$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153113.roa File: AS153113.roa (raw, json) Hash identifier: JhTDTypaHuRsCY2P/y1svE2kHO3CrIvehQhsRVwev1A= Subject key identifier: 25:12:38:F8:37:CB:95:4D:20:74:BF:CE:B4:EC:07:58:B0:93:19:02 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1490E91715BC1286D5B911A86BEB340889A2246A Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153113.roa Signing time: Wed 05 Mar 2025 04:39:12 +0000 ROA not before: Wed 05 Mar 2025 04:34:12 +0000 ROA not after: Wed 04 Mar 2026 04:39:12 +0000 asID: 153113 IP address blocks: 160.22.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:90:e9:17:15:bc:12:86:d5:b9:11:a8:6b:eb:34:08:89:a2:24:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 5 04:34:12 2025 GMT Not After : Mar 4 04:39:12 2026 GMT Subject: CN=251238F837CB954D2074BFCEB4EC0758B0931902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:3a:4e:11:97:f9:90:23:57:33:83:89:e6: 6a:4d:4b:a1:a2:2f:50:40:7d:22:59:79:17:46:da: 7e:1d:80:3c:ec:0a:19:57:61:fa:88:81:59:ff:d4: 3f:91:3a:dc:bb:b7:65:66:c8:78:cb:35:4f:83:c2: 33:db:b2:e5:41:07:07:de:ba:9e:84:a9:fa:d1:23: 11:3b:6f:47:ab:ce:d6:60:85:77:cf:63:3c:4e:35: 94:48:bf:fd:cd:56:78:95:66:a5:a2:9c:eb:e2:27: b2:5c:5c:08:a7:d7:1a:c7:19:42:f3:f4:34:20:49: 2e:9d:5e:59:0a:03:21:3d:73:65:9f:94:99:ba:ca: 43:7c:2e:03:1d:d6:9a:9c:86:78:93:6a:6d:fa:7a: 8f:5b:be:2d:c2:d8:17:e9:68:63:48:57:e1:00:a2: e7:4e:59:a5:8d:b8:a9:d1:e1:0e:5f:a4:80:b4:54: 41:22:a4:84:e7:e9:a1:43:06:62:5a:24:f2:a6:f3: e5:4c:8d:fc:22:b1:07:69:14:b2:d9:69:17:cf:f2: fa:16:c9:af:92:10:45:99:b5:e1:90:2d:c2:b3:13: 77:4f:07:1d:d8:6b:70:ea:5d:ab:d8:65:f4:26:8a: da:9c:18:13:cb:79:37:9d:3e:7d:e8:da:ca:e5:63: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:12:38:F8:37:CB:95:4D:20:74:BF:CE:B4:EC:07:58:B0:93:19:02 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153113.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.9.0/24 Signature Algorithm: sha256WithRSAEncryption 66:f7:79:b4:41:19:08:54:28:ea:d1:27:a9:2e:a1:62:c7:75: 15:92:e1:e0:0f:59:82:cf:38:ca:27:c2:7e:83:4b:49:01:61: 2e:2a:82:21:95:ea:9d:ad:d2:06:76:45:bf:d4:9b:1d:20:b2: cc:2b:ba:f3:17:05:55:36:4b:2a:e8:bc:a8:65:3e:14:95:cd: 55:83:e5:b2:16:19:97:54:dd:e5:13:9b:14:43:3a:ff:a3:11: c1:4f:3f:47:28:d7:ea:fa:3a:87:8c:fd:dd:3d:16:06:56:ed: 56:26:b6:cf:d3:fe:91:bd:b5:1e:ed:a6:39:f6:0d:ab:56:3a: a0:84:a9:5f:19:c2:10:ef:cd:fa:e9:b5:e5:02:17:36:70:fd: 52:bf:c1:7a:47:66:99:00:ad:0b:ef:2e:1d:a3:19:6f:86:8b: 5b:a4:91:48:fa:98:34:6f:8d:64:1b:86:a3:9c:37:74:93:a5: 70:48:03:fa:a2:a2:dc:cb:ce:90:17:5b:7e:c5:2c:55:37:70: a5:71:23:a4:39:db:47:b1:45:9c:f2:12:d5:98:2f:8e:a3:ab: ff:db:d9:d5:31:60:2e:67:d3:eb:f5:77:9f:ef:e1:98:9f:85: 19:1a:b6:31:56:37:f2:82:de:9e:d1:52:54:62:ae:87:ab:30: 5b:25:7f:ef -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUFJDpFxW8EobVuRGoa+s0CImiJGowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDMwNTA0MzQxMloX DTI2MDMwNDA0MzkxMlowMzExMC8GA1UEAxMoMjUxMjM4RjgzN0NCOTU0RDIwNzRC RkNFQjRFQzA3NThCMDkzMTkwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6+Ok4Rl/mQI1czg4nmak1LoaIvUEB9Ill5F0bafh2APOwKGVdh+oiBWf/U P5E63Lu3ZWbIeMs1T4PCM9uy5UEHB966noSp+tEjETtvR6vO1mCFd89jPE41lEi/ /c1WeJVmpaKc6+InslxcCKfXGscZQvP0NCBJLp1eWQoDIT1zZZ+UmbrKQ3wuAx3W mpyGeJNqbfp6j1u+LcLYF+loY0hX4QCi505ZpY24qdHhDl+kgLRUQSKkhOfpoUMG Ylok8qbz5UyN/CKxB2kUstlpF8/y+hbJr5IQRZm14ZAtwrMTd08HHdhrcOpdq9hl 9CaK2pwYE8t5N50+fejayuVjyGECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQlEjj4 N8uVTSB0v8607AdYsJMZAjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzExMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAWCTANBgkqhkiG9w0BAQsFAAOCAQEAZvd5tEEZCFQo6tEnqS6h Ysd1FZLh4A9Zgs84yifCfoNLSQFhLiqCIZXqna3SBnZFv9SbHSCyzCu68xcFVTZL Kui8qGU+FJXNVYPlshYZl1Td5RObFEM6/6MRwU8/RyjX6vo6h4z93T0WBlbtVia2 z9P+kb21Hu2mOfYNq1Y6oISpXxnCEO/N+um15QIXNnD9Ur/BekdmmQCtC+8uHaMZ b4aLW6SRSPqYNG+NZBuGo5w3dJOlcEgD+qKi3MvOkBdbfsUsVTdwpXEjpDnbR7FF nPIS1ZgvjqOr/9vZ1TFgLmfT6/V3n+/hmJ+FGRq2MVY38oLentFSVGKuh6swWyV/ 7w== -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net