$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131727.roa File: AS131727.roa (raw, json) Hash identifier: BXrFG/WHYBmYQAA0E3qEIRMLdTqB9PvtRPYTjA1xvfE= Subject key identifier: AA:84:98:E5:96:F3:11:F0:0F:CB:63:22:0A:98:32:FE:41:F3:4F:A9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0EC02E37FB9F1DC9BC440AED3A875904A600BD52 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131727.roa Signing time: Tue 10 Dec 2024 04:00:00 +0000 ROA not before: Tue 10 Dec 2024 03:55:00 +0000 ROA not after: Tue 09 Dec 2025 04:00:00 +0000 asID: 131727 IP address blocks: 103.134.66.0/23 maxlen: 24 2001:df7:bd00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c0:2e:37:fb:9f:1d:c9:bc:44:0a:ed:3a:87:59:04:a6:00:bd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 03:55:00 2024 GMT Not After : Dec 9 04:00:00 2025 GMT Subject: CN=AA8498E596F311F00FCB63220A9832FE41F34FA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:60:1a:e2:cc:17:03:aa:0d:3d:8a:40:11:7a: b5:ed:54:75:75:57:c5:dc:5b:e2:79:42:6c:5a:5b: 62:39:64:98:24:21:67:77:a3:99:d1:8a:9e:56:91: d0:8d:65:d0:11:c8:fc:a2:ec:0e:20:43:79:5b:dc: c0:fb:2a:1c:1e:1a:28:d9:16:63:e5:7d:37:e6:57: 10:93:50:a3:0f:d9:b0:16:74:36:1d:69:e4:87:08: a1:4e:75:db:0b:bf:1f:08:9a:2e:d1:79:fb:d2:0a: 7e:84:3c:3f:02:5b:ba:22:d9:e1:1f:d4:13:f9:02: c3:4b:89:f4:4c:17:4c:f2:1f:d2:68:9e:80:6a:f9: 15:47:a5:26:2e:6c:64:ff:8a:39:2a:de:da:13:4f: 18:dd:6e:1d:e5:8b:07:03:83:96:91:43:3d:f1:fc: fb:c5:ea:e3:50:64:98:22:88:aa:c1:04:0a:f0:8d: 2d:84:0d:d5:5b:c4:86:93:5a:74:44:d7:9d:56:58: 9a:f2:bb:94:03:8f:5d:5a:2e:cb:c5:b7:53:41:71: ea:ef:4b:42:0c:58:87:05:06:ec:29:0c:72:b7:01: b8:9b:88:59:da:2f:a3:44:3b:40:d4:80:7f:ec:15: ca:53:dc:a5:88:82:87:6a:7a:05:62:f7:22:b8:08: 50:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:84:98:E5:96:F3:11:F0:0F:CB:63:22:0A:98:32:FE:41:F3:4F:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131727.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.66.0/23 IPv6: 2001:df7:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 08:bb:d4:c2:c4:b4:a1:77:0e:6b:18:5d:a8:56:03:6a:10:03: 44:6f:57:85:38:6a:24:d6:c7:40:7d:88:7f:60:89:1b:29:d3: 97:f9:52:38:15:42:98:03:27:ce:f2:d0:15:2c:32:96:b6:54: e2:b6:97:50:3d:f1:d1:8a:14:5d:aa:ba:f6:b7:66:b3:f1:08: d9:b5:f3:a7:fa:85:ac:f4:8e:51:c1:8c:33:4a:dc:6c:46:03: 88:24:28:5e:aa:b6:f7:0b:28:ad:3b:65:c8:e8:10:6d:63:f2: d0:05:1e:aa:aa:84:2c:5a:77:6a:41:76:ab:0c:07:db:5a:9f: 1f:94:e2:8a:69:6f:9b:0a:6f:ba:8b:16:98:36:e7:83:9e:b8: fd:a0:f5:4b:5e:a2:0c:3d:ae:8c:7f:a0:05:96:cc:7e:64:f4: 5b:2c:33:51:84:d1:61:92:f6:4d:ef:98:33:d8:f5:8e:03:30: b9:ed:af:be:aa:75:a3:81:73:56:b1:97:99:b8:21:f0:2a:0c: ff:4e:e3:0a:d0:a7:ff:b2:09:fe:29:78:56:9b:05:d9:dc:aa: c4:eb:cc:ff:0f:af:c7:75:0c:77:40:1a:58:f4:1c:f6:f2:1b: 45:02:49:6b:eb:37:92:c4:a8:ba:e8:c6:a4:bf:3d:ad:16:09: f4:7e:0a:a9 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUDsAuN/ufHcm8RArtOodZBKYAvVIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDAzNTUwMFoX DTI1MTIwOTA0MDAwMFowMzExMC8GA1UEAxMoQUE4NDk4RTU5NkYzMTFGMDBGQ0I2 MzIyMEE5ODMyRkU0MUYzNEZBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5gGuLMFwOqDT2KQBF6te1UdXVXxdxb4nlCbFpbYjlkmCQhZ3ejmdGKnlaR 0I1l0BHI/KLsDiBDeVvcwPsqHB4aKNkWY+V9N+ZXEJNQow/ZsBZ0Nh1p5IcIoU51 2wu/HwiaLtF5+9IKfoQ8PwJbuiLZ4R/UE/kCw0uJ9EwXTPIf0miegGr5FUelJi5s ZP+KOSre2hNPGN1uHeWLBwODlpFDPfH8+8Xq41BkmCKIqsEECvCNLYQN1VvEhpNa dETXnVZYmvK7lAOPXVouy8W3U0Fx6u9LQgxYhwUG7CkMcrcBuJuIWdovo0Q7QNSA f+wVylPcpYiCh2p6BWL3IrgIUAcCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSqhJjl lvMR8A/LYyIKmDL+QfNPqTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMTcyNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWeGQjAPBAIAAjAJAwcAIAEN970AMA0GCSqGSIb3DQEBCwUAA4IB AQAIu9TCxLShdw5rGF2oVgNqEANEb1eFOGok1sdAfYh/YIkbKdOX+VI4FUKYAyfO 8tAVLDKWtlTitpdQPfHRihRdqrr2t2az8QjZtfOn+oWs9I5RwYwzStxsRgOIJChe qrb3CyitO2XI6BBtY/LQBR6qqoQsWndqQXarDAfbWp8flOKKaW+bCm+6ixaYNueD nrj9oPVLXqIMPa6Mf6AFlsx+ZPRbLDNRhNFhkvZN75gz2PWOAzC57a++qnWjgXNW sZeZuCHwKgz/TuMK0Kf/sgn+KXhWmwXZ3KrE68z/D6/HdQx3QBpY9Bz28htFAklr 6zeSxKi66Makvz2tFgn0fgqp -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:17 2025 by rpki-client on console.sobornost.net