$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137301.roa File: AS137301.roa (raw, json) Hash identifier: FNtGekzwdVfl5qeBPAHgaHW2d+Gt+EGCb+rmFyWw46g= Subject key identifier: C9:13:DD:C3:30:29:3D:BE:06:36:27:C0:4D:10:D5:8C:BB:83:33:D8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4EAA90F04EC8BE065FCFDF01D47CD4CD27012FC7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137301.roa Signing time: Tue 10 Dec 2024 05:00:11 +0000 ROA not before: Tue 10 Dec 2024 04:55:11 +0000 ROA not after: Tue 09 Dec 2025 05:00:11 +0000 asID: 137301 IP address blocks: 103.108.87.0/24 maxlen: 24 2001:df5:7b00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:aa:90:f0:4e:c8:be:06:5f:cf:df:01:d4:7c:d4:cd:27:01:2f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:11 2024 GMT Not After : Dec 9 05:00:11 2025 GMT Subject: CN=C913DDC330293DBE063627C04D10D58CBB8333D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:ab:f9:68:8c:20:76:10:f0:95:ab:de:3e: 46:8e:0d:8b:46:7e:0b:1d:d3:77:d7:93:33:dc:7b: de:b2:83:e0:f5:da:f5:b7:81:3a:ac:82:fd:39:1d: 29:a1:56:5d:77:ce:ea:47:b4:a7:92:31:61:4d:4f: 4e:bd:3f:ef:e6:fd:89:57:05:3d:e0:fe:35:48:e0: be:0d:f6:f9:2b:7d:75:84:71:d6:7f:6d:0b:7c:ca: 12:ff:25:b4:f2:85:9d:a3:6e:9e:8b:01:e4:1c:88: d0:44:2f:dc:be:35:35:f2:0e:9a:49:8d:46:44:16: 8f:2d:44:f2:d9:fc:da:69:82:e3:2b:72:d9:36:98: 13:62:c8:77:2e:04:32:c4:fd:10:c6:3b:8d:05:41: 05:77:24:b8:36:30:32:2e:13:5c:b1:d2:6a:88:b9: ea:65:d9:86:7d:14:50:be:ea:bf:df:89:b8:1e:f1: 12:5c:b3:17:cf:46:fa:c4:a5:9b:74:56:c8:c8:bc: 57:2b:f2:79:e8:3e:f5:a1:a2:87:1f:83:36:30:08: 5a:9b:38:fa:77:cc:e9:82:9a:a9:fc:37:91:22:b5: e4:b9:f4:72:95:71:25:d7:0b:46:81:83:bd:83:c7: 22:4a:be:2d:d7:83:a5:d5:58:a0:3a:af:c2:46:a3: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:13:DD:C3:30:29:3D:BE:06:36:27:C0:4D:10:D5:8C:BB:83:33:D8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137301.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.87.0/24 IPv6: 2001:df5:7b00::/48 Signature Algorithm: sha256WithRSAEncryption 3b:ee:9a:ad:d9:54:6e:a5:f2:63:9b:32:e5:4a:a6:d7:2e:b3: e4:b1:5d:05:d4:ad:50:c3:a5:74:6d:ef:54:3f:d4:d7:dc:7d: 54:1c:8d:af:fe:f3:ba:71:7b:77:de:34:e9:7e:d4:e3:5e:d2: 53:51:35:3c:21:79:32:38:85:d4:6b:e0:f8:0e:da:6b:82:80: b7:0f:5f:6f:1e:ee:e4:7a:21:3e:ce:29:6a:a0:10:31:c2:9f: f1:40:00:d2:bf:f9:b7:33:de:50:e7:77:d1:f5:aa:18:23:e6: cf:31:51:bf:9c:4c:8c:fe:d3:bf:f4:68:ce:43:43:9a:ee:6d: c7:44:63:07:23:11:1f:72:d6:36:6b:1d:91:1f:ac:c2:97:4f: 87:15:ca:5f:ca:45:6a:e3:2e:08:a3:22:73:ba:11:7d:90:42: ed:11:46:4c:a3:21:b3:31:d1:31:a5:6b:dd:fd:f6:54:a8:af: 19:0e:98:1b:92:7a:dc:b8:9b:f6:f3:c1:b0:2f:7b:24:a6:24: 2c:45:95:35:61:60:4d:91:15:6a:78:02:01:7a:2d:03:fa:0e: aa:42:30:18:b1:fa:23:e5:b5:ea:8f:99:7e:82:07:e1:54:14: 74:53:5d:a5:5f:3e:e8:46:3e:b2:12:6c:d9:06:dd:02:7c:d6: a9:af:37:80 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUTqqQ8E7IvgZfz98B1HzUzScBL8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxMVoX DTI1MTIwOTA1MDAxMVowMzExMC8GA1UEAxMoQzkxM0REQzMzMDI5M0RCRTA2MzYy N0MwNEQxMEQ1OENCQjgzMzNEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYGq/lojCB2EPCVq94+Ro4Ni0Z+Cx3Td9eTM9x73rKD4PXa9beBOqyC/Tkd KaFWXXfO6ke0p5IxYU1PTr0/7+b9iVcFPeD+NUjgvg32+St9dYRx1n9tC3zKEv8l tPKFnaNunosB5ByI0EQv3L41NfIOmkmNRkQWjy1E8tn82mmC4yty2TaYE2LIdy4E MsT9EMY7jQVBBXckuDYwMi4TXLHSaoi56mXZhn0UUL7qv9+JuB7xElyzF89G+sSl m3RWyMi8Vyvyeeg+9aGihx+DNjAIWps4+nfM6YKaqfw3kSK15Ln0cpVxJdcLRoGD vYPHIkq+LdeDpdVYoDqvwkajWwsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTJE93D MCk9vgY2J8BNENWMu4Mz2DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNzMwMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGdsVzAPBAIAAjAJAwcAIAEN9XsAMA0GCSqGSIb3DQEBCwUAA4IB AQA77pqt2VRupfJjmzLlSqbXLrPksV0F1K1Qw6V0be9UP9TX3H1UHI2v/vO6cXt3 3jTpftTjXtJTUTU8IXkyOIXUa+D4DtprgoC3D19vHu7keiE+zilqoBAxwp/xQADS v/m3M95Q53fR9aoYI+bPMVG/nEyM/tO/9GjOQ0Oa7m3HRGMHIxEfctY2ax2RH6zC l0+HFcpfykVq4y4IoyJzuhF9kELtEUZMoyGzMdExpWvd/fZUqK8ZDpgbknrcuJv2 88GwL3skpiQsRZU1YWBNkRVqeAIBei0D+g6qQjAYsfoj5bXqj5l+ggfhVBR0U12l Xz7oRj6yEmzZBt0CfNaprzeA -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net