$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131717.roa File: AS131717.roa (raw, json) Hash identifier: i6mImZmHZ10+d3VPRWPH28ckDh0zUOi1U6cQ9TjLbeE= Subject key identifier: 5A:82:A4:5A:1A:02:BE:09:BD:E5:91:D2:59:F6:53:46:31:85:B4:0C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3AB0A6558F35E7EA540C69331E05FFBDAFCF3058 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131717.roa Signing time: Tue 17 Oct 2023 10:00:00 +0000 ROA not before: Tue 17 Oct 2023 09:55:00 +0000 ROA not after: Tue 15 Oct 2024 10:00:00 +0000 asID: 131717 IP address blocks: 103.184.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b0:a6:55:8f:35:e7:ea:54:0c:69:33:1e:05:ff:bd:af:cf:30:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 17 09:55:00 2023 GMT Not After : Oct 15 10:00:00 2024 GMT Subject: CN=5A82A45A1A02BE09BDE591D259F653463185B40C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:6a:e3:19:73:fb:0c:bc:22:33:84:25:73: b0:4a:b3:ca:56:c4:ef:bb:ca:0b:99:59:67:86:21: 38:6f:c1:5a:4a:33:21:9b:a2:ec:91:2b:2e:ac:9a: 55:4c:a6:df:e5:c1:d2:26:a3:50:d2:fa:84:7f:1a: 80:65:8e:c7:f0:eb:38:97:26:74:37:d1:bb:50:74: 03:5c:45:06:6e:7c:b2:9e:6e:cb:d8:86:3b:d5:ec: 2f:98:df:c3:ee:e6:28:92:44:c0:5a:9a:1e:d9:31: c4:2d:54:69:e6:b6:09:8a:23:1f:66:5b:ac:87:a8: 54:1b:0e:48:b4:01:81:fd:61:1e:20:ae:c2:b5:c8: 25:be:0c:13:d1:27:fb:e7:1b:f9:1a:25:80:a9:67: dc:3d:fe:0e:ee:23:a9:a9:e3:f3:75:44:4f:f9:9c: fa:4a:c5:dc:b9:f2:4d:38:00:62:5b:c8:98:8a:5d: 63:68:22:e3:f0:54:db:e5:24:68:81:12:ff:89:0e: 81:30:f9:6e:e7:81:dd:88:fd:d8:69:90:bb:58:b8: 67:72:e9:ed:a8:4c:b2:81:2f:6f:4d:bc:d4:9a:4c: 6d:aa:c7:68:24:1c:18:bd:a3:3e:d8:e1:0f:9f:71: ae:90:aa:99:f6:ab:5e:b9:1a:94:58:fb:cb:57:28: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:82:A4:5A:1A:02:BE:09:BD:E5:91:D2:59:F6:53:46:31:85:B4:0C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131717.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.98.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:2c:e9:69:0c:18:04:ed:3a:d9:a9:39:a0:df:91:bf:25:fe: 83:7e:b7:12:fd:2d:db:f9:38:c9:8e:7b:75:c6:bf:05:3b:b7: 3f:46:15:12:61:77:20:c0:8b:73:b8:af:c5:ee:b3:cd:e2:44: 23:b4:95:dd:b4:0c:9b:8f:c5:e7:fb:99:4d:e6:0c:54:93:a4: ee:2a:0f:35:a1:b4:88:81:08:52:02:5e:e3:e6:43:b0:ac:b9: d0:22:97:74:80:78:09:d5:ee:b8:a2:b3:3a:ca:47:55:19:2a: cf:6a:b6:86:8f:aa:6c:d2:e0:cd:42:d7:f9:35:fc:6d:8a:92: 0a:83:02:35:27:ab:2a:37:b9:08:69:f3:08:55:02:9b:ab:8e: bc:4b:5d:c5:17:16:93:4f:c4:e4:0c:ad:40:44:fc:1b:93:b9: dc:b9:d8:d8:71:ed:09:79:29:2e:48:79:fb:a9:87:91:2e:83: 3e:36:bd:85:03:f3:64:2d:0f:e0:77:dd:75:1f:b1:09:1b:c1: 8b:ed:80:28:f2:6f:e9:1a:21:d7:6b:7a:4f:e9:bd:ac:a5:65: 47:3b:3d:44:66:66:8b:2b:b2:41:32:5e:e9:f1:e7:5d:92:54: f2:ef:e2:69:67:2f:e9:15:da:8b:83:59:11:fa:de:12:3d:f6: cb:11:61:fb -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUOrCmVY815+pUDGkzHgX/va/PMFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxNzA5NTUwMFoX DTI0MTAxNTEwMDAwMFowMzExMC8GA1UEAxMoNUE4MkE0NUExQTAyQkUwOUJERTU5 MUQyNTlGNjUzNDYzMTg1QjQwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMntauMZc/sMvCIzhCVzsEqzylbE77vKC5lZZ4YhOG/BWkozIZui7JErLqya VUym3+XB0iajUNL6hH8agGWOx/DrOJcmdDfRu1B0A1xFBm58sp5uy9iGO9XsL5jf w+7mKJJEwFqaHtkxxC1Uaea2CYojH2ZbrIeoVBsOSLQBgf1hHiCuwrXIJb4ME9En ++cb+RolgKln3D3+Du4jqanj83VET/mc+krF3LnyTTgAYlvImIpdY2gi4/BU2+Uk aIES/4kOgTD5bueB3Yj92GmQu1i4Z3Lp7ahMsoEvb0281JpMbarHaCQcGL2jPtjh D59xrpCqmfarXrkalFj7y1co3rcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRagqRa GgK+Cb3lkdJZ9lNGMYW0DDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMTcxNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe4YjANBgkqhkiG9w0BAQsFAAOCAQEADizpaQwYBO062ak5oN+R vyX+g363Ev0t2/k4yY57dca/BTu3P0YVEmF3IMCLc7ivxe6zzeJEI7SV3bQMm4/F 5/uZTeYMVJOk7ioPNaG0iIEIUgJe4+ZDsKy50CKXdIB4CdXuuKKzOspHVRkqz2q2 ho+qbNLgzULX+TX8bYqSCoMCNSerKje5CGnzCFUCm6uOvEtdxRcWk0/E5AytQET8 G5O53LnY2HHtCXkpLkh5+6mHkS6DPja9hQPzZC0P4HfddR+xCRvBi+2AKPJv6Roh 12t6T+m9rKVlRzs9RGZmiyuyQTJe6fHnXZJU8u/iaWcv6RXai4NZEfreEj32yxFh +w== -----END CERTIFICATE-----Generated at Fri Apr 26 00:39:38 2024 by rpki-client on console-fra.rpki-client.org