$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147078.roa File: AS147078.roa (raw, json) Hash identifier: ngDhgxOZq1a7x0nhsc5Jmys3wCDQW0GM6s6nQGxpZIM= Subject key identifier: 06:8B:EF:25:3C:D6:C4:15:C6:FC:1D:7F:C2:60:8E:D8:A8:36:13:84 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 21FEF852FE9F6890134729DBDD51F4A7A76AA9FA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147078.roa Signing time: Tue 31 Dec 2024 01:57:01 +0000 ROA not before: Tue 31 Dec 2024 01:52:01 +0000 ROA not after: Tue 30 Dec 2025 01:57:01 +0000 asID: 147078 IP address blocks: 2001:df3:b9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:fe:f8:52:fe:9f:68:90:13:47:29:db:dd:51:f4:a7:a7:6a:a9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 31 01:52:01 2024 GMT Not After : Dec 30 01:57:01 2025 GMT Subject: CN=068BEF253CD6C415C6FC1D7FC2608ED8A8361384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:65:48:6e:fc:03:69:aa:28:92:a6:8f:9f:49: 33:57:56:1e:c7:9c:46:a3:35:01:3e:95:1a:f0:06: 45:e4:69:77:dc:34:f3:de:52:6c:03:e4:05:4b:20: 83:c2:4b:b2:f6:b1:70:80:fa:b0:8d:cb:69:44:b2: 12:51:98:0d:2c:cc:6c:3a:46:e6:0e:4d:19:57:39: ad:82:3f:2c:70:8a:06:4c:06:e1:06:f9:d6:38:6c: a6:71:5a:76:29:26:71:db:d8:01:fc:af:3c:29:92: 0d:1c:4b:40:92:49:b7:72:fd:39:5d:56:70:86:96: b8:c8:39:2e:8e:08:e4:bc:7c:17:9a:6f:24:1f:3b: d8:dd:39:5a:48:f8:77:fc:0b:ae:67:da:db:52:5a: 9d:64:c6:e2:01:39:8b:80:f3:4a:82:bc:51:95:c9: fc:5d:e9:c6:0b:66:53:b5:c9:3a:ba:0d:5b:61:95: 27:3d:19:a5:59:47:66:ee:d5:19:db:8c:51:78:5c: 42:43:05:f8:41:82:5d:2a:45:57:fc:b4:7b:12:1a: 56:a8:cd:a8:85:c6:17:5f:74:6e:54:0b:6f:62:81: c4:1d:be:4d:8f:b2:b7:0f:77:cc:f8:05:3e:94:29: d4:b0:5c:e4:6d:24:1f:7a:ca:80:16:09:7c:c6:c1: 97:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8B:EF:25:3C:D6:C4:15:C6:FC:1D:7F:C2:60:8E:D8:A8:36:13:84 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147078.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:b9c0::/48 Signature Algorithm: sha256WithRSAEncryption 60:79:63:a0:f8:dc:45:b3:d7:bb:04:49:12:db:db:c0:b3:32: a2:8b:c8:da:4c:1e:49:23:24:d8:76:87:aa:ee:aa:0e:9c:be: 28:ea:06:9b:ce:13:81:f2:98:c1:ab:55:24:15:aa:92:08:b2: c5:f9:fc:05:e5:d8:58:19:4f:0d:69:04:4a:d6:ba:e3:5c:1a: 77:5a:e3:c4:27:f1:56:e5:63:4b:dc:f2:ac:12:b4:2f:f4:97: 2b:14:18:11:0e:84:0c:48:16:b8:1e:cc:f0:6a:17:13:3b:ae: 18:bd:a2:f4:8c:57:c6:84:8d:46:6a:ba:a8:e0:f4:bb:28:1c: 2b:3f:36:76:86:b0:91:c6:f6:a0:d4:39:b6:e8:c7:7e:f4:ef: 40:03:86:28:d8:e1:b7:b4:a8:3a:23:99:77:84:6c:92:91:ea: 8d:31:5f:8e:d2:c4:c7:6e:17:6c:67:13:ab:18:5e:40:a8:51: 18:03:01:c6:98:87:b6:9f:73:21:38:c8:11:a1:d6:be:fa:95: 72:df:20:6c:83:c9:ab:c9:33:b5:b2:74:21:06:62:0b:fe:7d: b2:31:d3:21:2c:d2:db:b2:91:6c:f0:3f:11:af:70:5e:5b:4e: f1:93:8d:b6:3b:31:00:f8:4f:62:ec:05:2b:1f:bd:28:0c:2d: d1:78:e0:de -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUIf74Uv6faJATRynb3VH0p6dqqfowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIzMTAxNTIwMVoX DTI1MTIzMDAxNTcwMVowMzExMC8GA1UEAxMoMDY4QkVGMjUzQ0Q2QzQxNUM2RkMx RDdGQzI2MDhFRDhBODM2MTM4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOdlSG78A2mqKJKmj59JM1dWHsecRqM1AT6VGvAGReRpd9w0895SbAPkBUsg g8JLsvaxcID6sI3LaUSyElGYDSzMbDpG5g5NGVc5rYI/LHCKBkwG4Qb51jhspnFa dikmcdvYAfyvPCmSDRxLQJJJt3L9OV1WcIaWuMg5Lo4I5Lx8F5pvJB872N05Wkj4 d/wLrmfa21JanWTG4gE5i4DzSoK8UZXJ/F3pxgtmU7XJOroNW2GVJz0ZpVlHZu7V GduMUXhcQkMF+EGCXSpFV/y0exIaVqjNqIXGF190blQLb2KBxB2+TY+ytw93zPgF PpQp1LBc5G0kH3rKgBYJfMbBl5ECAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQGi+8l PNbEFcb8HX/CYI7YqDYThDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzA3OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfO5wDANBgkqhkiG9w0BAQsFAAOCAQEAYHljoPjcRbPXuwRJ EtvbwLMyoovI2kweSSMk2HaHqu6qDpy+KOoGm84TgfKYwatVJBWqkgiyxfn8BeXY WBlPDWkESta641wad1rjxCfxVuVjS9zyrBK0L/SXKxQYEQ6EDEgWuB7M8GoXEzuu GL2i9IxXxoSNRmq6qOD0uygcKz82doawkcb2oNQ5tujHfvTvQAOGKNjht7SoOiOZ d4RskpHqjTFfjtLEx24XbGcTqxheQKhRGAMBxpiHtp9zITjIEaHWvvqVct8gbIPJ q8kztbJ0IQZiC/59sjHTISzS27KRbPA/Ea9wXltO8ZONtjsxAPhPYuwFKx+9KAwt 0Xjg3g== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net