$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133817.roa File: AS133817.roa (raw, json) Hash identifier: W0pQymsiMAL4xxgUI72e5j0JmLLpLx8AvUJXgX/8sTE= Subject key identifier: 8A:E9:E2:A6:34:74:DB:DC:F7:7F:54:5B:62:09:6D:6E:86:8E:E1:61 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7B7EE0E80B2CB9DE6925BCECAA9BA8589AC56DC5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133817.roa Signing time: Thu 03 Aug 2023 09:00:00 +0000 ROA not before: Thu 03 Aug 2023 08:55:00 +0000 ROA not after: Thu 01 Aug 2024 09:00:00 +0000 asID: 133817 IP address blocks: 103.173.232.0/24 maxlen: 24 103.187.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7e:e0:e8:0b:2c:b9:de:69:25:bc:ec:aa:9b:a8:58:9a:c5:6d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 3 08:55:00 2023 GMT Not After : Aug 1 09:00:00 2024 GMT Subject: CN=8AE9E2A63474DBDCF77F545B62096D6E868EE161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:f4:49:17:d4:8b:86:7c:90:53:95:04:15: df:60:8c:58:37:45:af:73:de:f5:03:7f:fa:1c:e1: 52:5f:46:07:5e:05:dd:52:9b:22:94:9b:7f:ae:bf: 88:cd:e7:16:b6:d7:f9:7a:40:96:37:ea:ee:77:d6: 0a:3a:63:eb:24:6c:f9:69:82:d0:2c:0d:92:95:34: 53:05:95:f2:ab:2d:65:4f:63:5a:1c:de:9d:da:a7: d3:8c:47:2c:a1:15:8a:a2:25:11:ef:ed:56:e6:ee: b6:9a:37:14:87:87:50:62:d4:b2:51:71:55:69:ab: 3e:40:52:a7:60:70:5d:7f:38:a3:07:9b:13:78:8e: 5f:cc:97:88:36:f7:d3:14:45:bc:c0:41:5a:dd:0d: 05:05:15:65:f1:36:5e:d7:b0:e1:f4:e5:8e:78:c3: f2:ac:7d:73:f2:e0:fa:4a:dc:91:73:f7:e5:c1:80: d7:42:8e:b4:58:d1:a7:37:7b:24:0e:7c:ac:0a:e6: ae:36:d9:33:f9:ef:71:ca:f8:11:0a:f2:81:a7:04: 97:e1:26:fe:b8:0c:30:17:13:f2:81:ad:5d:fc:95: d6:87:62:31:fa:1d:ee:e4:ad:95:e4:be:52:19:6a: 3b:cf:ec:58:1a:f5:97:5a:cc:56:cf:5c:96:38:56: f7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E9:E2:A6:34:74:DB:DC:F7:7F:54:5B:62:09:6D:6E:86:8E:E1:61 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133817.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.232.0/24 103.187.214.0/23 Signature Algorithm: sha256WithRSAEncryption 48:cf:f7:ef:24:76:ea:8b:bb:3e:7a:26:4d:ab:76:0a:db:1c: e8:09:a9:6a:41:d3:b4:50:6f:70:97:6c:9b:9f:ab:ce:0c:85: df:be:7a:99:96:89:4d:d6:d5:74:8d:59:c7:9b:96:1b:09:83: d1:0a:c3:6e:95:8c:7e:d7:19:f2:66:93:2b:33:94:8c:52:50: c2:b0:71:ac:91:ff:72:de:b3:f0:7b:58:4f:82:db:72:f9:d5: b1:b9:fb:3c:9c:e4:91:f3:6b:1f:1c:31:e0:2a:2b:9e:ae:6f: 05:b0:93:74:07:fb:e7:60:b4:1b:e9:0f:9b:63:6b:5f:d3:35: bc:10:ef:e0:8c:06:10:0a:78:ad:44:3a:af:05:39:81:69:a9: e0:4b:8e:13:ef:28:92:7c:9f:5e:bf:55:08:3f:cc:ca:8e:5e: 53:e5:eb:f1:14:4d:a5:c8:91:52:94:87:00:20:9f:ea:f3:7e: c4:b2:7a:da:28:19:9d:5c:fe:26:d6:f9:3a:79:22:aa:ba:57: 8c:0d:43:c5:c3:53:29:64:91:4e:f5:b9:b9:a4:c7:99:0d:27: e8:2f:c6:66:f2:35:d1:38:63:f4:40:13:c5:55:1b:00:38:3c: a6:b8:91:c4:f7:83:77:9a:eb:87:90:e6:5a:dd:f7:c9:bb:97: 43:8d:a4:2a -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUe37g6Assud5pJbzsqpuoWJrFbcUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgwMzA4NTUwMFoX DTI0MDgwMTA5MDAwMFowMzExMC8GA1UEAxMoOEFFOUUyQTYzNDc0REJEQ0Y3N0Y1 NDVCNjIwOTZENkU4NjhFRTE2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsC9EkX1IuGfJBTlQQV32CMWDdFr3Pe9QN/+hzhUl9GB14F3VKbIpSbf66/ iM3nFrbX+XpAljfq7nfWCjpj6yRs+WmC0CwNkpU0UwWV8qstZU9jWhzendqn04xH LKEViqIlEe/tVubutpo3FIeHUGLUslFxVWmrPkBSp2BwXX84owebE3iOX8yXiDb3 0xRFvMBBWt0NBQUVZfE2Xtew4fTljnjD8qx9c/Lg+krckXP35cGA10KOtFjRpzd7 JA58rArmrjbZM/nvccr4EQrygacEl+Em/rgMMBcT8oGtXfyV1odiMfod7uStleS+ UhlqO8/sWBr1l1rMVs9cljhW96cCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBSK6eKm NHTb3Pd/VFtiCW1uho7hYTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzgxNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGet6AMEAWe71jANBgkqhkiG9w0BAQsFAAOCAQEASM/37yR26ou7 PnomTat2Ctsc6AmpakHTtFBvcJdsm5+rzgyF3756mZaJTdbVdI1Zx5uWGwmD0QrD bpWMftcZ8maTKzOUjFJQwrBxrJH/ct6z8HtYT4LbcvnVsbn7PJzkkfNrHxwx4Cor nq5vBbCTdAf752C0G+kPm2NrX9M1vBDv4IwGEAp4rUQ6rwU5gWmp4EuOE+8oknyf Xr9VCD/Myo5eU+Xr8RRNpciRUpSHACCf6vN+xLJ62igZnVz+Jtb5OnkiqrpXjA1D xcNTKWSRTvW5uaTHmQ0n6C/GZvI10Thj9EATxVUbADg8priRxPeDd5rrh5DmWt33 ybuXQ42kKg== -----END CERTIFICATE-----Generated at Sun May 5 09:49:41 2024 by rpki-client on console-fra.rpki-client.org