$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136876.roa File: AS136876.roa (raw, json) Hash identifier: it6nViSh3PH7qy301/jgT9FKFKoyAaYvP6fUQivPfsU= Subject key identifier: 98:3E:F8:79:49:09:52:5C:5B:B5:D6:C1:4C:12:58:76:EF:BD:C9:FC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 15C9702727DDA70D5CCE4A65F2C4BB9873A9F8CD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136876.roa Signing time: Thu 10 Apr 2025 07:00:00 +0000 ROA not before: Thu 10 Apr 2025 06:55:00 +0000 ROA not after: Thu 09 Apr 2026 07:00:00 +0000 asID: 136876 IP address blocks: 103.105.190.0/24 maxlen: 24 103.163.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c9:70:27:27:dd:a7:0d:5c:ce:4a:65:f2:c4:bb:98:73:a9:f8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 10 06:55:00 2025 GMT Not After : Apr 9 07:00:00 2026 GMT Subject: CN=983EF8794909525C5BB5D6C14C125876EFBDC9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:24:70:d9:5c:8f:c5:89:9c:ce:9b:20:dd:b1: 3e:9a:e5:b7:f3:8e:29:5d:68:41:70:69:e1:79:e2: ac:ab:b5:8b:19:bf:59:bd:39:df:df:a6:6b:eb:ab: 9f:ee:a7:7d:ed:6f:5a:dc:ef:f8:da:e4:db:28:d1: 08:5e:3c:9c:2f:1b:d8:fd:13:18:9f:a8:94:2f:16: af:fa:ef:25:45:14:81:39:b9:52:e6:e5:18:61:65: cf:9f:95:f2:9a:f4:e1:d1:4e:ab:2d:f3:21:be:cd: f4:db:c7:50:42:9e:e8:12:0f:fd:ae:5e:ed:6f:54: 7c:ae:c9:61:57:50:af:32:8c:8f:f8:f4:2e:dc:90: 72:cc:c8:04:c3:a5:43:03:84:bf:ba:eb:60:0f:8f: 27:15:7d:65:fb:fc:90:c0:82:10:03:ff:07:c9:0a: bc:db:5e:67:9f:8f:18:40:c4:ab:55:6c:57:22:1f: c0:0d:a2:00:48:38:7a:c0:3b:1f:ef:76:75:80:2b: 19:ea:0b:24:0d:00:bb:91:0c:2d:25:b7:fc:e3:5a: d6:a3:0e:9c:5b:16:0d:87:a3:98:8c:2d:7b:e8:25: df:0e:96:c7:60:cc:0b:d1:15:8c:92:f2:3c:fb:8d: 61:6c:b8:4a:17:de:e2:26:9f:62:ee:9c:b2:2a:80: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3E:F8:79:49:09:52:5C:5B:B5:D6:C1:4C:12:58:76:EF:BD:C9:FC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136876.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.190.0/24 103.163.38.0/24 Signature Algorithm: sha256WithRSAEncryption 84:af:4c:93:55:db:f1:6b:ce:0c:a7:7b:95:af:38:9d:46:36: 33:87:4a:78:55:04:71:93:24:de:be:f8:d1:9c:2c:a9:e9:75: 7f:c5:bb:0d:84:da:d4:13:94:41:2a:f8:8d:1a:59:77:e6:12: c1:3f:a4:ba:6c:71:be:0d:d0:c9:23:c5:37:10:3e:7f:1e:c2: 64:1b:9c:cc:60:57:36:c1:b6:8f:63:78:aa:c3:4d:09:61:56: 9b:5d:b0:8a:8a:ae:e4:eb:81:b7:fa:3c:10:6c:84:ea:21:e0: 0a:70:f6:45:b4:f3:91:cf:2c:fd:69:c0:99:70:ee:09:a5:af: 83:40:f6:da:9f:3f:c0:0d:0b:8c:f1:18:00:fe:f8:9d:d6:e2: f9:a9:39:f8:60:f9:35:ef:12:da:4b:23:4f:49:c1:e8:14:a8: 6e:45:ee:8a:96:39:80:b3:27:3e:6c:97:8c:92:d3:96:ae:6f: 5e:24:2b:bd:49:8a:da:d3:e2:7c:27:17:7b:27:ae:c6:24:05: e7:d9:70:3d:d5:45:bf:ba:10:1a:3e:02:15:d3:59:e7:6d:49: b8:22:30:1d:44:5f:80:f3:50:d3:84:01:80:fc:4c:09:32:cb: 6c:95:79:f9:ca:68:c0:2d:86:ad:d4:11:89:4c:61:78:25:ab: f4:2b:54:88 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUFclwJyfdpw1czkpl8sS7mHOp+M0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMDA2NTUwMFoX DTI2MDQwOTA3MDAwMFowMzExMC8GA1UEAxMoOTgzRUY4Nzk0OTA5NTI1QzVCQjVE NkMxNEMxMjU4NzZFRkJEQzlGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8kcNlcj8WJnM6bIN2xPprlt/OOKV1oQXBp4XnirKu1ixm/Wb0539+ma+ur n+6nfe1vWtzv+Nrk2yjRCF48nC8b2P0TGJ+olC8Wr/rvJUUUgTm5UublGGFlz5+V 8pr04dFOqy3zIb7N9NvHUEKe6BIP/a5e7W9UfK7JYVdQrzKMj/j0LtyQcszIBMOl QwOEv7rrYA+PJxV9Zfv8kMCCEAP/B8kKvNteZ5+PGEDEq1VsVyIfwA2iAEg4esA7 H+92dYArGeoLJA0Au5EMLSW3/ONa1qMOnFsWDYejmIwte+gl3w6Wx2DMC9EVjJLy PPuNYWy4Shfe4iafYu6csiqAHvsCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBSYPvh5 SQlSXFu11sFMElh2773J/DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjg3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGdpvgMEAGejJjANBgkqhkiG9w0BAQsFAAOCAQEAhK9Mk1Xb8WvO DKd7la84nUY2M4dKeFUEcZMk3r740Zwsqel1f8W7DYTa1BOUQSr4jRpZd+YSwT+k umxxvg3QySPFNxA+fx7CZBuczGBXNsG2j2N4qsNNCWFWm12wioqu5OuBt/o8EGyE 6iHgCnD2RbTzkc8s/WnAmXDuCaWvg0D22p8/wA0LjPEYAP74ndbi+ak5+GD5Ne8S 2ksjT0nB6BSobkXuipY5gLMnPmyXjJLTlq5vXiQrvUmK2tPifCcXeyeuxiQF59lw PdVFv7oQGj4CFdNZ521JuCIwHURfgPNQ04QBgPxMCTLLbJV5+cpowC2GrdQRiUxh eCWr9CtUiA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net