$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136093.roa File: AS136093.roa (raw, json) Hash identifier: iiw0Cojf8ys3utF6TfQM14iZh2gxRWcxeEHxTUE6QM8= Subject key identifier: 81:7F:32:99:A0:1A:B1:92:19:31:D6:5C:96:8A:6C:E7:9E:10:14:05 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 22718D8CF028C74B110EE7FDC947B871E8CC06BC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136093.roa Signing time: Thu 06 Feb 2025 10:44:55 +0000 ROA not before: Thu 06 Feb 2025 10:39:55 +0000 ROA not after: Thu 05 Feb 2026 10:44:55 +0000 asID: 136093 IP address blocks: 157.66.240.0/23 maxlen: 23 157.66.240.0/23 maxlen: 24 157.66.242.0/23 maxlen: 23 157.66.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:71:8d:8c:f0:28:c7:4b:11:0e:e7:fd:c9:47:b8:71:e8:cc:06:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 6 10:39:55 2025 GMT Not After : Feb 5 10:44:55 2026 GMT Subject: CN=817F3299A01AB1921931D65C968A6CE79E101405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:99:35:ef:75:dc:df:55:8b:6d:ac:e8:96: a9:ed:53:8c:e7:cf:c2:0e:ef:f7:b4:e5:00:a8:8b: 5b:f5:e8:83:20:4c:2f:cc:45:5d:08:03:a7:ef:70: 0c:bd:7b:46:7e:a9:39:bc:ce:7d:c4:da:c6:ed:7f: 3a:5a:8e:5f:3e:a4:e9:ff:d0:15:79:24:aa:76:71: 3e:60:14:64:4a:71:77:2d:bf:cf:b2:58:b7:e8:2d: ae:d0:a5:35:e5:5c:fd:56:c6:9a:67:ff:c0:24:ee: ee:bc:d9:1e:95:0a:35:0b:b4:8c:a5:99:c7:d5:49: 3d:dd:02:85:ca:25:ce:24:30:9b:e1:fd:b8:f7:9a: ad:da:a1:df:6d:81:f0:be:04:0c:e9:89:68:ba:17: 2d:e4:42:80:a3:1b:1d:ef:d9:63:a5:49:95:01:ad: b6:aa:75:f3:36:18:4d:e1:d7:84:cc:e5:08:22:a7: 4b:7c:56:eb:e2:7f:4b:9c:ad:a6:1f:97:49:8f:8b: 73:5c:fa:22:a7:26:c4:10:c8:36:b5:04:9d:14:7f: 92:3b:ac:3b:8d:12:57:32:18:9b:32:77:c6:29:82: f0:55:42:7c:d5:f5:0c:91:6c:e0:8f:fc:e6:ad:bc: 95:2f:86:4c:07:5e:7f:8b:66:d5:9b:a6:04:b1:82: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7F:32:99:A0:1A:B1:92:19:31:D6:5C:96:8A:6C:E7:9E:10:14:05 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136093.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.240.0/22 Signature Algorithm: sha256WithRSAEncryption 79:b0:c4:b1:2c:96:f6:97:49:53:76:c0:48:53:9c:21:b3:df: d1:33:23:fb:b8:f6:dd:73:c2:59:6c:b2:c9:73:9f:29:40:61: f8:79:ba:56:a8:6c:4a:18:36:1b:55:d8:ad:39:3d:77:b5:45: 18:ae:ca:9b:d5:55:24:98:38:b8:75:6b:83:7d:ad:e8:de:08: 3d:9f:51:df:e6:2b:4f:18:13:47:15:7f:35:0f:10:ba:42:89: c1:f7:4b:41:a6:07:76:80:6b:92:82:cc:c5:c0:27:b4:e9:75: 3d:cf:4f:49:3f:74:aa:d3:e1:fe:2c:2d:7d:71:31:e6:2d:c3: 30:e8:a1:b1:db:90:e7:3e:c6:4b:00:dc:05:03:15:16:2c:69: fd:d1:85:45:49:6d:3d:26:ba:ed:0b:8f:74:f6:f0:c8:28:d3: ab:7a:41:ab:2b:fb:14:e3:0d:6e:cc:af:40:83:f4:71:1a:68: 7f:c8:0e:c4:cf:94:78:34:58:db:62:05:a0:7b:38:81:9b:9d: ef:32:81:63:43:c6:fc:8e:03:06:74:55:42:a2:34:55:eb:0a: 3d:83:f3:c6:67:93:33:94:1e:a7:8e:ef:a8:51:06:ac:c9:57: b0:20:8c:c5:ab:e1:85:8d:ba:09:84:b6:8a:0c:98:a4:e0:b5: d9:45:05:96 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUInGNjPAox0sRDuf9yUe4cejMBrwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk1NVoX DTI2MDIwNTEwNDQ1NVowMzExMC8GA1UEAxMoODE3RjMyOTlBMDFBQjE5MjE5MzFE NjVDOTY4QTZDRTc5RTEwMTQwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYUmTXvddzfVYttrOiWqe1TjOfPwg7v97TlAKiLW/XogyBML8xFXQgDp+9w DL17Rn6pObzOfcTaxu1/OlqOXz6k6f/QFXkkqnZxPmAUZEpxdy2/z7JYt+gtrtCl NeVc/VbGmmf/wCTu7rzZHpUKNQu0jKWZx9VJPd0ChcolziQwm+H9uPeardqh322B 8L4EDOmJaLoXLeRCgKMbHe/ZY6VJlQGttqp18zYYTeHXhMzlCCKnS3xW6+J/S5yt ph+XSY+Lc1z6IqcmxBDINrUEnRR/kjusO40SVzIYmzJ3ximC8FVCfNX1DJFs4I/8 5q28lS+GTAdef4tm1ZumBLGCd78CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSBfzKZ oBqxkhkx1lyWimznnhAUBTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzNjA5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAp1C8DANBgkqhkiG9w0BAQsFAAOCAQEAebDEsSyW9pdJU3bASFOc IbPf0TMj+7j23XPCWWyyyXOfKUBh+Hm6VqhsShg2G1XYrTk9d7VFGK7Km9VVJJg4 uHVrg32t6N4IPZ9R3+YrTxgTRxV/NQ8QukKJwfdLQaYHdoBrkoLMxcAntOl1Pc9P ST90qtPh/iwtfXEx5i3DMOihsduQ5z7GSwDcBQMVFixp/dGFRUltPSa67QuPdPbw yCjTq3pBqyv7FOMNbsyvQIP0cRpof8gOxM+UeDRY22IFoHs4gZud7zKBY0PG/I4D BnRVQqI0VesKPYPzxmeTM5Qep47vqFEGrMlXsCCMxavhhY26CYS2igyYpOC12UUF lg== -----END CERTIFICATE-----Generated at Mon Apr 7 01:05:54 2025 by rpki-client