$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141898.roa File: AS141898.roa (raw, json) Hash identifier: ftDUyRt2nYAdaXmKkI93jl3eZoFkqmMJ4huMGB+q3+g= Subject key identifier: 78:AD:07:96:86:CE:47:6E:D9:FC:11:EB:E4:46:58:89:9F:35:17:27 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 065BE8F9AD443B2E9476446BE64C14F4601AA68B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141898.roa Signing time: Thu 06 Feb 2025 10:44:48 +0000 ROA not before: Thu 06 Feb 2025 10:39:48 +0000 ROA not after: Thu 05 Feb 2026 10:44:48 +0000 asID: 141898 IP address blocks: 157.10.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5b:e8:f9:ad:44:3b:2e:94:76:44:6b:e6:4c:14:f4:60:1a:a6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 6 10:39:48 2025 GMT Not After : Feb 5 10:44:48 2026 GMT Subject: CN=78AD079686CE476ED9FC11EBE44658899F351727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:32:07:80:ee:1e:bd:dd:5c:34:88:f2:80: ab:7f:4e:5b:de:6f:30:ef:b2:8c:3f:39:b1:09:14: 1a:01:83:5a:3b:01:bd:1c:34:7d:7c:51:bd:54:a6: b2:ba:95:a9:f2:47:83:63:92:5a:3c:c1:e6:dc:6f: 3e:ee:7c:43:6b:1d:1a:eb:cf:07:a7:b0:bb:61:d3: 2d:67:e8:9c:a7:4e:70:33:7d:06:97:5a:f5:25:4f: e6:a2:67:27:60:4a:d7:64:a5:43:2e:62:35:11:ee: d7:5d:6f:86:15:34:ad:a0:d3:e7:45:00:41:80:9f: 06:f6:21:74:25:d0:b1:b2:2d:ee:94:7e:ee:45:cc: f8:ba:12:57:bc:bd:2b:63:90:cd:53:30:56:36:45: 60:cb:1f:6c:02:19:fa:3b:d2:7a:6b:53:a1:7b:67: 9c:0e:34:d6:ff:47:2c:b7:ea:4c:60:dc:e6:34:d3: c7:6b:bd:36:08:88:75:29:4f:64:27:00:41:ba:4f: 8a:b8:86:64:2d:c0:bf:24:3c:02:56:21:cc:a7:2e: 11:78:11:58:8d:2d:13:b5:ff:a9:01:ac:3f:d8:0d: 57:6d:43:47:b4:aa:90:9f:89:b2:80:04:61:98:bc: d3:0f:59:ca:52:4b:f6:da:52:4f:91:d2:63:4f:2c: ee:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AD:07:96:86:CE:47:6E:D9:FC:11:EB:E4:46:58:89:9F:35:17:27 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141898.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.222.0/23 Signature Algorithm: sha256WithRSAEncryption 91:fc:ab:43:a7:8b:d5:12:c6:95:44:fb:2b:71:f0:3d:33:74: 55:58:4e:7d:43:5f:ef:59:05:66:b9:fe:e6:6b:a4:58:7b:25: e4:15:46:cc:38:64:f9:05:9a:50:6d:2b:97:dd:8d:e6:8f:ec: 08:7d:ab:10:90:b2:39:35:6f:6a:50:96:ec:20:7e:8c:17:8c: 17:c2:39:47:62:54:7b:c4:1d:bb:de:b4:49:7b:94:16:97:3f: 41:b3:a3:60:ae:8a:0d:73:62:74:08:3a:43:14:43:65:e2:1f: 5f:3c:d9:0e:72:c8:a3:db:59:d3:5a:25:f7:fd:f5:58:54:96: d0:14:9d:4d:08:d6:d4:a1:03:14:ee:a1:ba:24:b4:35:8f:d9: 5c:ee:9f:7e:ce:fc:98:94:81:6e:68:28:a3:dd:ee:6f:db:2f: 19:5f:b8:a7:e1:2f:1e:8b:78:7a:18:2e:48:77:a2:72:c5:07: ee:c3:c1:4a:85:e5:51:b8:40:c9:03:0c:b2:27:8c:c3:6d:5d: 49:e3:0b:09:c2:51:ba:ea:97:70:fe:8d:7b:b5:10:d1:9e:51: a2:13:90:f0:19:60:b8:50:9d:e5:70:0e:81:8f:58:be:71:41: f7:af:5a:df:bf:45:60:34:c0:d4:0d:f2:65:ae:c8:82:32:b9: 91:b9:98:72 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUBlvo+a1EOy6UdkRr5kwU9GAaposwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk0OFoX DTI2MDIwNTEwNDQ0OFowMzExMC8GA1UEAxMoNzhBRDA3OTY4NkNFNDc2RUQ5RkMx MUVCRTQ0NjU4ODk5RjM1MTcyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTcMgeA7h693Vw0iPKAq39OW95vMO+yjD85sQkUGgGDWjsBvRw0fXxRvVSm srqVqfJHg2OSWjzB5txvPu58Q2sdGuvPB6ewu2HTLWfonKdOcDN9Bpda9SVP5qJn J2BK12SlQy5iNRHu111vhhU0raDT50UAQYCfBvYhdCXQsbIt7pR+7kXM+LoSV7y9 K2OQzVMwVjZFYMsfbAIZ+jvSemtToXtnnA401v9HLLfqTGDc5jTTx2u9NgiIdSlP ZCcAQbpPiriGZC3AvyQ8AlYhzKcuEXgRWI0tE7X/qQGsP9gNV21DR7SqkJ+JsoAE YZi80w9ZylJL9tpST5HSY08s7p0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR4rQeW hs5Hbtn8EevkRliJnzUXJzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MTg5OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0K3jANBgkqhkiG9w0BAQsFAAOCAQEAkfyrQ6eL1RLGlUT7K3Hw PTN0VVhOfUNf71kFZrn+5mukWHsl5BVGzDhk+QWaUG0rl92N5o/sCH2rEJCyOTVv alCW7CB+jBeMF8I5R2JUe8Qdu960SXuUFpc/QbOjYK6KDXNidAg6QxRDZeIfXzzZ DnLIo9tZ01ol9/31WFSW0BSdTQjW1KEDFO6huiS0NY/ZXO6ffs78mJSBbmgoo93u b9svGV+4p+EvHot4ehguSHeicsUH7sPBSoXlUbhAyQMMsieMw21dSeMLCcJRuuqX cP6Ne7UQ0Z5RohOQ8BlguFCd5XAOgY9YvnFB969a379FYDTA1A3yZa7IgjK5kbmY cg== -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net