$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136873.roa File: AS136873.roa (raw, json) Hash identifier: 5YHfmIg6dlaXifFtHF2mWLCk3Hx1a/DZikusGkZY4zg= Subject key identifier: D3:BB:BF:AA:0C:80:3D:91:94:12:8C:EF:6B:FF:FB:1C:2A:2C:44:CF Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 624B84784A81D93CF5F1ACE1350167C4D3276ECB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136873.roa Signing time: Wed 05 Mar 2025 04:38:17 +0000 ROA not before: Wed 05 Mar 2025 04:33:17 +0000 ROA not after: Wed 04 Mar 2026 04:38:17 +0000 asID: 136873 IP address blocks: 160.22.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 09:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4b:84:78:4a:81:d9:3c:f5:f1:ac:e1:35:01:67:c4:d3:27:6e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 5 04:33:17 2025 GMT Not After : Mar 4 04:38:17 2026 GMT Subject: CN=D3BBBFAA0C803D9194128CEF6BFFFB1C2A2C44CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:b5:2a:80:b6:73:bd:eb:17:40:46:59:e5: 39:2a:1a:e6:8f:9c:c9:c5:e0:40:e4:24:30:6e:bb: de:26:8d:43:7f:2e:b3:73:4a:38:e8:62:9e:51:53: b1:e1:66:3d:55:34:5b:00:06:d8:ad:96:ce:11:20: 08:e6:b6:3c:34:10:a8:1a:ad:18:cf:52:4d:b0:8e: c8:d9:7d:86:1f:3b:b7:68:de:75:22:5e:dd:ff:d7: 67:8b:30:5b:66:e3:46:2e:f9:3b:da:4b:2e:8a:ac: 26:6e:65:78:fb:e1:c5:e1:79:d7:79:02:4a:9b:54: 30:ba:6d:d3:78:d7:f1:cc:c6:47:65:dd:e9:4d:65: 56:54:e0:9a:d4:a8:49:79:76:d5:9b:f3:cf:6c:ec: 5e:96:a9:9a:c1:7c:d6:32:26:fd:f4:db:b3:85:5e: c7:98:7e:b6:33:ac:0b:b9:36:55:cc:6d:30:b1:7e: 7f:fb:7b:fa:a0:d5:52:77:3e:68:02:ac:e5:b5:7e: e3:75:4b:ab:d0:a6:75:c3:2f:f9:c0:46:c8:14:2e: ba:92:12:e1:d2:79:0c:47:70:6f:69:2b:f9:fc:98: 2b:cf:a0:c7:57:2f:5d:db:0b:86:8d:81:d9:59:62: e5:49:35:6c:a2:b3:d3:3c:7b:7b:40:aa:b3:a8:34: 4c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BB:BF:AA:0C:80:3D:91:94:12:8C:EF:6B:FF:FB:1C:2A:2C:44:CF X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136873.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.8.0/24 Signature Algorithm: sha256WithRSAEncryption 92:ba:e2:b7:22:b0:44:bc:02:ef:bb:18:6a:4f:59:33:33:60: 19:f2:4a:12:a6:b7:b7:7b:d7:5c:2d:31:eb:a7:d9:08:9c:9c: a3:38:20:23:58:7d:91:88:ae:b8:f0:22:d9:24:12:0c:60:d6: 1c:33:32:62:a7:79:78:eb:3f:34:cf:67:97:19:2e:f9:9f:39: 23:fe:a8:ad:e2:8c:92:f2:ae:ef:ff:b5:1a:bb:a2:87:d6:48: eb:ca:f1:0f:5e:74:3b:ca:e7:84:db:cb:18:b4:42:a2:4d:91: 9c:4f:b0:4e:11:d1:bf:9a:e3:0b:28:21:9d:09:c7:49:c0:0d: 5b:5e:d3:96:49:b4:15:65:f6:74:e1:d6:71:b9:26:e8:c8:41: 33:1f:42:99:af:64:ea:df:b7:07:82:65:e9:2c:f1:9b:20:ad: 89:e3:91:5a:c9:00:a5:36:63:e7:68:d5:64:7c:f4:a2:96:ff: 1c:eb:2f:60:03:e8:91:15:36:54:6c:73:88:51:66:48:95:44: 92:6d:12:83:b0:6b:0f:59:65:5b:bc:68:3d:ab:53:cb:b8:c7: 05:1e:d3:57:f8:90:5f:a5:d1:96:ba:37:33:78:10:70:b9:b7: e9:fd:ab:69:0d:09:5b:95:03:85:d1:63:02:b6:eb:6d:2c:24: 32:32:b8:b6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUYkuEeEqB2Tz18azhNQFnxNMnbsswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDMwNTA0MzMxN1oX DTI2MDMwNDA0MzgxN1owMzExMC8GA1UEAxMoRDNCQkJGQUEwQzgwM0Q5MTk0MTI4 Q0VGNkJGRkZCMUMyQTJDNDRDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcBtSqAtnO96xdARlnlOSoa5o+cycXgQOQkMG673iaNQ38us3NKOOhinlFT seFmPVU0WwAG2K2WzhEgCOa2PDQQqBqtGM9STbCOyNl9hh87t2jedSJe3f/XZ4sw W2bjRi75O9pLLoqsJm5lePvhxeF513kCSptUMLpt03jX8czGR2Xd6U1lVlTgmtSo SXl21Zvzz2zsXpapmsF81jIm/fTbs4Vex5h+tjOsC7k2VcxtMLF+f/t7+qDVUnc+ aAKs5bV+43VLq9CmdcMv+cBGyBQuupIS4dJ5DEdwb2kr+fyYK8+gx1cvXdsLho2B 2Vli5Uk1bKKz0zx7e0Cqs6g0TCMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTTu7+q DIA9kZQSjO9r//scKixEzzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzNjg3My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAWCDANBgkqhkiG9w0BAQsFAAOCAQEAkrrityKwRLwC77sYak9Z MzNgGfJKEqa3t3vXXC0x66fZCJycozggI1h9kYiuuPAi2SQSDGDWHDMyYqd5eOs/ NM9nlxku+Z85I/6oreKMkvKu7/+1Gruih9ZI68rxD150O8rnhNvLGLRCok2RnE+w ThHRv5rjCyghnQnHScANW17Tlkm0FWX2dOHWcbkm6MhBMx9Cma9k6t+3B4Jl6Szx myCtieORWskApTZj52jVZHz0opb/HOsvYAPokRU2VGxziFFmSJVEkm0Sg7BrD1ll W7xoPatTy7jHBR7TV/iQX6XRlro3M3gQcLm36f2raQ0JW5UDhdFjArbrbSwkMjK4 tg== -----END CERTIFICATE-----Generated at Sun Apr 6 07:03:26 2025 by rpki-client