$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147079.roa File: AS147079.roa (raw, json) Hash identifier: OdW366I1qZpXXtJIBNbNdHFKCLGHaqJR4R3xg0pTGrM= Subject key identifier: 83:ED:E8:24:A2:81:82:5F:73:D8:53:AB:FE:6A:80:B1:AB:DE:59:1A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6879E2571D65D7C686DFDD6145898DD2227ACC68 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147079.roa Signing time: Wed 01 Jan 2025 04:00:00 +0000 ROA not before: Wed 01 Jan 2025 03:55:00 +0000 ROA not after: Wed 31 Dec 2025 04:00:00 +0000 asID: 147079 IP address blocks: 2407:ed40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:79:e2:57:1d:65:d7:c6:86:df:dd:61:45:89:8d:d2:22:7a:cc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 1 03:55:00 2025 GMT Not After : Dec 31 04:00:00 2025 GMT Subject: CN=83EDE824A281825F73D853ABFE6A80B1ABDE591A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:27:35:a7:bf:76:c2:23:18:f6:76:3e:ee: 34:ee:e6:37:48:57:ca:d7:52:44:01:74:79:07:38: bf:29:4a:0e:b3:46:70:e4:28:e7:03:84:53:5a:62: 0a:66:6b:4b:83:9e:5c:9b:90:f9:68:04:96:24:6c: 6e:d5:2f:78:1a:62:4c:3b:72:87:19:09:0d:04:1e: b6:3d:2a:bd:01:03:86:5d:23:60:fa:f5:22:40:07: 37:5f:77:b0:6d:a7:c4:75:7a:c5:34:5b:e8:fe:1e: 6e:79:5f:b2:17:e8:a2:61:2d:85:58:f2:6c:a7:d4: 87:32:a4:b6:1a:22:15:6c:a9:b6:90:39:a2:4d:ba: e8:a6:ca:63:9f:73:4f:c9:9a:8c:ac:5f:de:7a:cc: 61:d0:20:9c:13:2d:15:cd:0e:ec:53:d0:c7:9a:85: 0c:45:3c:85:53:95:d3:87:f7:1b:6b:0d:6b:ff:92: 44:cc:70:c8:e9:36:01:00:f7:82:e9:ad:db:6b:41: 91:7a:69:72:9e:52:20:44:81:87:01:e6:8f:91:85: 0b:a1:f6:bf:97:5a:65:5a:ab:c1:94:99:3e:fe:cb: 0d:c9:d0:50:7d:f7:a8:8e:e9:fb:7e:ac:c2:33:6c: aa:d3:d7:97:d8:2e:10:d6:69:6f:36:84:22:cb:23: 2e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:ED:E8:24:A2:81:82:5F:73:D8:53:AB:FE:6A:80:B1:AB:DE:59:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:ed40::/32 Signature Algorithm: sha256WithRSAEncryption 02:6b:57:28:02:23:e2:be:ab:fd:f9:e7:f1:d8:cb:9d:fd:71: 56:dd:d4:72:21:f0:53:d3:80:f6:44:f3:f1:ec:c3:9a:9a:31: 96:32:b5:f2:07:4a:63:d2:cb:3a:f3:d7:eb:48:21:ec:17:40: da:4b:f1:97:3a:d0:5c:ab:46:d7:cb:a9:0f:fe:83:88:52:86: 1f:77:2f:f1:d2:21:4e:55:24:2a:28:1c:aa:92:25:57:3b:60: 6a:c6:75:54:d9:a2:83:ac:fe:79:98:2e:e3:f2:e2:0f:f5:c6: 66:e7:72:a1:45:71:0d:2a:37:35:35:e1:d1:9e:25:ec:7c:ab: c7:14:81:14:48:ea:db:11:f2:9d:5e:44:1f:e7:3d:72:12:48: 9e:95:1b:46:8a:c8:b0:80:e1:3d:7b:0d:59:44:d0:41:86:52: f3:ba:ee:98:42:a2:29:53:1b:dd:ea:db:0c:f7:0f:36:83:23: e6:ff:c4:be:2b:f6:80:0b:e1:9a:44:21:7f:06:f8:a5:8c:2a: 3a:f5:f7:38:f2:4c:11:35:ef:25:e8:77:62:2e:fe:73:dd:ee: c1:1a:d7:5b:e6:4b:96:00:ff:39:9b:b5:8e:95:5e:87:c8:0d: 4e:b2:fd:bd:11:f3:b3:f9:6c:70:0b:ba:32:fa:ee:31:c6:05: 49:57:b9:4f -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUaHniVx1l18aG391hRYmN0iJ6zGgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwMTAzNTUwMFoX DTI1MTIzMTA0MDAwMFowMzExMC8GA1UEAxMoODNFREU4MjRBMjgxODI1RjczRDg1 M0FCRkU2QTgwQjFBQkRFNTkxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQWJzWnv3bCIxj2dj7uNO7mN0hXytdSRAF0eQc4vylKDrNGcOQo5wOEU1pi CmZrS4OeXJuQ+WgEliRsbtUveBpiTDtyhxkJDQQetj0qvQEDhl0jYPr1IkAHN193 sG2nxHV6xTRb6P4ebnlfshfoomEthVjybKfUhzKkthoiFWyptpA5ok266KbKY59z T8majKxf3nrMYdAgnBMtFc0O7FPQx5qFDEU8hVOV04f3G2sNa/+SRMxwyOk2AQD3 gumt22tBkXppcp5SIESBhwHmj5GFC6H2v5daZVqrwZSZPv7LDcnQUH33qI7p+36s wjNsqtPXl9guENZpbzaEIssjLvkCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBSD7egk ooGCX3PYU6v+aoCxq95ZGjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzA3OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQH7UAwDQYJKoZIhvcNAQELBQADggEBAAJrVygCI+K+q/355/HY y539cVbd1HIh8FPTgPZE8/Hsw5qaMZYytfIHSmPSyzrz1+tIIewXQNpL8Zc60Fyr RtfLqQ/+g4hShh93L/HSIU5VJCooHKqSJVc7YGrGdVTZooOs/nmYLuPy4g/1xmbn cqFFcQ0qNzU14dGeJex8q8cUgRRI6tsR8p1eRB/nPXISSJ6VG0aKyLCA4T17DVlE 0EGGUvO67phCoilTG93q2wz3DzaDI+b/xL4r9oAL4ZpEIX8G+KWMKjr19zjyTBE1 7yXod2Iu/nPd7sEa11vmS5YA/zmbtY6VXofIDU6y/b0R87P5bHALujL67jHGBUlX uU8= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net