$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS133637.roa File: AS133637.roa (raw, json) Hash identifier: RBr3Pfqwe8ocl0+1Rto1i35bFS0AUVR7zpHN3MjstyM= Subject key identifier: 1A:67:51:D8:06:65:E8:21:8F:05:05:0D:6F:5E:D8:EF:DE:CD:A5:D1 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5997D73FBE44719E6FA234C885381FE8BEEE2C77 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS133637.roa Signing time: Tue 18 Feb 2025 03:00:19 +0000 ROA not before: Tue 18 Feb 2025 02:55:19 +0000 ROA not after: Tue 17 Feb 2026 03:00:19 +0000 asID: 133637 IP address blocks: 160.250.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:97:d7:3f:be:44:71:9e:6f:a2:34:c8:85:38:1f:e8:be:ee:2c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 18 02:55:19 2025 GMT Not After : Feb 17 03:00:19 2026 GMT Subject: CN=1A6751D80665E8218F05050D6F5ED8EFDECDA5D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f7:47:93:dc:94:08:b4:95:65:95:21:2c:5a: f8:17:da:dd:75:2e:5a:2e:59:a8:e4:04:9a:4c:59: 71:3e:f4:50:02:b9:ba:76:40:78:00:00:9a:83:9d: 84:d6:5a:81:0c:6c:73:0f:5d:83:cd:ca:c1:5c:ee: c4:08:b6:e7:a5:90:f5:5a:19:fa:6d:2c:19:08:c4: 73:42:db:27:8d:60:26:e2:de:9d:fe:8a:79:98:da: 6b:d4:b5:1b:8b:f1:ba:3a:37:d4:6a:7a:e9:7d:58: 4e:66:d2:a5:43:9b:33:04:0f:16:7d:6d:c5:21:78: 67:71:ab:50:78:60:5e:13:9e:a5:53:45:2b:33:ba: 81:57:01:2b:f7:ec:17:23:3e:17:e1:4a:bd:df:94: 3f:54:95:2b:f2:ed:32:38:07:63:00:dd:54:20:71: 0c:34:ee:8c:8a:9f:3e:37:da:e0:05:20:cf:22:5e: ef:ce:f9:a1:fe:0d:7b:49:a7:77:ea:9a:d2:b2:ff: ef:b2:4f:96:61:8d:24:1f:45:a4:3e:07:72:a8:a3: 68:87:47:45:dd:8a:b0:79:88:b2:35:9a:cb:9e:fa: c2:e9:ef:b6:70:06:50:04:c1:80:d8:2b:19:eb:fa: 48:96:33:ed:fb:4d:ef:ad:36:5f:c0:54:42:1c:a7: 20:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:67:51:D8:06:65:E8:21:8F:05:05:0D:6F:5E:D8:EF:DE:CD:A5:D1 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS133637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.250.238.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:01:8e:93:dc:e8:fb:fd:be:cf:2e:98:4e:28:36:72:27:bf: 97:6e:ed:7b:2e:5a:ad:c7:8f:06:03:2f:15:37:ee:90:fb:9a: 47:91:7d:62:5d:8b:29:e2:42:4b:4a:d4:6d:98:07:cf:ad:83: 3e:12:77:ab:ac:fd:d1:c7:c4:a2:0c:d3:17:60:00:c8:16:8d: 46:a2:39:64:ef:30:22:a3:d5:3c:94:05:ab:8c:af:d8:d5:ac: 0a:48:2e:6d:a8:59:37:da:86:bf:28:46:9d:14:56:51:78:fd: 1d:ef:01:50:63:09:70:8e:f3:5b:ae:31:c9:a4:e6:f9:b7:3d: c4:74:05:ce:d4:ac:5f:04:88:f1:62:c4:d2:18:38:58:8b:38: b3:47:24:c1:2d:1e:d4:b1:96:3d:13:7d:ae:57:a0:2e:e8:92: 6b:2b:5c:cc:30:51:95:e1:af:a0:a8:be:53:1a:94:35:90:49: 30:bc:97:cb:b7:d3:02:59:f4:8b:9a:6b:61:3d:81:32:83:29: 13:ce:0d:8b:69:fc:e0:7d:fc:b9:1f:b3:c4:3c:e2:56:3f:bb: 3c:73:90:b3:a7:4c:b5:3a:58:cb:0d:2c:aa:62:70:68:82:16: 88:67:13:5f:a7:0c:4c:a1:66:b2:63:f4:f0:b1:80:f0:ab:e8: 4d:16:94:9f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUWZfXP75EcZ5vojTIhTgf6L7uLHcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIxODAyNTUxOVoX DTI2MDIxNzAzMDAxOVowMzExMC8GA1UEAxMoMUE2NzUxRDgwNjY1RTgyMThGMDUw NTBENkY1RUQ4RUZERUNEQTVEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPD3R5PclAi0lWWVISxa+Bfa3XUuWi5ZqOQEmkxZcT70UAK5unZAeAAAmoOd hNZagQxscw9dg83KwVzuxAi256WQ9VoZ+m0sGQjEc0LbJ41gJuLenf6KeZjaa9S1 G4vxujo31Gp66X1YTmbSpUObMwQPFn1txSF4Z3GrUHhgXhOepVNFKzO6gVcBK/fs FyM+F+FKvd+UP1SVK/LtMjgHYwDdVCBxDDTujIqfPjfa4AUgzyJe7875of4Ne0mn d+qa0rL/77JPlmGNJB9FpD4HcqijaIdHRd2KsHmIsjWay576wunvtnAGUATBgNgr Gev6SJYz7ftN7602X8BUQhynIMkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQaZ1HY BmXoIY8FBQ1vXtjv3s2l0TAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzMzYzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKD67jANBgkqhkiG9w0BAQsFAAOCAQEACwGOk9zo+/2+zy6YTig2 cie/l27tey5arcePBgMvFTfukPuaR5F9Yl2LKeJCS0rUbZgHz62DPhJ3q6z90cfE ogzTF2AAyBaNRqI5ZO8wIqPVPJQFq4yv2NWsCkgubahZN9qGvyhGnRRWUXj9He8B UGMJcI7zW64xyaTm+bc9xHQFztSsXwSI8WLE0hg4WIs4s0ckwS0e1LGWPRN9rleg LuiSaytczDBRleGvoKi+UxqUNZBJMLyXy7fTAln0i5prYT2BMoMpE84Ni2n84H38 uR+zxDziVj+7PHOQs6dMtTpYyw0sqmJwaIIWiGcTX6cMTKFmsmP08LGA8KvoTRaU nw== -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net