$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147161.roa File: AS147161.roa (raw, json) Hash identifier: uO4/MSOTradlDSaBOmHlsV1y2EQy+A9uM4wHxphpXxI= Subject key identifier: 8F:42:60:B5:47:2D:8C:11:3F:C4:83:75:A6:82:2C:0D:F5:6D:41:88 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1C77CC4FA7A1AF09DB60DEFB368BFE3494519630 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147161.roa Signing time: Thu 09 Jan 2025 04:00:00 +0000 ROA not before: Thu 09 Jan 2025 03:55:00 +0000 ROA not after: Thu 08 Jan 2026 04:00:00 +0000 asID: 147161 IP address blocks: 103.177.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:77:cc:4f:a7:a1:af:09:db:60:de:fb:36:8b:fe:34:94:51:96:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:00 2025 GMT Not After : Jan 8 04:00:00 2026 GMT Subject: CN=8F4260B5472D8C113FC48375A6822C0DF56D4188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ff:e2:69:85:85:8e:91:6f:29:10:3d:b8:9f: b8:f3:95:47:4b:42:ec:3b:71:44:08:9b:1f:49:b3: 3f:0e:f6:80:3b:00:b5:81:3f:ca:f5:d3:63:3f:ad: 34:b5:fb:d9:31:82:71:29:54:31:b3:d7:30:ad:92: 57:d1:d2:5d:77:1d:0b:74:e5:2f:ba:6b:12:1a:2f: ce:29:f0:93:c2:3b:5e:58:6b:9e:3d:c0:96:d1:98: 12:21:f0:00:0a:80:03:20:ab:ba:19:b1:48:15:47: ed:04:c3:81:ff:c4:fc:dc:a9:d3:28:74:03:a4:b6: 41:2d:04:fe:05:03:87:f0:8f:fb:8b:2a:11:af:13: a6:ca:d6:bc:d9:8b:68:aa:c2:02:c3:17:a3:c3:d4: 30:5e:17:5a:e4:21:9b:a0:a2:e5:5f:ea:1e:dc:7c: 52:78:dd:0e:06:a5:8c:f1:3b:60:17:4e:d2:50:64: fd:55:e4:00:1e:86:24:d4:99:26:b8:6e:9d:94:8c: 63:87:34:22:3a:b0:28:95:c7:5e:ce:24:35:0b:bb: 68:d6:38:58:d4:4d:5b:77:75:8c:5e:54:70:34:c7: a8:32:a7:ce:a6:f0:c7:36:63:44:a9:70:1d:17:9e: e6:e1:ef:66:cb:bf:8e:b6:96:11:ff:0b:8b:c3:4a: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:42:60:B5:47:2D:8C:11:3F:C4:83:75:A6:82:2C:0D:F5:6D:41:88 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147161.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.212.0/24 Signature Algorithm: sha256WithRSAEncryption 24:11:cb:a1:5d:24:ff:89:92:5b:93:6f:62:e0:1c:1a:24:d4: 9f:3e:ca:38:82:42:92:38:8f:83:4a:b0:a5:e5:e5:7c:25:9f: e6:25:22:23:0d:49:6d:2f:eb:e7:e5:5f:27:90:d8:8b:0d:68: 64:e1:c7:bd:91:35:e3:81:ca:a1:b0:15:b4:9a:c3:1e:44:dd: 26:52:7e:75:3e:6a:47:6b:06:a0:77:62:97:c0:47:24:ba:97: c1:98:57:e9:1c:41:a1:62:9f:ad:f4:a0:ce:16:5e:c6:08:d6: 01:36:d7:3b:5a:cb:7d:d1:ff:6a:f5:13:70:83:e0:08:ee:d3: 57:eb:8f:14:92:e3:43:5d:9f:49:ac:4a:3d:d9:e7:b3:48:6b: 69:f2:9a:7f:81:bb:b0:49:12:a1:2f:cb:f8:ff:ca:79:3a:9d: dc:3a:04:56:c7:30:54:48:ea:25:58:27:08:dc:f0:42:02:5f: 65:e1:08:69:28:2f:a2:02:c1:0a:7b:56:96:e9:4e:8a:35:30: b7:a8:a0:d0:10:3a:a3:3d:23:3c:a9:47:cf:58:aa:36:d0:4f: b2:c1:e7:40:91:4e:1d:e5:6a:0e:25:7d:56:84:02:6f:ae:5b: e3:a5:e0:cc:ba:88:05:f6:b8:13:75:f4:95:e8:81:ef:26:65: f6:fe:89:09 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUHHfMT6ehrwnbYN77Nov+NJRRljAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwOTAzNTUwMFoX DTI2MDEwODA0MDAwMFowMzExMC8GA1UEAxMoOEY0MjYwQjU0NzJEOEMxMTNGQzQ4 Mzc1QTY4MjJDMERGNTZENDE4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPD/4mmFhY6RbykQPbifuPOVR0tC7DtxRAibH0mzPw72gDsAtYE/yvXTYz+t NLX72TGCcSlUMbPXMK2SV9HSXXcdC3TlL7prEhovzinwk8I7Xlhrnj3AltGYEiHw AAqAAyCruhmxSBVH7QTDgf/E/Nyp0yh0A6S2QS0E/gUDh/CP+4sqEa8TpsrWvNmL aKrCAsMXo8PUMF4XWuQhm6Ci5V/qHtx8UnjdDgaljPE7YBdO0lBk/VXkAB6GJNSZ JrhunZSMY4c0IjqwKJXHXs4kNQu7aNY4WNRNW3d1jF5UcDTHqDKnzqbwxzZjRKlw HRee5uHvZsu/jraWEf8Li8NKf18CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSPQmC1 Ry2MET/Eg3WmgiwN9W1BiDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzE2MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGex1DANBgkqhkiG9w0BAQsFAAOCAQEAJBHLoV0k/4mSW5NvYuAc GiTUnz7KOIJCkjiPg0qwpeXlfCWf5iUiIw1JbS/r5+VfJ5DYiw1oZOHHvZE144HK obAVtJrDHkTdJlJ+dT5qR2sGoHdil8BHJLqXwZhX6RxBoWKfrfSgzhZexgjWATbX O1rLfdH/avUTcIPgCO7TV+uPFJLjQ12fSaxKPdnns0hrafKaf4G7sEkSoS/L+P/K eTqd3DoEVscwVEjqJVgnCNzwQgJfZeEIaSgvogLBCntWlulOijUwt6ig0BA6oz0j PKlHz1iqNtBPssHnQJFOHeVqDiV9VoQCb65b46XgzLqIBfa4E3X0leiB7yZl9v6J CQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net