$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136052.roa File: AS136052.roa (raw, json) Hash identifier: tpq3tvNQ/Er0EK8XoazrqTeKbfbZCR6Sb51V/j82X8g= Subject key identifier: CF:D9:8A:B2:27:2B:30:66:05:6E:EA:B0:71:6D:38:15:86:C3:AD:20 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 07AB043FC31F07124B9B0867EDB21D61255D7B27 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136052.roa Signing time: Thu 06 Feb 2025 10:44:47 +0000 ROA not before: Thu 06 Feb 2025 10:39:47 +0000 ROA not after: Thu 05 Feb 2026 10:44:47 +0000 asID: 136052 IP address blocks: 157.10.160.0/23 maxlen: 24 157.20.96.0/23 maxlen: 24 157.20.154.0/23 maxlen: 24 160.19.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ab:04:3f:c3:1f:07:12:4b:9b:08:67:ed:b2:1d:61:25:5d:7b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 6 10:39:47 2025 GMT Not After : Feb 5 10:44:47 2026 GMT Subject: CN=CFD98AB2272B3066056EEAB0716D381586C3AD20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f2:eb:76:0c:65:d7:db:73:0f:a9:0f:d0:4d: c4:f0:0f:84:e0:2d:33:d6:b1:46:7c:cc:ba:87:ed: 54:b6:42:fd:39:63:7e:1d:40:c7:cf:37:88:48:6c: 27:ac:dd:78:3e:81:75:56:b5:d3:cb:97:8a:0f:21: 07:a6:d7:a1:47:07:e6:05:53:64:55:ab:95:33:38: 95:f1:75:46:0f:69:da:e5:32:8a:00:bb:74:02:61: f6:36:fb:7a:08:3e:27:e2:2b:9a:d9:a2:34:e7:74: 98:cf:c3:fd:f3:c8:ea:d7:50:03:c5:b4:40:c8:fe: b5:ca:20:60:aa:ca:a9:c3:ee:2b:03:76:15:50:f3: c7:02:ea:d9:35:a3:bd:93:d8:3e:06:05:57:f7:73: 26:18:3d:1d:17:e9:10:04:76:44:0f:7e:fc:b4:d2: 34:8d:18:8c:32:a4:05:d4:53:99:8e:07:1a:de:11: d5:15:72:af:b9:dc:58:5c:ce:9a:a7:4a:9e:6c:f9: 59:f7:cc:56:a8:02:33:7d:86:e5:64:30:78:d9:75: f3:41:37:0f:61:69:7e:6d:12:2d:e8:e9:54:19:ab: 99:24:79:9c:4d:ff:fa:f2:3f:68:34:21:e1:f4:c2: b1:92:7e:e2:c4:85:ec:52:a8:61:03:b9:d8:21:ef: 40:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D9:8A:B2:27:2B:30:66:05:6E:EA:B0:71:6D:38:15:86:C3:AD:20 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136052.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.160.0/23 157.20.96.0/23 157.20.154.0/23 160.19.186.0/23 Signature Algorithm: sha256WithRSAEncryption 89:50:34:5c:7b:15:b1:59:6e:5a:b4:60:fd:8e:7e:ed:80:0b: c3:9e:59:54:de:93:d5:c9:1a:d3:f7:a5:28:32:8a:5b:6f:4c: ae:68:7f:28:14:4e:89:2a:0e:d6:be:e1:ca:14:25:37:c5:17: 6f:ce:a9:0b:8f:98:c1:67:c2:b3:48:12:69:0c:90:5a:53:15: 4a:9a:9f:8a:a5:ba:b8:bc:a7:f8:77:3e:ae:13:61:33:7b:ca: 26:57:f5:c5:88:e5:52:ae:33:16:ca:e9:2a:d8:1f:d5:b4:a6: bf:bf:e2:f3:3b:2e:d8:27:bf:9b:e9:77:23:dd:34:96:1d:0e: a3:6c:ce:64:e9:10:c5:a3:bf:38:26:1a:c6:90:2b:cc:4e:73: c9:30:ca:ac:5a:de:fc:d7:b7:de:7f:f5:f6:d3:fc:91:39:e5: 6c:d2:66:e0:0c:f4:8c:2e:a0:08:ab:a4:9d:a2:84:a3:43:05: a1:dc:05:dc:52:ce:bb:c4:e4:f3:7a:76:fb:e5:f3:1a:62:f2: 8c:4b:60:73:41:88:d9:c4:24:21:58:53:c1:9c:a0:4b:8c:3e: f6:80:5d:de:a4:94:9e:a1:87:71:4d:cc:20:9f:d8:cf:c8:fc: 36:bd:bc:77:7e:8c:9c:80:16:46:41:ba:f0:74:b1:a3:b2:44: a6:2d:77:3d -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUB6sEP8MfBxJLmwhn7bIdYSVdeycwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk0N1oX DTI2MDIwNTEwNDQ0N1owMzExMC8GA1UEAxMoQ0ZEOThBQjIyNzJCMzA2NjA1NkVF QUIwNzE2RDM4MTU4NkMzQUQyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOby63YMZdfbcw+pD9BNxPAPhOAtM9axRnzMuoftVLZC/Tljfh1Ax883iEhs J6zdeD6BdVa108uXig8hB6bXoUcH5gVTZFWrlTM4lfF1Rg9p2uUyigC7dAJh9jb7 egg+J+IrmtmiNOd0mM/D/fPI6tdQA8W0QMj+tcogYKrKqcPuKwN2FVDzxwLq2TWj vZPYPgYFV/dzJhg9HRfpEAR2RA9+/LTSNI0YjDKkBdRTmY4HGt4R1RVyr7ncWFzO mqdKnmz5WffMVqgCM32G5WQweNl180E3D2Fpfm0SLejpVBmrmSR5nE3/+vI/aDQh 4fTCsZJ+4sSF7FKoYQO52CHvQN0CAwEAAaOCAeIwggHeMB0GA1UdDgQWBBTP2Yqy JyswZgVu6rBxbTgVhsOtIDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzNjA1Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAw HgQCAAEwGAMEAZ0KoAMEAZ0UYAMEAZ0UmgMEAaATujANBgkqhkiG9w0BAQsFAAOC AQEAiVA0XHsVsVluWrRg/Y5+7YALw55ZVN6T1cka0/elKDKKW29Mrmh/KBROiSoO 1r7hyhQlN8UXb86pC4+YwWfCs0gSaQyQWlMVSpqfiqW6uLyn+Hc+rhNhM3vKJlf1 xYjlUq4zFsrpKtgf1bSmv7/i8zsu2Ce/m+l3I900lh0Oo2zOZOkQxaO/OCYaxpAr zE5zyTDKrFre/Ne33n/19tP8kTnlbNJm4Az0jC6gCKuknaKEo0MFodwF3FLOu8Tk 83p2++XzGmLyjEtgc0GI2cQkIVhTwZygS4w+9oBd3qSUnqGHcU3MIJ/Yz8j8Nr28 d36MnIAWRkG68HSxo7JEpi13PQ== -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net