$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS24530.roa File: AS24530.roa (raw, json) Hash identifier: oVVmiUs9r2u9mAyDiTHcSEPKD69963FrCbv9zfZVu4g= Subject key identifier: B2:0B:D3:12:22:10:A4:FC:66:CD:80:BB:DA:8F:B4:BE:C3:8D:76:D9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: D183357DCA960122BAF275D173BB70D29B35FE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS24530.roa Signing time: Thu 20 Mar 2025 05:00:00 +0000 ROA not before: Thu 20 Mar 2025 04:55:00 +0000 ROA not after: Thu 19 Mar 2026 05:00:00 +0000 asID: 24530 IP address blocks: 103.178.196.0/23 maxlen: 24 203.190.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d1:83:35:7d:ca:96:01:22:ba:f2:75:d1:73:bb:70:d2:9b:35:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 20 04:55:00 2025 GMT Not After : Mar 19 05:00:00 2026 GMT Subject: CN=B20BD3122210A4FC66CD80BBDA8FB4BEC38D76D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:52:0c:9e:62:c1:dc:06:42:cd:9a:e6:97:72: 77:be:ec:6b:03:4b:a4:74:dc:ff:23:df:5f:7a:15: 60:a9:e4:8c:87:a8:81:5c:93:ca:00:e0:a9:08:e8: dc:3a:a5:07:19:ad:e7:0c:0b:80:d3:9a:99:ea:a7: 2b:96:ff:80:02:ab:46:01:be:a8:62:87:b2:1b:c4: 85:48:49:5c:7c:43:31:c8:f3:1b:79:08:db:ff:e9: 69:cb:ca:9d:75:af:36:d2:84:6d:8f:c9:13:b7:86: 02:3d:43:6c:65:44:f6:d4:34:46:6f:a5:09:55:80: be:52:e5:63:2b:5a:1a:c3:bc:2d:59:44:25:42:45: 6c:0a:57:f3:ac:c9:5c:5a:51:1f:ea:a1:2d:0a:b4: bf:a9:d6:7f:b9:00:45:ca:4c:01:e0:12:4b:d5:27: a8:87:5c:76:68:c0:0a:5b:a9:72:94:ce:67:3d:52: d1:5c:dc:14:69:c2:f6:eb:7c:9c:1b:72:f2:ba:c5: 1e:83:70:c4:38:5a:dc:f8:7b:fe:b6:c4:e4:7f:ff: fa:58:8f:72:0b:d4:ab:66:4f:29:f2:4a:a9:a2:2f: cd:f6:82:9e:79:83:74:f3:03:22:2f:d7:8b:7d:39: 5c:22:f7:af:db:d8:a7:23:71:47:c2:a5:52:fd:cf: 72:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0B:D3:12:22:10:A4:FC:66:CD:80:BB:DA:8F:B4:BE:C3:8D:76:D9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS24530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.196.0/23 203.190.48.0/21 Signature Algorithm: sha256WithRSAEncryption 83:fd:0c:e7:a2:2d:3a:5b:97:45:b7:49:e1:6b:42:1e:9f:7c: 05:50:e8:ce:09:ae:93:0a:61:c8:d0:6d:f9:e8:a2:e1:4b:c9: f0:04:23:9b:e8:d9:02:e3:fc:d3:59:9b:19:6c:b5:39:b8:d0: 44:b8:ea:40:33:7a:7c:de:8a:64:c7:9b:ea:53:15:13:e2:29: 40:42:23:b9:c9:1a:2b:c5:83:6c:67:71:de:d3:da:03:df:53: b4:a8:0d:aa:39:65:ce:07:24:1d:af:1c:fe:91:fb:7f:96:44: b9:41:17:e6:7b:55:c9:e0:a4:95:b6:f8:dd:ad:f9:a2:25:b8: d0:f5:36:f9:a7:34:a2:a0:b8:64:fc:c9:d3:5d:2f:ce:ca:3f: 81:7d:87:6c:cc:ca:f6:cf:ec:7a:46:42:8e:dc:d8:f6:6b:8d: 29:d6:a7:f2:90:17:50:7d:1d:30:08:9d:81:e1:17:63:e0:88: 81:78:a8:c4:56:80:15:26:76:68:3a:8b:4b:c0:93:b8:bd:f9: 33:84:98:a0:91:ce:3e:6d:7b:09:f6:4b:f2:b5:4f:cf:31:9b: 85:97:40:80:15:ec:03:5a:6e:38:7f:68:b8:6e:bd:30:80:c5: 30:b5:44:74:1c:32:af:e2:59:26:a2:11:3a:35:09:47:c3:48: c4:08:0d:1d -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUANGDNX3KlgEiuvJ10XO7cNKbNf4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyMDA0NTUwMFoX DTI2MDMxOTA1MDAwMFowMzExMC8GA1UEAxMoQjIwQkQzMTIyMjEwQTRGQzY2Q0Q4 MEJCREE4RkI0QkVDMzhENzZEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANxSDJ5iwdwGQs2a5pdyd77sawNLpHTc/yPfX3oVYKnkjIeogVyTygDgqQjo 3DqlBxmt5wwLgNOameqnK5b/gAKrRgG+qGKHshvEhUhJXHxDMcjzG3kI2//pacvK nXWvNtKEbY/JE7eGAj1DbGVE9tQ0Rm+lCVWAvlLlYytaGsO8LVlEJUJFbApX86zJ XFpRH+qhLQq0v6nWf7kARcpMAeASS9UnqIdcdmjAClupcpTOZz1S0VzcFGnC9ut8 nBty8rrFHoNwxDha3Ph7/rbE5H//+liPcgvUq2ZPKfJKqaIvzfaCnnmDdPMDIi/X i305XCL3r9vYpyNxR8KlUv3PchcCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBSyC9MS IhCk/GbNgLvaj7S+w4122TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzI0NTMwLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ7LEAwQDy74wMA0GCSqGSIb3DQEBCwUAA4IBAQCD/Qznoi06W5dF t0nha0Ien3wFUOjOCa6TCmHI0G356KLhS8nwBCOb6NkC4/zTWZsZbLU5uNBEuOpA M3p83opkx5vqUxUT4ilAQiO5yRorxYNsZ3He09oD31O0qA2qOWXOByQdrxz+kft/ lkS5QRfme1XJ4KSVtvjdrfmiJbjQ9Tb5pzSioLhk/MnTXS/Oyj+BfYdszMr2z+x6 RkKO3Nj2a40p1qfykBdQfR0wCJ2B4Rdj4IiBeKjEVoAVJnZoOotLwJO4vfkzhJig kc4+bXsJ9kvytU/PMZuFl0CAFewDWm44f2i4br0wgMUwtUR0HDKv4lkmohE6NQlH w0jECA0d -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net