$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58820.roa File: AS58820.roa (raw, json) Hash identifier: l4iwBF8ZAjG+QS4AVAYEeu7Mby1N3KNozxVsvVK4HA8= Subject key identifier: 80:59:E2:4A:FB:73:AD:AC:79:A6:D5:2C:80:CC:22:AE:7D:F8:17:CA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 01CC11CF3EDCF6A2ACFCB92E76D0578049470AA9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58820.roa Signing time: Tue 10 Dec 2024 05:00:22 +0000 ROA not before: Tue 10 Dec 2024 04:55:22 +0000 ROA not after: Tue 09 Dec 2025 05:00:22 +0000 asID: 58820 IP address blocks: 103.113.28.0/24 maxlen: 24 103.136.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:cc:11:cf:3e:dc:f6:a2:ac:fc:b9:2e:76:d0:57:80:49:47:0a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:22 2024 GMT Not After : Dec 9 05:00:22 2025 GMT Subject: CN=8059E24AFB73ADAC79A6D52C80CC22AE7DF817CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:10:13:53:22:f5:63:18:4a:f5:ba:1d:c3: 68:2b:6e:69:26:0e:a1:48:01:a6:60:ab:2a:ba:a3: 30:6b:28:13:54:d4:f0:7a:7f:e8:d1:c6:58:22:47: 7b:ed:31:c4:e0:32:54:83:6d:3f:a4:c7:f1:a8:16: db:1b:eb:fc:98:ae:7b:6a:a6:55:33:55:4d:6f:28: 3a:cd:c8:13:f7:0a:fd:f9:93:64:20:4b:f3:5a:1c: d1:c0:ae:26:86:30:81:bb:73:61:46:28:fc:51:f7: 2a:bb:d9:f8:f6:e4:49:9d:2b:af:8f:67:1b:19:b4: 37:80:ff:d1:5c:fc:fd:50:9d:e8:17:8e:8d:e1:c0: 96:4e:49:b0:54:37:06:cd:2e:04:ce:cd:2d:6f:4c: 6a:6f:1b:f0:93:ce:93:fc:93:5d:57:5d:09:42:5f: a6:91:db:59:2b:7a:d2:89:a4:e3:36:d6:12:df:5f: 1b:9a:1a:e3:3d:7d:cb:f0:c1:08:15:ec:cf:1e:e7: 4f:70:9c:57:15:e0:7e:ad:d7:e2:c8:ad:d8:33:ab: 9c:b0:8e:bb:fd:71:d8:b1:4d:01:1c:ee:e7:04:e1: d2:16:61:8b:b9:5f:cb:28:61:df:ff:57:d9:61:85: e0:f1:4d:84:25:9a:67:52:41:b2:5b:e4:4a:00:aa: fd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:59:E2:4A:FB:73:AD:AC:79:A6:D5:2C:80:CC:22:AE:7D:F8:17:CA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58820.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.113.28.0/24 103.136.16.0/22 Signature Algorithm: sha256WithRSAEncryption 88:94:07:c4:84:3e:3c:43:98:a4:a1:ff:77:8c:38:c2:3d:d4: b5:d3:1e:56:31:2e:dc:d9:63:f0:76:5a:b5:a2:b9:79:c7:d0: db:c6:8a:ed:35:1f:be:e6:1f:dc:a5:65:18:69:13:1e:25:cf: 31:b0:c7:0b:95:50:43:1c:9f:67:05:06:64:f9:db:98:fb:00: 18:25:89:25:40:5c:65:60:e9:9c:ad:2c:d5:dd:f3:d0:2f:e3: 59:62:31:63:28:99:ca:37:f8:f2:a4:b8:ab:00:a8:3d:0b:64: 57:fc:9e:46:7d:0e:80:2c:c0:8b:84:f4:31:93:70:71:3f:1a: 18:1d:22:68:1b:dd:e5:86:24:c1:ef:0c:af:81:4a:13:66:7a: 50:12:ff:da:ec:7d:19:71:e5:7a:23:7e:a9:cf:df:3c:2e:76: 6e:b4:18:cb:8d:cc:5d:0b:a0:d9:36:27:56:37:cc:3e:06:2a: 97:85:d2:0d:ee:d5:20:5f:a8:07:3a:24:ae:91:2c:be:27:84: 30:86:24:78:b4:e3:6d:56:02:7a:f9:1d:66:24:8e:06:94:22: 49:19:e1:f0:f8:0e:f1:13:d5:3c:48:d7:cc:0a:11:53:57:db: 1a:40:eb:a5:23:34:a1:dd:22:23:f0:a6:29:8c:ed:71:c1:4d: 7d:f1:f7:b3 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUAcwRzz7c9qKs/LkudtBXgElHCqkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUyMloX DTI1MTIwOTA1MDAyMlowMzExMC8GA1UEAxMoODA1OUUyNEFGQjczQURBQzc5QTZE NTJDODBDQzIyQUU3REY4MTdDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALS9EBNTIvVjGEr1uh3DaCtuaSYOoUgBpmCrKrqjMGsoE1TU8Hp/6NHGWCJH e+0xxOAyVINtP6TH8agW2xvr/Jiue2qmVTNVTW8oOs3IE/cK/fmTZCBL81oc0cCu JoYwgbtzYUYo/FH3KrvZ+PbkSZ0rr49nGxm0N4D/0Vz8/VCd6BeOjeHAlk5JsFQ3 Bs0uBM7NLW9Mam8b8JPOk/yTXVddCUJfppHbWSt60omk4zbWEt9fG5oa4z19y/DB CBXszx7nT3CcVxXgfq3X4sit2DOrnLCOu/1x2LFNARzu5wTh0hZhi7lfyyhh3/9X 2WGF4PFNhCWaZ1JBslvkSgCq/akCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBSAWeJK +3OtrHmm1SyAzCKuffgXyjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4ODIwLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ3EcAwQCZ4gQMA0GCSqGSIb3DQEBCwUAA4IBAQCIlAfEhD48Q5ik of93jDjCPdS10x5WMS7c2WPwdlq1orl5x9DbxortNR++5h/cpWUYaRMeJc8xsMcL lVBDHJ9nBQZk+duY+wAYJYklQFxlYOmcrSzV3fPQL+NZYjFjKJnKN/jypLirAKg9 C2RX/J5GfQ6ALMCLhPQxk3BxPxoYHSJoG93lhiTB7wyvgUoTZnpQEv/a7H0ZceV6 I36pz988LnZutBjLjcxdC6DZNidWN8w+BiqXhdIN7tUgX6gHOiSukSy+J4QwhiR4 tONtVgJ6+R1mJI4GlCJJGeHw+A7xE9U8SNfMChFTV9saQOulIzSh3SIj8KYpjO1x wU198fez -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:21 2025 by rpki-client on console.sobornost.net