$ rpki-client -vvf repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa File: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (raw, json) Hash identifier: f+ikvw3lFJQBhoG9P7rO8nWG3RR5gcK3OF+btbUSD1M= Subject key identifier: 7F:D7:BB:20:1A:A7:71:21:5C:11:52:A7:10:6B:CC:AC:8E:E3:9C:87 Certificate issuer: /CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Certificate serial: 6E2F35D74E2522BF5EC1C97D629180B5B738DCA1 Authority key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa Signing time: Tue 25 Mar 2025 02:30:04 +0000 ROA not before: Tue 25 Mar 2025 02:25:04 +0000 ROA not after: Tue 24 Mar 2026 02:30:04 +0000 asID: 136865 IP address blocks: 103.239.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 11:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2f:35:d7:4e:25:22:bf:5e:c1:c9:7d:62:91:80:b5:b7:38:dc:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Validity Not Before: Mar 25 02:25:04 2025 GMT Not After : Mar 24 02:30:04 2026 GMT Subject: CN=7FD7BB201AA771215C1152A7106BCCAC8EE39C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:16:80:ae:f5:0c:e2:a1:6b:27:61:66:3c:1a: 0f:da:54:8d:c3:d6:e0:92:11:0a:8f:05:a1:5e:95: 2c:9a:36:64:db:9c:ca:37:38:da:6c:57:25:72:94: 38:48:76:a2:04:18:a5:10:1d:64:c4:a5:0d:50:99: e7:9d:62:98:8d:68:ba:53:e0:6c:b9:51:7f:88:66: e1:eb:ef:31:54:86:23:53:74:a4:39:b9:07:9c:49: 5b:09:ea:6d:ea:c8:3c:86:c3:5d:a8:99:6e:7a:52: 38:f5:12:f5:c1:60:cd:9e:0f:5d:f7:df:69:fc:cf: 63:3a:5d:ac:40:c3:1b:db:ef:09:a3:c2:e3:23:e6: 2b:96:d9:01:8f:d2:8d:62:d1:ea:5a:39:9a:f1:c2: 8c:24:fd:96:ea:d7:dc:14:92:79:4c:ba:a9:8b:00: 95:76:4a:c8:60:63:8e:1c:db:2c:82:5f:b9:f2:66: 34:60:79:da:aa:fb:e8:62:d5:f5:a2:b0:73:56:01: 8d:6f:11:f4:18:2c:4e:c8:01:31:d6:0c:99:8e:99: cc:5c:d8:af:44:e6:ca:7d:99:86:71:e9:cf:f7:c1: 1c:b0:d5:34:d4:45:03:a4:0a:53:e8:c1:13:4a:e0: 14:32:28:50:11:4a:d5:ad:ad:25:bb:b9:be:3b:38: e5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D7:BB:20:1A:A7:71:21:5C:11:52:A7:10:6B:CC:AC:8E:E3:9C:87 X509v3 Authority Key Identifier: keyid:4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.22.0/24 Signature Algorithm: sha256WithRSAEncryption 20:de:8f:d8:0e:a1:6b:e6:2a:82:37:c1:d4:c8:d2:e0:73:e8: 13:c2:5e:bf:4a:d3:cb:40:53:fa:cf:4e:fc:d1:b2:2d:48:9a: 75:05:9f:3e:f4:eb:86:c1:31:54:76:61:93:c1:7a:24:8b:16: bf:2d:47:7c:b7:d5:1b:14:84:f0:83:96:c6:81:12:85:3a:0a: f1:fb:72:05:98:45:44:e0:f6:de:98:6e:8a:ed:d7:5d:a9:10: 33:74:e4:b5:a7:1e:02:92:7c:d5:1c:27:19:a1:6b:96:22:c5: 6b:10:24:f3:f8:57:3d:38:6c:0d:7c:55:c4:7a:39:1c:ce:6d: bc:dd:cc:68:97:d0:03:df:5a:56:45:26:10:7e:2c:e6:8b:a0: 53:10:95:d7:16:72:88:4f:f6:e1:ac:28:77:cd:27:5a:5e:bc: dc:7a:45:0f:4d:b2:a4:20:72:c7:6b:ad:f7:4b:d6:f9:be:a7: 40:0c:d7:75:6c:aa:8b:21:c3:16:98:ec:b4:99:91:a5:69:a2: 13:b3:d9:88:8f:9c:bf:7a:2e:45:d1:ee:a9:5e:a2:cf:b5:a8: 66:e4:1d:74:ad:01:dc:3d:01:3e:da:6f:9c:cd:18:a8:df:41: ad:ce:76:6d:c1:40:35:3d:1d:2b:72:b8:35:3b:d9:d4:90:4a: 24:1d:be:a9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbi81104lIr9ewcl9YpGAtbc43KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZG NDJBOTQ0QjAeFw0yNTAzMjUwMjI1MDRaFw0yNjAzMjQwMjMwMDRaMDMxMTAvBgNV BAMTKDdGRDdCQjIwMUFBNzcxMjE1QzExNTJBNzEwNkJDQ0FDOEVFMzlDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoFoCu9QzioWsnYWY8Gg/aVI3D 1uCSEQqPBaFelSyaNmTbnMo3ONpsVyVylDhIdqIEGKUQHWTEpQ1QmeedYpiNaLpT 4Gy5UX+IZuHr7zFUhiNTdKQ5uQecSVsJ6m3qyDyGw12omW56Ujj1EvXBYM2eD133 32n8z2M6XaxAwxvb7wmjwuMj5iuW2QGP0o1i0epaOZrxwowk/Zbq19wUknlMuqmL AJV2SshgY44c2yyCX7nyZjRgedqq++hi1fWisHNWAY1vEfQYLE7IATHWDJmOmcxc 2K9E5sp9mYZx6c/3wRyw1TTURQOkClPowRNK4BQyKFARStWtrSW7ub47OOWJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUf9e7IBqncSFcEVKnEGvMrI7jnIcwHwYDVR0j BBgwFoAUTgVOBk3N8uSfcoLXNwuer/QqlEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mzk4MDYzZS01N2ExLTQwZjItODUyNy00ZDBhNjljNWQ2NDcvMC80RTA1NEUwNjRE Q0RGMkU0OUY3MjgyRDczNzBCOUVBRkY0MkE5NDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZGNDJB OTQ0Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzOTgwNjNlLTU3YTEtNDBmMi04 NTI3LTRkMGE2OWM1ZDY0Ny8wLzMxMzAzMzJlMzIzMzM5MmUzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+8WMA0GCSqG SIb3DQEBCwUAA4IBAQAg3o/YDqFr5iqCN8HUyNLgc+gTwl6/StPLQFP6z0780bIt SJp1BZ8+9OuGwTFUdmGTwXokixa/LUd8t9UbFITwg5bGgRKFOgrx+3IFmEVE4Pbe mG6K7dddqRAzdOS1px4CknzVHCcZoWuWIsVrECTz+Fc9OGwNfFXEejkczm283cxo l9AD31pWRSYQfizmi6BTEJXXFnKIT/bhrCh3zSdaXrzcekUPTbKkIHLHa633S9b5 vqdADNd1bKqLIcMWmOy0mZGlaaITs9mIj5y/ei5F0e6pXqLPtahm5B10rQHcPQE+ 2m+czRio30GtznZtwUA1PR0rcrg1O9nUkEokHb6p -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:52 2025 by rpki-client on console.sobornost.net