$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141137.roa File: AS141137.roa (raw, json) Hash identifier: YrIyueyqDpFdN9AQvGLve0zHh+ZrI+ZOpKdWchi/pU4= Subject key identifier: FC:81:D3:A1:FD:8D:70:69:C6:B6:FD:8F:A0:48:A5:4E:7B:A6:C1:C9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0C5512C92E208A45B1E42BFC2DFEC5C7A5C70AFF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141137.roa Signing time: Thu 20 Mar 2025 05:08:13 +0000 ROA not before: Thu 20 Mar 2025 05:03:13 +0000 ROA not after: Thu 19 Mar 2026 05:08:13 +0000 asID: 141137 IP address blocks: 103.167.11.0/24 maxlen: 24 117.102.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:55:12:c9:2e:20:8a:45:b1:e4:2b:fc:2d:fe:c5:c7:a5:c7:0a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 20 05:03:13 2025 GMT Not After : Mar 19 05:08:13 2026 GMT Subject: CN=FC81D3A1FD8D7069C6B6FD8FA048A54E7BA6C1C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:2f:2a:8b:1e:06:35:a9:e1:61:ae:80:2a: 89:6a:6d:f5:1c:32:d8:57:8a:2c:2f:15:07:ea:31: e6:47:b6:97:4d:1a:db:46:97:47:f9:c3:3a:ea:16: 9e:7a:4a:9c:db:5e:4b:aa:1b:69:ab:f9:fb:1a:57: c2:d4:28:7a:d8:00:ba:a2:60:3f:44:38:5d:d8:9a: 96:44:8d:7f:ed:a6:e8:d2:8f:4b:45:34:bd:4e:22: 9e:08:d1:a0:43:c4:fb:86:f2:9a:a4:81:4d:82:96: 90:a5:08:90:97:5e:05:10:02:de:d9:ea:15:5e:d6: 92:f3:5b:ab:78:c5:ed:90:28:16:e6:8f:48:7e:22: ca:df:84:db:13:c6:c1:ef:70:c0:f0:cd:63:0e:61: 25:2f:08:41:81:07:2e:8a:8b:ad:d1:4a:44:8f:78: 4e:fc:5a:fd:81:1e:4f:5b:cf:bd:27:65:eb:c1:20: bc:8f:22:7b:7e:17:5c:9f:64:5a:2c:34:6f:69:fd: 18:a4:3f:8f:3f:80:d4:15:79:f9:63:ac:1d:4e:dd: 6a:0c:7e:c3:05:f9:4a:ae:07:0a:b3:9a:6e:9c:8e: 2a:5b:76:ca:e3:aa:62:b8:a7:0c:cd:36:31:da:e9: 09:ed:95:9d:48:f0:59:c0:83:cd:d1:38:ab:77:04: f7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:81:D3:A1:FD:8D:70:69:C6:B6:FD:8F:A0:48:A5:4E:7B:A6:C1:C9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.11.0/24 117.102.162.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:55:b6:8a:d2:aa:19:77:29:c4:9a:ea:03:3c:e5:8c:a0:60: 93:02:db:d1:38:68:ed:0f:3d:c2:47:91:80:e0:a0:ef:c6:32: 6c:85:10:b6:4a:fc:c1:5a:a1:41:6c:21:df:be:6e:af:47:72: 3d:de:0d:52:bc:5b:de:37:d8:5d:38:dd:58:12:a3:f1:e3:c2: ba:a3:40:c1:51:7b:a8:e4:8c:25:91:d5:5c:4c:26:cc:31:7d: d0:ef:c4:2e:2e:28:33:46:c4:90:d9:40:ac:51:b2:d7:14:39: fd:15:a2:a6:9b:6e:1a:21:7e:c3:bb:cd:62:d8:58:ff:36:65: 1f:ab:3f:42:68:6b:f6:96:55:ad:fa:d6:87:63:4a:f2:9e:2b: 75:32:ba:90:e2:ed:b3:19:0b:90:b0:b2:1d:da:26:8c:fe:1b: e3:9e:6f:d7:d5:a6:fa:33:0f:51:63:c9:5d:c1:a3:47:90:50: 77:ed:03:7f:f3:ff:a3:3d:d9:a1:f7:37:fe:47:f2:64:14:48: bf:83:e4:ea:b3:ff:f7:da:0f:43:aa:b6:62:42:9d:a7:d7:77: ed:0a:d0:17:f1:98:12:52:c8:f2:d6:a0:71:8a:65:e2:7c:c9: 6e:bd:16:e8:76:62:1f:bf:b0:0a:93:6d:58:43:74:2e:42:7a: b5:e4:4d:14 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUDFUSyS4gikWx5Cv8Lf7Fx6XHCv8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyMDA1MDMxM1oX DTI2MDMxOTA1MDgxM1owMzExMC8GA1UEAxMoRkM4MUQzQTFGRDhENzA2OUM2QjZG RDhGQTA0OEE1NEU3QkE2QzFDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuRLyqLHgY1qeFhroAqiWpt9Rwy2FeKLC8VB+ox5ke2l00a20aXR/nDOuoW nnpKnNteS6obaav5+xpXwtQoetgAuqJgP0Q4XdialkSNf+2m6NKPS0U0vU4ingjR oEPE+4bymqSBTYKWkKUIkJdeBRAC3tnqFV7WkvNbq3jF7ZAoFuaPSH4iyt+E2xPG we9wwPDNYw5hJS8IQYEHLoqLrdFKRI94Tvxa/YEeT1vPvSdl68EgvI8ie34XXJ9k Wiw0b2n9GKQ/jz+A1BV5+WOsHU7dagx+wwX5Sq4HCrOabpyOKlt2yuOqYrinDM02 MdrpCe2VnUjwWcCDzdE4q3cE96UCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBT8gdOh /Y1waca2/Y+gSKVOe6bByTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTEzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGenCwMEAXVmojANBgkqhkiG9w0BAQsFAAOCAQEAO1W2itKqGXcp xJrqAzzljKBgkwLb0Tho7Q89wkeRgOCg78YybIUQtkr8wVqhQWwh375ur0dyPd4N Urxb3jfYXTjdWBKj8ePCuqNAwVF7qOSMJZHVXEwmzDF90O/ELi4oM0bEkNlArFGy 1xQ5/RWipptuGiF+w7vNYthY/zZlH6s/Qmhr9pZVrfrWh2NK8p4rdTK6kOLtsxkL kLCyHdomjP4b455v19Wm+jMPUWPJXcGjR5BQd+0Df/P/oz3Zofc3/kfyZBRIv4Pk 6rP/99oPQ6q2YkKdp9d37QrQF/GYElLI8tagcYpl4nzJbr0W6HZiH7+wCpNtWEN0 LkJ6teRNFA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net