$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141350.roa File: AS141350.roa (raw, json) Hash identifier: FobLMQ2CQXkiMUHMMeEd65I9dBncoCfK1u3zH73rZv4= Subject key identifier: 68:F9:A0:B4:AD:E1:E1:31:2D:26:3E:EF:05:33:EB:66:99:F8:3A:A8 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3599330A674F8372E879CC16C9C79AB3E6D1FB3C Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141350.roa Signing time: Tue 04 Mar 2025 01:18:03 +0000 ROA not before: Tue 04 Mar 2025 01:13:03 +0000 ROA not after: Tue 03 Mar 2026 01:18:03 +0000 asID: 141350 IP address blocks: 161.248.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:99:33:0a:67:4f:83:72:e8:79:cc:16:c9:c7:9a:b3:e6:d1:fb:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 4 01:13:03 2025 GMT Not After : Mar 3 01:18:03 2026 GMT Subject: CN=68F9A0B4ADE1E1312D263EEF0533EB6699F83AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:17:77:b4:5a:86:83:24:4a:52:e1:f0:d6:c0: af:12:5f:d5:ff:47:7f:77:33:9e:7f:a3:8c:b7:44: 7e:6f:4f:dd:92:60:d3:76:3e:f7:36:8a:79:c1:79: 36:75:71:42:07:cb:d7:1f:75:b6:5b:9a:7c:a9:ab: 82:d3:b3:8f:dd:2a:6c:be:57:7f:a4:8d:43:ae:6c: 39:9e:b9:ba:9e:a4:3c:62:cb:44:b9:e6:4e:59:47: 82:f3:32:22:a0:67:66:09:a5:46:c9:1a:2d:0e:37: 5b:03:20:bc:e3:92:8e:66:21:29:8c:90:9b:7f:70: 03:9d:81:f2:d9:12:96:32:ee:35:d5:3f:4f:17:81: 3d:d5:98:34:b9:33:5c:76:43:d6:fd:be:c0:04:73: 95:8e:23:af:74:24:7b:10:60:ce:41:2a:bc:1e:7a: 75:03:ab:e4:44:5f:be:db:0f:b0:42:a5:10:35:d4: 5a:f6:59:13:62:92:e4:ca:33:0b:d6:dd:82:51:dd: fc:fb:ed:84:1a:cd:6a:6a:6f:b5:0a:a6:54:14:11: 40:38:56:d9:50:1c:78:84:0e:7b:ed:8a:9f:40:8b: fe:ed:b1:ec:a6:9d:47:61:f4:26:26:b8:dd:82:66: a3:31:eb:0c:4c:10:90:16:11:1a:55:4a:ee:5c:03: 3e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F9:A0:B4:AD:E1:E1:31:2D:26:3E:EF:05:33:EB:66:99:F8:3A:A8 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141350.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.207.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:21:3d:11:07:23:ea:a1:b6:c5:c2:e3:64:ea:69:2b:e1:05: c4:bf:ea:e8:da:51:a2:68:08:be:c9:78:dc:c7:8e:87:f2:47: e4:16:2a:26:80:3f:a1:f8:f5:f8:6f:05:6d:81:45:5c:68:71: 9e:bc:79:16:c8:54:60:e2:13:9f:99:1d:77:08:28:1c:01:e6: 72:63:99:82:92:56:2c:c4:5d:b7:2b:a9:e1:3b:c2:74:10:18: ca:0e:fd:72:2b:d3:58:d0:a0:d8:65:77:e3:cd:5d:ea:8c:19: 30:04:56:3b:a8:9d:28:90:16:69:bb:c5:93:ab:ba:26:59:f2: 9b:5c:c4:8e:27:ee:bd:3a:ab:33:f4:35:1a:dd:f4:0b:23:dc: 8c:99:53:18:b1:4f:d2:c7:42:40:fc:77:e1:48:2d:1c:d4:cf: a8:62:09:19:21:fc:a9:b3:2e:63:c6:e2:bd:5b:a9:7f:9c:54: 3d:3c:a5:bc:01:78:e6:9f:fc:25:1d:ad:c9:7a:b6:cf:a5:44: dd:81:32:13:46:95:50:3b:64:ab:0d:f3:28:aa:a7:89:23:dc: d3:99:c1:36:7b:39:19:39:c1:5e:8a:a6:6b:f6:88:bc:27:bc: e9:a5:1b:45:52:17:65:6b:23:4d:9a:8c:b5:b9:38:25:64:97: 27:f2:cc:05 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUNZkzCmdPg3LoecwWyceas+bR+zwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDMwNDAxMTMwM1oX DTI2MDMwMzAxMTgwM1owMzExMC8GA1UEAxMoNjhGOUEwQjRBREUxRTEzMTJEMjYz RUVGMDUzM0VCNjY5OUY4M0FBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwXd7RahoMkSlLh8NbArxJf1f9Hf3cznn+jjLdEfm9P3ZJg03Y+9zaKecF5 NnVxQgfL1x91tluafKmrgtOzj90qbL5Xf6SNQ65sOZ65up6kPGLLRLnmTllHgvMy IqBnZgmlRskaLQ43WwMgvOOSjmYhKYyQm39wA52B8tkSljLuNdU/TxeBPdWYNLkz XHZD1v2+wARzlY4jr3QkexBgzkEqvB56dQOr5ERfvtsPsEKlEDXUWvZZE2KS5Moz C9bdglHd/PvthBrNampvtQqmVBQRQDhW2VAceIQOe+2Kn0CL/u2x7KadR2H0Jia4 3YJmozHrDEwQkBYRGlVK7lwDPjkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRo+aC0 reHhMS0mPu8FM+tmmfg6qDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MTM1MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKH4zzANBgkqhkiG9w0BAQsFAAOCAQEATSE9EQcj6qG2xcLjZOpp K+EFxL/q6NpRomgIvsl43MeOh/JH5BYqJoA/ofj1+G8FbYFFXGhxnrx5FshUYOIT n5kddwgoHAHmcmOZgpJWLMRdtyup4TvCdBAYyg79civTWNCg2GV3481d6owZMARW O6idKJAWabvFk6u6Jlnym1zEjifuvTqrM/Q1Gt30CyPcjJlTGLFP0sdCQPx34Ugt HNTPqGIJGSH8qbMuY8bivVupf5xUPTylvAF45p/8JR2tyXq2z6VE3YEyE0aVUDtk qw3zKKqniSPc05nBNns5GTnBXoqma/aIvCe86aUbRVIXZWsjTZqMtbk4JWSXJ/LM BQ== -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net