$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134658.roa File: AS134658.roa (raw, json) Hash identifier: Iog0AV0rGxhLsoVWqWtnNTwsaTvwzNTYTQt5m7gA52k= Subject key identifier: 40:64:59:CA:38:26:42:92:AE:9F:EC:70:1F:74:73:A9:D6:DE:4C:37 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 68D8431D3DF22FB6352F7FE3264655F0FED3D8F4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134658.roa Signing time: Wed 02 Aug 2023 09:00:00 +0000 ROA not before: Wed 02 Aug 2023 08:55:00 +0000 ROA not after: Wed 31 Jul 2024 09:00:00 +0000 asID: 134658 IP address blocks: 2001:df1:32c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d8:43:1d:3d:f2:2f:b6:35:2f:7f:e3:26:46:55:f0:fe:d3:d8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 2 08:55:00 2023 GMT Not After : Jul 31 09:00:00 2024 GMT Subject: CN=406459CA38264292AE9FEC701F7473A9D6DE4C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:3d:74:7d:f2:10:92:ab:ae:bd:ff:19:b6:ca: f1:f1:d7:d2:be:fb:2d:d1:99:53:6a:11:4a:83:e7: 2e:ba:1e:36:c9:e5:c7:8c:37:3b:5a:f2:39:ad:5f: f7:41:9e:28:b3:f3:ae:1b:69:fd:ae:5a:12:86:b9: 98:e9:e3:ea:ba:48:d8:21:ce:8b:cc:c0:47:3b:81: a4:a4:71:b5:e2:f1:16:96:20:59:aa:5e:63:df:d7: a4:78:28:6d:67:5e:83:39:43:e9:a4:c6:77:1a:48: 1b:b7:8d:a9:fe:30:97:c9:fb:a4:39:aa:10:9d:38: e5:d3:73:94:5c:c8:d3:bc:ca:f2:60:1e:d7:5a:53: 69:5a:a7:6c:93:5b:11:59:b4:fd:6f:81:3f:e8:19: 45:c4:34:48:d2:2f:24:15:fc:74:b6:37:c6:0e:8c: a9:66:eb:14:ef:5b:e2:de:6e:09:a1:02:eb:8c:85: 07:e2:00:d2:e6:b3:88:5a:60:ee:8f:5e:04:9b:ca: f4:97:c2:42:a6:82:5e:be:bf:52:5f:56:28:9d:bc: 5a:08:f1:e0:0e:ad:a2:ca:76:ac:70:1f:9a:6b:22: 45:c3:8a:e2:07:30:05:6a:c4:5d:59:4f:1b:99:5f: 86:f8:87:c0:d8:ad:7c:74:ac:a5:b2:df:2b:59:57: dd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:64:59:CA:38:26:42:92:AE:9F:EC:70:1F:74:73:A9:D6:DE:4C:37 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134658.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:32c0::/48 Signature Algorithm: sha256WithRSAEncryption 48:dc:20:b0:c6:63:8a:e3:f5:84:ce:62:e3:3b:cb:15:55:14: 80:7c:a2:22:c6:82:5e:26:63:e7:64:fa:c0:1d:fe:45:77:fb: 9b:2f:dc:10:bf:22:9a:90:8a:67:58:79:32:10:3c:dc:1d:eb: 13:62:70:09:a8:a2:97:eb:b7:08:70:86:cf:07:cd:71:52:f5: ec:14:54:8f:ed:47:10:c1:2b:ab:3b:ca:2d:c5:f8:6f:c4:fd: dd:f9:68:66:db:8b:4d:98:7d:f5:c6:ff:54:52:82:f3:3d:f4: 06:f3:2c:a0:c0:aa:76:94:ee:1a:0d:64:6f:73:46:85:61:98: 19:00:bc:81:91:aa:b9:f9:1c:ce:ca:0b:9b:1f:23:6b:4b:7c: 70:a8:25:a5:a0:97:6a:d6:29:97:31:e3:f0:11:db:04:f8:35: f8:41:45:cf:d3:b3:91:97:b7:ea:d4:27:ff:fb:31:ff:a0:1b: 4b:a1:c7:81:66:af:23:88:d6:4a:5a:4e:f3:81:3c:b1:d9:73: 2f:d3:99:d8:f5:8f:d9:53:c9:53:af:59:62:d8:cc:1c:a9:e9: 5b:c5:7a:d1:90:03:00:ff:ce:08:e1:f0:12:d4:71:d1:e1:73: 3d:b7:98:a9:68:f4:62:74:51:4d:77:02:99:bc:9a:53:6a:88: 14:f1:2e:4d -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUaNhDHT3yL7Y1L3/jJkZV8P7T2PQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgwMjA4NTUwMFoX DTI0MDczMTA5MDAwMFowMzExMC8GA1UEAxMoNDA2NDU5Q0EzODI2NDI5MkFFOUZF QzcwMUY3NDczQTlENkRFNEMzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPk9dH3yEJKrrr3/GbbK8fHX0r77LdGZU2oRSoPnLroeNsnlx4w3O1ryOa1f 90GeKLPzrhtp/a5aEoa5mOnj6rpI2CHOi8zARzuBpKRxteLxFpYgWapeY9/XpHgo bWdegzlD6aTGdxpIG7eNqf4wl8n7pDmqEJ045dNzlFzI07zK8mAe11pTaVqnbJNb EVm0/W+BP+gZRcQ0SNIvJBX8dLY3xg6MqWbrFO9b4t5uCaEC64yFB+IA0uaziFpg 7o9eBJvK9JfCQqaCXr6/Ul9WKJ28Wgjx4A6tosp2rHAfmmsiRcOK4gcwBWrEXVlP G5lfhviHwNitfHSspbLfK1lX3VECAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRAZFnK OCZCkq6f7HAfdHOp1t5MNzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNDY1OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfEywDANBgkqhkiG9w0BAQsFAAOCAQEASNwgsMZjiuP1hM5i 4zvLFVUUgHyiIsaCXiZj52T6wB3+RXf7my/cEL8impCKZ1h5MhA83B3rE2JwCaii l+u3CHCGzwfNcVL17BRUj+1HEMErqzvKLcX4b8T93floZtuLTZh99cb/VFKC8z30 BvMsoMCqdpTuGg1kb3NGhWGYGQC8gZGqufkczsoLmx8ja0t8cKglpaCXatYplzHj 8BHbBPg1+EFFz9OzkZe36tQn//sx/6AbS6HHgWavI4jWSlpO84E8sdlzL9OZ2PWP 2VPJU69ZYtjMHKnpW8V60ZADAP/OCOHwEtRx0eFzPbeYqWj0YnRRTXcCmbyaU2qI FPEuTQ== -----END CERTIFICATE-----Generated at Sat Apr 27 21:40:19 2024 by rpki-client on console-ams.rpki-client.org