$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153609.roa File: AS153609.roa (raw, json) Hash identifier: L4hfiNpkFnmsU6c5y7aCFY4mPTM62vDGQIGzIGz7R/c= Subject key identifier: 68:F2:FA:78:97:AF:7B:80:FE:39:55:54:54:A1:B4:89:2E:AB:11:52 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 72F7605F0DFBF7FD6E0E10C63628E1BB41CCF62D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153609.roa Signing time: Tue 18 Feb 2025 04:22:16 +0000 ROA not before: Tue 18 Feb 2025 04:17:16 +0000 ROA not after: Tue 17 Feb 2026 04:22:16 +0000 asID: 153609 IP address blocks: 163.61.49.0/24 maxlen: 24 2001:df5:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f7:60:5f:0d:fb:f7:fd:6e:0e:10:c6:36:28:e1:bb:41:cc:f6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 18 04:17:16 2025 GMT Not After : Feb 17 04:22:16 2026 GMT Subject: CN=68F2FA7897AF7B80FE39555454A1B4892EAB1152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:31:10:25:3b:7e:f2:53:09:11:b3:7b:48: d1:64:2e:eb:4e:f7:ab:f7:f6:48:7e:f1:18:35:85: cc:6a:4e:4b:85:3b:9b:b8:48:d6:cd:bd:8d:b0:e6: 4a:b3:1d:48:0f:51:7e:4b:05:15:62:dd:06:97:d2: d0:2f:f3:51:0d:86:3d:bf:e8:93:c0:4c:5b:3d:96: cb:25:d5:db:1b:f6:e1:3a:ed:a2:96:35:43:20:a3: 3c:ae:74:97:8d:cb:f2:04:b0:0c:1a:17:45:8c:b9: e0:ab:48:fc:f8:96:91:15:f2:2b:cd:d3:ce:d2:22: 45:89:f5:6e:37:c0:85:92:48:f1:2b:5a:15:31:ab: f1:6f:0d:9a:c5:cd:cf:a4:05:89:d3:f0:53:c2:02: 14:5e:6e:d3:94:8b:c9:32:b1:2e:5b:9c:35:ef:06: cc:18:34:40:bd:27:62:cf:25:8b:1a:e4:33:06:6f: 34:b5:19:86:64:41:1e:cd:ab:81:04:22:08:ba:10: 5e:05:94:c2:fb:ce:a2:d9:c9:d8:5a:22:19:d8:94: 82:b0:40:d8:b0:9e:e4:b4:f1:51:9c:f6:e9:b6:28: 64:5a:1b:aa:2f:ed:aa:55:5f:b7:b6:bb:3c:37:c8: 19:d0:6e:be:7e:98:59:3f:f5:ef:90:dd:f0:3a:df: e2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F2:FA:78:97:AF:7B:80:FE:39:55:54:54:A1:B4:89:2E:AB:11:52 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153609.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.49.0/24 IPv6: 2001:df5:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 87:43:a4:26:95:3b:e2:46:65:ef:b3:18:ff:d3:14:7c:bc:d8: 7c:f4:25:85:cb:93:15:a5:5f:99:d0:68:52:ff:50:d9:6e:ba: 97:d1:ba:a6:48:85:16:e0:d4:b2:31:73:07:18:bf:0f:c3:70: 46:7c:c1:8e:e8:82:60:c1:13:68:0e:f0:2f:ba:ce:15:74:cf: 7a:6a:17:3b:e5:9e:bf:59:e9:7d:e4:07:95:31:07:e5:24:0d: 03:36:3e:3f:5c:7e:2b:23:37:e6:fe:cb:e4:a4:9d:93:a0:27: 12:cd:9e:0c:a1:c5:ff:03:21:9c:f9:b4:e9:2a:1a:2c:6a:c9: 98:b2:f6:e0:35:cc:19:8c:45:f1:b0:8f:8e:ba:a2:15:56:42: 71:15:6b:b9:6d:18:20:3a:c1:2e:d9:6a:e0:68:21:6c:02:33: 90:a6:32:68:97:a7:34:63:a4:5e:55:54:6b:55:aa:07:03:e1: 67:fc:c7:b2:a1:db:18:b3:80:65:4f:7a:68:b0:cf:19:73:62: 65:56:b4:54:23:0a:cd:f4:66:f5:86:bf:35:10:03:09:bb:a3: 09:ed:df:69:0e:80:75:81:6d:c8:35:59:8b:9f:58:fe:5d:de: 37:6f:ab:1f:2f:3b:c4:97:60:57:b5:85:bc:6d:29:74:ea:69: e1:4d:b6:c9 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUcvdgXw379/1uDhDGNijhu0HM9i0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxODA0MTcxNloX DTI2MDIxNzA0MjIxNlowMzExMC8GA1UEAxMoNjhGMkZBNzg5N0FGN0I4MEZFMzk1 NTU0NTRBMUI0ODkyRUFCMTE1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpqMRAlO37yUwkRs3tI0WQu6073q/f2SH7xGDWFzGpOS4U7m7hI1s29jbDm SrMdSA9RfksFFWLdBpfS0C/zUQ2GPb/ok8BMWz2WyyXV2xv24TrtopY1QyCjPK50 l43L8gSwDBoXRYy54KtI/PiWkRXyK83TztIiRYn1bjfAhZJI8StaFTGr8W8NmsXN z6QFidPwU8ICFF5u05SLyTKxLlucNe8GzBg0QL0nYs8lixrkMwZvNLUZhmRBHs2r gQQiCLoQXgWUwvvOotnJ2FoiGdiUgrBA2LCe5LTxUZz26bYoZFobqi/tqlVft7a7 PDfIGdBuvn6YWT/175Dd8Drf4gsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRo8vp4 l697gP45VVRUobSJLqsRUjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzYwOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKM9MTAPBAIAAjAJAwcAIAEN9QjAMA0GCSqGSIb3DQEBCwUAA4IB AQCHQ6QmlTviRmXvsxj/0xR8vNh89CWFy5MVpV+Z0GhS/1DZbrqX0bqmSIUW4NSy MXMHGL8Pw3BGfMGO6IJgwRNoDvAvus4VdM96ahc75Z6/Wel95AeVMQflJA0DNj4/ XH4rIzfm/svkpJ2ToCcSzZ4MocX/AyGc+bTpKhosasmYsvbgNcwZjEXxsI+OuqIV VkJxFWu5bRggOsEu2WrgaCFsAjOQpjJol6c0Y6ReVVRrVaoHA+Fn/MeyodsYs4Bl T3posM8Zc2JlVrRUIwrN9Gb1hr81EAMJu6MJ7d9pDoB1gW3INVmLn1j+Xd43b6sf LzvEl2BXtYW8bSl06mnhTbbJ -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net