$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141103.roa File: AS141103.roa (raw, json) Hash identifier: FxMX+CiPlvNz/ZZLyJOC2VMY5ycFN0u+kNA3r942qC8= Subject key identifier: 0D:99:D3:F5:BC:C3:A1:72:68:F0:37:93:0C:3A:4F:8C:3D:A0:E2:4D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 538AFB751FF4E15DF82A9A50234255B596435AAE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141103.roa Signing time: Tue 10 Dec 2024 05:00:04 +0000 ROA not before: Tue 10 Dec 2024 04:55:04 +0000 ROA not after: Tue 09 Dec 2025 05:00:04 +0000 asID: 141103 IP address blocks: 103.156.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8a:fb:75:1f:f4:e1:5d:f8:2a:9a:50:23:42:55:b5:96:43:5a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:04 2024 GMT Not After : Dec 9 05:00:04 2025 GMT Subject: CN=0D99D3F5BCC3A17268F037930C3A4F8C3DA0E24D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:c4:45:e5:2f:e5:e3:93:47:ba:3a:cf:b4: f4:2f:08:a6:2a:93:fa:00:b4:e7:d6:3a:09:11:25: e3:b4:4a:db:5c:d6:7f:5f:e1:2f:c0:93:f2:35:ed: a4:58:fd:59:f7:4e:62:bd:61:5f:97:05:4a:c0:c4: e5:fb:e8:b4:e3:9a:59:05:52:72:14:64:92:8b:4a: 3b:bd:1e:7c:e6:71:4c:6a:3b:44:27:2e:51:f3:2d: 18:78:6d:87:05:37:e0:5e:eb:45:de:38:21:fe:4f: 71:52:15:ab:9e:dc:c2:39:66:fc:f2:ad:5c:5d:19: a7:46:63:b8:25:c4:0f:3c:21:7f:6d:78:ed:0a:72: b1:f9:95:7a:fa:d4:cd:32:e9:f3:8f:82:bb:ac:ac: 25:0e:91:76:9e:eb:f6:db:f1:b5:8a:7a:16:86:1d: 81:b4:4d:d0:cf:68:5c:5b:05:61:75:24:cd:78:19: b1:92:68:4f:81:25:1e:63:71:1e:34:89:85:43:64: 58:c3:83:1b:32:06:cc:b2:b3:aa:2e:7c:ab:85:34: 9a:ba:02:f6:6d:55:19:7c:b8:9b:5a:6b:9c:d5:7c: 28:d2:63:ed:8f:65:a5:e0:92:1e:d9:05:1a:40:51: 9d:eb:3c:93:22:2b:0e:f3:56:89:fe:6b:31:50:42: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:99:D3:F5:BC:C3:A1:72:68:F0:37:93:0C:3A:4F:8C:3D:A0:E2:4D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141103.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.252.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:10:fd:ac:06:ac:95:1f:89:87:9f:b9:66:fc:52:d6:fc:b2: 64:39:8b:4f:75:f7:6c:f9:9e:bf:3d:4d:f3:46:05:d7:53:97: 98:78:32:69:40:4d:5d:9b:3c:79:c4:51:c2:49:74:0d:50:c2: bf:64:05:51:27:ec:f1:5b:31:b8:19:90:b1:c5:5b:b2:76:e7: 9a:19:81:45:63:ba:46:4b:9c:6e:b2:3c:38:e1:98:ab:70:ef: 6a:2f:00:f3:fb:33:b5:d0:d7:13:07:66:6f:06:3e:56:8e:52: 4c:a8:04:fb:f6:33:c6:5d:9d:c2:18:62:33:a2:b0:1e:c0:81: 05:6f:c5:f8:fa:b3:5b:d0:6a:09:a6:9c:1f:1a:81:cc:e3:6b: 7b:af:56:36:e7:98:d7:2b:91:fb:23:8e:54:25:51:ea:8c:b6: 32:4e:cc:af:a3:fd:b6:56:59:05:e2:4e:c9:7e:9b:bf:0e:48: a1:98:58:a7:a1:17:33:18:20:2b:af:d5:b5:fd:9e:55:29:57: b2:5f:6a:2a:1e:de:60:a8:59:4a:35:5d:ba:3a:40:e1:2e:54: dc:bc:2e:a0:0f:7a:11:96:cb:30:de:d9:46:68:4b:6b:4a:5d: db:8d:a7:43:98:28:a1:43:e1:4c:e1:f7:38:9c:45:5f:be:a3: 07:d8:ea:88 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUU4r7dR/04V34KppQI0JVtZZDWq4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwNFoX DTI1MTIwOTA1MDAwNFowMzExMC8GA1UEAxMoMEQ5OUQzRjVCQ0MzQTE3MjY4RjAz NzkzMEMzQTRGOEMzREEwRTI0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKDyxEXlL+Xjk0e6Os+09C8IpiqT+gC059Y6CREl47RK21zWf1/hL8CT8jXt pFj9WfdOYr1hX5cFSsDE5fvotOOaWQVSchRkkotKO70efOZxTGo7RCcuUfMtGHht hwU34F7rRd44If5PcVIVq57cwjlm/PKtXF0Zp0ZjuCXEDzwhf2147QpysfmVevrU zTLp84+Cu6ysJQ6Rdp7r9tvxtYp6FoYdgbRN0M9oXFsFYXUkzXgZsZJoT4ElHmNx HjSJhUNkWMODGzIGzLKzqi58q4U0mroC9m1VGXy4m1prnNV8KNJj7Y9lpeCSHtkF GkBRnes8kyIrDvNWif5rMVBCpM8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQNmdP1 vMOhcmjwN5MMOk+MPaDiTTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTEwMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWec/DANBgkqhkiG9w0BAQsFAAOCAQEADBD9rAaslR+Jh5+5ZvxS 1vyyZDmLT3X3bPmevz1N80YF11OXmHgyaUBNXZs8ecRRwkl0DVDCv2QFUSfs8Vsx uBmQscVbsnbnmhmBRWO6RkucbrI8OOGYq3Dvai8A8/sztdDXEwdmbwY+Vo5STKgE +/Yzxl2dwhhiM6KwHsCBBW/F+PqzW9BqCaacHxqBzONre69WNueY1yuR+yOOVCVR 6oy2Mk7Mr6P9tlZZBeJOyX6bvw5IoZhYp6EXMxggK6/Vtf2eVSlXsl9qKh7eYKhZ SjVdujpA4S5U3LwuoA96EZbLMN7ZRmhLa0pd242nQ5gooUPhTOH3OJxFX76jB9jq iA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net