$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133816.roa File: AS133816.roa (raw, json) Hash identifier: Ni/wdoJxYrCoyW4VZt025+cI9f3dIAaDT3CDUfeKttc= Subject key identifier: 64:CC:8E:F3:A3:91:EC:68:27:48:68:8C:4A:33:89:24:7B:F1:11:EE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 35D0F623A3A33B8FC931BC66D718A213310FD84F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133816.roa Signing time: Tue 10 Dec 2024 05:00:07 +0000 ROA not before: Tue 10 Dec 2024 04:55:07 +0000 ROA not after: Tue 09 Dec 2025 05:00:07 +0000 asID: 133816 IP address blocks: 103.52.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d0:f6:23:a3:a3:3b:8f:c9:31:bc:66:d7:18:a2:13:31:0f:d8:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:07 2024 GMT Not After : Dec 9 05:00:07 2025 GMT Subject: CN=64CC8EF3A391EC682748688C4A3389247BF111EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:72:ef:51:8f:86:08:c8:44:c9:f0:d8:85: 5b:ab:99:06:3b:7a:3b:be:47:34:30:6c:d7:96:95: a3:58:dd:51:bd:77:05:99:16:f5:f4:b7:cd:4a:8b: de:da:bb:80:6b:84:e7:91:98:bf:43:49:af:d7:f9: fd:70:72:de:1a:3c:2c:86:e9:b6:48:f8:10:4d:04: 8a:c2:86:bb:00:e3:75:57:87:c3:26:07:42:20:ed: cb:45:d2:27:35:e4:79:0e:01:39:37:f7:05:2a:53: 8f:49:3a:95:b3:ed:f5:1a:86:8a:23:2e:6e:11:23: 98:38:0e:4c:49:44:77:2f:a9:0d:07:b2:62:66:4c: 29:a6:63:a0:3d:04:35:5e:ac:b0:f4:17:26:a1:b4: 7c:6e:78:a2:23:ea:a1:77:15:42:bb:96:cb:3c:93: 36:0f:95:6f:83:b4:63:8b:94:bd:c0:6f:67:27:ea: da:00:94:cb:7b:40:4f:69:2f:4a:d5:bd:08:f7:d1: af:70:db:cb:f5:1a:2a:25:33:e5:1d:0a:95:8e:76: b5:8a:db:60:e5:e2:62:27:de:09:38:eb:c5:03:f2: da:cb:50:6e:c9:99:9f:ee:01:18:46:38:5b:67:93: a3:29:1f:14:c1:e2:cb:86:90:6d:12:19:a9:e4:1c: d7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CC:8E:F3:A3:91:EC:68:27:48:68:8C:4A:33:89:24:7B:F1:11:EE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.213.0/24 Signature Algorithm: sha256WithRSAEncryption 44:3b:ea:47:dd:72:ec:68:c1:8d:cd:2b:b6:af:56:4b:c1:37: 41:9a:a6:6e:a5:d6:bf:c3:fb:38:51:9c:9a:53:37:34:c7:1b: 14:97:11:ba:dd:93:b3:1b:30:5b:be:d2:56:27:45:c5:b6:d6: 34:d4:f5:be:b2:e5:29:5f:1d:0c:83:ea:e4:8e:95:1b:93:73: 52:27:b8:ae:c2:02:36:66:ea:4a:5c:9e:d1:ab:50:35:4d:44: bc:84:70:dd:04:eb:22:b9:0d:59:4f:3f:b9:59:b1:94:4b:7b: 40:48:7c:1d:a9:f0:00:52:72:65:b6:6f:c8:82:0a:8d:8b:81: 11:de:f3:f1:c5:12:35:f6:1f:60:ac:6b:99:32:d6:be:f3:30: 84:bd:c2:9f:52:f2:fb:d1:53:5c:72:51:b8:7d:1e:7e:10:24: 5f:99:3a:af:b3:21:4d:ee:78:f7:22:fc:2b:c3:d5:09:78:93: 51:45:b1:c2:50:8d:8e:15:1f:e2:f2:7e:fb:4f:99:e2:e6:d9: ca:85:1d:30:4a:2d:59:44:c0:08:aa:ae:b1:b5:a3:d9:8c:90: c5:9c:ae:af:3f:50:d6:bc:8c:66:42:63:f0:c8:b9:92:37:26: 5a:c6:37:c3:37:a8:cd:5b:79:7a:c6:b0:4a:55:1f:41:53:d3: 94:c3:f2:b9 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUNdD2I6OjO4/JMbxm1xiiEzEP2E8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwN1oX DTI1MTIwOTA1MDAwN1owMzExMC8GA1UEAxMoNjRDQzhFRjNBMzkxRUM2ODI3NDg2 ODhDNEEzMzg5MjQ3QkYxMTFFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzjcu9Rj4YIyETJ8NiFW6uZBjt6O75HNDBs15aVo1jdUb13BZkW9fS3zUqL 3tq7gGuE55GYv0NJr9f5/XBy3ho8LIbptkj4EE0EisKGuwDjdVeHwyYHQiDty0XS JzXkeQ4BOTf3BSpTj0k6lbPt9RqGiiMubhEjmDgOTElEdy+pDQeyYmZMKaZjoD0E NV6ssPQXJqG0fG54oiPqoXcVQruWyzyTNg+Vb4O0Y4uUvcBvZyfq2gCUy3tAT2kv StW9CPfRr3Dby/UaKiUz5R0KlY52tYrbYOXiYifeCTjrxQPy2stQbsmZn+4BGEY4 W2eToykfFMHiy4aQbRIZqeQc1wsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRkzI7z o5HsaCdIaIxKM4kke/ER7jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzgxNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGc01TANBgkqhkiG9w0BAQsFAAOCAQEARDvqR91y7GjBjc0rtq9W S8E3QZqmbqXWv8P7OFGcmlM3NMcbFJcRut2TsxswW77SVidFxbbWNNT1vrLlKV8d DIPq5I6VG5NzUie4rsICNmbqSlye0atQNU1EvIRw3QTrIrkNWU8/uVmxlEt7QEh8 HanwAFJyZbZvyIIKjYuBEd7z8cUSNfYfYKxrmTLWvvMwhL3Cn1Ly+9FTXHJRuH0e fhAkX5k6r7MhTe549yL8K8PVCXiTUUWxwlCNjhUf4vJ++0+Z4ubZyoUdMEotWUTA CKqusbWj2YyQxZyurz9Q1ryMZkJj8Mi5kjcmWsY3wzeozVt5esawSlUfQVPTlMPy uQ== -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:46 2025 by rpki-client on console.sobornost.net