$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45291.roa File: AS45291.roa (raw, json) Hash identifier: Mj6YjIGluoxrGS1Nklb+bfFW+e4+easE4AtJnE6pNk4= Subject key identifier: A1:A9:5B:8C:50:86:AC:F4:DA:69:C9:8B:3A:A0:3D:B7:43:09:41:1E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7B2CBE530D9EE11B129F5E4BB9B68C38B9FAC722 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45291.roa Signing time: Tue 09 Jan 2024 04:00:21 +0000 ROA not before: Tue 09 Jan 2024 03:55:21 +0000 ROA not after: Tue 07 Jan 2025 04:00:21 +0000 asID: 45291 IP address blocks: 103.156.72.0/23 maxlen: 24 203.153.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:2c:be:53:0d:9e:e1:1b:12:9f:5e:4b:b9:b6:8c:38:b9:fa:c7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:21 2024 GMT Not After : Jan 7 04:00:21 2025 GMT Subject: CN=A1A95B8C5086ACF4DA69C98B3AA03DB74309411E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:11:9b:0d:eb:64:44:b1:7b:11:a2:ea:9d:99: ff:a2:99:37:dc:8b:14:ba:dd:4e:60:5f:79:00:0c: d0:79:f0:5a:91:f7:a9:7d:4e:82:c0:70:f2:82:a7: 3a:b2:b0:68:1f:bc:f1:c2:b0:d6:62:19:c5:8d:f4: dd:c8:c7:bc:0a:65:81:32:c7:b7:11:a5:01:db:34: 93:22:a2:a4:85:7c:42:fc:24:c8:9d:32:d4:5a:f9: f1:14:b9:9b:cf:44:f1:7b:c9:cf:22:a6:17:41:c0: 52:05:c6:bf:b7:47:12:dd:e7:35:9b:d0:8b:6d:07: e0:0f:4e:e2:e6:93:3f:49:ac:2c:e6:38:a1:7d:71: 0b:f5:4b:9a:e2:f1:57:1d:17:9b:6d:6e:00:b2:e3: e0:6f:ee:d3:fb:5e:2f:95:a3:c9:2d:0a:ed:8d:80: 0f:56:9e:91:9c:85:1e:a8:da:45:05:17:76:19:16: aa:fb:8f:7c:43:bf:9c:5b:71:07:12:cb:86:f8:2a: da:0e:34:5d:c6:e7:ab:16:5f:05:e4:46:86:30:57: c2:d1:83:f7:ea:6b:85:af:58:f6:c2:15:ea:6c:7d: d7:e7:68:21:1a:61:28:aa:e8:4d:9f:15:07:b1:8d: 27:32:64:65:d4:88:fb:82:e1:26:72:a3:5b:f4:b0: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A9:5B:8C:50:86:AC:F4:DA:69:C9:8B:3A:A0:3D:B7:43:09:41:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45291.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.72.0/23 203.153.216.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:e7:6d:98:00:1d:82:fb:51:75:cc:28:04:e0:f3:77:d8:0c: bc:67:0f:e9:e3:09:00:c3:9e:64:1b:af:83:c4:3f:86:71:68: f6:24:06:8b:50:75:64:83:10:9d:7c:e8:73:9d:bd:e5:81:9c: 8e:c2:d2:3d:cf:17:ec:5c:b9:f5:fe:e3:ec:1f:95:00:02:32: bb:a1:fa:ea:2e:dd:f1:10:a9:6f:a6:cc:5c:1a:6d:83:b5:ae: be:80:77:39:03:06:a5:4f:cc:67:db:7c:04:9a:51:02:dc:9e: 98:69:72:a4:50:90:59:29:41:6e:82:24:78:71:42:f4:99:0a: 26:c6:25:d8:d7:4c:dc:1b:84:fa:c2:ec:3e:ec:ae:23:b0:de: 38:c7:d0:ec:90:bc:e8:ee:e5:23:29:37:a6:f8:96:94:0d:bd: ab:fa:9a:6f:19:fd:11:09:1d:16:6f:28:5e:8a:bf:ff:38:ad: d3:5d:ec:9b:77:52:a6:ff:61:c6:14:03:48:55:66:0f:d0:43: 37:a8:53:bf:3e:90:70:f6:bf:c1:f2:19:8c:8a:11:98:c6:04: 03:e9:83:07:1f:0f:1a:c1:c2:eb:0b:29:27:7d:ec:57:1d:1c: 12:27:c6:2f:b0:33:31:16:f5:30:04:09:cb:0f:ac:55:10:cb: 14:10:ec:ee -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUeyy+Uw2e4RsSn15LubaMOLn6xyIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyMVoX DTI1MDEwNzA0MDAyMVowMzExMC8GA1UEAxMoQTFBOTVCOEM1MDg2QUNGNERBNjlD OThCM0FBMDNEQjc0MzA5NDExRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANURmw3rZESxexGi6p2Z/6KZN9yLFLrdTmBfeQAM0HnwWpH3qX1OgsBw8oKn OrKwaB+88cKw1mIZxY303cjHvAplgTLHtxGlAds0kyKipIV8QvwkyJ0y1Fr58RS5 m89E8XvJzyKmF0HAUgXGv7dHEt3nNZvQi20H4A9O4uaTP0msLOY4oX1xC/VLmuLx Vx0Xm21uALLj4G/u0/teL5WjyS0K7Y2AD1aekZyFHqjaRQUXdhkWqvuPfEO/nFtx BxLLhvgq2g40XcbnqxZfBeRGhjBXwtGD9+prha9Y9sIV6mx91+doIRphKKroTZ8V B7GNJzJkZdSI+4LhJnKjW/SwaLsCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBShqVuM UIas9NppyYs6oD23QwlBHjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzQ1MjkxLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ5xIAwQCy5nYMA0GCSqGSIb3DQEBCwUAA4IBAQB9522YAB2C+1F1 zCgE4PN32Ay8Zw/p4wkAw55kG6+DxD+GcWj2JAaLUHVkgxCdfOhznb3lgZyOwtI9 zxfsXLn1/uPsH5UAAjK7ofrqLt3xEKlvpsxcGm2Dta6+gHc5AwalT8xn23wEmlEC 3J6YaXKkUJBZKUFugiR4cUL0mQomxiXY10zcG4T6wuw+7K4jsN44x9DskLzo7uUj KTem+JaUDb2r+ppvGf0RCR0Wbyheir//OK3TXeybd1Km/2HGFANIVWYP0EM3qFO/ PpBw9r/B8hmMihGYxgQD6YMHHw8awcLrCyknfexXHRwSJ8YvsDMxFvUwBAnLD6xV EMsUEOzu -----END CERTIFICATE-----Generated at Mon May 6 01:47:03 2024 by rpki-client on console-fra.rpki-client.org