$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136841.roa File: AS136841.roa (raw, json) Hash identifier: q8gpN4QFbJ6YIa4ZEoIYR8L9XPTQEd7IBryW7sXG1Kc= Subject key identifier: 09:BB:36:A1:18:CF:8F:98:1B:F6:2B:6A:8A:AA:D1:DF:C3:71:2C:7B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2FCAC73C06D24D0001FBD36E097F73809B6C9807 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136841.roa Signing time: Mon 20 Jan 2025 04:01:32 +0000 ROA not before: Mon 20 Jan 2025 03:56:32 +0000 ROA not after: Mon 19 Jan 2026 04:01:32 +0000 asID: 136841 IP address blocks: 103.151.36.0/24 maxlen: 24 103.151.37.0/24 maxlen: 24 103.175.212.0/23 maxlen: 24 103.175.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ca:c7:3c:06:d2:4d:00:01:fb:d3:6e:09:7f:73:80:9b:6c:98:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 20 03:56:32 2025 GMT Not After : Jan 19 04:01:32 2026 GMT Subject: CN=09BB36A118CF8F981BF62B6A8AAAD1DFC3712C7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cf:9e:05:dd:a6:9b:e1:18:be:2f:c5:82:7b: d4:49:3c:9e:ad:5a:15:5d:86:d1:14:92:f0:34:1e: 37:d5:80:9a:47:8b:f2:33:12:56:0f:47:6c:66:ce: 3c:fb:53:a7:de:ce:47:04:04:96:8a:f6:ca:82:b4: 3b:8d:9e:9a:f9:ec:34:84:27:3b:a9:64:e5:d8:5c: cb:d6:cc:74:e1:a6:b3:8f:63:c9:65:62:0d:a9:7c: ca:88:53:6b:11:13:e6:df:61:f7:fb:64:d1:2e:dc: 4f:3d:52:2f:ba:9f:3a:8c:ad:77:2c:42:5a:2b:87: fd:78:d7:dd:f5:5f:b8:b9:22:ce:38:94:49:0f:f7: 44:99:06:ce:cf:6c:1c:26:8d:3a:fe:67:24:ec:fe: e5:96:0e:bd:0d:d5:5c:44:36:74:6f:39:fe:e6:a1: 7b:9e:fa:63:39:60:55:f4:d8:6c:0c:05:3e:3c:5f: 5f:74:a5:2a:9a:0e:54:88:3c:71:e4:a5:2a:5e:b8: 61:12:7b:65:de:79:77:36:72:86:0c:b5:f5:60:07: 11:ab:78:12:00:85:e3:a5:82:0d:c6:ca:1b:8f:c5: 28:7b:9d:12:4c:59:86:88:f8:08:95:3b:31:b9:07: 0e:34:1d:2f:39:2d:32:4d:ce:f3:6c:99:14:7f:25: 09:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BB:36:A1:18:CF:8F:98:1B:F6:2B:6A:8A:AA:D1:DF:C3:71:2C:7B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.36.0/23 103.175.212.0/22 Signature Algorithm: sha256WithRSAEncryption 00:ae:d8:cf:b5:0a:04:87:e6:35:cc:54:03:77:36:65:e3:8f: 65:3e:28:32:1a:e0:df:46:bb:bd:18:e8:cd:f4:80:33:6d:fb: c2:e6:c9:3d:c5:30:68:aa:fd:aa:4e:4f:44:7b:f8:a1:b8:8d: db:bc:c9:93:68:ee:2c:80:7c:a0:d2:c6:98:c7:2f:9c:e9:91: b4:a5:02:fd:45:91:dc:55:66:17:00:73:21:a1:63:65:0c:12: 01:d7:56:53:5c:45:89:78:c4:fc:f4:5d:be:29:20:33:1a:4b: 1f:4f:c4:50:30:1a:92:03:12:f0:9f:8e:76:8e:82:76:ce:2f: bf:fd:e3:56:4d:0d:64:6c:54:5e:83:92:9b:5f:4d:df:de:ba: cf:32:f1:a5:fe:9b:91:b7:05:e8:9b:57:cf:0a:a7:1a:d3:12: 5e:13:0d:25:18:e4:c1:2e:32:d0:5f:00:58:3f:63:88:44:af: a5:08:5d:4d:38:0b:b0:b2:cf:bc:52:23:b1:28:ae:29:49:95: 71:2f:01:4f:03:e0:41:ff:c1:9c:7f:e0:f2:8e:81:dc:34:f3: 46:72:a8:66:14:0e:3e:b4:c5:33:c6:ee:d6:2c:3a:c6:b4:14: 89:d7:1e:5a:1f:a4:85:f7:d2:a4:50:26:d5:70:28:34:d4:41: 3a:1b:fc:fc -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUL8rHPAbSTQAB+9NuCX9zgJtsmAcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEyMDAzNTYzMloX DTI2MDExOTA0MDEzMlowMzExMC8GA1UEAxMoMDlCQjM2QTExOENGOEY5ODFCRjYy QjZBOEFBQUQxREZDMzcxMkM3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3PngXdppvhGL4vxYJ71Ek8nq1aFV2G0RSS8DQeN9WAmkeL8jMSVg9HbGbO PPtTp97ORwQElor2yoK0O42emvnsNIQnO6lk5dhcy9bMdOGms49jyWViDal8yohT axET5t9h9/tk0S7cTz1SL7qfOoytdyxCWiuH/XjX3fVfuLkizjiUSQ/3RJkGzs9s HCaNOv5nJOz+5ZYOvQ3VXEQ2dG85/uahe576YzlgVfTYbAwFPjxfX3SlKpoOVIg8 ceSlKl64YRJ7Zd55dzZyhgy19WAHEat4EgCF46WCDcbKG4/FKHudEkxZhoj4CJU7 MbkHDjQdLzktMk3O82yZFH8lCaUCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBQJuzah GM+PmBv2K2qKqtHfw3EsezAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjg0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWeXJAMEAmev1DANBgkqhkiG9w0BAQsFAAOCAQEAAK7Yz7UKBIfm NcxUA3c2ZeOPZT4oMhrg30a7vRjozfSAM237wubJPcUwaKr9qk5PRHv4obiN27zJ k2juLIB8oNLGmMcvnOmRtKUC/UWR3FVmFwBzIaFjZQwSAddWU1xFiXjE/PRdvikg MxpLH0/EUDAakgMS8J+Odo6Cds4vv/3jVk0NZGxUXoOSm19N3966zzLxpf6bkbcF 6JtXzwqnGtMSXhMNJRjkwS4y0F8AWD9jiESvpQhdTTgLsLLPvFIjsSiuKUmVcS8B TwPgQf/BnH/g8o6B3DTzRnKoZhQOPrTFM8bu1iw6xrQUidceWh+khffSpFAm1XAo NNRBOhv8/A== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net