$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153768.roa File: AS153768.roa (raw, json) Hash identifier: XZNGz1zNOMQdJZwLreGkJGY7CMhwvA5NitYHCMCDgns= Subject key identifier: 4D:7D:CB:FF:97:76:D4:66:30:D5:BD:55:47:7D:47:1A:50:DE:13:31 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3AE5C4CAC1BFED3A199D1E32EA3E1D6D658DE18A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153768.roa Signing time: Tue 15 Apr 2025 08:09:11 +0000 ROA not before: Tue 15 Apr 2025 08:04:11 +0000 ROA not after: Tue 14 Apr 2026 08:09:11 +0000 asID: 153768 IP address blocks: 163.223.116.0/23 maxlen: 24 2001:df5:3e40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e5:c4:ca:c1:bf:ed:3a:19:9d:1e:32:ea:3e:1d:6d:65:8d:e1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 15 08:04:11 2025 GMT Not After : Apr 14 08:09:11 2026 GMT Subject: CN=4D7DCBFF9776D46630D5BD55477D471A50DE1331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ab:42:cb:d4:67:e3:7c:0f:0e:f1:39:6d:96: 0f:c1:64:4a:51:8e:24:52:35:4d:84:9d:b3:45:98: 04:1b:3a:a8:26:93:69:66:d8:64:0c:b2:61:a8:ce: 53:53:58:f4:c9:fd:60:b4:1e:fc:05:63:6b:ca:3f: 3d:ed:ed:81:f4:92:db:60:26:d7:e3:90:79:d5:61: ed:19:b6:df:c5:8a:0a:55:c0:6d:f1:c8:68:61:46: 81:02:ae:7d:a5:32:a8:fe:05:2b:bb:e9:a5:d7:6a: 21:d1:26:63:bd:4e:c0:c6:42:e9:b5:19:a2:b2:62: 9d:fa:7b:7a:88:ef:f5:b7:e1:36:35:c2:3a:08:64: a7:f6:79:ad:00:28:5a:df:7f:02:41:ec:7c:56:de: ab:2b:4b:0c:88:18:f3:f7:4c:42:fd:3b:91:41:36: a2:b4:ae:7c:a8:37:5f:b8:95:66:2a:b1:f1:99:ab: ad:85:6d:5b:e6:10:cd:48:25:7f:26:de:b7:d3:00: c1:15:18:f6:a2:f8:a3:1a:f3:d5:97:33:c8:59:d0: a8:0f:da:62:ed:cb:7c:88:b4:15:f6:39:a3:cd:59: 81:70:95:75:26:9b:9a:30:40:64:57:5a:31:50:43: 26:84:a9:2f:f8:8f:18:a0:27:ee:4a:76:3a:7a:60: 08:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7D:CB:FF:97:76:D4:66:30:D5:BD:55:47:7D:47:1A:50:DE:13:31 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153768.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.116.0/23 IPv6: 2001:df5:3e40::/48 Signature Algorithm: sha256WithRSAEncryption 1d:29:67:03:18:96:31:55:37:74:98:a3:5c:c1:98:fc:33:71: f2:fb:cb:a0:00:3a:fc:38:d0:13:8b:41:87:e7:09:a7:51:e0: de:90:2e:99:8c:76:61:19:6d:b2:04:e7:b0:8f:d1:55:ee:77: 55:99:53:2b:9b:fa:33:c8:0b:08:ef:94:40:bf:c0:66:7e:ff: 98:28:82:f9:ff:63:df:d2:12:e5:3c:79:7e:dd:72:b7:1a:93: 3e:a7:74:92:d5:13:73:1d:60:29:c4:00:ad:24:13:2e:73:f7: 7b:00:44:22:5f:5d:c0:74:01:b5:5c:24:7b:f5:f9:01:40:2d: 59:22:eb:bf:14:3a:6a:fc:be:cc:82:c8:9e:8a:31:5d:5c:8e: c5:8a:eb:90:12:d8:de:2b:8b:2c:69:68:88:a4:b3:72:1c:42: 0a:c6:f6:f0:eb:a8:80:bf:14:04:b8:67:e1:b5:76:a4:ea:83: 69:db:fe:c4:a3:22:5b:db:d2:66:b1:27:4e:3c:ae:db:fd:b7: c2:0b:30:87:9c:df:ca:75:f4:3a:f8:61:15:f7:b2:11:73:dc: f4:1f:3a:1d:4a:62:08:ca:fc:d9:1e:cb:38:a7:77:dd:fc:e2: c2:1a:82:b0:d6:ae:b2:a4:8d:99:c9:73:65:f0:01:0e:bb:fb: c3:bd:d7:3b -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUOuXEysG/7ToZnR4y6j4dbWWN4YowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxNTA4MDQxMVoX DTI2MDQxNDA4MDkxMVowMzExMC8GA1UEAxMoNEQ3RENCRkY5Nzc2RDQ2NjMwRDVC RDU1NDc3RDQ3MUE1MERFMTMzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKrQsvUZ+N8Dw7xOW2WD8FkSlGOJFI1TYSds0WYBBs6qCaTaWbYZAyyYajO U1NY9Mn9YLQe/AVja8o/Pe3tgfSS22Am1+OQedVh7Rm238WKClXAbfHIaGFGgQKu faUyqP4FK7vppddqIdEmY71OwMZC6bUZorJinfp7eojv9bfhNjXCOghkp/Z5rQAo Wt9/AkHsfFbeqytLDIgY8/dMQv07kUE2orSufKg3X7iVZiqx8ZmrrYVtW+YQzUgl fybet9MAwRUY9qL4oxrz1ZczyFnQqA/aYu3LfIi0FfY5o81ZgXCVdSabmjBAZFda MVBDJoSpL/iPGKAn7kp2OnpgCIMCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRNfcv/ l3bUZjDVvVVHfUcaUN4TMTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzc2OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaPfdDAPBAIAAjAJAwcAIAEN9T5AMA0GCSqGSIb3DQEBCwUAA4IB AQAdKWcDGJYxVTd0mKNcwZj8M3Hy+8ugADr8ONATi0GH5wmnUeDekC6ZjHZhGW2y BOewj9FV7ndVmVMrm/ozyAsI75RAv8Bmfv+YKIL5/2Pf0hLlPHl+3XK3GpM+p3SS 1RNzHWApxACtJBMuc/d7AEQiX13AdAG1XCR79fkBQC1ZIuu/FDpq/L7MgsieijFd XI7FiuuQEtjeK4ssaWiIpLNyHEIKxvbw66iAvxQEuGfhtXak6oNp2/7EoyJb29Jm sSdOPK7b/bfCCzCHnN/KdfQ6+GEV97IRc9z0HzodSmIIyvzZHss4p3fd/OLCGoKw 1q6ypI2ZyXNl8AEOu/vDvdc7 -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net