$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153769.roa File: AS153769.roa (raw, json) Hash identifier: Fx7JygGznJx4bQ4IEfrhcHxepuFCdwwfeBmjHibhEas= Subject key identifier: EF:B9:7C:83:02:DB:14:99:0A:94:4D:71:21:92:55:D0:55:65:F0:8F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1C3A97ED41AD2B5C5C3DFE1C2FD67F12A8EEAD95 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153769.roa Signing time: Fri 11 Apr 2025 04:09:14 +0000 ROA not before: Fri 11 Apr 2025 04:04:14 +0000 ROA not after: Fri 10 Apr 2026 04:09:14 +0000 asID: 153769 IP address blocks: 163.61.247.0/24 maxlen: 24 2001:df5:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3a:97:ed:41:ad:2b:5c:5c:3d:fe:1c:2f:d6:7f:12:a8:ee:ad:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 11 04:04:14 2025 GMT Not After : Apr 10 04:09:14 2026 GMT Subject: CN=EFB97C8302DB14990A944D71219255D05565F08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ca:18:4f:35:09:4a:ed:03:83:14:c9:3c:a5: 30:bc:1d:82:10:7d:ea:14:8c:47:dc:8c:8c:4b:54: 88:1f:8f:e2:59:14:b7:9b:2b:74:10:d0:a0:9e:2b: 42:47:7e:48:91:93:de:25:86:02:41:53:68:fe:4f: eb:0a:ae:65:f8:17:e4:96:c5:07:15:7e:44:55:e6: 4d:21:37:9b:ec:eb:c0:57:0a:51:30:64:af:41:4f: 2b:72:84:19:ce:84:ea:16:fd:22:4e:fb:38:27:51: 93:56:47:e0:71:a8:e6:eb:f6:89:42:aa:59:de:f3: f7:04:2a:c2:99:1b:6d:55:d6:e6:01:df:c9:81:28: 51:22:2b:b7:e8:4f:8c:ce:09:51:7f:ca:0c:8f:f1: d4:60:a4:0b:dd:51:c6:5d:75:47:b7:bd:5b:4f:11: 26:54:aa:4b:6f:8e:7e:71:83:42:04:14:60:e2:7a: d4:aa:da:30:09:89:3d:ce:81:6e:90:08:b8:7e:31: 89:4e:12:2b:72:8c:8d:2c:76:54:d3:1a:e5:59:ca: fa:59:25:66:62:00:02:db:8b:c3:82:08:98:0b:62: 38:af:89:95:48:7d:b4:9e:7c:9b:df:79:19:69:f8: bf:99:20:49:d0:28:25:fd:7d:c5:75:5f:21:26:b9: 71:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B9:7C:83:02:DB:14:99:0A:94:4D:71:21:92:55:D0:55:65:F0:8F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153769.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.247.0/24 IPv6: 2001:df5:2840::/48 Signature Algorithm: sha256WithRSAEncryption 72:5c:dc:27:04:1e:fe:4f:85:87:d3:53:af:45:7b:d7:ef:f3: 5c:29:ed:55:66:24:eb:d8:05:5f:88:a6:60:b2:61:d6:f2:f4: 64:13:a8:86:c2:84:cc:60:97:94:5a:9c:83:a7:fe:86:9d:85: 62:47:23:02:13:22:0a:6a:0c:9a:20:90:c1:e2:17:0e:c9:89: cb:9c:1b:e1:8c:d4:17:97:28:15:73:42:66:90:99:b5:7a:46: 13:66:f6:f3:81:b2:f2:53:68:92:7c:f4:21:64:38:b5:55:d9: b4:e4:25:7e:09:ab:a3:1d:e7:b5:48:cf:8d:fe:38:54:1e:c6: d9:f2:c3:48:db:ac:1f:ec:2b:ee:bb:df:65:e5:60:5d:e2:5c: 01:58:3d:7d:b7:1f:c1:62:eb:b5:56:57:e8:09:c7:73:33:67: 3d:01:b9:15:d0:82:c9:67:6a:b0:28:41:74:1b:b7:00:d4:13: c9:0e:ef:e6:4f:c0:58:05:68:50:d5:50:a9:b8:8c:6f:e6:0b: 1f:cc:04:92:6e:8b:d7:3f:47:b3:c7:f9:1b:a1:12:76:e6:8f: 93:be:7f:00:6d:d9:3b:03:dd:10:f5:70:3d:9b:64:58:0a:db: 06:56:cb:fa:f1:55:7d:80:e2:da:85:a0:4a:30:05:6f:4d:9c: 49:1c:cc:2c -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUHDqX7UGtK1xcPf4cL9Z/EqjurZUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMTA0MDQxNFoX DTI2MDQxMDA0MDkxNFowMzExMC8GA1UEAxMoRUZCOTdDODMwMkRCMTQ5OTBBOTQ0 RDcxMjE5MjU1RDA1NTY1RjA4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfKGE81CUrtA4MUyTylMLwdghB96hSMR9yMjEtUiB+P4lkUt5srdBDQoJ4r Qkd+SJGT3iWGAkFTaP5P6wquZfgX5JbFBxV+RFXmTSE3m+zrwFcKUTBkr0FPK3KE Gc6E6hb9Ik77OCdRk1ZH4HGo5uv2iUKqWd7z9wQqwpkbbVXW5gHfyYEoUSIrt+hP jM4JUX/KDI/x1GCkC91Rxl11R7e9W08RJlSqS2+OfnGDQgQUYOJ61KraMAmJPc6B bpAIuH4xiU4SK3KMjSx2VNMa5VnK+lklZmIAAtuLw4IImAtiOK+JlUh9tJ58m995 GWn4v5kgSdAoJf19xXVfISa5cW0CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTvuXyD AtsUmQqUTXEhklXQVWXwjzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzc2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKM99zAPBAIAAjAJAwcAIAEN9ShAMA0GCSqGSIb3DQEBCwUAA4IB AQByXNwnBB7+T4WH01OvRXvX7/NcKe1VZiTr2AVfiKZgsmHW8vRkE6iGwoTMYJeU WpyDp/6GnYViRyMCEyIKagyaIJDB4hcOyYnLnBvhjNQXlygVc0JmkJm1ekYTZvbz gbLyU2iSfPQhZDi1Vdm05CV+CaujHee1SM+N/jhUHsbZ8sNI26wf7Cvuu99l5WBd 4lwBWD19tx/BYuu1VlfoCcdzM2c9AbkV0ILJZ2qwKEF0G7cA1BPJDu/mT8BYBWhQ 1VCpuIxv5gsfzASSbovXP0ezx/kboRJ25o+Tvn8Abdk7A90Q9XA9m2RYCtsGVsv6 8VV9gOLahaBKMAVvTZxJHMws -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net