$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149935.roa File: AS149935.roa (raw, json) Hash identifier: BK4TNnjdXPKXBXScX9TtTuK9WtdJX8xAI0I/jED7nEc= Subject key identifier: 87:5F:F4:43:F4:A4:26:AB:24:A7:A8:DD:B6:DE:CF:AF:F1:2A:39:86 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 65E36E8C85FB7E88829789F88DDD139F8F087818 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149935.roa Signing time: Fri 14 Feb 2025 08:00:00 +0000 ROA not before: Fri 14 Feb 2025 07:55:00 +0000 ROA not after: Fri 13 Feb 2026 08:00:00 +0000 asID: 149935 IP address blocks: 103.6.166.0/24 maxlen: 24 103.146.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e3:6e:8c:85:fb:7e:88:82:97:89:f8:8d:dd:13:9f:8f:08:78:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 14 07:55:00 2025 GMT Not After : Feb 13 08:00:00 2026 GMT Subject: CN=875FF443F4A426AB24A7A8DDB6DECFAFF12A3986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:9e:b8:5e:b5:aa:7e:50:28:ee:7b:e8:43: e9:a8:5f:d2:88:17:73:72:67:7f:a5:89:1e:b9:13: 0d:42:bc:47:d0:6f:56:0d:27:a5:b5:fe:c4:e4:dd: af:e6:f9:d6:76:cb:d1:f6:2f:c9:48:7f:ff:19:2f: fb:1c:20:b7:fb:e3:06:c8:aa:1b:c9:4b:e7:90:3d: a2:f7:6b:40:3c:e1:24:86:5c:47:a0:54:00:3a:41: ab:68:45:ca:54:80:14:ca:d1:02:29:be:bb:14:99: ea:f0:77:14:87:34:e2:2f:79:91:10:2c:cd:60:bc: 3f:c8:6b:92:db:c8:99:58:3c:54:48:79:f0:d3:3e: 4c:01:bd:53:8f:7e:bd:eb:70:cc:a8:ab:a7:a3:a9: 2f:b7:5e:e3:4d:3c:72:30:7b:23:85:ab:c8:6b:73: b0:3f:63:4d:9e:c6:2f:60:ae:f3:35:54:dc:8b:99: 27:17:2d:f0:6a:88:03:c8:35:4d:41:db:7f:1a:f5: e6:f8:8a:85:17:84:89:48:f1:04:d2:d4:ce:a5:27: 95:0c:82:ed:0c:d2:3a:d1:4d:5b:0d:1b:1d:d8:f3: 1f:a9:84:f5:0a:d0:ba:1b:1e:6f:75:c6:c8:50:db: b3:4c:26:f9:ce:50:80:e6:8a:3f:ae:8e:1c:4e:ad: 83:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5F:F4:43:F4:A4:26:AB:24:A7:A8:DD:B6:DE:CF:AF:F1:2A:39:86 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.6.166.0/24 103.146.147.0/24 Signature Algorithm: sha256WithRSAEncryption 26:ee:ac:87:9f:5d:b0:9a:a6:c8:03:62:42:25:3d:50:4c:86: db:73:33:6a:72:47:18:ab:21:44:4d:c2:4a:30:58:25:8a:12: a8:5e:0c:f5:cd:d5:29:8d:5b:35:58:c3:91:9f:6a:4c:0f:87: 33:50:dc:9e:77:ad:75:5a:60:15:8f:81:e3:b9:e1:cc:cb:79: 8d:65:d7:68:f1:a7:2e:e1:9e:6e:0d:e6:9d:f9:86:6b:65:a6: f4:e8:6b:5c:5f:88:42:5f:97:9f:c0:2b:aa:16:4e:50:54:2c: d7:1a:fb:b2:5a:32:f0:3e:e4:16:5f:3e:0f:62:75:39:57:ca: f7:26:37:e8:ab:05:8d:bb:4e:16:32:24:19:5b:17:54:6e:05: 7c:aa:fb:67:6b:c1:4e:15:88:6b:bd:45:12:37:36:43:10:60: 7b:27:c9:d2:ca:a7:1d:af:6a:7f:21:e2:8a:94:ea:19:fd:bc: ce:79:4b:54:2e:ff:b2:5a:c3:0c:31:28:4c:6d:9e:8f:65:96: 2c:d0:b4:27:48:6a:3f:81:96:46:45:66:50:8b:e6:1b:ca:9a: e9:53:e9:11:0b:9d:16:d1:d3:1d:33:03:0b:d6:10:1f:ab:0a: 6a:a8:d2:96:3e:3c:90:63:68:dc:8e:9a:36:8d:55:36:c7:20: b1:36:3f:16 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUZeNujIX7foiCl4n4jd0Tn48IeBgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxNDA3NTUwMFoX DTI2MDIxMzA4MDAwMFowMzExMC8GA1UEAxMoODc1RkY0NDNGNEE0MjZBQjI0QTdB OEREQjZERUNGQUZGMTJBMzk4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJuVnrhetap+UCjue+hD6ahf0ogXc3Jnf6WJHrkTDUK8R9BvVg0npbX+xOTd r+b51nbL0fYvyUh//xkv+xwgt/vjBsiqG8lL55A9ovdrQDzhJIZcR6BUADpBq2hF ylSAFMrRAim+uxSZ6vB3FIc04i95kRAszWC8P8hrktvImVg8VEh58NM+TAG9U49+ vetwzKirp6OpL7de4008cjB7I4WryGtzsD9jTZ7GL2Cu8zVU3IuZJxct8GqIA8g1 TUHbfxr15viKhReEiUjxBNLUzqUnlQyC7QzSOtFNWw0bHdjzH6mE9QrQuhseb3XG yFDbs0wm+c5QgOaKP66OHE6tg8ECAwEAAaOCAdYwggHSMB0GA1UdDgQWBBSHX/RD 9KQmqySnqN223s+v8So5hjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTkzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGcGpgMEAGeSkzANBgkqhkiG9w0BAQsFAAOCAQEAJu6sh59dsJqm yANiQiU9UEyG23MzanJHGKshRE3CSjBYJYoSqF4M9c3VKY1bNVjDkZ9qTA+HM1Dc nnetdVpgFY+B47nhzMt5jWXXaPGnLuGebg3mnfmGa2Wm9OhrXF+IQl+Xn8ArqhZO UFQs1xr7sloy8D7kFl8+D2J1OVfK9yY36KsFjbtOFjIkGVsXVG4FfKr7Z2vBThWI a71FEjc2QxBgeyfJ0sqnHa9qfyHiipTqGf28znlLVC7/slrDDDEoTG2ej2WWLNC0 J0hqP4GWRkVmUIvmG8qa6VPpEQudFtHTHTMDC9YQH6sKaqjSlj48kGNo3I6aNo1V NscgsTY/Fg== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net