$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149399.roa File: AS149399.roa (raw, json) Hash identifier: WU6yA7eDBJq8sJnI7LIAqdDorXMASgBcGRKu2xPIQwI= Subject key identifier: 62:FD:D1:FB:5B:3D:81:18:CE:45:F1:9A:7A:11:7F:30:C1:AD:74:0B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 28E3EA91EFA9E8A5F2B6889D11AE8DBAFD1237A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149399.roa Signing time: Fri 11 Apr 2025 10:00:00 +0000 ROA not before: Fri 11 Apr 2025 09:55:00 +0000 ROA not after: Fri 10 Apr 2026 10:00:00 +0000 asID: 149399 IP address blocks: 103.181.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e3:ea:91:ef:a9:e8:a5:f2:b6:88:9d:11:ae:8d:ba:fd:12:37:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 11 09:55:00 2025 GMT Not After : Apr 10 10:00:00 2026 GMT Subject: CN=62FDD1FB5B3D8118CE45F19A7A117F30C1AD740B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:84:72:fd:ab:c9:94:46:98:e7:83:7d:24: ab:21:b4:7a:6f:8f:1f:b9:64:9a:1c:a7:f5:3b:36: 7a:05:23:36:c8:e9:86:6c:6d:81:67:6e:a5:24:e9: 9b:2a:a1:e4:67:a5:27:5e:44:d9:9b:e3:1e:af:75: 95:bc:24:34:e0:74:4c:d3:fc:52:27:04:8d:39:98: 96:ca:d0:cc:fc:7f:54:68:bc:2e:f6:db:ed:ef:ba: 23:4b:d4:14:5b:d4:d7:8b:86:18:db:3b:c5:83:86: f7:84:95:96:58:56:df:69:95:3d:bc:b3:24:43:6a: 1a:3d:57:29:d0:eb:04:62:68:5d:7f:69:a7:4d:d7: f2:69:16:1a:93:cb:53:44:6b:51:7b:8e:0a:22:61: c7:03:88:fe:b5:98:4b:16:c2:3c:d6:18:06:2c:b3: fb:91:53:a2:f2:b8:9f:53:b9:e7:d7:ea:4c:b7:bc: 0e:c2:b6:26:cd:cc:20:98:28:e3:fa:8e:73:5b:ac: 8d:be:5d:a2:42:52:3a:8f:4b:3a:46:72:b8:e7:5b: d8:26:1e:de:ee:6c:3c:d1:e2:84:e6:46:0a:ef:00: 26:51:2f:bc:71:2b:e0:93:c9:49:a5:0e:01:54:e5: ff:f3:35:6c:a4:e9:17:2c:de:16:fe:a0:e5:b3:a9: 67:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FD:D1:FB:5B:3D:81:18:CE:45:F1:9A:7A:11:7F:30:C1:AD:74:0B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149399.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.242.0/23 Signature Algorithm: sha256WithRSAEncryption 66:68:27:28:16:ec:22:84:b9:61:3b:b6:cd:84:e7:32:8c:58: 54:f0:21:cc:36:b7:5d:9e:43:39:76:49:db:6e:4d:a3:56:63: ca:1a:c5:d7:71:53:37:0e:0c:c8:97:e9:1f:0f:20:99:51:3d: 73:4c:b2:22:ad:09:f7:53:45:5d:db:b0:f4:41:76:a0:b1:42: 78:8d:21:8e:c3:8b:9a:ff:07:43:7d:4e:e2:33:05:67:7d:2c: 33:09:a0:7e:55:b8:96:1c:15:b6:7f:38:0f:bf:b9:6c:1d:97: 3f:1b:0d:96:c3:29:87:9e:37:4d:54:62:1c:cd:e5:96:73:58: fd:82:dd:75:ae:9b:0d:39:82:19:7d:17:c2:03:6c:44:fb:f7: cf:d1:06:6c:4e:83:3d:02:36:0d:26:18:2a:a3:69:a4:05:95: 45:6c:d8:0f:19:6d:42:85:d6:46:1f:ea:e3:ed:bb:4b:ed:e7: 0d:e5:17:2e:cf:a4:9e:57:a4:fa:e9:a1:21:2d:9f:ab:f6:6b: bb:5c:4a:13:ad:ab:c4:1b:2c:d4:29:2f:b1:f3:c6:a2:a1:22: e5:fb:e9:56:24:9c:6f:3c:ed:50:f4:c3:fe:07:50:2a:63:82: 54:f3:f6:47:ac:cc:0b:d0:d2:e0:ef:9f:8c:8b:49:16:dc:cf: 4f:1b:9e:0f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUKOPqke+p6KXytoidEa6Nuv0SN6kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMTA5NTUwMFoX DTI2MDQxMDEwMDAwMFowMzExMC8GA1UEAxMoNjJGREQxRkI1QjNEODExOENFNDVG MTlBN0ExMTdGMzBDMUFENzQwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJmbhHL9q8mURpjng30kqyG0em+PH7lkmhyn9Ts2egUjNsjphmxtgWdupSTp myqh5GelJ15E2ZvjHq91lbwkNOB0TNP8UicEjTmYlsrQzPx/VGi8Lvbb7e+6I0vU FFvU14uGGNs7xYOG94SVllhW32mVPbyzJENqGj1XKdDrBGJoXX9pp03X8mkWGpPL U0RrUXuOCiJhxwOI/rWYSxbCPNYYBiyz+5FTovK4n1O559fqTLe8DsK2Js3MIJgo 4/qOc1usjb5dokJSOo9LOkZyuOdb2CYe3u5sPNHihOZGCu8AJlEvvHEr4JPJSaUO AVTl//M1bKTpFyzeFv6g5bOpZ4UCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRi/dH7 Wz2BGM5F8Zp6EX8wwa10CzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM5OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe18jANBgkqhkiG9w0BAQsFAAOCAQEAZmgnKBbsIoS5YTu2zYTn MoxYVPAhzDa3XZ5DOXZJ225No1ZjyhrF13FTNw4MyJfpHw8gmVE9c0yyIq0J91NF Xduw9EF2oLFCeI0hjsOLmv8HQ31O4jMFZ30sMwmgflW4lhwVtn84D7+5bB2XPxsN lsMph543TVRiHM3llnNY/YLdda6bDTmCGX0XwgNsRPv3z9EGbE6DPQI2DSYYKqNp pAWVRWzYDxltQoXWRh/q4+27S+3nDeUXLs+knlek+umhIS2fq/Zru1xKE62rxBss 1CkvsfPGoqEi5fvpViScbzztUPTD/gdQKmOCVPP2R6zMC9DS4O+fjItJFtzPTxue Dw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net