$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141123.roa File: AS141123.roa (raw, json) Hash identifier: clK0mlryzSuO2vG+5tiQ7e6AMGe8GCUvbV76LsAoRK0= Subject key identifier: 43:49:6F:45:7C:CB:4E:63:CC:E7:48:C1:A8:7E:47:85:FF:95:15:50 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 01C35EAE0CB9DBA7CFCD54A9C078F0956EE38184 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141123.roa Signing time: Tue 10 Dec 2024 05:00:03 +0000 ROA not before: Tue 10 Dec 2024 04:55:03 +0000 ROA not after: Tue 09 Dec 2025 05:00:03 +0000 asID: 141123 IP address blocks: 103.158.28.0/24 maxlen: 24 103.170.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c3:5e:ae:0c:b9:db:a7:cf:cd:54:a9:c0:78:f0:95:6e:e3:81:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:03 2024 GMT Not After : Dec 9 05:00:03 2025 GMT Subject: CN=43496F457CCB4E63CCE748C1A87E4785FF951550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:79:81:33:58:6a:fe:37:fc:d3:64:2f:5d: fd:5c:82:a8:07:70:97:8a:57:51:d9:54:2c:f3:cf: 2d:67:ec:5f:b1:0c:ff:1c:3a:8d:dd:de:a0:1f:e0: 4f:a6:21:58:1d:e1:92:1b:12:cc:8b:0a:aa:47:42: 73:d8:6e:0d:f2:da:9b:13:77:fb:63:71:38:ba:1c: 33:3d:7b:08:5d:a0:5f:4d:d5:eb:91:74:4c:0e:e4: a0:a4:71:a2:7c:fb:e9:4c:5c:21:b2:bc:07:05:45: 86:cb:24:3b:bf:04:2d:e3:2e:27:2d:fb:51:65:cb: 8d:67:8b:57:40:26:e8:39:3c:7b:50:c3:ba:a9:67: 74:67:83:80:29:27:3e:2b:ae:7d:cb:66:1a:a1:fa: 36:d7:0b:ec:3d:54:09:ba:2a:3a:64:2f:40:9a:d8: 27:13:fb:76:d4:76:a4:91:eb:d4:5a:37:aa:1c:cc: 49:db:37:28:8e:0c:4a:97:c5:04:7a:37:a7:2d:3b: 11:f4:69:3e:3e:8d:8c:e0:9a:1f:0f:92:b1:c8:ae: 8c:bd:04:74:cd:72:01:96:d2:ff:81:04:98:56:c0: f3:7a:08:56:68:ed:cc:45:dd:1a:42:a1:be:6c:8c: c8:95:25:15:59:6c:b4:78:4d:be:76:cd:5e:28:71: 9c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:49:6F:45:7C:CB:4E:63:CC:E7:48:C1:A8:7E:47:85:FF:95:15:50 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141123.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.28.0/24 103.170.22.0/24 Signature Algorithm: sha256WithRSAEncryption 82:c2:50:2c:14:fa:b2:49:0f:47:2e:7b:98:fe:48:48:38:7c: 5d:78:77:a9:b5:49:37:fc:5c:41:bb:e9:df:b0:56:7b:ae:51: 31:e4:17:83:61:90:8b:7e:62:70:c8:b3:c6:cd:cb:28:9d:96: 62:2a:46:d6:f5:4f:68:18:be:e1:9f:5a:33:31:0d:d5:8d:50: dd:8c:05:d2:ba:16:13:d0:3d:6a:98:79:8d:ec:6f:77:a2:92: 04:4a:2b:9d:f9:3b:92:34:93:ff:60:2c:2f:67:71:a2:37:65: ae:c4:ff:6d:74:92:cd:b9:1a:e7:01:a5:2b:c3:75:3e:c5:d4: 86:13:df:b2:71:70:be:1b:79:f4:8b:c0:13:39:44:b7:a2:b1: a0:ce:c3:b1:56:61:ec:2d:bd:32:99:57:ba:74:fe:7d:86:5e: ee:2d:04:1d:82:72:0c:45:39:b8:b0:18:25:c1:38:05:ac:80: fe:8b:a2:06:23:5a:33:b3:83:0e:9f:f0:57:ec:22:d6:73:da: d8:80:ef:c3:77:ef:ce:88:ca:d2:57:25:6e:0a:0e:8d:91:81: e7:18:4c:e2:fb:12:a5:db:c5:85:04:0b:34:bd:bb:2b:ce:38: 3a:0c:e3:7f:16:3c:92:f1:9b:9f:f2:9f:a1:68:98:9e:cf:3b: 59:e1:0d:12 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUAcNergy526fPzVSpwHjwlW7jgYQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwM1oX DTI1MTIwOTA1MDAwM1owMzExMC8GA1UEAxMoNDM0OTZGNDU3Q0NCNEU2M0NDRTc0 OEMxQTg3RTQ3ODVGRjk1MTU1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbyeYEzWGr+N/zTZC9d/VyCqAdwl4pXUdlULPPPLWfsX7EM/xw6jd3eoB/g T6YhWB3hkhsSzIsKqkdCc9huDfLamxN3+2NxOLocMz17CF2gX03V65F0TA7koKRx onz76UxcIbK8BwVFhsskO78ELeMuJy37UWXLjWeLV0Am6Dk8e1DDuqlndGeDgCkn PiuufctmGqH6NtcL7D1UCboqOmQvQJrYJxP7dtR2pJHr1Fo3qhzMSds3KI4MSpfF BHo3py07EfRpPj6NjOCaHw+SsciujL0EdM1yAZbS/4EEmFbA83oIVmjtzEXdGkKh vmyMyJUlFVlstHhNvnbNXihxnHMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBRDSW9F fMtOY8znSMGofkeF/5UVUDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTEyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGeeHAMEAGeqFjANBgkqhkiG9w0BAQsFAAOCAQEAgsJQLBT6skkP Ry57mP5ISDh8XXh3qbVJN/xcQbvp37BWe65RMeQXg2GQi35icMizxs3LKJ2WYipG 1vVPaBi+4Z9aMzEN1Y1Q3YwF0roWE9A9aph5jexvd6KSBEornfk7kjST/2AsL2dx ojdlrsT/bXSSzbka5wGlK8N1PsXUhhPfsnFwvht59IvAEzlEt6KxoM7DsVZh7C29 MplXunT+fYZe7i0EHYJyDEU5uLAYJcE4BayA/ouiBiNaM7ODDp/wV+wi1nPa2IDv w3fvzojK0lclbgoOjZGB5xhM4vsSpdvFhQQLNL27K844OgzjfxY8kvGbn/KfoWiY ns87WeENEg== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net