$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139423.roa File: AS139423.roa (raw, json) Hash identifier: tXYUGJLkL+hwIcj4+dOR+xbhMRhUBIzUZ2YcQmxKlp8= Subject key identifier: B8:10:45:B8:C5:61:22:D9:25:1F:2C:FF:AA:7E:DC:8D:16:F1:A4:7C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 243120E8C843EDAC388C605FE55D800DB858412B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139423.roa Signing time: Tue 10 Dec 2024 05:00:12 +0000 ROA not before: Tue 10 Dec 2024 04:55:12 +0000 ROA not after: Tue 09 Dec 2025 05:00:12 +0000 asID: 139423 IP address blocks: 103.144.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:31:20:e8:c8:43:ed:ac:38:8c:60:5f:e5:5d:80:0d:b8:58:41:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:12 2024 GMT Not After : Dec 9 05:00:12 2025 GMT Subject: CN=B81045B8C56122D9251F2CFFAA7EDC8D16F1A47C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:b6:fc:66:20:2d:9b:a6:fa:c3:02:b5:01: dc:dd:d2:6c:02:79:73:92:9c:a5:e7:be:3e:5c:7c: 15:0f:c6:96:c9:26:c4:dc:e2:dc:9f:a4:96:fd:2e: 46:f8:e2:99:87:4c:f5:c5:fd:cb:06:7f:9e:23:6e: 3e:75:26:8f:2a:62:95:6d:88:eb:3f:3d:1e:3b:48: 65:75:77:a3:29:45:61:33:20:c1:ef:fc:24:57:3e: 2c:d9:5f:18:4e:ab:5e:23:87:33:f6:fa:c6:7d:ae: f3:7a:94:11:7b:ef:4b:cf:3c:c4:22:99:af:69:14: 44:a8:4f:78:5e:b6:fd:d4:02:b8:6c:ae:91:6f:5d: de:28:f7:10:d5:5e:86:cd:d6:7a:da:40:3e:6d:83: 56:80:81:77:9d:b0:b2:8b:d5:81:cc:a8:4b:ca:e1: 98:d0:1b:e3:46:9f:39:8f:b4:37:63:f3:8e:60:e5: 8d:58:26:07:c9:b6:dd:32:4f:8c:f5:4e:44:8d:cd: 10:b4:d9:53:21:c4:12:2c:ff:75:c4:f9:8f:1f:b4: 05:ea:87:13:97:1d:25:8f:df:c3:60:2a:03:13:d3: ba:0e:3f:f9:12:6d:01:a2:82:02:a3:dd:7a:32:c9: c9:18:07:82:c8:f8:bb:59:81:f4:46:f6:9c:6f:67: c7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:10:45:B8:C5:61:22:D9:25:1F:2C:FF:AA:7E:DC:8D:16:F1:A4:7C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.20.0/24 Signature Algorithm: sha256WithRSAEncryption 14:23:35:22:c1:d9:8d:19:1b:11:3c:39:d6:84:9b:71:94:07: 1c:06:89:b9:9c:a0:0b:bb:77:65:03:c7:71:03:a1:5c:37:0c: a9:75:f2:d0:85:55:fe:a3:9e:f6:4d:ca:b5:3b:6a:eb:54:62: a4:c9:8f:33:64:65:40:c4:a8:3a:31:b2:9f:2a:fe:bb:40:53: 76:fe:af:da:79:b1:97:ab:38:2b:bf:b1:fd:65:81:75:8a:55: f8:aa:13:a0:0d:4b:5d:62:d3:cf:07:b4:6b:d3:07:88:a0:82: 0c:4c:15:f9:44:e8:ab:86:d0:c6:a6:c6:20:6a:22:a5:bd:0a: 06:8e:5f:e7:9d:02:d1:ca:b5:4d:da:1a:51:0c:06:76:78:fc: 5b:f9:17:52:5d:2c:f0:82:ed:80:21:9c:33:97:f2:57:e5:96: 4f:11:30:11:63:ba:f3:b7:8f:d3:53:54:0f:25:a4:c2:0a:1d: 39:e6:5f:4f:a9:66:ad:9b:e3:c3:ed:89:3e:14:0d:df:6f:d6: 90:44:0b:36:a7:35:9a:b2:15:8e:48:ab:00:da:6e:ce:38:bc: db:64:28:db:49:9e:d0:60:75:d9:32:ee:52:28:22:52:b2:5e: b5:fb:40:fe:84:08:a8:41:11:32:c4:37:96:d2:37:3e:e8:bc: 0d:fc:70:01 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJDEg6MhD7aw4jGBf5V2ADbhYQSswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxMloX DTI1MTIwOTA1MDAxMlowMzExMC8GA1UEAxMoQjgxMDQ1QjhDNTYxMjJEOTI1MUYy Q0ZGQUE3RURDOEQxNkYxQTQ3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALygtvxmIC2bpvrDArUB3N3SbAJ5c5Kcpee+Plx8FQ/GlskmxNzi3J+klv0u RvjimYdM9cX9ywZ/niNuPnUmjypilW2I6z89HjtIZXV3oylFYTMgwe/8JFc+LNlf GE6rXiOHM/b6xn2u83qUEXvvS888xCKZr2kURKhPeF62/dQCuGyukW9d3ij3ENVe hs3WetpAPm2DVoCBd52wsovVgcyoS8rhmNAb40afOY+0N2PzjmDljVgmB8m23TJP jPVORI3NELTZUyHEEiz/dcT5jx+0BeqHE5cdJY/fw2AqAxPTug4/+RJtAaKCAqPd ejLJyRgHgsj4u1mB9Eb2nG9nx8MCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS4EEW4 xWEi2SUfLP+qftyNFvGkfDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeQFDANBgkqhkiG9w0BAQsFAAOCAQEAFCM1IsHZjRkbETw51oSb cZQHHAaJuZygC7t3ZQPHcQOhXDcMqXXy0IVV/qOe9k3KtTtq61RipMmPM2RlQMSo OjGynyr+u0BTdv6v2nmxl6s4K7+x/WWBdYpV+KoToA1LXWLTzwe0a9MHiKCCDEwV +UToq4bQxqbGIGoipb0KBo5f550C0cq1TdoaUQwGdnj8W/kXUl0s8ILtgCGcM5fy V+WWTxEwEWO687eP01NUDyWkwgodOeZfT6lmrZvjw+2JPhQN32/WkEQLNqc1mrIV jkirANpuzji822Qo20me0GB12TLuUigiUrJetftA/oQIqEERMsQ3ltI3Pui8Dfxw AQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net