$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152344.roa File: AS152344.roa (raw, json) Hash identifier: MayAoxWnRN/Fep2twr6HCDrZyAvlhhZYcFu3QHIJSmc= Subject key identifier: D0:5F:6D:90:9D:9E:01:CE:60:3C:96:41:CE:90:02:D8:7C:8C:CC:56 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4CD6435BF2B73C6FF408C1AF3C3CB1773C53E2C6 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152344.roa Signing time: Thu 06 Feb 2025 10:44:52 +0000 ROA not before: Thu 06 Feb 2025 10:39:52 +0000 ROA not after: Thu 05 Feb 2026 10:44:52 +0000 asID: 152344 IP address blocks: 157.10.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d6:43:5b:f2:b7:3c:6f:f4:08:c1:af:3c:3c:b1:77:3c:53:e2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 6 10:39:52 2025 GMT Not After : Feb 5 10:44:52 2026 GMT Subject: CN=D05F6D909D9E01CE603C9641CE9002D87C8CCC56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:ae:10:a7:68:8c:c8:17:8c:0c:1f:af:29: af:4a:a5:67:dc:e0:8f:e0:39:24:7a:7a:ec:c2:4f: 02:64:e9:8e:89:eb:1a:cb:47:ce:bf:47:c3:9e:26: b2:61:ef:88:ad:73:4d:ff:4d:c3:ad:82:ab:d5:bb: a1:5d:15:c4:4a:49:38:02:73:23:7b:98:d4:6e:31: 1c:a1:78:37:d1:51:05:4e:fa:bc:42:33:49:f9:ae: 0d:32:08:99:a2:9e:dc:cb:0d:70:7e:2b:2c:51:0d: 3a:50:00:6c:ac:82:a2:50:90:9e:4a:45:11:bd:8c: 06:79:26:b6:e2:f7:96:21:09:80:ed:0a:e5:64:0e: f1:ab:cc:69:66:fd:0a:c1:11:b3:08:6f:c1:4e:45: c9:37:e2:49:4d:8c:c2:48:f4:c2:c7:37:77:08:a6: ab:25:09:61:9c:5e:a3:2d:69:30:9f:9f:89:6f:dd: 38:cd:7d:85:a5:77:5d:6d:94:21:88:22:3f:e2:0b: d8:8d:90:39:d5:97:71:25:58:c7:62:a6:99:34:b8: 6f:0f:c8:b6:2d:10:bc:90:2d:43:bc:54:44:9e:e3: 57:99:9f:4a:22:63:c0:fa:a3:a0:56:fe:17:c4:a7: 62:cb:04:ec:49:35:19:22:e7:91:e8:db:86:21:42: fa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5F:6D:90:9D:9E:01:CE:60:3C:96:41:CE:90:02:D8:7C:8C:CC:56 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152344.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.182.0/23 Signature Algorithm: sha256WithRSAEncryption 92:d3:8e:e9:3d:1a:e1:b6:e1:95:fb:a7:34:d9:a5:e7:40:68: a9:e9:b8:e0:0b:cb:01:eb:31:e0:91:3c:05:9c:05:35:34:2b: 69:0e:c1:98:7b:3f:fe:2f:a1:3f:10:af:19:70:d8:ee:3c:5c: 09:a7:ba:a7:62:55:ba:65:d9:1d:4b:87:34:87:55:49:59:7e: 75:b8:9d:f6:9d:65:81:a2:9c:fd:e4:f4:d8:34:21:b0:45:e3: 67:3b:ae:37:94:5d:8a:93:a8:6a:a3:ec:24:10:5f:0e:1f:d7: f1:ab:7b:e2:ca:0f:77:a2:5c:5d:ef:e5:02:16:b9:58:87:45: 04:9e:a4:93:c3:49:00:cf:62:1b:d9:42:c0:3a:ab:51:6e:3f: c9:42:60:6c:a3:96:48:ea:37:fc:9f:81:1a:71:b9:a5:36:e5: 1e:94:84:7a:70:9a:46:20:04:d6:9d:34:5b:e7:34:b0:f8:09: ee:bd:ff:bc:01:59:94:aa:60:87:89:1c:d1:9a:1d:eb:54:1e: fb:2b:b3:d7:27:12:a1:43:2a:0f:c2:21:01:da:e1:d9:a4:98: c8:c7:cc:9a:49:f2:a5:bf:5c:13:bb:5f:6c:39:96:04:92:aa: da:33:60:42:28:3c:4f:7c:86:d9:0b:24:34:c4:fa:38:7a:73: 7c:bf:8d:bc -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUTNZDW/K3PG/0CMGvPDyxdzxT4sYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk1MloX DTI2MDIwNTEwNDQ1MlowMzExMC8GA1UEAxMoRDA1RjZEOTA5RDlFMDFDRTYwM0M5 NjQxQ0U5MDAyRDg3QzhDQ0M1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3nrhCnaIzIF4wMH68pr0qlZ9zgj+A5JHp67MJPAmTpjonrGstHzr9Hw54m smHviK1zTf9Nw62Cq9W7oV0VxEpJOAJzI3uY1G4xHKF4N9FRBU76vEIzSfmuDTII maKe3MsNcH4rLFENOlAAbKyColCQnkpFEb2MBnkmtuL3liEJgO0K5WQO8avMaWb9 CsERswhvwU5FyTfiSU2Mwkj0wsc3dwimqyUJYZxeoy1pMJ+fiW/dOM19haV3XW2U IYgiP+IL2I2QOdWXcSVYx2KmmTS4bw/Iti0QvJAtQ7xURJ7jV5mfSiJjwPqjoFb+ F8SnYssE7Ek1GSLnkejbhiFC+pECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTQX22Q nZ4BzmA8lkHOkALYfIzMVjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MjM0NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0KtjANBgkqhkiG9w0BAQsFAAOCAQEAktOO6T0a4bbhlfunNNml 50Boqem44AvLAesx4JE8BZwFNTQraQ7BmHs//i+hPxCvGXDY7jxcCae6p2JVumXZ HUuHNIdVSVl+dbid9p1lgaKc/eT02DQhsEXjZzuuN5RdipOoaqPsJBBfDh/X8at7 4soPd6JcXe/lAha5WIdFBJ6kk8NJAM9iG9lCwDqrUW4/yUJgbKOWSOo3/J+BGnG5 pTblHpSEenCaRiAE1p00W+c0sPgJ7r3/vAFZlKpgh4kc0Zod61Qe+yuz1ycSoUMq D8IhAdrh2aSYyMfMmknypb9cE7tfbDmWBJKq2jNgQig8T3yG2QskNMT6OHpzfL+N vA== -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net