$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59150.roa File: AS59150.roa (raw, json) Hash identifier: xYMtuwtjGYZB1EW9F+xvDLkhgoRtmLgvv8jNH0Q0TJo= Subject key identifier: 74:E9:DC:31:FB:82:66:32:AE:86:51:B0:88:B2:D9:94:31:F5:A8:16 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1DC8E9004CEAE254725BD937A1F3C4CEFC60D421 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59150.roa Signing time: Tue 10 Dec 2024 05:00:06 +0000 ROA not before: Tue 10 Dec 2024 04:55:06 +0000 ROA not after: Tue 09 Dec 2025 05:00:06 +0000 asID: 59150 IP address blocks: 103.81.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c8:e9:00:4c:ea:e2:54:72:5b:d9:37:a1:f3:c4:ce:fc:60:d4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:06 2024 GMT Not After : Dec 9 05:00:06 2025 GMT Subject: CN=74E9DC31FB826632AE8651B088B2D99431F5A816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9b:52:49:19:c1:87:95:48:f3:d0:f7:e1:1c: 3b:94:15:ac:1e:a3:b3:6d:1d:ca:54:a1:82:a9:b8: b8:6d:fc:f7:90:26:7f:fd:87:30:f5:2c:8e:b8:93: 2c:cb:02:71:40:f2:e1:0c:99:63:25:a5:8e:f9:ef: ed:a0:fe:68:1a:b5:5a:62:77:da:b8:15:6f:e9:15: 52:b0:97:43:f8:47:fc:b1:d1:4d:48:68:e4:ec:30: 99:2b:bb:7c:6d:89:f3:be:b2:0a:44:ff:48:6f:fa: fe:bd:49:f2:ea:82:6e:6d:77:2d:03:3d:83:c4:f1: df:44:c6:7c:e6:2e:c0:3c:06:e7:f2:a9:44:eb:7d: 10:c4:5d:79:7b:9c:db:4c:fc:42:29:b5:13:b0:4a: 46:d3:b8:f1:cc:2f:0d:24:f7:8b:fb:24:2a:16:04: 3c:64:30:9c:32:9e:f6:17:98:ce:a9:21:32:5a:5e: c5:94:99:a0:da:9b:59:80:26:49:34:08:da:40:fa: 78:79:b8:3b:0b:7d:ba:21:64:65:a0:80:2b:ac:3d: 74:51:d9:6e:c8:99:05:7c:e6:81:f4:dc:5d:a4:9d: 38:fc:02:cc:ca:5e:32:2d:ed:55:50:db:e7:d7:05: a5:cd:fa:02:24:d0:ac:71:17:17:41:46:2b:fd:3f: 23:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E9:DC:31:FB:82:66:32:AE:86:51:B0:88:B2:D9:94:31:F5:A8:16 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59150.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.81.194.0/23 Signature Algorithm: sha256WithRSAEncryption 25:28:4d:b1:1a:94:08:dc:03:8a:eb:7a:81:9b:97:94:4b:a1: ce:3d:d5:4c:63:39:55:2a:90:ce:19:9a:f7:a6:5d:61:8b:5d: e5:df:99:51:34:aa:b1:2a:f0:32:3d:8c:6f:a3:a9:ae:ca:38: 0f:03:62:56:c2:69:50:71:72:63:33:4f:b7:cb:a7:27:9a:07: 78:c1:63:ff:7b:24:fb:c2:ea:40:b9:19:7d:5a:35:ac:3d:b1: 85:c7:d6:01:5a:c3:8f:03:d8:65:5c:91:8e:e8:35:96:f2:f6: c5:00:3b:d0:de:16:e5:df:71:8c:ec:60:fe:67:0b:22:80:72: 6a:36:57:0d:eb:44:ba:40:69:62:5d:8f:23:6a:5b:4d:11:4c: 80:75:ac:5f:22:88:84:92:ff:2f:06:4a:17:cd:df:a8:45:e8: 85:dc:ea:6b:25:a2:66:13:39:e2:bb:f0:51:20:35:0a:72:4f: e2:a3:ab:5a:18:2a:d3:bb:db:b0:10:ad:6a:7b:c1:d5:1c:32: 66:8a:33:c8:27:59:94:90:bc:ed:45:67:1a:93:03:76:ae:e8: 91:7c:e2:c4:a1:28:82:1e:9f:00:07:9b:83:88:25:57:53:5c: 5c:07:fe:4f:06:05:f6:94:40:18:81:a6:6b:c5:ac:db:47:f0: 4a:20:ab:98 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUHcjpAEzq4lRyW9k3ofPEzvxg1CEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwNloX DTI1MTIwOTA1MDAwNlowMzExMC8GA1UEAxMoNzRFOURDMzFGQjgyNjYzMkFFODY1 MUIwODhCMkQ5OTQzMUY1QTgxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALybUkkZwYeVSPPQ9+EcO5QVrB6js20dylShgqm4uG3895Amf/2HMPUsjriT LMsCcUDy4QyZYyWljvnv7aD+aBq1WmJ32rgVb+kVUrCXQ/hH/LHRTUho5OwwmSu7 fG2J876yCkT/SG/6/r1J8uqCbm13LQM9g8Tx30TGfOYuwDwG5/KpROt9EMRdeXuc 20z8Qim1E7BKRtO48cwvDST3i/skKhYEPGQwnDKe9heYzqkhMlpexZSZoNqbWYAm STQI2kD6eHm4Owt9uiFkZaCAK6w9dFHZbsiZBXzmgfTcXaSdOPwCzMpeMi3tVVDb 59cFpc36AiTQrHEXF0FGK/0/I9MCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBR06dwx +4JmMq6GUbCIstmUMfWoFjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU5MTUwLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ1HCMA0GCSqGSIb3DQEBCwUAA4IBAQAlKE2xGpQI3AOK63qBm5eU S6HOPdVMYzlVKpDOGZr3pl1hi13l35lRNKqxKvAyPYxvo6muyjgPA2JWwmlQcXJj M0+3y6cnmgd4wWP/eyT7wupAuRl9WjWsPbGFx9YBWsOPA9hlXJGO6DWW8vbFADvQ 3hbl33GM7GD+ZwsigHJqNlcN60S6QGliXY8jaltNEUyAdaxfIoiEkv8vBkoXzd+o ReiF3OprJaJmEzniu/BRIDUKck/io6taGCrTu9uwEK1qe8HVHDJmijPIJ1mUkLzt RWcakwN2ruiRfOLEoSiCHp8AB5uDiCVXU1xcB/5PBgX2lEAYgaZrxazbR/BKIKuY -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:21 2025 by rpki-client on console.sobornost.net