$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141961.roa File: AS141961.roa (raw, json) Hash identifier: I+Y/+Bte8c8omvyH9++6A1zwk0RReMxK1MJbvdCX6VY= Subject key identifier: 28:B9:71:54:02:A7:70:84:77:D5:C1:33:B8:DC:A0:52:D7:E9:71:6F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3F39C3691FA3E00A46F5487BD82840A33A66D367 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141961.roa Signing time: Tue 10 Dec 2024 05:00:19 +0000 ROA not before: Tue 10 Dec 2024 04:55:19 +0000 ROA not after: Tue 09 Dec 2025 05:00:19 +0000 asID: 141961 IP address blocks: 103.166.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:39:c3:69:1f:a3:e0:0a:46:f5:48:7b:d8:28:40:a3:3a:66:d3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:19 2024 GMT Not After : Dec 9 05:00:19 2025 GMT Subject: CN=28B9715402A7708477D5C133B8DCA052D7E9716F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:33:de:38:67:cd:b5:1e:3f:45:db:18:64:bb: 23:aa:ec:b2:28:5f:b3:0d:56:28:72:8c:6a:ca:61: 81:19:05:4f:8b:e5:6e:53:5c:d4:06:8f:d6:5e:5d: 3c:aa:8d:49:cf:19:50:c6:29:59:bf:73:83:c0:9c: 83:47:8b:18:d2:fd:ba:19:c5:71:67:32:fb:be:59: 66:f8:12:f1:3f:6d:54:40:91:06:b9:47:b2:f7:00: 38:e1:91:35:09:79:e5:ad:cf:3d:ca:fb:96:7f:3c: bc:b4:0a:9e:cc:33:fc:af:90:91:6f:2a:13:e9:90: 13:30:2a:09:d2:e6:b5:53:16:21:a4:2d:12:81:28: 1f:a1:1c:9f:17:d7:ca:85:5a:06:0e:7d:ba:af:5e: 23:5c:19:1c:5d:73:ed:cc:19:5d:71:fd:8d:46:15: 1b:1a:13:2a:1b:3b:c0:2b:16:c1:2d:27:a5:3d:8e: ba:05:dc:91:dc:52:f8:93:3a:e1:54:0f:e3:8b:48: c9:dd:56:05:eb:9d:ec:43:f7:c2:4c:08:8a:f6:b4: 3f:2f:3b:e5:ec:4b:86:24:a4:92:24:1b:5d:7e:33: aa:11:ab:69:2c:be:9b:2c:7f:98:f6:63:2f:b5:f3: 1b:1a:7f:23:ce:f5:1f:ae:9d:25:67:86:db:b1:30: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B9:71:54:02:A7:70:84:77:D5:C1:33:B8:DC:A0:52:D7:E9:71:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141961.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.192.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:6f:c5:95:3b:af:0e:be:93:3e:1f:3a:43:78:19:9a:5f:3a: 0c:f4:23:da:77:00:8b:bd:fe:d3:e0:ac:a6:e0:49:78:b0:13: ed:ad:4e:0b:0b:7d:44:5c:9d:d1:98:af:64:bf:90:00:8e:c3: 1d:be:20:2d:61:0c:31:61:34:26:29:fd:35:77:c9:4f:89:7d: 58:93:08:17:35:f6:69:8e:12:7a:db:14:79:d9:cf:86:f4:13: 35:3c:05:22:26:1a:a3:55:04:36:16:85:88:9b:49:5a:72:48: 3a:c3:cc:45:b7:16:97:36:79:a7:33:1e:16:c7:97:d6:36:82: 24:5d:da:a5:e2:e0:b7:25:36:5c:3c:1e:ea:59:61:3c:7e:46: bb:96:76:d4:70:f8:4e:35:f9:1d:a9:78:66:34:eb:ff:56:3a: c5:ff:a5:b8:e8:81:45:01:76:a7:3e:a4:33:77:ed:d8:8e:ef: 90:6d:fe:dd:80:b9:b1:db:ed:c6:95:fc:9f:46:18:a0:be:d5: 0f:10:1d:a8:e6:77:8d:8e:4c:4c:91:77:ec:48:74:e6:68:1a: a8:b9:a3:46:38:50:41:d7:f0:b2:76:21:7f:5e:de:b4:40:28: 33:ed:ba:5b:61:f7:0f:5a:15:7f:18:a4:b3:51:06:4c:67:25: 57:a6:b7:49 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUPznDaR+j4ApG9Uh72ChAozpm02cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxOVoX DTI1MTIwOTA1MDAxOVowMzExMC8GA1UEAxMoMjhCOTcxNTQwMkE3NzA4NDc3RDVD MTMzQjhEQ0EwNTJEN0U5NzE2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN8z3jhnzbUeP0XbGGS7I6rssihfsw1WKHKMasphgRkFT4vlblNc1AaP1l5d PKqNSc8ZUMYpWb9zg8Ccg0eLGNL9uhnFcWcy+75ZZvgS8T9tVECRBrlHsvcAOOGR NQl55a3PPcr7ln88vLQKnswz/K+QkW8qE+mQEzAqCdLmtVMWIaQtEoEoH6EcnxfX yoVaBg59uq9eI1wZHF1z7cwZXXH9jUYVGxoTKhs7wCsWwS0npT2OugXckdxS+JM6 4VQP44tIyd1WBeud7EP3wkwIiva0Py875exLhiSkkiQbXX4zqhGraSy+myx/mPZj L7XzGxp/I871H66dJWeG27EwiUsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQouXFU AqdwhHfVwTO43KBS1+lxbzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTk2MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGemwDANBgkqhkiG9w0BAQsFAAOCAQEADm/FlTuvDr6TPh86Q3gZ ml86DPQj2ncAi73+0+CspuBJeLAT7a1OCwt9RFyd0ZivZL+QAI7DHb4gLWEMMWE0 Jin9NXfJT4l9WJMIFzX2aY4SetsUednPhvQTNTwFIiYao1UENhaFiJtJWnJIOsPM RbcWlzZ5pzMeFseX1jaCJF3apeLgtyU2XDwe6llhPH5Gu5Z21HD4TjX5Hal4ZjTr /1Y6xf+luOiBRQF2pz6kM3ft2I7vkG3+3YC5sdvtxpX8n0YYoL7VDxAdqOZ3jY5M TJF37Eh05mgaqLmjRjhQQdfwsnYhf17etEAoM+26W2H3D1oVfxiks1EGTGclV6a3 SQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net