$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153575.roa File: AS153575.roa (raw, json) Hash identifier: zdRRxb93k4exEyDq9ja1rAcg7H8crRQ5oPg7eJpLeNU= Subject key identifier: 00:15:36:5A:C7:7F:BA:B6:11:F3:9D:6F:82:2D:9A:A7:4B:B3:E0:12 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F00053618CA1D21A13F195DD04C68CB01C5342D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153575.roa Signing time: Fri 11 Apr 2025 04:07:03 +0000 ROA not before: Fri 11 Apr 2025 04:02:03 +0000 ROA not after: Fri 10 Apr 2026 04:07:03 +0000 asID: 153575 IP address blocks: 163.61.80.0/23 maxlen: 24 2001:df5:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:00:05:36:18:ca:1d:21:a1:3f:19:5d:d0:4c:68:cb:01:c5:34:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 11 04:02:03 2025 GMT Not After : Apr 10 04:07:03 2026 GMT Subject: CN=0015365AC77FBAB611F39D6F822D9AA74BB3E012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:df:bc:79:54:2c:cb:c4:7d:0b:73:7b:24: ea:a6:bd:0a:f3:61:3a:25:42:d5:04:94:36:40:be: ce:e3:c6:ed:37:f0:fb:78:b3:a5:19:15:7a:74:d9: b0:c4:3a:8c:15:1d:e0:7e:50:3f:79:a1:8a:a4:2e: 98:71:5e:14:e0:e9:e5:00:69:eb:09:a5:7c:75:09: 20:1d:a7:0d:8d:5a:ab:f4:29:15:97:41:1b:fe:4f: ac:c9:ec:31:5c:2f:4a:23:21:64:32:33:4c:83:c3: 11:5a:2c:82:7e:df:33:6b:80:dc:dc:1d:43:78:6b: 68:20:57:c4:ca:23:22:36:e9:b8:1a:3f:5a:9d:50: 87:eb:70:3c:ce:27:52:37:83:18:43:6a:f7:88:8e: 69:13:20:39:da:07:d5:8a:db:f5:4b:fc:85:d7:57: 59:0b:0c:c4:1e:02:96:c8:c1:d1:a1:e3:e2:2e:9d: 87:54:14:3d:72:cc:8b:e6:62:38:6b:4b:0d:43:ea: d1:91:91:25:d7:21:c0:dd:d2:ca:2f:da:0d:63:10: 4e:ec:cb:96:4a:ee:64:a5:90:cc:18:76:a7:72:80: 81:c9:cb:dd:70:a6:dc:e4:5d:c0:dc:12:9c:f2:38: 75:7f:16:24:41:93:60:13:fc:3a:38:1b:a1:54:76: ce:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:15:36:5A:C7:7F:BA:B6:11:F3:9D:6F:82:2D:9A:A7:4B:B3:E0:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153575.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.80.0/23 IPv6: 2001:df5:1040::/48 Signature Algorithm: sha256WithRSAEncryption 31:01:c6:f4:28:dd:66:06:30:8f:ca:02:99:ae:1c:bf:c8:88: 24:8a:d7:5f:c2:7a:0f:9d:cc:f6:51:d0:86:c1:0e:55:24:35: e8:bb:8c:c1:6e:8b:9f:1d:d6:37:9e:7b:96:d2:d9:0e:19:0c: be:b5:0d:7b:a7:61:56:ef:64:53:07:7d:3e:4b:e6:35:56:e7: bc:b2:72:e1:ae:15:42:0b:ce:65:15:3a:74:be:b9:f1:53:96: 98:b3:44:f0:0d:35:84:62:fc:8b:ff:dd:d8:dc:a0:ba:b7:03: 5e:24:34:9f:6e:9a:c5:06:d3:51:fb:01:f2:71:72:86:8d:58: 3b:42:ac:c6:94:71:66:4a:52:3a:42:14:09:95:21:99:4d:ff: 71:d1:c2:42:58:3b:83:98:48:94:cf:fa:bf:dd:ea:9c:c9:bf: 77:b9:9e:2b:83:54:5c:ff:a5:d9:5b:65:b8:61:6b:13:c6:7f: 48:eb:95:ca:37:f9:a0:bc:08:65:c6:a4:14:c6:a6:7e:3d:9a: 3d:bc:95:87:c1:a6:62:39:a2:c9:cc:44:f8:0c:ec:4a:95:8d: 8f:58:10:6a:bd:19:42:7b:a0:cb:51:a7:78:36:11:e9:07:a9: 7f:36:27:93:97:24:85:66:63:ca:a3:1f:c3:66:82:e6:c3:fe: 4d:c2:eb:73 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUDwAFNhjKHSGhPxld0ExoywHFNC0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMTA0MDIwM1oX DTI2MDQxMDA0MDcwM1owMzExMC8GA1UEAxMoMDAxNTM2NUFDNzdGQkFCNjExRjM5 RDZGODIyRDlBQTc0QkIzRTAxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUD37x5VCzLxH0Lc3sk6qa9CvNhOiVC1QSUNkC+zuPG7Tfw+3izpRkVenTZ sMQ6jBUd4H5QP3mhiqQumHFeFODp5QBp6wmlfHUJIB2nDY1aq/QpFZdBG/5PrMns MVwvSiMhZDIzTIPDEVosgn7fM2uA3NwdQ3hraCBXxMojIjbpuBo/Wp1Qh+twPM4n UjeDGENq94iOaRMgOdoH1Yrb9Uv8hddXWQsMxB4ClsjB0aHj4i6dh1QUPXLMi+Zi OGtLDUPq0ZGRJdchwN3Syi/aDWMQTuzLlkruZKWQzBh2p3KAgcnL3XCm3ORdwNwS nPI4dX8WJEGTYBP8OjgboVR2zv8CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQAFTZa x3+6thHznW+CLZqnS7PgEjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzU3NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaM9UDAPBAIAAjAJAwcAIAEN9RBAMA0GCSqGSIb3DQEBCwUAA4IB AQAxAcb0KN1mBjCPygKZrhy/yIgkitdfwnoPncz2UdCGwQ5VJDXou4zBboufHdY3 nnuW0tkOGQy+tQ17p2FW72RTB30+S+Y1Vue8snLhrhVCC85lFTp0vrnxU5aYs0Tw DTWEYvyL/93Y3KC6twNeJDSfbprFBtNR+wHycXKGjVg7QqzGlHFmSlI6QhQJlSGZ Tf9x0cJCWDuDmEiUz/q/3eqcyb93uZ4rg1Rc/6XZW2W4YWsTxn9I65XKN/mgvAhl xqQUxqZ+PZo9vJWHwaZiOaLJzET4DOxKlY2PWBBqvRlCe6DLUad4NhHpB6l/NieT lySFZmPKox/DZoLmw/5Nwutz -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net