$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136065.roa File: AS136065.roa (raw, json) Hash identifier: E7IFxOJDjetU/uCAIsAOK3L4WYLdFGWZXTmhzsqP8Ds= Subject key identifier: 5B:D4:6F:26:6B:82:38:73:3A:6B:51:7A:A5:5C:CD:7F:1F:B3:35:AB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 30EDB17B8EDBE3639DBCD8EE6C8FF23CE04F7FCC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136065.roa Signing time: Mon 11 Dec 2023 06:58:29 +0000 ROA not before: Mon 11 Dec 2023 06:53:29 +0000 ROA not after: Mon 09 Dec 2024 06:58:29 +0000 asID: 136065 IP address blocks: 103.82.126.0/23 maxlen: 24 103.83.178.0/23 maxlen: 24 2001:df7:fa00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ed:b1:7b:8e:db:e3:63:9d:bc:d8:ee:6c:8f:f2:3c:e0:4f:7f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 11 06:53:29 2023 GMT Not After : Dec 9 06:58:29 2024 GMT Subject: CN=5BD46F266B8238733A6B517AA55CCD7F1FB335AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:1b:56:1e:06:37:d2:b9:65:8a:60:24:58: 50:03:3b:6d:00:d1:37:ed:60:cc:cc:96:d8:f7:93: 0f:25:71:fc:47:7f:84:15:71:06:3b:59:79:70:79: ab:16:53:a5:4d:1b:d1:71:76:c2:2b:08:0d:75:77: 64:2d:89:5c:fe:c9:99:5c:9f:6c:ce:fd:4f:53:cb: d1:a9:bb:25:90:54:8b:29:b5:6c:47:be:da:00:3e: 1f:a9:52:5f:da:03:34:de:41:6e:26:cc:c5:4a:68: f4:9f:c6:2c:2b:9d:5f:1f:16:a8:4c:f1:00:33:b6: 5d:9a:fc:e6:0a:79:91:b3:e1:63:b7:26:73:f3:62: c2:ed:37:94:1d:4b:57:e1:19:a3:a0:bd:0e:36:97: d3:04:84:9c:48:1b:b7:7a:5a:75:b0:6c:e6:e6:af: b1:a8:06:da:d9:0f:46:fa:9e:28:fe:5b:74:2a:5e: c2:eb:0a:83:6a:f2:39:ec:60:25:86:e9:89:4e:1a: 76:0a:60:59:af:46:51:38:32:9c:51:23:73:5c:c5: 94:ef:a8:49:a0:88:82:2f:8c:07:b4:2e:b3:11:1b: 3c:cd:9b:ee:37:cf:7f:69:9c:3a:3d:0b:f8:56:0b: 24:07:50:f8:4f:47:d3:8c:6a:f6:ca:34:bf:eb:90: 0c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D4:6F:26:6B:82:38:73:3A:6B:51:7A:A5:5C:CD:7F:1F:B3:35:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136065.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.82.126.0/23 103.83.178.0/23 IPv6: 2001:df7:fa00::/48 Signature Algorithm: sha256WithRSAEncryption 2f:bd:32:ce:f3:b8:2f:56:8e:69:63:0b:4f:c3:5c:65:4a:b2: 3b:84:dd:b4:a2:fc:e3:ca:6a:81:b9:f5:96:5f:c1:ee:63:a3: 4a:5d:33:7d:27:85:be:7e:91:8c:a7:f6:27:59:46:63:20:3b: 36:d3:ee:93:d9:0c:5d:22:17:a2:4d:bc:41:ac:49:64:a2:25: cf:b5:56:2b:b7:84:c1:66:f7:6f:77:c8:d0:a9:34:00:65:46: e0:20:f4:37:17:c4:35:cf:29:86:1d:17:38:0e:6b:e9:fc:6a: 60:89:fd:03:b0:a9:e3:41:d1:1d:65:a3:f3:3d:4b:93:d8:8c: 4c:fb:95:18:54:16:bf:f4:b7:a6:4b:f9:3c:08:bb:30:9b:90: 66:3e:5b:d0:2c:e3:54:ea:cb:7c:63:5a:5f:21:4c:c5:ec:ff: 8b:d2:67:3f:8c:11:04:ae:9c:fe:77:55:55:fa:73:8a:ce:2c: 4c:d9:56:15:48:5f:2c:25:4e:29:be:2b:38:4e:bd:2e:ca:8b: dc:93:ce:7d:2b:30:1f:7b:c0:2b:fd:47:84:10:ee:e4:82:a5: 90:9d:11:ee:41:1f:03:35:14:41:6e:64:9b:47:57:48:68:3b: 77:e4:10:a4:eb:0a:6b:b0:a4:00:6e:db:d2:81:65:e9:3e:34: 4f:a0:fc:b5 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUMO2xe47b42OdvNjubI/yPOBPf8wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIxMTA2NTMyOVoX DTI0MTIwOTA2NTgyOVowMzExMC8GA1UEAxMoNUJENDZGMjY2QjgyMzg3MzNBNkI1 MTdBQTU1Q0NEN0YxRkIzMzVBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+XG1YeBjfSuWWKYCRYUAM7bQDRN+1gzMyW2PeTDyVx/Ed/hBVxBjtZeXB5 qxZTpU0b0XF2wisIDXV3ZC2JXP7JmVyfbM79T1PL0am7JZBUiym1bEe+2gA+H6lS X9oDNN5BbibMxUpo9J/GLCudXx8WqEzxADO2XZr85gp5kbPhY7cmc/Niwu03lB1L V+EZo6C9DjaX0wSEnEgbt3padbBs5uavsagG2tkPRvqeKP5bdCpewusKg2ryOexg JYbpiU4adgpgWa9GUTgynFEjc1zFlO+oSaCIgi+MB7QusxEbPM2b7jfPf2mcOj0L +FYLJAdQ+E9H04xq9so0v+uQDGMCAwEAAaOCAecwggHjMB0GA1UdDgQWBBRb1G8m a4I4czprUXqlXM1/H7M1qzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjA2NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAWdSfgMEAWdTsjAPBAIAAjAJAwcAIAEN9/oAMA0GCSqGSIb3DQEB CwUAA4IBAQAvvTLO87gvVo5pYwtPw1xlSrI7hN20ovzjymqBufWWX8HuY6NKXTN9 J4W+fpGMp/YnWUZjIDs20+6T2QxdIheiTbxBrElkoiXPtVYrt4TBZvdvd8jQqTQA ZUbgIPQ3F8Q1zymGHRc4Dmvp/Gpgif0DsKnjQdEdZaPzPUuT2IxM+5UYVBa/9Lem S/k8CLswm5BmPlvQLONU6st8Y1pfIUzF7P+L0mc/jBEErpz+d1VV+nOKzixM2VYV SF8sJU4pvis4Tr0uyovck859KzAfe8Ar/UeEEO7kgqWQnRHuQR8DNRRBbmSbR1dI aDt35BCk6wprsKQAbtvSgWXpPjRPoPy1 -----END CERTIFICATE-----Generated at Fri May 3 04:42:25 2024 by rpki-client on console-fra.rpki-client.org