$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142329.roa File: AS142329.roa (raw, json) Hash identifier: zSnJwF20fEUBYc8FghpxTAuBpyg0UXHZO+t0NPHV8+M= Subject key identifier: 78:8A:17:74:D5:5F:84:7E:1C:12:49:78:B2:BC:3B:8F:F2:13:00:75 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B5E7195E79202EFFD57741FE0051F5707044E21 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142329.roa Signing time: Tue 10 Dec 2024 05:00:08 +0000 ROA not before: Tue 10 Dec 2024 04:55:08 +0000 ROA not after: Tue 09 Dec 2025 05:00:08 +0000 asID: 142329 IP address blocks: 103.168.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5e:71:95:e7:92:02:ef:fd:57:74:1f:e0:05:1f:57:07:04:4e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:08 2024 GMT Not After : Dec 9 05:00:08 2025 GMT Subject: CN=788A1774D55F847E1C124978B2BC3B8FF2130075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:df:10:4a:86:e5:78:2e:32:09:1f:fd:ed:36: d7:e2:2d:fa:c4:f9:42:7b:67:ee:12:78:a0:2f:ec: c3:2b:9f:87:23:5c:fa:f3:cc:b0:a8:5b:b2:06:77: 2b:2c:fc:f1:5a:0b:f6:02:4e:2c:86:d8:29:04:90: b6:1e:44:b3:2c:c8:6b:14:cc:4c:c6:88:9d:f9:5a: 9b:cd:49:17:6c:99:dd:72:14:35:ec:e8:f2:7f:aa: 15:9e:5f:8b:de:e7:ec:02:2e:2e:5e:e3:81:c3:d9: 69:9a:c1:81:b0:2a:11:57:c3:93:72:c4:85:7b:47: 3a:f9:d9:a3:e9:55:fe:33:ed:4d:b4:41:5a:1c:b7: 4b:83:81:55:08:81:10:77:3c:4e:00:1c:be:bf:fe: 08:c2:9c:39:d1:fb:35:b0:63:a2:31:c6:c5:46:0c: d8:1b:44:04:d1:95:10:91:80:7f:74:e6:d0:1a:10: 77:93:5a:78:e8:95:5f:20:92:0e:52:48:84:27:f4: b7:03:ae:49:73:aa:7a:fb:5c:4e:b6:62:1d:21:a4: 18:6d:53:2b:24:f9:e0:d9:ee:c4:52:c1:30:21:11: 2f:4d:8f:12:14:17:dc:63:f5:fa:9f:11:c8:e9:24: e2:f4:c5:43:9f:a1:7b:fd:36:36:be:22:12:1b:23: e2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8A:17:74:D5:5F:84:7E:1C:12:49:78:B2:BC:3B:8F:F2:13:00:75 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142329.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.21.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:df:c0:90:30:e6:21:4e:97:3d:6d:d2:c8:ae:e9:f0:fb:f1: 32:8c:74:79:6b:be:43:9f:54:1a:8c:11:74:98:d6:fd:78:ad: ff:dc:b1:aa:c4:4a:43:ab:ce:e3:d1:62:0d:55:0f:c6:be:13: ed:bb:2d:92:69:bf:96:ff:f5:7f:b7:91:ae:76:60:f1:45:0e: 39:f3:43:10:4f:d7:44:cd:8c:47:5b:ee:bc:e0:f2:0c:f8:57: 29:45:44:4f:e5:0b:33:75:65:e0:a8:f9:4a:48:cd:c8:a8:77: 5f:38:d1:4d:67:78:a4:66:86:81:1a:a6:9b:8c:48:75:a7:42: 03:6c:e0:53:48:3e:7f:3f:9c:04:d8:2d:0a:b3:0e:d7:78:16: 89:e7:23:41:22:1f:0b:50:0a:2e:c6:35:22:90:c0:f3:e4:88: ca:83:24:c7:20:49:f2:09:59:f9:7b:47:ad:38:6a:8f:80:bd: 11:00:d1:93:18:aa:96:4a:64:71:21:cf:97:2d:6c:95:f7:6e: b5:18:f1:a2:e1:b5:f1:c3:d9:7a:3b:a1:e3:5f:b6:e9:38:9f: b6:d7:32:bd:10:91:e4:6c:e5:7b:d3:85:53:28:a7:93:37:76: 00:23:33:dd:b9:78:d6:0f:31:70:a0:a9:47:16:f8:d2:e1:0d: a7:7c:ed:c6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUO15xleeSAu/9V3Qf4AUfVwcETiEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwOFoX DTI1MTIwOTA1MDAwOFowMzExMC8GA1UEAxMoNzg4QTE3NzRENTVGODQ3RTFDMTI0 OTc4QjJCQzNCOEZGMjEzMDA3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnfEEqG5XguMgkf/e021+It+sT5Qntn7hJ4oC/swyufhyNc+vPMsKhbsgZ3 Kyz88VoL9gJOLIbYKQSQth5EsyzIaxTMTMaInflam81JF2yZ3XIUNezo8n+qFZ5f i97n7AIuLl7jgcPZaZrBgbAqEVfDk3LEhXtHOvnZo+lV/jPtTbRBWhy3S4OBVQiB EHc8TgAcvr/+CMKcOdH7NbBjojHGxUYM2BtEBNGVEJGAf3Tm0BoQd5NaeOiVXyCS DlJIhCf0twOuSXOqevtcTrZiHSGkGG1TKyT54NnuxFLBMCERL02PEhQX3GP1+p8R yOkk4vTFQ5+he/02Nr4iEhsj4q8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR4ihd0 1V+EfhwSSXiyvDuP8hMAdTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMyOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeoFTANBgkqhkiG9w0BAQsFAAOCAQEAXd/AkDDmIU6XPW3SyK7p 8PvxMox0eWu+Q59UGowRdJjW/Xit/9yxqsRKQ6vO49FiDVUPxr4T7bstkmm/lv/1 f7eRrnZg8UUOOfNDEE/XRM2MR1vuvODyDPhXKUVET+ULM3Vl4Kj5SkjNyKh3XzjR TWd4pGaGgRqmm4xIdadCA2zgU0g+fz+cBNgtCrMO13gWiecjQSIfC1AKLsY1IpDA 8+SIyoMkxyBJ8glZ+XtHrThqj4C9EQDRkxiqlkpkcSHPly1slfdutRjxouG18cPZ ejuh41+26TifttcyvRCR5Gzle9OFUyinkzd2ACMz3bl41g8xcKCpRxb40uENp3zt xg== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net