$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa File: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (raw, json) Hash identifier: g0U/Ihh+zRyGBAnYDDRdbB6ZVxIvYplQ7RdHhisSTAI= Subject key identifier: AC:43:93:33:9C:32:9C:7D:FD:24:D0:34:39:11:94:55:1F:96:36:25 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 21458E4D0A75DA501BDFA8C8E4E90377020ADA0F Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa Signing time: Thu 12 Dec 2024 04:02:37 +0000 ROA not before: Thu 12 Dec 2024 03:57:37 +0000 ROA not after: Thu 11 Dec 2025 04:02:37 +0000 asID: 140443 IP address blocks: 103.79.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:45:8e:4d:0a:75:da:50:1b:df:a8:c8:e4:e9:03:77:02:0a:da:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Dec 12 03:57:37 2024 GMT Not After : Dec 11 04:02:37 2025 GMT Subject: CN=AC4393339C329C7DFD24D034391194551F963625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:60:fc:3f:83:80:59:49:cc:7e:8a:80:5f: d3:c7:c8:d5:50:a4:37:50:29:2f:69:99:ef:c6:7b: 6f:a5:40:30:da:35:56:58:b0:53:bf:e6:6a:eb:0c: fc:3b:58:eb:49:0a:32:c4:e4:0e:16:44:c9:07:50: 56:bb:6a:22:2f:1d:e9:00:f2:b0:f6:fb:5c:ca:58: 41:29:52:c3:5b:b2:b8:0c:da:06:58:d0:e6:c6:28: c8:0b:22:76:b8:a2:53:4c:cd:03:d8:85:fd:7b:85: a4:82:b1:09:1a:a2:68:d3:af:98:f9:e0:06:df:e4: 24:52:77:5e:7b:9f:40:90:82:d8:a4:1f:81:44:a9: 50:07:3b:e1:e1:89:0d:48:26:e2:04:fe:0e:86:c6: 0f:55:67:cb:66:2c:a9:6b:f3:90:e2:fb:d2:9c:05: 75:93:a0:b9:9e:af:b8:56:5b:a6:ce:9b:5b:9a:4b: 62:b8:99:fe:0c:e0:f4:af:e3:ac:10:5b:64:8e:1e: 8d:20:29:45:80:d7:8a:e4:b9:75:17:ff:c0:e9:c4: 08:ae:22:6a:18:12:89:d4:5d:af:c1:25:df:f5:6c: a6:9b:fc:82:ba:ef:6c:ad:4d:ce:29:26:00:29:5c: af:01:f2:be:57:f1:19:45:be:1d:b7:d8:a7:63:06: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:43:93:33:9C:32:9C:7D:FD:24:D0:34:39:11:94:55:1F:96:36:25 X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.130.0/24 Signature Algorithm: sha256WithRSAEncryption 22:bc:8f:d4:b6:aa:a0:3f:72:90:95:3f:f3:b8:27:fa:d4:0b: ae:03:49:26:d6:6d:e9:dc:96:7d:ec:70:2e:b8:91:0c:ae:6c: b9:da:ab:8f:79:7a:f6:b8:a2:4c:c2:86:25:e1:c0:dc:e5:86: ad:5f:09:fc:64:60:92:75:0e:30:ee:d1:f3:b6:16:dd:92:0a: 23:15:57:8f:d3:5d:83:01:b9:3b:31:f7:81:f3:be:2e:67:63: 3e:7b:58:6d:14:b8:51:54:78:4e:77:17:e9:85:72:57:8e:77: 7d:74:04:31:dd:b1:e9:5c:45:9c:6a:32:f6:fd:45:63:b4:5b: 8b:30:b0:4a:56:c3:e9:2a:0f:40:38:41:77:be:fd:d5:78:37: 97:0b:ec:af:de:da:96:ef:5a:da:53:c3:16:26:2d:40:0d:51: 1d:d5:fe:26:53:d2:ca:e9:4c:54:82:14:e4:78:28:d2:ad:e6: fa:83:c3:a6:1a:5d:cd:c9:83:69:a7:66:de:f1:31:5b:e2:68: c1:23:4c:49:0e:cc:97:e9:74:b4:c6:80:b8:bd:5f:f1:62:47: 7f:3f:b4:83:97:49:ac:80:23:37:54:0e:75:30:0a:3a:c8:05: 86:e2:2a:0c:84:d8:92:c2:1e:6b:b5:67:1b:5c:78:76:d1:cf: f3:c0:5d:af -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIUWOTQp12lAb36jI5OkDdwIK2g8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNDEyMTIwMzU3MzdaFw0yNTEyMTEwNDAyMzdaMDMxMTAvBgNV BAMTKEFDNDM5MzMzOUMzMjlDN0RGRDI0RDAzNDM5MTE5NDU1MUY5NjM2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10mD8P4OAWUnMfoqAX9PHyNVQ pDdQKS9pme/Ge2+lQDDaNVZYsFO/5mrrDPw7WOtJCjLE5A4WRMkHUFa7aiIvHekA 8rD2+1zKWEEpUsNbsrgM2gZY0ObGKMgLIna4olNMzQPYhf17haSCsQkaomjTr5j5 4Abf5CRSd157n0CQgtikH4FEqVAHO+HhiQ1IJuIE/g6Gxg9VZ8tmLKlr85Di+9Kc BXWToLmer7hWW6bOm1uaS2K4mf4M4PSv46wQW2SOHo0gKUWA14rkuXUX/8DpxAiu ImoYEonUXa/BJd/1bKab/IK672ytTc4pJgApXK8B8r5X8RlFvh232KdjBkMlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUrEOTM5wynH39JNA0ORGUVR+WNiUwHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZTI0OTA3LWE2ZjItNGE1NS1h YTZmLTE4YzdkYjE0M2ZlOC8wLzMxMzAzMzJlMzczOTJlMzEzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0+CMA0GCSqG SIb3DQEBCwUAA4IBAQAivI/UtqqgP3KQlT/zuCf61AuuA0km1m3p3JZ97HAuuJEM rmy52quPeXr2uKJMwoYl4cDc5YatXwn8ZGCSdQ4w7tHzthbdkgojFVeP012DAbk7 MfeB874uZ2M+e1htFLhRVHhOdxfphXJXjnd9dAQx3bHpXEWcajL2/UVjtFuLMLBK VsPpKg9AOEF3vv3VeDeXC+yv3tqW71raU8MWJi1ADVEd1f4mU9LK6UxUghTkeCjS reb6g8OmGl3NyYNpp2be8TFb4mjBI0xJDsyX6XS0xoC4vV/xYkd/P7SDl0msgCM3 VA51MAo6yAWG4ioMhNiSwh5rtWcbXHh20c/zwF2v -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:09 2025 by rpki-client on console.sobornost.net