$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152050.roa File: AS152050.roa (raw, json) Hash identifier: btOArcEkqcVj+43+kvhukRx0nCQjA3/A6/8reAVuoZk= Subject key identifier: 48:8E:CE:62:1D:32:98:30:E9:0A:FB:F2:FB:49:E1:C0:95:83:76:32 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 740DB9EA817FA4FD625EA2B42C0AF5F235DE77C5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152050.roa Signing time: Tue 10 Dec 2024 05:00:14 +0000 ROA not before: Tue 10 Dec 2024 04:55:14 +0000 ROA not after: Tue 09 Dec 2025 05:00:14 +0000 asID: 152050 IP address blocks: 210.79.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0d:b9:ea:81:7f:a4:fd:62:5e:a2:b4:2c:0a:f5:f2:35:de:77:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:14 2024 GMT Not After : Dec 9 05:00:14 2025 GMT Subject: CN=488ECE621D329830E90AFBF2FB49E1C095837632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:50:e8:cb:62:b0:db:31:42:0e:cb:a4:32: ec:af:fe:3d:49:76:fe:d3:fd:96:57:a6:23:4f:09: 73:98:48:1a:a1:7e:43:d1:9a:c5:11:ff:21:2a:f5: 50:0a:34:73:32:d9:bc:66:0e:ea:ca:71:fe:2a:b8: c6:a8:ef:53:85:e3:5b:ef:4b:7b:78:3e:96:33:20: 7d:fe:fd:a1:2b:5f:d0:37:7b:b2:38:1c:c2:a5:bd: a4:0f:34:69:56:7f:37:90:1e:73:26:7a:ed:e8:d5: 6f:4b:51:d1:5a:1a:56:46:4b:78:2d:2c:20:ed:a1: 8f:2e:1d:e1:39:89:7b:ee:d1:2c:e8:90:89:1e:99: 48:6e:3c:b0:6f:9a:69:02:5e:35:94:42:d9:80:84: 98:d5:c0:25:ab:f0:0f:58:af:25:ee:77:da:0d:67: 31:63:28:07:b5:f1:9f:35:28:e7:55:3d:e3:41:50: 39:f5:ba:39:7d:1e:92:58:24:f6:6f:86:8b:61:14: aa:9a:83:a6:b6:20:3b:23:e3:78:d6:6d:1c:25:b3: 31:b3:20:b8:c9:32:88:f7:dc:e7:7a:af:c6:c7:70: 60:a9:13:eb:36:87:16:4a:3b:8d:4e:d8:a5:34:4c: 04:cb:40:39:54:80:0c:e6:ab:f8:b0:33:7f:65:61: 55:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8E:CE:62:1D:32:98:30:E9:0A:FB:F2:FB:49:E1:C0:95:83:76:32 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152050.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.140.0/24 Signature Algorithm: sha256WithRSAEncryption 98:1d:74:96:c1:0c:1c:a5:4d:98:ec:48:d8:f8:03:2a:33:6b: 16:db:3d:4a:02:de:19:e8:f8:6b:26:49:5a:51:42:5d:c4:80: 9f:02:49:b0:76:87:33:80:2d:a7:c2:c7:a6:cf:f7:8f:58:01: a8:89:54:5f:ba:51:53:96:6a:0f:38:e5:1c:ce:ab:b8:e2:e0: 56:06:2e:5a:c9:99:e8:54:8d:18:af:20:a1:4c:3b:6f:c4:de: f5:52:19:83:b4:bd:a2:e0:d5:05:a7:79:01:ca:c4:65:24:70: f7:9a:2f:02:33:75:72:d4:75:12:d5:17:59:33:93:dd:5c:b3: 41:11:f8:92:82:9f:60:41:d6:31:ce:ed:4c:ae:01:2d:25:34: 97:bc:c6:88:b2:91:ad:f3:96:df:1b:bc:54:86:06:15:70:dd: 2d:75:f5:ec:d4:c5:2f:04:e9:7a:04:ee:d8:da:f0:db:73:de: 4f:88:b2:50:79:f5:58:e8:29:e3:28:48:f4:2d:19:bf:02:46: f2:5a:5b:80:aa:33:7f:f5:4b:36:9f:30:b9:75:db:c3:9b:1e: 1a:71:a4:81:ae:c0:c9:55:48:60:8a:68:1f:ed:10:14:82:8e: d8:10:de:7a:9c:d0:a0:bb:6f:3a:86:da:90:f7:ed:61:b7:ce: e1:4a:29:09 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUdA256oF/pP1iXqK0LAr18jXed8UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxNFoX DTI1MTIwOTA1MDAxNFowMzExMC8GA1UEAxMoNDg4RUNFNjIxRDMyOTgzMEU5MEFG QkYyRkI0OUUxQzA5NTgzNzYzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALu6UOjLYrDbMUIOy6Qy7K/+PUl2/tP9llemI08Jc5hIGqF+Q9GaxRH/ISr1 UAo0czLZvGYO6spx/iq4xqjvU4XjW+9Le3g+ljMgff79oStf0Dd7sjgcwqW9pA80 aVZ/N5AecyZ67ejVb0tR0VoaVkZLeC0sIO2hjy4d4TmJe+7RLOiQiR6ZSG48sG+a aQJeNZRC2YCEmNXAJavwD1ivJe532g1nMWMoB7XxnzUo51U940FQOfW6OX0eklgk 9m+Gi2EUqpqDprYgOyPjeNZtHCWzMbMguMkyiPfc53qvxsdwYKkT6zaHFko7jU7Y pTRMBMtAOVSADOar+LAzf2VhVYUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRIjs5i HTKYMOkK+/L7SeHAlYN2MjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjA1MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANJPjDANBgkqhkiG9w0BAQsFAAOCAQEAmB10lsEMHKVNmOxI2PgD KjNrFts9SgLeGej4ayZJWlFCXcSAnwJJsHaHM4Atp8LHps/3j1gBqIlUX7pRU5Zq DzjlHM6ruOLgVgYuWsmZ6FSNGK8goUw7b8Te9VIZg7S9ouDVBad5AcrEZSRw95ov AjN1ctR1EtUXWTOT3VyzQRH4koKfYEHWMc7tTK4BLSU0l7zGiLKRrfOW3xu8VIYG FXDdLXX17NTFLwTpegTu2Nrw23PeT4iyUHn1WOgp4yhI9C0ZvwJG8lpbgKozf/VL Np8wuXXbw5seGnGkga7AyVVIYIpoH+0QFIKO2BDeepzQoLtvOobakPftYbfO4Uop CQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net