$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38768.roa File: AS38768.roa (raw, json) Hash identifier: 1MWEV5tgHs2Zer2TXzzjNIdBv6VOof5lbDzM+kS3Zcs= Subject key identifier: 8A:A5:9B:25:6A:11:1E:69:3A:99:26:57:CA:F3:7D:B5:3D:48:FD:40 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 1156ACA8B3B9628D1D5FB6D14B75DA4CC0112E1B Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38768.roa Signing time: Fri 11 Apr 2025 04:09:01 +0000 ROA not before: Fri 11 Apr 2025 04:04:01 +0000 ROA not after: Fri 10 Apr 2026 04:09:01 +0000 asID: 38768 IP address blocks: 103.234.216.0/24 maxlen: 24 103.234.217.0/24 maxlen: 24 103.234.219.0/24 maxlen: 24 202.87.178.0/24 maxlen: 24 202.87.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:56:ac:a8:b3:b9:62:8d:1d:5f:b6:d1:4b:75:da:4c:c0:11:2e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Apr 11 04:04:01 2025 GMT Not After : Apr 10 04:09:01 2026 GMT Subject: CN=8AA59B256A111E693A992657CAF37DB53D48FD40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:84:57:5e:d8:43:ac:af:6a:20:a2:0a:ea: 2e:56:86:fc:31:69:1e:d5:4d:4f:6a:c5:eb:76:ac: 97:7f:ee:77:67:18:b2:ef:c8:bc:5b:91:b9:f7:cc: 8a:09:80:6f:22:52:c9:ee:d1:58:d7:08:52:1d:44: 43:02:9f:6a:90:03:f1:b8:3c:9a:72:6c:ec:10:21: 6b:f4:75:1e:5f:a1:56:b6:1e:af:fb:b8:09:5c:98: 23:a2:29:cb:d8:6c:58:64:68:97:77:e7:60:fb:b5: b1:50:de:46:f3:f5:fc:3b:f2:bc:66:f9:2e:69:58: 23:16:7a:c7:87:26:b4:9c:b8:f4:be:cb:f5:fa:dd: 46:4f:42:8a:b5:09:29:31:f5:18:e6:6a:60:0d:6b: 8f:71:60:b7:73:1b:2c:38:9d:22:08:92:fc:43:66: db:d0:f1:ba:92:17:b8:76:0c:7d:4a:b6:e2:3a:b2: 9e:a2:11:fd:27:68:46:86:27:b9:4a:5e:e0:7f:ed: 94:79:34:c3:12:48:7b:13:7d:bd:b1:ed:ae:d5:bc: c8:58:f0:31:18:53:ce:78:d8:cc:a2:40:c6:96:33: 17:92:f7:df:93:7a:00:72:c6:dd:e5:66:be:ab:13: 09:4d:b8:25:06:f1:f4:4a:d9:19:3b:bb:7b:27:ce: ca:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A5:9B:25:6A:11:1E:69:3A:99:26:57:CA:F3:7D:B5:3D:48:FD:40 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38768.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.216.0/23 103.234.219.0/24 202.87.178.0/23 Signature Algorithm: sha256WithRSAEncryption 87:35:ea:65:d5:eb:4b:bb:16:29:7b:9b:9c:0b:0b:2f:0d:84: 39:f8:47:04:ca:fa:22:f8:0c:e4:c0:f4:1e:95:9a:c4:5f:8c: 42:9d:78:69:49:f7:80:31:b9:dc:a4:ad:c9:ae:17:da:9e:6c: 43:8a:77:33:9b:1f:1e:2d:9d:ec:8b:da:89:fe:0f:a7:ab:1f: df:6c:75:de:66:22:b1:6c:3c:e0:40:fe:27:b6:c1:99:30:b4: d8:2d:fa:ce:59:d6:68:c9:ad:cc:41:55:76:cd:63:ac:8d:19: 6b:c7:6c:fa:ab:83:bb:a1:06:1c:09:e3:fe:9e:e9:14:50:1d: a5:16:fc:f2:bf:6e:7f:e8:10:61:ae:8d:c7:f9:5d:07:48:ab: 6c:d7:5e:e4:9f:42:8d:20:b5:79:76:49:67:49:fc:be:22:03: 67:4d:12:c0:f6:e4:87:b2:5c:86:22:ac:5d:9a:89:8a:04:25: ca:68:27:c7:5e:04:e4:dc:7d:4f:3e:51:56:f6:73:48:ee:21: 29:4f:60:7b:1f:37:27:f9:17:b1:07:d5:d8:5a:b7:79:0d:c6: 99:c7:2e:45:29:f8:b4:26:47:82:69:39:5e:6c:48:56:76:b3: 82:db:41:46:d0:2c:0e:74:6c:ed:13:ff:c3:77:aa:7d:2e:5a: 58:4a:24:bd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUEVasqLO5Yo0dX7bRS3XaTMARLhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNTA0MTEwNDA0MDFaFw0yNjA0MTAwNDA5MDFaMDMxMTAvBgNV BAMTKDhBQTU5QjI1NkExMTFFNjkzQTk5MjY1N0NBRjM3REI1M0Q0OEZENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxe4RXXthDrK9qIKIK6i5Whvwx aR7VTU9qxet2rJd/7ndnGLLvyLxbkbn3zIoJgG8iUsnu0VjXCFIdREMCn2qQA/G4 PJpybOwQIWv0dR5foVa2Hq/7uAlcmCOiKcvYbFhkaJd352D7tbFQ3kbz9fw78rxm +S5pWCMWeseHJrScuPS+y/X63UZPQoq1CSkx9RjmamANa49xYLdzGyw4nSIIkvxD ZtvQ8bqSF7h2DH1KtuI6sp6iEf0naEaGJ7lKXuB/7ZR5NMMSSHsTfb2x7a7VvMhY 8DEYU8542MyiQMaWMxeS99+TegByxt3lZr6rEwlNuCUG8fRK2Rk7u3snzsqnAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUiqWbJWoRHmk6mSZXyvN9tT1I/UAwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby9lODczNDlmYi00NjVlLTRlOGItYTk3NC05 MGU5MzliY2IwZmIvMC9BUzM4NzY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBZ+rYAwQAZ+rbAwQByley MA0GCSqGSIb3DQEBCwUAA4IBAQCHNepl1etLuxYpe5ucCwsvDYQ5+EcEyvoi+Azk wPQelZrEX4xCnXhpSfeAMbncpK3JrhfanmxDinczmx8eLZ3si9qJ/g+nqx/fbHXe ZiKxbDzgQP4ntsGZMLTYLfrOWdZoya3MQVV2zWOsjRlrx2z6q4O7oQYcCeP+nukU UB2lFvzyv25/6BBhro3H+V0HSKts117kn0KNILV5dklnSfy+IgNnTRLA9uSHslyG IqxdmomKBCXKaCfHXgTk3H1PPlFW9nNI7iEpT2B7Hzcn+RexB9XYWrd5DcaZxy5F Kfi0JkeCaTlebEhWdrOC20FG0CwOdGztE//Dd6p9LlpYSiS9 -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net