$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38156.roa File: AS38156.roa (raw, json) Hash identifier: htvhgJeopgctULkIRQXt04uXtUPXf4yqplQVubLjuPk= Subject key identifier: E3:10:0D:EA:34:99:7F:38:E0:89:01:7D:7F:4B:A2:8F:88:69:65:90 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0178281D99EA03AABC6EAD20CC9993D06B5EFCC9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38156.roa Signing time: Tue 09 Jan 2024 04:00:21 +0000 ROA not before: Tue 09 Jan 2024 03:55:21 +0000 ROA not after: Tue 07 Jan 2025 04:00:21 +0000 asID: 38156 IP address blocks: 103.161.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:78:28:1d:99:ea:03:aa:bc:6e:ad:20:cc:99:93:d0:6b:5e:fc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:21 2024 GMT Not After : Jan 7 04:00:21 2025 GMT Subject: CN=E3100DEA34997F38E089017D7F4BA28F88696590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:c1:73:43:3a:bd:dc:16:c5:eb:0f:95:eb: 5a:e8:71:0d:b8:cf:23:d7:55:98:9f:7d:87:01:06: a3:0d:43:85:73:1d:1d:0a:69:d4:c4:ac:06:b7:f2: 50:92:ca:f6:fe:e3:dc:37:5b:13:f0:e9:7e:61:5b: 25:b2:9d:7b:5b:ea:2a:87:2f:c9:88:c2:52:01:86: 48:57:a0:07:6f:14:24:11:7f:ed:eb:8c:e8:7e:59: a8:23:83:87:02:81:9b:ec:95:9a:3a:6d:e9:80:e0: 7a:7d:e3:38:23:09:53:25:59:fb:9b:92:bd:31:3c: 6e:ce:8f:1e:1b:13:68:eb:fa:f8:c9:9c:68:2b:64: 17:18:30:58:82:86:7b:9a:93:07:5d:4d:70:cf:0c: 13:7d:ef:92:23:54:b5:aa:f9:b4:0f:88:ec:29:52: d4:d7:bd:69:a4:4a:76:8a:4a:50:41:98:58:6a:81: a0:05:ab:30:b4:b4:1b:a8:55:c2:58:07:63:d3:82: 91:cf:df:fb:cb:a8:f3:fd:ea:b5:9a:85:f7:41:27: b7:18:fa:7e:fd:88:3f:bc:91:54:3a:6b:8d:f1:2f: 73:da:0d:99:e2:2a:5a:74:c2:39:bc:d0:3d:84:3e: be:55:1e:22:fa:49:e9:21:66:97:00:1b:e0:75:25: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:10:0D:EA:34:99:7F:38:E0:89:01:7D:7F:4B:A2:8F:88:69:65:90 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38156.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.62.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:31:0d:91:9f:43:45:07:75:b2:e4:ef:fc:93:6a:2e:7c:af: 7a:d1:33:25:32:f5:ae:fe:4d:90:a5:61:96:4a:59:a7:0f:e3: 6f:22:88:b9:03:73:6a:75:46:57:e3:a6:65:3f:38:38:07:a2: bf:e1:f6:87:6c:de:35:a7:d2:ba:c9:5e:11:da:c8:96:c3:28: 3c:51:6e:78:62:00:87:a4:ac:c2:de:0c:bd:06:7c:18:05:de: 44:4a:e6:52:1c:d2:ce:59:4f:ef:e9:9b:3d:94:0b:6f:c8:44: 4f:9e:6b:37:fd:d2:4c:96:1f:69:20:5a:f4:66:42:91:79:69: d3:a1:09:ab:bd:03:39:3a:a6:5a:1c:59:25:48:a6:f6:fa:d2: ab:30:97:4e:68:21:e6:a8:0c:50:02:50:0b:55:e6:d0:46:e6: e5:4f:16:f1:b6:62:a7:34:90:ff:a0:05:2e:9e:82:f4:de:54: f3:24:b9:d2:35:e8:d7:ea:c6:60:96:bf:d9:5c:c7:75:47:64: 32:8e:04:42:61:51:75:60:5c:36:f4:8b:b4:f0:21:9d:1b:32: f0:ff:79:a0:29:d2:a4:d7:02:5c:67:1a:e6:43:a4:43:0c:15: f1:58:90:ac:0a:54:44:ca:0a:e0:ed:a4:0b:04:61:42:01:9b: fd:c1:cd:e4 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUAXgoHZnqA6q8bq0gzJmT0Gte/MkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyMVoX DTI1MDEwNzA0MDAyMVowMzExMC8GA1UEAxMoRTMxMDBERUEzNDk5N0YzOEUwODkw MTdEN0Y0QkEyOEY4ODY5NjU5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2pwXNDOr3cFsXrD5XrWuhxDbjPI9dVmJ99hwEGow1DhXMdHQpp1MSsBrfy UJLK9v7j3DdbE/DpfmFbJbKde1vqKocvyYjCUgGGSFegB28UJBF/7euM6H5ZqCOD hwKBm+yVmjpt6YDgen3jOCMJUyVZ+5uSvTE8bs6PHhsTaOv6+MmcaCtkFxgwWIKG e5qTB11NcM8ME33vkiNUtar5tA+I7ClS1Ne9aaRKdopKUEGYWGqBoAWrMLS0G6hV wlgHY9OCkc/f+8uo8/3qtZqF90Entxj6fv2IP7yRVDprjfEvc9oNmeIqWnTCObzQ PYQ+vlUeIvpJ6SFmlwAb4HUlmbsCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTjEA3q NJl/OOCJAX1/S6KPiGllkDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4MTU2LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6E+MA0GCSqGSIb3DQEBCwUAA4IBAQB/MQ2Rn0NFB3Wy5O/8k2ou fK960TMlMvWu/k2QpWGWSlmnD+NvIoi5A3NqdUZX46ZlPzg4B6K/4faHbN41p9K6 yV4R2siWwyg8UW54YgCHpKzC3gy9BnwYBd5ESuZSHNLOWU/v6Zs9lAtvyERPnms3 /dJMlh9pIFr0ZkKReWnToQmrvQM5OqZaHFklSKb2+tKrMJdOaCHmqAxQAlALVebQ RublTxbxtmKnNJD/oAUunoL03lTzJLnSNejX6sZglr/ZXMd1R2QyjgRCYVF1YFw2 9Iu08CGdGzLw/3mgKdKk1wJcZxrmQ6RDDBXxWJCsClREygrg7aQLBGFCAZv9wc3k -----END CERTIFICATE-----Generated at Mon May 6 01:46:08 2024 by rpki-client on console-ams.rpki-client.org