$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152782.roa File: AS152782.roa (raw, json) Hash identifier: ghAF47mcN7RLtErKpZSrYlqQM/RB0R5Ap+RsUvXmapQ= Subject key identifier: 92:C2:24:3B:F1:A2:E0:CA:33:66:F2:C9:74:4D:8B:6C:4E:57:1B:06 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 57B4842BC8A7FBB20218C0248F4AA800C4E16C94 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152782.roa Signing time: Thu 06 Feb 2025 10:44:56 +0000 ROA not before: Thu 06 Feb 2025 10:39:56 +0000 ROA not after: Thu 05 Feb 2026 10:44:56 +0000 asID: 152782 IP address blocks: 160.20.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b4:84:2b:c8:a7:fb:b2:02:18:c0:24:8f:4a:a8:00:c4:e1:6c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 6 10:39:56 2025 GMT Not After : Feb 5 10:44:56 2026 GMT Subject: CN=92C2243BF1A2E0CA3366F2C9744D8B6C4E571B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:7f:e9:ea:4d:b1:db:48:32:12:c2:7e:92: a1:07:c2:a7:f8:d7:21:a8:05:09:8a:7d:5c:44:3d: ae:2a:01:d1:5e:fb:bc:45:f0:dd:1a:39:51:f1:77: 48:cf:c2:77:1c:04:a8:bf:95:96:0f:53:be:4a:f4: be:c4:b1:2d:eb:60:d6:c9:2b:d4:ab:07:d7:28:9b: f6:04:7c:20:a4:c8:7a:55:61:66:be:b4:2f:0b:bc: 56:af:89:ae:20:19:99:7f:f7:65:d3:36:9e:d6:eb: d8:d0:ac:de:d6:89:56:cd:4b:38:0a:13:cd:47:da: ea:74:e2:00:09:0e:22:42:e4:b9:a9:d5:f3:ac:ae: c9:36:e6:1d:f5:0d:4f:21:09:4e:50:5e:f1:89:8b: 51:29:92:89:e0:5e:a1:2f:70:9a:bf:52:01:5d:67: 96:96:7f:64:3c:0b:98:52:d1:93:29:f3:91:6a:50: 3a:51:fd:a1:e7:3d:72:db:1b:ca:97:f9:5a:ef:09: 8e:ae:c8:16:7f:54:8f:10:16:8a:32:ca:a1:59:46: be:49:70:f6:f6:e5:b2:c7:7d:36:80:e3:59:7f:7e: 14:76:7b:31:dd:32:f6:e0:53:52:43:96:cf:40:27: 77:ea:c8:6c:4f:b7:33:fc:a2:57:26:56:84:4b:58: e5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C2:24:3B:F1:A2:E0:CA:33:66:F2:C9:74:4D:8B:6C:4E:57:1B:06 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152782.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.138.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:aa:33:59:93:d1:3d:06:65:3e:ae:48:83:49:f6:83:55:3a: 0d:b9:8d:33:ab:f2:1f:69:c0:72:61:00:2f:da:99:0a:e4:85: cd:fe:53:2d:06:f0:18:c2:86:45:a3:d7:88:2d:2b:20:c2:f2: 0d:93:ea:59:1d:9d:12:db:8c:2f:fa:84:0d:65:1d:39:b0:a7: 8c:90:92:20:f3:0a:e3:62:cd:7c:31:98:8c:1d:6a:a4:4d:fb: 11:22:a2:b6:96:39:61:73:07:48:c6:66:28:7c:79:78:80:a7: 62:d8:ec:b5:c4:59:b9:4b:50:33:95:77:f7:de:28:e9:7d:67: 90:96:f0:47:5a:4d:02:28:b3:a2:2b:a1:e6:92:ea:34:fc:c5: c0:97:11:9c:27:fd:95:22:46:88:ed:cf:1f:7f:79:61:e1:d5: 78:9e:d9:f7:64:b6:a9:95:ad:aa:9e:65:e6:d8:0a:4c:d6:29: c5:c5:cc:dc:50:bc:fa:74:39:1d:02:b7:52:b8:f2:04:9f:c4: 31:6e:b5:49:09:ec:d5:54:a4:90:a8:68:f0:55:7c:e4:f3:31: ea:71:6d:53:85:77:73:d3:68:d8:a2:97:f2:0f:5d:61:46:1f: c1:9d:39:be:e5:73:2a:99:ed:08:fe:66:9c:8b:6f:7d:9d:0f: 04:c1:67:b3 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUV7SEK8in+7ICGMAkj0qoAMThbJQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk1NloX DTI2MDIwNTEwNDQ1NlowMzExMC8GA1UEAxMoOTJDMjI0M0JGMUEyRTBDQTMzNjZG MkM5NzQ0RDhCNkM0RTU3MUIwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5Zf+nqTbHbSDISwn6SoQfCp/jXIagFCYp9XEQ9rioB0V77vEXw3Ro5UfF3 SM/CdxwEqL+Vlg9Tvkr0vsSxLetg1skr1KsH1yib9gR8IKTIelVhZr60Lwu8Vq+J riAZmX/3ZdM2ntbr2NCs3taJVs1LOAoTzUfa6nTiAAkOIkLkuanV86yuyTbmHfUN TyEJTlBe8YmLUSmSieBeoS9wmr9SAV1nlpZ/ZDwLmFLRkynzkWpQOlH9oec9ctsb ypf5Wu8Jjq7IFn9UjxAWijLKoVlGvklw9vblssd9NoDjWX9+FHZ7Md0y9uBTUkOW z0And+rIbE+3M/yiVyZWhEtY5VMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSSwiQ7 8aLgyjNm8sl0TYtsTlcbBjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1Mjc4Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaAUijANBgkqhkiG9w0BAQsFAAOCAQEAfqozWZPRPQZlPq5Ig0n2 g1U6DbmNM6vyH2nAcmEAL9qZCuSFzf5TLQbwGMKGRaPXiC0rIMLyDZPqWR2dEtuM L/qEDWUdObCnjJCSIPMK42LNfDGYjB1qpE37ESKitpY5YXMHSMZmKHx5eICnYtjs tcRZuUtQM5V3994o6X1nkJbwR1pNAiizoiuh5pLqNPzFwJcRnCf9lSJGiO3PH395 YeHVeJ7Z92S2qZWtqp5l5tgKTNYpxcXM3FC8+nQ5HQK3UrjyBJ/EMW61SQns1VSk kKho8FV85PMx6nFtU4V3c9No2KKX8g9dYUYfwZ05vuVzKpntCP5mnItvfZ0PBMFn sw== -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net