24:BC:C2:F6:BE:6F:5E:5C:91:64:1C:FE:49:18:00:D4:1B Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Certificate serial: 058390FD9552601E62CEB07C5E1D1A29FFF4D52E Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa Signing time: Wed 19 Mar 2025 07:29:23 +0000 ROA not before: Wed 19 Mar 2025 07:24:23 +0000 ROA not after: Wed 18 Mar 2026 07:29:23 +0000 asID: 135478 IP address blocks: 101.128.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:83:90:fd:95:52:60:1e:62:ce:b0:7c:5e:1d:1a:29:ff:f4:d5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Validity Not Before: Mar 19 07:24:23 2025 GMT Not After : Mar 18 07:29:23 2026 GMT Subject: CN=0E321924BCC2F6BE6F5E5C91641CFE491800D41B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0e:9b:6c:a2:41:b0:40:1b:06:e4:90:ff:f6: 7f:1c:bc:de:82:39:c7:2c:b3:03:e4:84:37:ac:e3: f0:9d:d0:f6:de:19:16:e8:0b:52:33:e0:ae:d6:9b: 1b:8c:d4:77:46:63:ad:41:0a:d9:48:58:f6:02:5f: 6e:24:4b:7f:f8:c8:0f:c4:08:2f:7f:3e:20:17:1b: 4c:32:fe:35:84:c8:47:26:f7:7b:16:b6:87:c8:2e: 9b:80:f4:4c:57:b7:85:eb:31:7b:df:6a:72:fa:f3: 06:e2:6d:9c:99:fe:95:86:8b:18:d5:d6:a9:8e:a4: be:6c:10:60:6b:38:d7:d5:de:8a:2a:13:9d:ea:66: bf:83:cc:ec:09:58:37:41:ee:87:3a:a0:97:58:eb: 8c:dc:a7:94:1e:b3:d6:33:06:d8:f4:ac:fa:3d:6a: ec:58:2a:0e:ad:7b:d5:e2:7d:1a:03:50:dd:4a:61: f3:7c:0b:31:53:53:f2:23:c1:83:ed:e5:40:2e:8f: a6:78:55:f5:69:6e:4e:5f:a7:b8:9d:49:20:d4:7c: a4:2c:95:d9:a1:f5:6b:00:f3:bb:2a:12:a9:82:ad: 70:9f:7b:26:d2:85:99:13:f1:66:9a:04:9e:cf:1c: 1b:fc:22:a5:8d:5d:45:08:c2:89:c4:37:fd:97:a7: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:32:19:24:BC:C2:F6:BE:6F:5E:5C:91:64:1C:FE:49:18:00:D4:1B X509v3 Authority Key Identifier: keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.128.108.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:92:dc:eb:09:fd:80:c2:a9:12:e6:b6:38:b5:a1:5c:fc:f1: 52:fa:2b:81:0b:a7:9a:1a:b1:96:b7:0b:8c:be:8b:f7:74:79: 3e:30:27:ef:92:71:98:dd:0b:86:5d:41:22:7a:3d:e8:a2:6c: bb:3b:a9:32:f4:ec:53:22:07:64:14:29:d5:55:a0:3e:37:aa: ce:b2:01:1e:50:fa:35:9f:10:12:c8:8d:d4:89:f3:a2:24:e4: 98:4b:83:64:c7:53:be:f3:44:d0:8c:76:33:a7:c8:ca:0c:67: a0:de:38:1d:5f:3c:5b:b8:24:8f:04:4f:27:57:fa:2e:ae:36: 72:59:70:1b:4f:0b:e6:a2:a3:9b:11:50:b8:ef:e7:74:d0:9f: 41:20:0d:be:6a:64:cf:ef:4f:e2:e3:c3:21:bb:5e:64:e1:a3: 01:87:98:ba:18:d5:7e:bb:6f:77:22:e6:0a:51:9b:ef:32:5a: 31:c4:37:8f:80:a9:38:4b:17:16:43:03:b7:3c:cb:a5:a9:80: 5d:dd:67:f2:33:3b:d7:3b:b4:cd:ec:c6:67:92:58:4b:c9:11: 6e:46:16:94:03:87:7f:99:71:0c:f6:64:cc:6f:49:38:01:3f: 51:77:f3:22:f9:5e:f1:75:c0:82:20:54:10:69:79:c8:cc:15: e0:c4:5c:12 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBYOQ/ZVSYB5izrB8Xh0aKf/01S4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz N0Q2OTk4QTAeFw0yNTAzMTkwNzI0MjNaFw0yNjAzMTgwNzI5MjNaMDMxMTAvBgNV BAMTKDBFMzIxOTI0QkNDMkY2QkU2RjVFNUM5MTY0MUNGRTQ5MTgwMEQ0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1DptsokGwQBsG5JD/9n8cvN6C OccsswPkhDes4/Cd0PbeGRboC1Iz4K7WmxuM1HdGY61BCtlIWPYCX24kS3/4yA/E CC9/PiAXG0wy/jWEyEcm93sWtofILpuA9ExXt4XrMXvfanL68wbibZyZ/pWGixjV 1qmOpL5sEGBrONfV3ooqE53qZr+DzOwJWDdB7oc6oJdY64zcp5Qes9YzBtj0rPo9 auxYKg6te9XifRoDUN1KYfN8CzFTU/IjwYPt5UAuj6Z4VfVpbk5fp7idSSDUfKQs ldmh9WsA87sqEqmCrXCfeybShZkT8WaaBJ7PHBv8IqWNXUUIwonEN/2Xp7PnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUDjIZJLzC9r5vXlyRZBz+SRgA1BswHwYDVR0j BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1 REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2 OTk4QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzMTMwMzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJlgGwwDQYJ KoZIhvcNAQELBQADggEBABqS3OsJ/YDCqRLmtji1oVz88VL6K4ELp5oasZa3C4y+ i/d0eT4wJ++ScZjdC4ZdQSJ6PeiibLs7qTL07FMiB2QUKdVVoD43qs6yAR5Q+jWf EBLIjdSJ86Ik5JhLg2THU77zRNCMdjOnyMoMZ6DeOB1fPFu4JI8ETydX+i6uNnJZ cBtPC+aio5sRULjv53TQn0EgDb5qZM/vT+LjwyG7XmThowGHmLoY1X67b3ci5gpR m+8yWjHEN4+AqThLFxZDA7c8y6WpgF3dZ/IzO9c7tM3sxmeSWEvJEW5GFpQDh3+Z cQz2ZMxvSTgBP1F38yL5XvF1wIIgVBBpecjMFeDEXBI= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:38 2025 by rpki-client on console.sobornost.net