$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149946.roa File: AS149946.roa (raw, json) Hash identifier: dES4LHjjWbMHYZ70QeIUlIqt55NXPXycDDpyywICmGY= Subject key identifier: 3D:90:84:2E:0A:61:87:BB:AF:C2:0F:EC:EA:7E:A2:91:91:2C:CE:9D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1AFE503AE1BE7159D7C9FE6E1F28601F8C81BE4E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149946.roa Signing time: Wed 19 Mar 2025 06:55:32 +0000 ROA not before: Wed 19 Mar 2025 06:50:32 +0000 ROA not after: Wed 18 Mar 2026 06:55:32 +0000 asID: 149946 IP address blocks: 117.102.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fe:50:3a:e1:be:71:59:d7:c9:fe:6e:1f:28:60:1f:8c:81:be:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 19 06:50:32 2025 GMT Not After : Mar 18 06:55:32 2026 GMT Subject: CN=3D90842E0A6187BBAFC20FECEA7EA291912CCE9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7a:7e:4c:4a:a7:11:e3:7c:0d:19:8e:13:f0: e3:ce:d3:a8:d5:c5:60:29:c4:32:fa:28:74:4c:14: 2e:99:4b:d2:f7:47:fd:d7:dc:40:2f:6c:bf:25:b3: 37:c9:0b:74:6d:2c:27:72:34:9c:b5:ae:28:24:51: 41:cf:c9:fd:0d:2e:ea:21:1d:52:a3:a9:bf:24:42: 15:6d:a9:37:5f:cd:f7:7c:8b:71:49:8a:e8:4e:88: 0b:46:56:30:88:ff:65:51:13:6e:21:8d:37:4f:20: 3b:49:b5:60:00:4c:89:ec:e3:81:fa:f7:05:f4:87: 38:92:11:49:3f:79:cc:71:fe:b2:d5:7d:28:f6:95: 90:17:eb:20:24:8d:88:d2:e9:75:35:27:ce:f8:3a: 78:08:2a:f2:42:b8:1f:39:71:0e:2e:d1:38:3d:67: 7a:a3:3b:f6:cd:20:d4:dc:fd:8f:17:91:b6:59:5a: d1:d2:4f:57:6d:ef:52:f5:41:c2:cb:73:b9:1b:76: 24:73:74:be:b7:93:ae:36:43:0b:f7:70:53:91:dd: 71:d0:7e:3b:da:82:4b:58:91:fd:0f:48:fe:86:9d: 00:d0:b8:ed:b4:5e:04:11:95:4e:d8:b3:1e:e7:83: e8:d2:eb:2a:7b:25:e3:83:33:40:89:c2:b1:e3:a0: 8a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:90:84:2E:0A:61:87:BB:AF:C2:0F:EC:EA:7E:A2:91:91:2C:CE:9D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.102.160.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:84:b0:15:b1:15:82:89:5a:9d:d9:cb:c0:3d:1a:75:c1:7c: 21:34:78:e4:83:40:6b:a2:f4:d4:7a:cc:95:f4:d7:17:40:ed: b5:f0:b2:66:24:ce:a8:1a:32:eb:3d:a6:f0:41:63:be:b2:ae: b0:30:d6:3a:4c:10:1f:ee:d8:5e:fe:9a:5c:6b:eb:f3:e6:fe: 4e:50:0e:f9:e1:83:4d:f0:d9:bc:d7:48:34:50:e9:ca:ca:ba: 93:49:10:1b:23:c3:85:e6:22:94:04:dd:23:2d:10:39:45:03: d9:3b:c1:fa:86:84:82:3b:2b:6e:eb:d4:24:98:7e:a8:5b:e9: e3:01:9e:aa:49:29:af:a8:39:ce:7d:ac:04:59:ca:d5:36:a6: 2c:7e:d7:5d:c0:db:d5:ba:18:0e:d9:25:b4:7c:df:68:bf:bc: 46:cf:ac:c9:b5:c3:45:7b:77:d2:bd:96:87:93:d3:a2:b1:fe: 1e:47:52:af:90:b4:79:f9:96:38:e2:cc:2e:2e:29:ef:ca:05: cf:4f:2f:30:7e:b3:4d:be:eb:4e:27:91:70:8e:17:d6:fa:08: 72:76:06:f7:f8:7c:12:90:c3:70:66:c0:38:5f:7c:7f:00:6f: aa:78:e9:06:ac:d0:60:91:03:bb:d9:9e:18:91:10:f7:39:a9: 00:ac:4f:0e -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGv5QOuG+cVnXyf5uHyhgH4yBvk4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMxOTA2NTAzMloX DTI2MDMxODA2NTUzMlowMzExMC8GA1UEAxMoM0Q5MDg0MkUwQTYxODdCQkFGQzIw RkVDRUE3RUEyOTE5MTJDQ0U5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOF6fkxKpxHjfA0ZjhPw487TqNXFYCnEMvoodEwULplL0vdH/dfcQC9svyWz N8kLdG0sJ3I0nLWuKCRRQc/J/Q0u6iEdUqOpvyRCFW2pN1/N93yLcUmK6E6IC0ZW MIj/ZVETbiGNN08gO0m1YABMiezjgfr3BfSHOJIRST95zHH+stV9KPaVkBfrICSN iNLpdTUnzvg6eAgq8kK4HzlxDi7ROD1neqM79s0g1Nz9jxeRtlla0dJPV23vUvVB wstzuRt2JHN0vreTrjZDC/dwU5HdcdB+O9qCS1iR/Q9I/oadANC47bReBBGVTtiz HueD6NLrKnsl44MzQInCseOgigUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ9kIQu CmGHu6/CD+zqfqKRkSzOnTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTk0Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAXVmoDANBgkqhkiG9w0BAQsFAAOCAQEADYSwFbEVgolandnLwD0a dcF8ITR45INAa6L01HrMlfTXF0DttfCyZiTOqBoy6z2m8EFjvrKusDDWOkwQH+7Y Xv6aXGvr8+b+TlAO+eGDTfDZvNdINFDpysq6k0kQGyPDheYilATdIy0QOUUD2TvB +oaEgjsrbuvUJJh+qFvp4wGeqkkpr6g5zn2sBFnK1TamLH7XXcDb1boYDtkltHzf aL+8Rs+sybXDRXt30r2Wh5PTorH+HkdSr5C0efmWOOLMLi4p78oFz08vMH6zTb7r TieRcI4X1voIcnYG9/h8EpDDcGbAOF98fwBvqnjpBqzQYJEDu9meGJEQ9zmpAKxP Dg== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net