$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153108.roa File: AS153108.roa (raw, json) Hash identifier: baDJSeFsej2ZI2uSGDLLyov3fV4Kdmv0U2u/sxheI6c= Subject key identifier: 7A:E0:A4:89:EF:9D:C1:EE:F2:58:09:E2:DD:6A:6A:CF:3B:26:70:A5 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5FBFB87F45EBA2B586CD1B06ECB30F5F33BDDD37 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153108.roa Signing time: Thu 06 Feb 2025 10:44:55 +0000 ROA not before: Thu 06 Feb 2025 10:39:55 +0000 ROA not after: Thu 05 Feb 2026 10:44:55 +0000 asID: 153108 IP address blocks: 160.25.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bf:b8:7f:45:eb:a2:b5:86:cd:1b:06:ec:b3:0f:5f:33:bd:dd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 6 10:39:55 2025 GMT Not After : Feb 5 10:44:55 2026 GMT Subject: CN=7AE0A489EF9DC1EEF25809E2DD6A6ACF3B2670A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:51:a3:25:b7:4c:23:1a:85:fd:a8:3c:3d: df:86:5c:41:b2:32:38:08:c2:dd:4c:24:9c:03:8d: 82:ed:a4:a6:19:7c:43:bc:43:6f:36:0b:20:5d:89: 71:1c:8e:ac:69:4a:cb:ec:00:7a:68:b0:ae:e2:e4: 0a:cb:90:8d:2d:2d:47:78:7a:13:b3:b8:1b:01:4f: b3:93:e7:18:95:a9:a5:3a:82:ae:db:7b:0b:28:da: d5:de:c9:ff:a0:1a:45:5c:68:a7:dd:7b:06:44:41: fd:2f:88:72:3a:3a:48:ba:c1:44:8e:5d:cf:64:8a: 6d:00:3c:40:a8:c7:3c:91:b2:c7:cd:62:e8:02:95: 94:af:8a:3f:00:4a:6f:9d:6a:2e:3a:b0:1d:6f:c2: 80:dd:26:a9:5e:cb:6f:6b:81:a7:72:9a:11:d5:77: 30:7e:d2:50:2b:27:ef:0e:8d:a7:ba:cd:05:c7:6c: 83:93:09:24:45:30:84:39:ed:77:e8:b8:11:86:7b: 7e:46:42:3e:68:1c:b7:35:2e:eb:31:f8:c7:0b:2a: 75:c4:91:6e:3d:de:97:d5:ae:74:f9:25:a3:f6:cb: 94:b5:f7:a4:ad:a2:77:3b:96:c0:dc:16:eb:5f:71: e1:e1:cf:73:21:15:51:28:0e:01:4f:57:6a:45:b9: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E0:A4:89:EF:9D:C1:EE:F2:58:09:E2:DD:6A:6A:CF:3B:26:70:A5 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153108.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.203.0/24 Signature Algorithm: sha256WithRSAEncryption 77:b6:a2:4e:d1:2f:cd:44:11:5d:84:38:3d:49:e9:46:23:11: 3d:7e:e8:0f:6d:98:e4:16:bb:9a:bd:3e:00:93:e0:3c:09:79: dd:a9:ec:f9:a2:cb:4f:4d:ea:d2:96:0e:2e:ff:ab:45:ec:67: 76:0f:4d:75:00:85:fb:a5:30:f7:33:49:14:18:19:b0:fc:26: 69:97:a8:9e:af:e5:23:40:19:4c:19:7d:bd:1f:ac:bb:a3:4f: e2:2b:c9:23:21:2b:54:5b:a4:ee:0e:cb:5d:4a:95:22:70:68: 45:e4:56:b9:86:33:ca:b9:0e:fd:d3:37:d5:7c:d1:5e:33:cf: 5b:11:12:40:21:14:b7:dd:01:7e:f3:1f:74:a5:1e:f9:e6:15: a3:a2:12:53:e5:f7:c7:bc:a2:71:d6:4c:f9:ee:28:34:b8:62: 9f:7a:0c:2f:d1:c8:7d:94:07:67:f3:cf:bf:ba:26:a0:4a:b0: 75:22:66:f2:8a:2d:fe:56:6b:c4:09:3f:66:cb:49:57:e6:9f: 72:b4:45:d7:56:b4:69:42:df:cb:36:b8:f7:29:4c:2e:c5:1f: c4:bc:6f:f9:2e:b9:a1:0d:16:10:e9:07:d3:50:58:9e:ac:ec: c1:6f:e3:52:a9:45:a2:55:74:ce:0f:fe:83:ac:22:8d:e6:4b: f5:ce:4a:f4 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUX7+4f0XrorWGzRsG7LMPXzO93TcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk1NVoX DTI2MDIwNTEwNDQ1NVowMzExMC8GA1UEAxMoN0FFMEE0ODlFRjlEQzFFRUYyNTgw OUUyREQ2QTZBQ0YzQjI2NzBBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUvUaMlt0wjGoX9qDw934ZcQbIyOAjC3UwknAONgu2kphl8Q7xDbzYLIF2J cRyOrGlKy+wAemiwruLkCsuQjS0tR3h6E7O4GwFPs5PnGJWppTqCrtt7Cyja1d7J /6AaRVxop917BkRB/S+Icjo6SLrBRI5dz2SKbQA8QKjHPJGyx81i6AKVlK+KPwBK b51qLjqwHW/CgN0mqV7Lb2uBp3KaEdV3MH7SUCsn7w6Np7rNBcdsg5MJJEUwhDnt d+i4EYZ7fkZCPmgctzUu6zH4xwsqdcSRbj3el9WudPklo/bLlLX3pK2idzuWwNwW 619x4eHPcyEVUSgOAU9XakW5l0sCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR64KSJ 753B7vJYCeLdamrPOyZwpTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzEwOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAZyzANBgkqhkiG9w0BAQsFAAOCAQEAd7aiTtEvzUQRXYQ4PUnp RiMRPX7oD22Y5Ba7mr0+AJPgPAl53ans+aLLT03q0pYOLv+rRexndg9NdQCF+6Uw 9zNJFBgZsPwmaZeonq/lI0AZTBl9vR+su6NP4ivJIyErVFuk7g7LXUqVInBoReRW uYYzyrkO/dM31XzRXjPPWxESQCEUt90BfvMfdKUe+eYVo6ISU+X3x7yicdZM+e4o NLhin3oML9HIfZQHZ/PPv7omoEqwdSJm8oot/lZrxAk/ZstJV+afcrRF11a0aULf yza49ylMLsUfxLxv+S65oQ0WEOkH01BYnqzswW/jUqlFolV0zg/+g6wijeZL9c5K 9A== -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net