$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38511.roa File: AS38511.roa (raw, json) Hash identifier: Tb+cZFRHtwvscpoOHRKinnv1dx5Km2YWmRnNELJcGcY= Subject key identifier: 19:1C:B9:B5:62:79:D2:38:1A:B9:7D:58:67:83:1F:4C:9E:DC:24:B3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 04C9D9EE95C1DC752539C2EEA6A567F543DB10C1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38511.roa Signing time: Wed 28 Jun 2023 10:00:01 +0000 ROA not before: Wed 28 Jun 2023 09:55:01 +0000 ROA not after: Wed 26 Jun 2024 10:00:01 +0000 asID: 38511 IP address blocks: 103.26.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c9:d9:ee:95:c1:dc:75:25:39:c2:ee:a6:a5:67:f5:43:db:10:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 28 09:55:01 2023 GMT Not After : Jun 26 10:00:01 2024 GMT Subject: CN=191CB9B56279D2381AB97D5867831F4C9EDC24B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:23:b8:d0:49:c6:37:2b:46:bb:31:72:73: 99:a3:22:11:f6:20:77:3e:e5:7c:08:60:07:a7:2e: 75:11:2c:8a:1f:6b:b2:6b:e6:fb:fc:f1:32:ad:b3: 53:58:c4:f9:39:17:95:cc:7b:f8:ef:dd:80:c2:ff: 13:f2:0b:a2:66:cc:18:1f:d5:2e:6a:4d:63:5a:fb: 2e:90:7d:31:70:68:51:07:91:99:d0:70:22:6b:91: 24:70:ad:8f:2c:02:d4:84:69:4b:29:11:ac:81:29: 53:e6:04:ac:5e:43:37:5c:17:d4:46:0c:a3:34:cf: 0e:28:c7:b4:30:fb:3d:33:22:72:3d:9d:07:23:a4: 43:7c:2e:5a:35:4f:02:0c:9f:e7:9a:d9:f9:ff:ed: f6:05:e7:be:6f:2f:5c:c1:9a:0e:26:c8:1c:9b:50: 27:f5:6b:2b:d9:cf:d9:16:d0:52:c8:44:bb:cc:f0: 63:47:91:43:2a:db:34:e2:28:d3:ad:d6:5f:c0:cf: ae:d2:3b:f5:d1:f4:66:fd:a4:84:d9:43:e6:f1:eb: d5:f0:d0:47:cd:5e:b8:7b:0c:b6:79:0a:b9:f6:c7: 9a:95:18:78:5e:ae:64:30:55:1c:ea:48:6b:f5:55: 74:a1:77:1c:ab:5a:20:d7:e3:92:95:f3:28:bf:c6: c7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1C:B9:B5:62:79:D2:38:1A:B9:7D:58:67:83:1F:4C:9E:DC:24:B3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38511.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.26.212.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:de:0f:d5:34:03:5f:67:6a:e9:d1:58:e3:cc:29:a7:de:96: 9a:d5:a8:5c:52:a9:8e:39:d5:56:52:7b:10:45:ce:e9:24:ff: 6c:7e:97:15:ac:05:97:24:11:6e:ac:c5:99:ab:40:9a:fd:48: d3:c3:60:08:f5:8f:a4:89:42:55:e5:ca:a8:9a:a9:70:80:c5: d3:aa:02:c6:83:88:48:42:18:0a:1c:c1:c7:0a:53:b4:b2:d2: 43:97:3b:e2:b6:41:c2:c1:7d:1e:a2:8c:b0:b8:a9:9f:45:b6: 9a:24:16:6d:ed:d9:71:5d:7f:f9:2f:5c:d5:f5:b2:6b:b5:e1: f4:13:b3:d0:9c:06:06:e8:3a:99:80:db:dd:07:f2:5d:56:df: c5:08:0e:83:1d:1a:a8:c5:71:36:80:40:b0:4a:54:9e:bd:8f: 94:80:10:cc:fb:4f:f8:f2:0c:f0:c7:4d:70:2a:2f:db:34:ff: 7c:26:64:65:64:04:b2:1c:f1:d4:31:47:18:95:bc:3a:29:2f: 9d:12:5f:49:4a:3c:09:bb:6e:b1:f9:1d:a6:c6:75:0c:68:25: b2:f4:48:18:bd:62:ec:04:e0:88:86:97:4a:d2:03:68:23:21: 69:f3:aa:ee:a4:3c:98:9e:e4:53:64:8a:08:26:36:24:42:95: 9b:7b:85:51 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUBMnZ7pXB3HUlOcLupqVn9UPbEMEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyODA5NTUwMVoX DTI0MDYyNjEwMDAwMVowMzExMC8GA1UEAxMoMTkxQ0I5QjU2Mjc5RDIzODFBQjk3 RDU4Njc4MzFGNEM5RURDMjRCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1EI7jQScY3K0a7MXJzmaMiEfYgdz7lfAhgB6cudREsih9rsmvm+/zxMq2z U1jE+TkXlcx7+O/dgML/E/ILombMGB/VLmpNY1r7LpB9MXBoUQeRmdBwImuRJHCt jywC1IRpSykRrIEpU+YErF5DN1wX1EYMozTPDijHtDD7PTMicj2dByOkQ3wuWjVP Agyf55rZ+f/t9gXnvm8vXMGaDibIHJtQJ/VrK9nP2RbQUshEu8zwY0eRQyrbNOIo 063WX8DPrtI79dH0Zv2khNlD5vHr1fDQR81euHsMtnkKufbHmpUYeF6uZDBVHOpI a/VVdKF3HKtaINfjkpXzKL/Gx2ECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQZHLm1 YnnSOBq5fVhngx9MntwkszAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4NTExLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZxrUMA0GCSqGSIb3DQEBCwUAA4IBAQBu3g/VNANfZ2rp0VjjzCmn 3paa1ahcUqmOOdVWUnsQRc7pJP9sfpcVrAWXJBFurMWZq0Ca/UjTw2AI9Y+kiUJV 5cqomqlwgMXTqgLGg4hIQhgKHMHHClO0stJDlzvitkHCwX0eooywuKmfRbaaJBZt 7dlxXX/5L1zV9bJrteH0E7PQnAYG6DqZgNvdB/JdVt/FCA6DHRqoxXE2gECwSlSe vY+UgBDM+0/48gzwx01wKi/bNP98JmRlZASyHPHUMUcYlbw6KS+dEl9JSjwJu26x +R2mxnUMaCWy9EgYvWLsBOCIhpdK0gNoIyFp86rupDyYnuRTZIoIJjYkQpWbe4VR -----END CERTIFICATE-----Generated at Thu May 2 17:16:31 2024 by rpki-client on console-ams.rpki-client.org