$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142330.roa File: AS142330.roa (raw, json) Hash identifier: Du8KR8fR4DA6rwpvMiZORl2RYBiRFnZpfj1KFCiOVbE= Subject key identifier: 20:B9:BE:BA:CD:E0:88:61:9A:30:4C:E6:C1:B6:F0:4E:59:6E:65:E6 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1F41752EAABB91AD07893941A2E0949614AE875C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142330.roa Signing time: Tue 10 Dec 2024 05:00:27 +0000 ROA not before: Tue 10 Dec 2024 04:55:27 +0000 ROA not after: Tue 09 Dec 2025 05:00:27 +0000 asID: 142330 IP address blocks: 103.168.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:41:75:2e:aa:bb:91:ad:07:89:39:41:a2:e0:94:96:14:ae:87:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:27 2024 GMT Not After : Dec 9 05:00:27 2025 GMT Subject: CN=20B9BEBACDE088619A304CE6C1B6F04E596E65E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:38:2f:2e:44:cb:0d:3f:ab:bd:58:f9:8d: e4:5d:56:16:f5:b5:b9:03:f2:44:30:6f:34:2f:89: 6d:74:6f:2b:db:9f:d5:52:b5:81:a5:e2:9d:9c:f9: c1:76:16:3b:17:82:3e:15:d2:3e:44:a6:72:02:86: f4:ba:b2:a7:c4:12:f2:ec:e8:c1:ac:35:32:f3:b1: bc:99:b3:d9:77:f8:61:2a:a9:2e:95:a6:80:69:27: cf:8e:d7:ab:4d:3e:23:ac:96:1b:b2:de:7f:0f:21: 73:f2:ba:9e:d0:aa:3c:4a:01:2f:9a:65:10:a1:9c: ed:0e:65:ad:f0:bb:45:05:b1:9b:ae:a2:b7:fa:5a: c0:c6:5d:15:4d:65:fb:a3:8d:4e:e3:8b:6d:29:3c: f9:62:fb:c3:bd:6d:9f:e5:31:13:57:b7:b8:14:33: 5b:5b:88:bd:d9:e2:ee:2a:4e:9f:4d:f9:7b:96:02: 3a:50:33:88:2e:61:34:e5:f3:ee:13:14:02:38:9d: 6c:2c:3c:58:fa:cd:de:52:2b:39:1c:5e:30:27:fd: 8a:52:71:57:0b:f9:fd:a9:26:72:1e:aa:3e:1a:da: 09:dd:8f:fe:e4:d3:70:01:e2:fe:c7:bb:c7:f6:d8: d3:ad:00:15:96:c3:a4:12:04:06:45:78:da:5b:04: eb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B9:BE:BA:CD:E0:88:61:9A:30:4C:E6:C1:B6:F0:4E:59:6E:65:E6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.246.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:74:d7:74:fb:29:82:c6:b5:1d:e0:50:03:58:64:76:3e:19: bb:ab:bf:4a:af:ee:e7:52:a7:a7:64:ba:d9:45:be:44:a7:81: ac:fc:03:d5:e2:9c:f9:19:09:06:52:c5:e9:b0:99:6b:2c:21: 4d:c3:d8:16:3d:ea:b4:ae:ef:3e:2e:5e:01:9d:08:4c:f0:38: e7:4e:dc:6d:e7:80:75:14:de:1b:bb:ea:d6:e0:27:96:1f:b4: 69:77:91:2b:4c:90:6e:c6:d1:34:a4:ff:e0:06:c0:ac:26:4b: 66:28:eb:de:88:a9:bf:26:b0:fb:f7:84:af:f6:9c:6d:1e:22: d5:80:62:16:9d:ba:7f:25:b1:a5:8b:f0:15:33:d4:cd:e0:e0: ae:90:6f:db:bf:7c:e5:2d:52:3d:4a:bf:97:d2:e6:1f:9e:02: 2e:f0:c6:a5:76:99:07:eb:e4:e1:2a:ab:a6:c2:7a:4e:2f:75: e3:51:3b:af:6b:87:46:80:51:85:e6:64:ea:fc:06:d2:b0:7c: 8d:3b:9d:c7:4e:f8:ea:f2:ba:25:ae:2e:a5:ec:c1:e9:ca:24: 82:21:6e:14:22:c5:b7:8c:bd:97:72:b9:ba:58:f7:f2:89:5e: dc:1a:bf:2f:6d:d3:03:d0:df:76:cd:76:d9:e3:d2:22:1b:e3: 24:ce:f0:10 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUH0F1Lqq7ka0HiTlBouCUlhSuh1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUyN1oX DTI1MTIwOTA1MDAyN1owMzExMC8GA1UEAxMoMjBCOUJFQkFDREUwODg2MTlBMzA0 Q0U2QzFCNkYwNEU1OTZFNjVFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7tOC8uRMsNP6u9WPmN5F1WFvW1uQPyRDBvNC+JbXRvK9uf1VK1gaXinZz5 wXYWOxeCPhXSPkSmcgKG9Lqyp8QS8uzowaw1MvOxvJmz2Xf4YSqpLpWmgGknz47X q00+I6yWG7Lefw8hc/K6ntCqPEoBL5plEKGc7Q5lrfC7RQWxm66it/pawMZdFU1l +6ONTuOLbSk8+WL7w71tn+UxE1e3uBQzW1uIvdni7ipOn035e5YCOlAziC5hNOXz 7hMUAjidbCw8WPrN3lIrORxeMCf9ilJxVwv5/akmch6qPhraCd2P/uTTcAHi/se7 x/bY060AFZbDpBIEBkV42lsE65UCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQgub66 zeCIYZowTObBtvBOWW5l5jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeo9jANBgkqhkiG9w0BAQsFAAOCAQEAbXTXdPspgsa1HeBQA1hk dj4Zu6u/Sq/u51Knp2S62UW+RKeBrPwD1eKc+RkJBlLF6bCZaywhTcPYFj3qtK7v Pi5eAZ0ITPA4507cbeeAdRTeG7vq1uAnlh+0aXeRK0yQbsbRNKT/4AbArCZLZijr 3oipvyaw+/eEr/acbR4i1YBiFp26fyWxpYvwFTPUzeDgrpBv27985S1SPUq/l9Lm H54CLvDGpXaZB+vk4SqrpsJ6Ti9141E7r2uHRoBRheZk6vwG0rB8jTudx0746vK6 Ja4upezB6cokgiFuFCLFt4y9l3K5ulj38ole3Bq/L23TA9Dfds122ePSIhvjJM7w EA== -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:47 2025 by rpki-client on console.sobornost.net