$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137368.roa File: AS137368.roa (raw, json) Hash identifier: e9qj0Tr7vFTlZVqciuxRNtjtdnzfrIJSChkoto5bEWw= Subject key identifier: EA:CE:D0:A5:AB:B5:33:55:06:AF:F6:FB:2D:20:2F:18:41:24:CF:E2 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 472677F7667810FA40982FCC5849C246A847B56D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137368.roa Signing time: Tue 09 Jan 2024 04:00:03 +0000 ROA not before: Tue 09 Jan 2024 03:55:03 +0000 ROA not after: Tue 07 Jan 2025 04:00:03 +0000 asID: 137368 IP address blocks: 103.116.210.0/24 maxlen: 24 2001:df3:ff00::/48 maxlen: 48 2001:df5:7b00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 09:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:26:77:f7:66:78:10:fa:40:98:2f:cc:58:49:c2:46:a8:47:b5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:03 2024 GMT Not After : Jan 7 04:00:03 2025 GMT Subject: CN=EACED0A5ABB5335506AFF6FB2D202F184124CFE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b7:7d:46:41:f4:11:93:2b:cd:d2:14:a7:86: 31:61:02:5f:4d:b0:0c:0d:7f:d2:8d:c7:13:c8:56: 40:f2:18:0e:73:f4:dd:a4:ac:fb:be:ef:78:29:3b: da:c8:5b:df:b0:f8:d0:ad:f7:a9:d6:6b:2c:d9:27: 99:b3:ed:7a:13:d7:e3:4a:fe:22:b4:58:b5:32:7c: c9:9a:a7:41:a8:72:cf:34:6e:b7:15:cd:e3:be:e9: b9:f4:70:27:b7:c3:bb:ba:bf:eb:f0:d1:f3:71:4f: 98:be:fe:4e:1c:7c:bf:dc:4d:5b:93:75:fd:17:20: be:86:75:12:8b:19:7e:87:d2:45:ae:86:91:7c:9c: 16:17:70:b8:12:96:dd:f4:c6:d8:ef:da:9a:2f:7b: 89:ab:a2:e9:cf:f1:13:5e:b7:97:30:54:61:87:b7: 1e:47:b5:00:96:74:9d:ea:c0:f8:b0:2b:c0:c8:92: b1:d0:91:4a:1f:bb:48:d9:69:ef:03:ef:a1:2f:dd: 43:ae:4a:1b:74:6d:6a:8b:df:40:89:28:f2:e2:27: c0:3e:fc:c0:ea:a5:19:1d:1f:bd:2b:ba:4a:92:9a: 4e:e2:3d:b2:c3:90:aa:96:6b:22:b2:a4:ea:01:ca: 34:ff:98:15:db:7e:9f:c8:1e:29:d0:71:7b:a0:03: f6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CE:D0:A5:AB:B5:33:55:06:AF:F6:FB:2D:20:2F:18:41:24:CF:E2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137368.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.210.0/24 IPv6: 2001:df3:ff00::/48 2001:df5:7b00::/48 Signature Algorithm: sha256WithRSAEncryption 19:88:ca:d4:5c:79:d3:82:46:e3:f3:5c:11:3a:32:80:69:b0: d0:6e:0a:2e:2f:fb:5e:e3:e6:4e:b4:4d:61:e7:b8:c2:fd:28: be:c3:3e:ef:a2:f3:54:4f:4e:67:a6:20:d7:6f:6c:7a:5e:07: 55:89:4a:93:f9:9e:37:4a:75:91:ce:c8:36:f9:89:63:ec:88: e3:cd:f6:a9:d5:a0:c0:b9:e5:4e:9a:dd:cc:7e:22:5a:b2:0f: c3:77:fa:35:4f:25:a9:73:64:b0:bb:4e:6f:76:d6:46:40:1c: 9c:f4:9a:6e:54:ca:f8:47:22:58:8d:61:a5:fe:17:67:1f:cd: df:f9:f8:10:81:c5:68:eb:94:f6:b7:dc:b8:c8:88:bd:eb:5e: 44:50:4d:b6:11:e1:2e:78:c9:19:a7:fe:af:6a:99:55:f3:47: bc:42:4a:de:86:89:9c:04:7a:ea:58:85:9b:18:db:a0:fd:13: 49:49:77:31:16:49:a4:10:3a:53:19:13:c2:a3:05:2b:b9:73: 27:ce:bb:36:a8:cb:79:9a:a4:8c:d5:19:29:71:29:d8:12:70: 69:99:af:66:51:f8:8c:2c:c4:08:34:1e:ed:f6:54:0f:b9:a3: 46:b5:bb:39:47:6d:7e:94:00:71:fa:b3:0b:d9:05:87:d1:ce: fd:b9:98:28 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIURyZ392Z4EPpAmC/MWEnCRqhHtW0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwM1oX DTI1MDEwNzA0MDAwM1owMzExMC8GA1UEAxMoRUFDRUQwQTVBQkI1MzM1NTA2QUZG NkZCMkQyMDJGMTg0MTI0Q0ZFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANS3fUZB9BGTK83SFKeGMWECX02wDA1/0o3HE8hWQPIYDnP03aSs+77veCk7 2shb37D40K33qdZrLNknmbPtehPX40r+IrRYtTJ8yZqnQahyzzRutxXN477pufRw J7fDu7q/6/DR83FPmL7+Thx8v9xNW5N1/RcgvoZ1EosZfofSRa6GkXycFhdwuBKW 3fTG2O/ami97iaui6c/xE163lzBUYYe3Hke1AJZ0nerA+LArwMiSsdCRSh+7SNlp 7wPvoS/dQ65KG3RtaovfQIko8uInwD78wOqlGR0fvSu6SpKaTuI9ssOQqpZrIrKk 6gHKNP+YFdt+n8geKdBxe6AD9r0CAwEAAaOCAeowggHmMB0GA1UdDgQWBBTqztCl q7UzVQav9vstIC8YQSTP4jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNzM2OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgw DAQCAAEwBgMEAGd00jAYBAIAAjASAwcAIAEN8/8AAwcAIAEN9XsAMA0GCSqGSIb3 DQEBCwUAA4IBAQAZiMrUXHnTgkbj81wROjKAabDQbgouL/te4+ZOtE1h57jC/Si+ wz7vovNUT05npiDXb2x6XgdViUqT+Z43SnWRzsg2+Ylj7Ijjzfap1aDAueVOmt3M fiJasg/Dd/o1TyWpc2Swu05vdtZGQByc9JpuVMr4RyJYjWGl/hdnH83f+fgQgcVo 65T2t9y4yIi9615EUE22EeEueMkZp/6vaplV80e8QkrehomcBHrqWIWbGNug/RNJ SXcxFkmkEDpTGRPCowUruXMnzrs2qMt5mqSM1RkpcSnYEnBpma9mUfiMLMQINB7t 9lQPuaNGtbs5R21+lABx+rML2QWH0c79uZgo -----END CERTIFICATE-----Generated at Thu May 2 05:09:56 2024 by rpki-client on console-ams.rpki-client.org