$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140480.roa File: AS140480.roa (raw, json) Hash identifier: NvDbmx+xS7NQLjA+zlpdpBHqTEnxzNueZTXAsD+uL/w= Subject key identifier: D3:2D:DB:A3:E7:71:90:E3:27:2E:5D:58:A7:DC:68:24:18:2B:52:74 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 443CE8379F54C6B1AA6E8F69ECCE4A86666EFF2B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140480.roa Signing time: Wed 05 Feb 2025 07:00:00 +0000 ROA not before: Wed 05 Feb 2025 06:55:00 +0000 ROA not after: Wed 04 Feb 2026 07:00:00 +0000 asID: 140480 IP address blocks: 103.198.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3c:e8:37:9f:54:c6:b1:aa:6e:8f:69:ec:ce:4a:86:66:6e:ff:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 5 06:55:00 2025 GMT Not After : Feb 4 07:00:00 2026 GMT Subject: CN=D32DDBA3E77190E3272E5D58A7DC6824182B5274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3b:e8:8f:9a:f2:da:e3:4c:02:1b:93:82:53: df:7f:af:4b:f3:cf:65:cc:1c:fc:cd:f8:38:e1:8b: 5f:57:c7:4f:e9:da:46:d3:a6:cb:96:bb:f8:c9:66: 63:29:bd:28:bb:78:b3:ff:60:eb:a3:36:3c:1f:20: 42:01:88:3e:68:16:12:3c:67:e6:10:84:a3:f7:b8: 58:6e:ba:cb:a6:fa:be:48:d0:16:f3:b3:50:9a:75: 4f:f3:0c:b5:b0:2f:4a:fb:15:cc:1f:84:8b:84:0c: 97:86:68:a5:bf:53:11:c4:9c:f9:87:d1:6a:a6:fb: 50:58:5d:85:14:29:9e:b0:1b:d6:af:c8:68:1d:33: 71:b4:87:de:15:b0:b5:5f:4b:09:f9:a4:62:fc:40: b3:70:aa:98:9b:16:1b:00:a6:29:a0:f5:04:f7:9a: 2b:19:43:64:9b:2a:a4:11:9d:89:cb:77:4c:0e:dc: 2d:da:15:37:84:ca:8a:82:70:e8:e2:06:f4:db:90: e1:81:74:17:1b:87:86:91:f2:8b:9d:91:0e:7f:cc: 04:d3:f1:82:e0:ab:5b:74:f3:55:8d:de:56:aa:2b: b9:7b:42:f2:8a:e5:b9:71:05:34:e5:4c:8e:3f:66: 71:df:8d:e2:54:20:8d:a1:0f:ff:36:ae:d1:0d:25: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2D:DB:A3:E7:71:90:E3:27:2E:5D:58:A7:DC:68:24:18:2B:52:74 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140480.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.198.129.0/24 Signature Algorithm: sha256WithRSAEncryption 20:19:37:0e:60:b7:c1:9e:45:d5:1e:17:02:c6:24:55:98:d4: 8c:1d:76:93:fa:8c:73:53:44:93:14:1e:c4:61:81:97:04:fe: 08:5e:4a:e8:f5:f4:df:3a:07:03:2d:3a:b0:bc:75:80:fc:20: 03:7e:1b:69:78:a2:32:9e:87:d6:9b:6d:0c:1b:16:86:a9:ca: e3:c5:51:81:9c:a0:d9:c9:7e:f6:21:01:d3:2e:49:09:a9:76: 21:a0:36:7e:a8:a8:cc:ee:2d:97:b3:80:55:71:99:1e:6c:53: 8b:c2:00:51:c9:63:ca:be:a4:c9:26:1c:d6:4e:c9:33:f2:93: a6:63:4c:41:3a:43:a3:1f:6a:a2:8c:a8:d1:c7:ba:e7:56:77: 71:cf:e9:ad:ad:4c:27:cf:7b:8d:bd:c6:f7:06:8e:a3:f9:0f: 57:4e:28:57:79:b1:f3:cf:90:6c:8c:a4:73:0d:e1:d7:6f:da: 0b:35:01:56:b5:24:36:1f:7b:b3:31:4c:5f:b9:f1:43:7e:a6: 1f:1e:a2:73:03:3b:45:dc:2d:a7:5c:3d:ad:71:d0:88:7c:eb: 15:54:64:87:c5:92:c7:53:08:f6:81:4b:d2:23:da:3d:29:13: a0:ae:38:e7:40:d2:e7:9a:55:d0:7b:96:dc:80:bb:29:8b:9a: a4:21:4a:7c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIURDzoN59UxrGqbo9p7M5KhmZu/yswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIwNTA2NTUwMFoX DTI2MDIwNDA3MDAwMFowMzExMC8GA1UEAxMoRDMyRERCQTNFNzcxOTBFMzI3MkU1 RDU4QTdEQzY4MjQxODJCNTI3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ076I+a8trjTAIbk4JT33+vS/PPZcwc/M34OOGLX1fHT+naRtOmy5a7+Mlm Yym9KLt4s/9g66M2PB8gQgGIPmgWEjxn5hCEo/e4WG66y6b6vkjQFvOzUJp1T/MM tbAvSvsVzB+Ei4QMl4Zopb9TEcSc+YfRaqb7UFhdhRQpnrAb1q/IaB0zcbSH3hWw tV9LCfmkYvxAs3CqmJsWGwCmKaD1BPeaKxlDZJsqpBGdict3TA7cLdoVN4TKioJw 6OIG9NuQ4YF0FxuHhpHyi52RDn/MBNPxguCrW3TzVY3eVqoruXtC8orluXEFNOVM jj9mcd+N4lQgjaEP/zau0Q0l3zMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTTLduj 53GQ4ycuXVin3GgkGCtSdDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDQ4MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfGgTANBgkqhkiG9w0BAQsFAAOCAQEAIBk3DmC3wZ5F1R4XAsYk VZjUjB12k/qMc1NEkxQexGGBlwT+CF5K6PX03zoHAy06sLx1gPwgA34baXiiMp6H 1pttDBsWhqnK48VRgZyg2cl+9iEB0y5JCal2IaA2fqiozO4tl7OAVXGZHmxTi8IA Ucljyr6kySYc1k7JM/KTpmNMQTpDox9qooyo0ce651Z3cc/pra1MJ897jb3G9waO o/kPV04oV3mx88+QbIykcw3h12/aCzUBVrUkNh97szFMX7nxQ36mHx6icwM7Rdwt p1w9rXHQiHzrFVRkh8WSx1MI9oFL0iPaPSkToK4450DS55pV0HuW3IC7KYuapCFK fA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net