$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149394.roa File: AS149394.roa (raw, json) Hash identifier: kqwsM3bYHBls0IB8xgksxNKbWTzfMcZO08OC3MfVwYk= Subject key identifier: BD:01:D3:C9:18:D9:5A:D1:3D:D7:C9:DD:B0:6A:74:D9:82:82:10:8B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1C4F42D69F23C350EE08A60E8973D12DAE451C9A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149394.roa Signing time: Mon 21 Apr 2025 03:00:00 +0000 ROA not before: Mon 21 Apr 2025 02:55:00 +0000 ROA not after: Mon 20 Apr 2026 03:00:00 +0000 asID: 149394 IP address blocks: 103.182.52.0/24 maxlen: 24 103.182.53.0/24 maxlen: 24 2001:df1:f540::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4f:42:d6:9f:23:c3:50:ee:08:a6:0e:89:73:d1:2d:ae:45:1c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 21 02:55:00 2025 GMT Not After : Apr 20 03:00:00 2026 GMT Subject: CN=BD01D3C918D95AD13DD7C9DDB06A74D98282108B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:1d:bf:e0:c3:3b:97:40:b3:68:d8:2e:f2: a0:71:18:dc:d2:e0:c7:dc:7d:fa:94:46:5d:10:88: b4:5b:39:e4:eb:3d:91:81:37:f7:63:6f:7a:c1:a6: 35:d3:97:1c:c3:1e:7f:6f:8c:b8:3e:5a:0c:2c:6e: 11:86:15:0f:d2:de:2f:61:7b:48:1e:ca:09:d2:81: 91:3e:57:e4:9a:da:19:07:22:d0:55:ec:56:71:81: 17:6f:f5:e3:85:9d:e1:86:6b:52:44:c2:4d:7d:d3: 66:d2:a6:00:de:2d:58:78:45:36:88:e0:90:3c:d8: 58:13:9d:8c:27:d6:d1:11:ee:31:06:c2:55:95:d2: a3:99:62:4b:a9:cf:f7:19:fb:0a:7a:10:d2:13:69: 70:7e:36:66:93:4b:b5:71:9e:54:9d:17:25:d4:ed: 1e:de:b4:d2:a8:3b:db:2c:2b:6a:14:fd:17:d8:c4: 51:88:5a:22:f2:e2:ad:49:33:85:af:b1:41:e1:f0: fe:91:b1:b7:fe:01:16:06:5f:16:89:4d:12:cb:f0: f4:8e:96:b7:8a:b6:44:a5:38:5c:ee:08:b5:1e:c5: ec:3c:f1:54:70:27:bd:20:15:27:f5:3c:fe:c6:5a: b3:a5:7c:41:0b:c9:bf:c1:52:c1:ca:6d:44:04:03: a9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:01:D3:C9:18:D9:5A:D1:3D:D7:C9:DD:B0:6A:74:D9:82:82:10:8B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149394.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.52.0/23 IPv6: 2001:df1:f540::/48 Signature Algorithm: sha256WithRSAEncryption 4a:fd:e4:26:93:7f:82:59:34:37:56:a1:d4:a3:bf:2c:4c:ab: 40:5b:2b:df:51:9b:c6:b3:82:8f:56:8f:ff:88:1b:86:b4:bd: 7b:24:37:03:08:36:ae:a9:2d:45:00:d1:8a:42:94:50:2a:08: 75:be:92:81:75:c4:4a:87:f9:e3:04:bc:36:3a:f9:c7:9c:ab: 49:09:02:ab:c1:d2:10:a8:01:1d:5f:d3:e1:7d:5c:dd:cc:c8: 5e:15:01:92:69:cd:c4:99:d9:67:d1:fe:f9:80:fb:09:60:76: 92:ea:3a:40:cf:97:84:71:60:94:d0:2e:bc:f9:a4:58:c8:5d: 48:03:fa:67:56:48:d7:06:46:5b:2c:2f:6b:99:28:82:60:f6: 9f:7d:4b:2e:1a:e6:6e:48:bd:6b:80:5b:12:ee:bc:fe:f7:f4: da:e9:5c:c7:83:b0:ab:b0:70:61:6c:c4:ca:9a:9c:89:03:43: 15:86:9a:71:5d:24:df:cf:00:aa:5e:b0:be:eb:9b:e5:d5:a2: 16:32:d0:13:c8:0a:e3:2a:e6:a3:46:de:6c:0a:69:fd:90:b5: 47:96:59:15:49:65:c7:24:22:25:c6:33:df:81:63:69:f1:28: 7d:18:41:7b:34:38:cd:64:59:50:f5:a3:a6:1d:65:a0:b6:07: 0d:9e:8e:63 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUHE9C1p8jw1DuCKYOiXPRLa5FHJowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyMTAyNTUwMFoX DTI2MDQyMDAzMDAwMFowMzExMC8GA1UEAxMoQkQwMUQzQzkxOEQ5NUFEMTNERDdD OUREQjA2QTc0RDk4MjgyMTA4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7ZHb/gwzuXQLNo2C7yoHEY3NLgx9x9+pRGXRCItFs55Os9kYE392NvesGm NdOXHMMef2+MuD5aDCxuEYYVD9LeL2F7SB7KCdKBkT5X5JraGQci0FXsVnGBF2/1 44Wd4YZrUkTCTX3TZtKmAN4tWHhFNojgkDzYWBOdjCfW0RHuMQbCVZXSo5liS6nP 9xn7CnoQ0hNpcH42ZpNLtXGeVJ0XJdTtHt600qg72ywrahT9F9jEUYhaIvLirUkz ha+xQeHw/pGxt/4BFgZfFolNEsvw9I6Wt4q2RKU4XO4ItR7F7DzxVHAnvSAVJ/U8 /sZas6V8QQvJv8FSwcptRAQDqSkCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBS9AdPJ GNla0T3Xyd2wanTZgoIQizAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM5NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWe2NDAPBAIAAjAJAwcAIAEN8fVAMA0GCSqGSIb3DQEBCwUAA4IB AQBK/eQmk3+CWTQ3VqHUo78sTKtAWyvfUZvGs4KPVo//iBuGtL17JDcDCDauqS1F ANGKQpRQKgh1vpKBdcRKh/njBLw2OvnHnKtJCQKrwdIQqAEdX9PhfVzdzMheFQGS ac3Emdln0f75gPsJYHaS6jpAz5eEcWCU0C68+aRYyF1IA/pnVkjXBkZbLC9rmSiC YPaffUsuGuZuSL1rgFsS7rz+9/Ta6VzHg7CrsHBhbMTKmpyJA0MVhppxXSTfzwCq XrC+65vl1aIWMtATyArjKuajRt5sCmn9kLVHllkVSWXHJCIlxjPfgWNp8Sh9GEF7 NDjNZFlQ9aOmHWWgtgcNno5j -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net