$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9794.roa File: AS9794.roa (raw, json) Hash identifier: 0OPGTwvXaBNBcLvHHcyv5gtZVbsReDmZCPpbNyAUt2E= Subject key identifier: 12:6F:2C:B6:EC:76:5C:81:93:80:5A:EB:1D:F7:65:3E:7D:64:63:7E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 248C7EF4CE1EA38C42D5E36FAC2AA4E5132AD052 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9794.roa Signing time: Tue 10 Dec 2024 05:00:02 +0000 ROA not before: Tue 10 Dec 2024 04:55:02 +0000 ROA not after: Tue 09 Dec 2025 05:00:02 +0000 asID: 9794 IP address blocks: 103.252.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8c:7e:f4:ce:1e:a3:8c:42:d5:e3:6f:ac:2a:a4:e5:13:2a:d0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:02 2024 GMT Not After : Dec 9 05:00:02 2025 GMT Subject: CN=126F2CB6EC765C8193805AEB1DF7653E7D64637E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:36:a2:a3:4d:0e:87:f0:1a:f8:25:c3:d6:9f: bb:e0:e7:cd:1a:34:bf:6d:56:4c:65:68:78:c5:3e: eb:62:72:0f:df:e2:8b:2b:87:bd:4d:b4:f1:90:91: 8d:06:52:b1:aa:bb:39:e8:ff:58:0f:2d:c4:35:36: bf:7d:37:5c:e4:9d:61:75:e6:58:0f:cc:ec:7f:b4: ec:1d:59:13:50:33:5b:d0:f5:46:28:cd:86:0d:3a: 20:62:f5:cc:20:e8:ad:b7:67:70:d1:c0:03:cb:9b: db:c7:2f:f0:e8:fa:94:5b:66:40:7d:98:65:eb:0a: 58:cb:83:82:45:0b:1c:f2:f4:b8:cf:87:54:ab:df: ee:7c:5c:4c:b4:04:c3:88:50:96:e0:5f:30:98:66: 76:5b:9b:bf:d4:a2:53:e4:e6:14:99:99:28:d0:58: 7b:fa:ee:ef:c6:a0:75:70:70:87:00:79:da:8b:a0: f7:1c:6c:0a:d2:17:c7:4d:a0:d4:96:d9:5a:19:cb: c5:17:1e:f5:97:7c:ad:45:f7:3f:d7:e3:43:2a:7e: b3:62:6d:dd:52:48:10:e5:d2:43:f0:40:e8:37:0c: 5c:97:bc:c2:9a:2a:be:6f:c1:a0:3f:d2:1d:ff:12: aa:53:34:fe:b7:70:90:a3:56:46:35:dc:36:ae:41: 86:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6F:2C:B6:EC:76:5C:81:93:80:5A:EB:1D:F7:65:3E:7D:64:63:7E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9794.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.252.22.0/24 Signature Algorithm: sha256WithRSAEncryption 52:0e:08:3d:9c:a6:f7:51:68:d6:4f:4b:e5:25:1d:e5:1e:d0: 99:5c:72:5b:40:9c:97:b7:ef:ec:54:23:fe:1a:39:b8:7a:88: 61:6b:bf:77:87:e4:af:5e:5b:a3:ae:a7:db:56:03:2f:e8:a9: d8:c6:cf:67:73:de:2f:e1:f6:c4:f7:c7:07:85:ca:15:1d:da: 9c:60:5a:c9:36:e3:14:24:1c:f5:23:bb:80:c4:78:a6:86:5e: ee:d0:28:6e:d6:67:3a:6a:e8:ce:ba:52:47:c1:2e:1a:cd:92: 4d:8c:25:f3:a0:9f:8b:ff:f9:1c:91:67:0a:15:40:65:25:79: 0a:7e:fd:e0:6f:0c:70:b8:42:46:e4:02:29:15:70:1c:fa:89: 95:f2:3a:24:d7:a8:9b:d7:68:8d:c5:a5:c9:a3:b0:d3:6e:ee: 63:28:e3:6c:8c:4a:ec:f4:40:d3:a8:3f:c7:6a:79:92:6e:96: b8:8c:16:2f:03:2d:71:8d:26:eb:28:1b:a8:5f:31:60:97:65: 99:0c:81:ac:d1:a8:b9:69:f4:2d:0f:ec:9b:4d:67:ed:29:3a: 17:04:7b:a8:56:0c:01:a7:94:52:02:d8:5f:9a:d8:2a:88:b9: 36:b4:ed:a2:28:e6:68:c4:db:15:7b:23:84:7f:75:85:a5:2c: 63:0a:25:1b -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUJIx+9M4eo4xC1eNvrCqk5RMq0FIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwMloX DTI1MTIwOTA1MDAwMlowMzExMC8GA1UEAxMoMTI2RjJDQjZFQzc2NUM4MTkzODA1 QUVCMURGNzY1M0U3RDY0NjM3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOs2oqNNDofwGvglw9afu+DnzRo0v21WTGVoeMU+62JyD9/iiyuHvU208ZCR jQZSsaq7Oej/WA8txDU2v303XOSdYXXmWA/M7H+07B1ZE1AzW9D1RijNhg06IGL1 zCDorbdncNHAA8ub28cv8Oj6lFtmQH2YZesKWMuDgkULHPL0uM+HVKvf7nxcTLQE w4hQluBfMJhmdlubv9SiU+TmFJmZKNBYe/ru78agdXBwhwB52oug9xxsCtIXx02g 1JbZWhnLxRce9Zd8rUX3P9fjQyp+s2Jt3VJIEOXSQ/BA6DcMXJe8wpoqvm/BoD/S Hf8SqlM0/rdwkKNWRjXcNq5BhnMCAwEAAaOCAc4wggHKMB0GA1UdDgQWBBQSbyy2 7HZcgZOAWusd92U+fWRjfjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFIGCCsGAQUFBwELBEYwRDBCBggrBgEFBQcwC4Y2cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzk3OTQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABn/BYwDQYJKoZIhvcNAQELBQADggEBAFIOCD2cpvdRaNZPS+UlHeUe 0JlccltAnJe37+xUI/4aObh6iGFrv3eH5K9eW6Oup9tWAy/oqdjGz2dz3i/h9sT3 xweFyhUd2pxgWsk24xQkHPUju4DEeKaGXu7QKG7WZzpq6M66UkfBLhrNkk2MJfOg n4v/+RyRZwoVQGUleQp+/eBvDHC4QkbkAikVcBz6iZXyOiTXqJvXaI3FpcmjsNNu 7mMo42yMSuz0QNOoP8dqeZJulriMFi8DLXGNJusoG6hfMWCXZZkMgazRqLlp9C0P 7JtNZ+0pOhcEe6hWDAGnlFIC2F+a2CqIuTa07aIo5mjE2xV7I4R/dYWlLGMKJRs= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:21 2025 by rpki-client on console.sobornost.net