$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142391.roa File: AS142391.roa (raw, json) Hash identifier: s8xADLh9LNYhuhiSW8UM1LFmrh4W3uwIHU7ZUl+sSJQ= Subject key identifier: C6:81:08:FF:5A:3A:BE:71:88:6A:BC:34:CD:C0:5E:69:93:FD:59:93 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 51FF10DC34F8DD703B7E966ACFF2591E7A7A5FAC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142391.roa Signing time: Tue 10 Dec 2024 05:00:01 +0000 ROA not before: Tue 10 Dec 2024 04:55:01 +0000 ROA not after: Tue 09 Dec 2025 05:00:01 +0000 asID: 142391 IP address blocks: 103.169.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ff:10:dc:34:f8:dd:70:3b:7e:96:6a:cf:f2:59:1e:7a:7a:5f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:01 2024 GMT Not After : Dec 9 05:00:01 2025 GMT Subject: CN=C68108FF5A3ABE71886ABC34CDC05E6993FD5993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:5d:83:f6:a3:dd:42:4e:de:8f:38:8a:01: 30:bc:42:b0:c5:78:d7:dd:48:8d:c6:57:b3:92:7c: 2b:01:2a:53:44:5e:09:34:3e:04:e0:8d:a4:82:d6: 6d:f8:33:6d:ab:f7:63:67:a3:89:8f:70:b7:02:ee: b0:7a:1f:dd:c3:c8:9c:1b:e0:ad:0c:e9:ba:cc:4c: f7:ad:cc:eb:67:b5:b2:cb:3b:0b:0a:79:48:bb:d8: bc:77:95:63:30:10:9e:74:53:bb:e6:c0:b0:87:22: c3:cb:92:20:cf:2c:56:02:2d:92:c5:ca:1f:ec:55: 0a:b6:9e:6b:96:a3:af:f6:58:78:a5:e5:4e:52:86: 31:19:24:f8:a5:6d:ec:95:fd:9d:bb:14:90:c2:8a: 10:7d:ed:80:5f:9e:cf:cf:ba:c2:d9:0b:40:bd:43: cd:f7:c6:87:1b:a4:33:38:60:b7:01:02:17:c8:8b: ea:c5:11:21:0e:cd:b4:14:c4:8f:02:01:d7:5e:e5: 78:64:f8:e3:f8:9f:27:83:e1:f6:8c:cf:26:3c:9a: 39:2a:51:fc:04:80:c2:8f:e3:72:a0:70:d6:f8:e3: d2:ea:b7:40:fa:0b:d5:19:1b:80:ce:5f:d0:ad:d6: c5:f6:0b:7b:2d:78:78:30:c3:28:c7:dd:45:1d:8a: e5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:81:08:FF:5A:3A:BE:71:88:6A:BC:34:CD:C0:5E:69:93:FD:59:93 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142391.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.44.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:c6:c6:43:06:1b:52:f0:d7:c5:7d:5e:7e:c0:f4:80:7a:64: a8:2b:b6:d4:a8:0c:41:e8:35:7b:2a:5b:f0:3b:79:39:a8:f7: 5c:41:c1:50:90:10:d1:76:be:07:10:cc:75:70:c6:4b:e0:8d: c8:44:84:e3:97:0a:fb:dc:e7:72:19:fe:10:2f:d1:92:39:6c: 18:52:c4:02:3d:73:cd:7f:05:c4:59:d2:ac:c7:54:38:c5:2d: 44:bc:19:dd:aa:1a:48:e5:64:0e:7b:b1:50:90:e9:cb:79:1c: 82:58:b6:b3:7b:9c:10:39:2c:4b:33:de:81:15:13:a2:f4:7e: 42:7f:14:de:42:bc:d6:7a:ef:73:98:46:6f:5d:fb:15:61:90: 0a:73:d6:b4:9d:67:2e:91:21:a8:7b:a4:c9:e1:3b:97:6c:f5: b9:ac:68:9b:9a:8e:d9:4b:c8:66:52:11:df:f8:8d:7d:44:dc: 2a:ad:f5:43:73:6c:c8:25:5a:fa:68:4a:f4:d7:d3:f1:81:a4: e0:8c:4d:4f:11:0c:72:0d:fe:c2:35:7d:bf:43:16:30:98:c4: c9:8d:f0:bd:72:8d:41:69:6c:eb:ff:95:9d:4d:62:69:3b:c9: 94:48:3b:99:55:3f:80:43:44:ff:ed:6e:38:4d:cd:a5:f8:7f: d9:95:c9:f9 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUUf8Q3DT43XA7fpZqz/JZHnp6X6wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwMVoX DTI1MTIwOTA1MDAwMVowMzExMC8GA1UEAxMoQzY4MTA4RkY1QTNBQkU3MTg4NkFC QzM0Q0RDMDVFNjk5M0ZENTk5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUzXYP2o91CTt6POIoBMLxCsMV4191IjcZXs5J8KwEqU0ReCTQ+BOCNpILW bfgzbav3Y2ejiY9wtwLusHof3cPInBvgrQzpusxM963M62e1sss7Cwp5SLvYvHeV YzAQnnRTu+bAsIciw8uSIM8sVgItksXKH+xVCraea5ajr/ZYeKXlTlKGMRkk+KVt 7JX9nbsUkMKKEH3tgF+ez8+6wtkLQL1DzffGhxukMzhgtwECF8iL6sURIQ7NtBTE jwIB117leGT44/ifJ4Ph9ozPJjyaOSpR/ASAwo/jcqBw1vjj0uq3QPoL1RkbgM5f 0K3WxfYLey14eDDDKMfdRR2K5ccCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTGgQj/ Wjq+cYhqvDTNwF5pk/1ZkzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM5MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWepLDANBgkqhkiG9w0BAQsFAAOCAQEAjMbGQwYbUvDXxX1efsD0 gHpkqCu21KgMQeg1eypb8Dt5Oaj3XEHBUJAQ0Xa+BxDMdXDGS+CNyESE45cK+9zn chn+EC/RkjlsGFLEAj1zzX8FxFnSrMdUOMUtRLwZ3aoaSOVkDnuxUJDpy3kcgli2 s3ucEDksSzPegRUTovR+Qn8U3kK81nrvc5hGb137FWGQCnPWtJ1nLpEhqHukyeE7 l2z1uaxom5qO2UvIZlIR3/iNfUTcKq31Q3NsyCVa+mhK9NfT8YGk4IxNTxEMcg3+ wjV9v0MWMJjEyY3wvXKNQWls6/+VnU1iaTvJlEg7mVU/gENE/+1uOE3Npfh/2ZXJ +Q== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net