$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140482.roa File: AS140482.roa (raw, json) Hash identifier: NjdPWlrYdYnCXgPP/ZXKBc8Lqgp7ZjRxdt7OAOA6NzA= Subject key identifier: 08:6F:F3:0E:59:89:D4:62:35:1A:31:76:6C:AB:4E:3C:D4:6B:CF:85 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 61F7DF1A58D55832CE2617174763CC2946F21D37 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140482.roa Signing time: Mon 14 Apr 2025 07:00:00 +0000 ROA not before: Mon 14 Apr 2025 06:55:00 +0000 ROA not after: Mon 13 Apr 2026 07:00:00 +0000 asID: 140482 IP address blocks: 27.112.77.0/24 maxlen: 24 103.22.136.0/22 maxlen: 24 103.152.140.0/23 maxlen: 24 103.231.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f7:df:1a:58:d5:58:32:ce:26:17:17:47:63:cc:29:46:f2:1d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 14 06:55:00 2025 GMT Not After : Apr 13 07:00:00 2026 GMT Subject: CN=086FF30E5989D462351A31766CAB4E3CD46BCF85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:2d:f0:26:d8:23:48:9c:bf:e8:8b:65:37:b6: 81:87:61:5b:08:0a:34:d2:65:e3:fe:75:2a:bf:6a: 24:6c:84:3e:1c:a7:37:3d:0d:a4:71:3c:50:44:3b: 0e:44:dd:f6:a4:d2:03:96:1b:94:27:45:74:d2:be: 06:44:8d:f1:18:09:6d:61:e9:04:70:7f:80:fd:37: 19:e1:87:8f:0c:32:7d:8b:c3:6a:ed:5e:19:06:ce: 22:d4:d6:64:04:71:58:11:6d:fe:97:1a:de:6c:fd: e9:27:ec:99:4c:80:de:85:5d:d1:27:3d:69:bf:c0: 0e:a9:84:20:71:94:ba:aa:41:ad:ee:d1:9f:43:ee: 32:c1:51:a8:4f:2e:30:8b:7c:39:db:b9:b0:72:37: 86:a7:ea:be:a4:3c:43:f9:c9:60:f8:cd:21:bd:34: e0:39:de:9a:41:62:58:33:87:40:ac:f3:ca:a5:e2: 4c:fe:a4:9e:b9:6d:9a:b3:2d:be:b0:e4:f1:fe:ea: 3a:68:1a:1f:cf:8c:62:a9:a1:d1:ef:e2:31:35:24: 56:73:d0:84:36:bd:cc:75:4e:64:ed:10:d6:62:ce: 74:39:30:dc:9b:c5:e6:77:d0:99:58:76:0e:0b:af: d8:4c:1c:47:b8:c0:c6:cd:8d:81:19:9d:80:78:06: 68:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6F:F3:0E:59:89:D4:62:35:1A:31:76:6C:AB:4E:3C:D4:6B:CF:85 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140482.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.112.77.0/24 103.22.136.0/22 103.152.140.0/23 103.231.171.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:0d:16:12:38:8e:1d:69:70:43:d8:79:39:eb:20:1e:a9:59: 4a:fd:90:8a:06:a6:31:49:70:64:90:46:5a:28:51:50:57:d0: 64:19:b6:65:59:71:4c:24:ef:74:f6:af:0e:88:d1:a1:ff:f5: 3b:b6:c6:cc:29:b4:c0:aa:10:1d:46:02:f1:8f:00:26:1f:3e: 66:ab:ce:7f:9c:e7:b3:97:95:31:f3:23:8a:60:d7:16:4d:d2: e4:01:f1:e2:5c:b9:23:25:08:8f:42:cb:6f:d4:d8:08:d3:20: 1f:a3:f4:9c:d7:48:04:45:cf:08:7b:89:3a:20:f4:eb:2a:33: a5:cf:9d:88:c3:2b:c9:f6:ab:b6:cc:29:d9:f8:a7:07:a4:18: 6c:0d:c6:d0:1f:5e:4e:84:f3:c1:cb:fc:e3:f8:ae:71:cb:59: 6d:3b:b8:97:18:9f:04:fd:60:32:69:27:dd:b4:cc:2b:90:8d: 71:16:a8:84:c3:00:27:7b:d8:08:ad:79:2a:a1:97:e8:b9:00: 02:96:62:01:b9:cd:c1:cc:0b:f9:69:72:be:ef:6e:2d:4b:23: 64:1a:0c:76:c7:a2:a0:d0:aa:f5:23:82:99:4e:40:f2:38:8d: 60:06:af:5b:7a:1d:3b:24:c6:22:f5:ad:1a:c5:33:98:55:b7: d1:8e:a8:25 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUYfffGljVWDLOJhcXR2PMKUbyHTcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxNDA2NTUwMFoX DTI2MDQxMzA3MDAwMFowMzExMC8GA1UEAxMoMDg2RkYzMEU1OTg5RDQ2MjM1MUEz MTc2NkNBQjRFM0NENDZCQ0Y4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPot8CbYI0icv+iLZTe2gYdhWwgKNNJl4/51Kr9qJGyEPhynNz0NpHE8UEQ7 DkTd9qTSA5YblCdFdNK+BkSN8RgJbWHpBHB/gP03GeGHjwwyfYvDau1eGQbOItTW ZARxWBFt/pca3mz96SfsmUyA3oVd0Sc9ab/ADqmEIHGUuqpBre7Rn0PuMsFRqE8u MIt8Odu5sHI3hqfqvqQ8Q/nJYPjNIb004DnemkFiWDOHQKzzyqXiTP6knrltmrMt vrDk8f7qOmgaH8+MYqmh0e/iMTUkVnPQhDa9zHVOZO0Q1mLOdDkw3JvF5nfQmVh2 Dguv2EwcR7jAxs2NgRmdgHgGaDUCAwEAAaOCAeIwggHeMB0GA1UdDgQWBBQIb/MO WYnUYjUaMXZsq0481GvPhTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDQ4Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAw HgQCAAEwGAMEABtwTQMEAmcWiAMEAWeYjAMEAGfnqzANBgkqhkiG9w0BAQsFAAOC AQEAPQ0WEjiOHWlwQ9h5OesgHqlZSv2QigamMUlwZJBGWihRUFfQZBm2ZVlxTCTv dPavDojRof/1O7bGzCm0wKoQHUYC8Y8AJh8+ZqvOf5zns5eVMfMjimDXFk3S5AHx 4ly5IyUIj0LLb9TYCNMgH6P0nNdIBEXPCHuJOiD06yozpc+diMMryfartswp2fin B6QYbA3G0B9eToTzwcv84/iucctZbTu4lxifBP1gMmkn3bTMK5CNcRaohMMAJ3vY CK15KqGX6LkAApZiAbnNwcwL+Wlyvu9uLUsjZBoMdseioNCq9SOCmU5A8jiNYAav W3odOyTGIvWtGsUzmFW30Y6oJQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net