$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45291.roa File: AS45291.roa (raw, json) Hash identifier: y5NFZAdd7364c982INtTymPbjEKHcKVmYrhHSeCCJkE= Subject key identifier: 82:64:89:E2:C3:12:D1:27:DF:DD:14:EE:FE:AC:32:68:95:11:19:04 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1422A0A65EBF5813181F88B40DB332B3E817109F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45291.roa Signing time: Tue 10 Dec 2024 05:00:18 +0000 ROA not before: Tue 10 Dec 2024 04:55:18 +0000 ROA not after: Tue 09 Dec 2025 05:00:18 +0000 asID: 45291 IP address blocks: 103.156.72.0/23 maxlen: 24 203.153.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:22:a0:a6:5e:bf:58:13:18:1f:88:b4:0d:b3:32:b3:e8:17:10:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:18 2024 GMT Not After : Dec 9 05:00:18 2025 GMT Subject: CN=826489E2C312D127DFDD14EEFEAC326895111904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:68:c9:cd:69:b7:94:7c:c3:28:1a:75:70: e3:a9:34:e8:2b:26:5c:3d:17:43:ce:72:67:f3:a4: aa:d3:38:e6:de:c6:3e:ea:86:1f:df:99:56:42:0b: 16:4e:24:98:a9:73:7c:ae:21:f1:5a:a0:50:c8:18: 94:a1:10:f2:b7:c5:01:8a:6f:59:5d:ef:9d:9f:ba: 90:ce:d4:b9:bd:9e:01:b7:34:ea:e1:2f:b2:5a:88: 11:a2:d2:65:5f:3c:d0:4e:97:e0:b7:ee:49:d9:dd: b1:74:9a:0a:d1:06:32:46:36:89:ee:5a:cf:de:84: 50:04:11:03:ff:3b:7d:7b:7b:3d:87:94:ce:df:b8: 5a:0a:58:9a:5a:9f:09:76:e9:64:81:7c:15:94:db: ab:f2:a2:ac:e4:8d:61:9e:38:59:fa:45:8b:b7:a8: 60:46:16:eb:4b:2c:ce:ad:54:58:d4:75:ef:af:89: 8b:c4:e3:87:4c:d3:90:ab:70:4a:b5:04:e9:62:34: fc:ba:23:03:df:51:cd:bf:7f:71:d4:b2:af:a5:77: 28:45:df:66:f4:3a:cf:ef:d9:07:66:5a:50:10:87: 31:81:33:14:10:c9:f5:de:1a:0e:6d:b0:90:7d:5e: ca:00:e8:cd:d3:17:bf:50:2f:30:e3:21:f3:5e:55: 67:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:64:89:E2:C3:12:D1:27:DF:DD:14:EE:FE:AC:32:68:95:11:19:04 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45291.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.72.0/23 203.153.216.0/22 Signature Algorithm: sha256WithRSAEncryption 26:e0:42:41:bb:72:01:9c:89:36:f4:bf:1b:7e:0c:2c:70:0c: 6f:78:4b:98:de:01:76:ee:41:c5:9d:21:44:d0:64:db:74:5e: e3:83:0d:2a:5a:67:a0:02:22:fe:7e:cd:c0:49:02:1f:cc:f1: 0b:fd:02:30:6a:2c:3a:23:fa:e4:f4:c2:26:ea:f5:8b:88:44: 46:90:4a:d3:20:bb:85:db:ac:ab:5a:0a:a8:56:91:48:d0:a5: 83:91:11:c7:be:86:4a:6c:04:a8:96:33:ed:a9:ee:12:36:4e: a3:04:f7:1f:63:ef:c1:4e:87:07:10:5f:42:4d:08:84:4c:84: cc:a8:73:4f:c1:af:53:d7:d2:40:48:29:75:14:40:f8:2a:83: 41:3c:6f:ae:1e:52:22:96:48:b0:83:05:cc:a8:11:1a:5f:01: 05:45:e7:df:14:1d:c0:b4:b8:9d:a2:6a:31:6c:dc:27:23:e3: 02:a4:f8:06:15:66:09:4d:f7:27:c9:60:a0:2f:a5:fa:1a:68: 2b:3a:c8:43:e6:a5:3e:6e:c0:1a:3b:b9:73:45:60:27:76:f9: 02:d2:13:6b:a0:10:6d:36:26:27:07:da:ef:93:03:3d:79:4f: 5e:ce:8d:8d:80:3b:b0:41:e7:77:81:57:06:46:73:ad:97:f8: 23:ee:6c:88 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUFCKgpl6/WBMYH4i0DbMys+gXEJ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxOFoX DTI1MTIwOTA1MDAxOFowMzExMC8GA1UEAxMoODI2NDg5RTJDMzEyRDEyN0RGREQx NEVFRkVBQzMyNjg5NTExMTkwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJo0aMnNabeUfMMoGnVw46k06CsmXD0XQ85yZ/OkqtM45t7GPuqGH9+ZVkIL Fk4kmKlzfK4h8VqgUMgYlKEQ8rfFAYpvWV3vnZ+6kM7Uub2eAbc06uEvslqIEaLS ZV880E6X4LfuSdndsXSaCtEGMkY2ie5az96EUAQRA/87fXt7PYeUzt+4WgpYmlqf CXbpZIF8FZTbq/KirOSNYZ44WfpFi7eoYEYW60sszq1UWNR176+Ji8Tjh0zTkKtw SrUE6WI0/LojA99Rzb9/cdSyr6V3KEXfZvQ6z+/ZB2ZaUBCHMYEzFBDJ9d4aDm2w kH1eygDozdMXv1AvMOMh815VZ5sCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBSCZIni wxLRJ9/dFO7+rDJolREZBDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzQ1MjkxLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ5xIAwQCy5nYMA0GCSqGSIb3DQEBCwUAA4IBAQAm4EJBu3IBnIk2 9L8bfgwscAxveEuY3gF27kHFnSFE0GTbdF7jgw0qWmegAiL+fs3ASQIfzPEL/QIw aiw6I/rk9MIm6vWLiERGkErTILuF26yrWgqoVpFI0KWDkRHHvoZKbASoljPtqe4S Nk6jBPcfY+/BTocHEF9CTQiETITMqHNPwa9T19JASCl1FED4KoNBPG+uHlIilkiw gwXMqBEaXwEFReffFB3AtLidomoxbNwnI+MCpPgGFWYJTfcnyWCgL6X6GmgrOshD 5qU+bsAaO7lzRWAndvkC0hNroBBtNiYnB9rvkwM9eU9ezo2NgDuwQed3gVcGRnOt l/gj7myI -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net