$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38764.roa File: AS38764.roa (raw, json) Hash identifier: U5i/Y6uGsEx0EN30lKrAU4O3ALMZXGX5ZRnpTBlCkSI= Subject key identifier: 58:80:C6:94:28:B6:07:EB:D7:30:69:A7:12:95:81:08:B1:21:03:ED Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 198DED3DCEF42CDD3014E0B5C84141FCEDD550F7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38764.roa Signing time: Mon 14 Apr 2025 03:46:50 +0000 ROA not before: Mon 14 Apr 2025 03:41:50 +0000 ROA not after: Mon 13 Apr 2026 03:46:50 +0000 asID: 38764 IP address blocks: 120.29.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8d:ed:3d:ce:f4:2c:dd:30:14:e0:b5:c8:41:41:fc:ed:d5:50:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 14 03:41:50 2025 GMT Not After : Apr 13 03:46:50 2026 GMT Subject: CN=5880C69428B607EBD73069A712958108B12103ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:0d:f2:3a:c0:fb:d5:03:38:91:21:49:b8: 92:6e:c2:d6:26:a5:00:b7:fa:c0:23:a4:87:9f:7e: 72:fb:f3:63:7f:b5:43:28:39:ef:98:ec:b5:8b:e8: d8:11:12:43:16:54:8a:ae:90:39:96:65:50:95:8e: b8:56:4a:e4:56:79:92:d3:2a:f3:11:4b:d6:16:ba: 90:43:fc:86:86:cd:3a:46:10:8f:eb:c3:5e:a5:ac: 95:0b:03:31:d6:c4:74:b3:f4:bc:09:5b:a7:5c:32: e0:04:c2:19:a3:44:2c:dc:b8:85:29:f8:6d:fa:1f: a9:d5:de:7c:23:ca:9c:61:b2:52:0d:84:38:d0:76: c0:0f:ef:94:2f:4f:07:6b:6d:df:d6:84:05:93:51: 62:ff:b7:24:a6:a1:01:50:6b:b5:21:96:26:67:5b: a7:9d:45:26:ab:a2:77:06:8e:e7:27:39:86:db:b7: 38:d5:41:30:cd:a5:cf:8c:15:87:e2:0f:c1:7c:12: 2c:af:a2:6d:e6:e1:08:a6:6d:c3:57:0d:f9:22:a8: b5:a3:90:fd:3d:ad:f6:a8:9b:a9:17:97:1d:dc:59: 31:d8:87:6f:5b:30:25:89:11:42:dc:46:fb:10:d6: 03:94:88:ed:06:47:86:b5:2b:ad:fc:ac:73:95:db: 14:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:80:C6:94:28:B6:07:EB:D7:30:69:A7:12:95:81:08:B1:21:03:ED X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38764.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.224.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:cb:e3:9d:44:07:16:f2:50:cd:5e:4b:f2:e7:61:3a:0f:5f: 6f:71:0f:e7:c5:19:ea:29:f5:2e:85:a8:46:c5:53:c0:af:0b: 0a:ad:17:b0:f4:49:b2:1e:41:0c:7a:90:cb:96:be:50:18:54: 7e:fa:27:eb:43:56:21:9b:56:f2:52:9e:33:12:49:de:f5:e3: 0f:38:f5:5f:a9:b4:08:2a:86:6a:0c:1c:c1:51:dc:45:10:a4: f2:97:ba:f5:2d:7a:6b:e8:9a:ca:4a:20:26:3a:2e:5a:ce:2f: 1a:55:77:41:02:e5:70:dd:19:86:e7:a6:0b:ad:07:ca:6b:02: 88:9c:bc:b2:b5:27:e5:17:e9:3e:ff:09:c8:60:62:15:34:8b: f7:54:70:5b:46:14:f8:97:2d:f9:64:99:fb:27:f3:09:b2:7f: ec:82:d7:9b:14:78:58:4d:8c:b6:63:1e:c9:93:6e:c5:0e:e9: e6:a7:d7:04:80:72:0c:da:cf:1c:a2:cf:45:80:7a:1c:1a:68: 58:44:31:12:ab:04:2a:9a:7c:ac:47:64:83:b7:53:8a:70:9c: 91:82:2e:f8:c8:6b:a7:41:92:0c:ef:d9:5a:64:a7:39:0d:62: b9:df:8f:6c:0c:d9:a6:40:d8:2d:e5:84:25:41:3e:23:d7:ae: da:d5:9e:34 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUGY3tPc70LN0wFOC1yEFB/O3VUPcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxNDAzNDE1MFoX DTI2MDQxMzAzNDY1MFowMzExMC8GA1UEAxMoNTg4MEM2OTQyOEI2MDdFQkQ3MzA2 OUE3MTI5NTgxMDhCMTIxMDNFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzyDfI6wPvVAziRIUm4km7C1ialALf6wCOkh59+cvvzY3+1Qyg575jstYvo 2BESQxZUiq6QOZZlUJWOuFZK5FZ5ktMq8xFL1ha6kEP8hobNOkYQj+vDXqWslQsD MdbEdLP0vAlbp1wy4ATCGaNELNy4hSn4bfofqdXefCPKnGGyUg2EONB2wA/vlC9P B2tt39aEBZNRYv+3JKahAVBrtSGWJmdbp51FJquidwaO5yc5htu3ONVBMM2lz4wV h+IPwXwSLK+ibebhCKZtw1cN+SKotaOQ/T2t9qibqReXHdxZMdiHb1swJYkRQtxG +xDWA5SI7QZHhrUrrfysc5XbFMUCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRYgMaU KLYH69cwaacSlYEIsSED7TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4NzY0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDeB3gMA0GCSqGSIb3DQEBCwUAA4IBAQAdy+OdRAcW8lDNXkvy52E6 D19vcQ/nxRnqKfUuhahGxVPArwsKrRew9EmyHkEMepDLlr5QGFR++ifrQ1Yhm1by Up4zEkne9eMPOPVfqbQIKoZqDBzBUdxFEKTyl7r1LXpr6JrKSiAmOi5azi8aVXdB AuVw3RmG56YLrQfKawKInLyytSflF+k+/wnIYGIVNIv3VHBbRhT4ly35ZJn7J/MJ sn/sgtebFHhYTYy2Yx7Jk27FDunmp9cEgHIM2s8cos9FgHocGmhYRDESqwQqmnys R2SDt1OKcJyRgi74yGunQZIM79laZKc5DWK5349sDNmmQNgt5YQlQT4j167a1Z40 -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net