$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55680.roa File: AS55680.roa (raw, json) Hash identifier: jwrMr1aRi5j0amRBWOjihZhmBfSl6DBn4ifmJfzrn7E= Subject key identifier: B9:87:41:13:4B:BA:6B:56:B7:22:61:17:61:64:A1:51:FD:99:79:4C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3ACEDFB4F30ABB997A307EAFE6776E991A80D123 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55680.roa Signing time: Tue 16 Jan 2024 09:00:00 +0000 ROA not before: Tue 16 Jan 2024 08:55:00 +0000 ROA not after: Tue 14 Jan 2025 09:00:00 +0000 asID: 55680 IP address blocks: 103.60.234.0/23 maxlen: 24 2400:dbe0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 15:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ce:df:b4:f3:0a:bb:99:7a:30:7e:af:e6:77:6e:99:1a:80:d1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 16 08:55:00 2024 GMT Not After : Jan 14 09:00:00 2025 GMT Subject: CN=B98741134BBA6B56B72261176164A151FD99794C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:e4:b0:e5:ed:49:cc:fc:af:44:38:a7:0b: 6f:be:f2:31:52:6e:42:5d:fc:72:bd:6a:19:df:aa: 70:7b:6a:93:4b:bb:01:d7:0d:db:8a:b5:a4:d2:a7: 0d:79:6d:e3:68:58:76:0c:4f:d9:ce:c6:ed:d4:93: a3:f7:0e:f4:13:e0:78:7e:1d:20:11:11:42:9f:9f: 72:c4:a7:c5:df:eb:58:13:b4:39:d6:05:ed:78:1f: 52:e9:d7:0d:bc:5c:26:6f:0b:c9:1f:86:3c:55:33: d2:dc:49:2b:f9:37:7f:d7:1d:2d:f5:94:b2:c0:58: 24:9c:b3:bb:4f:c0:63:51:48:e8:a5:37:85:b2:de: d3:40:ca:52:18:d9:e7:94:c2:5d:e3:61:43:c9:12: 94:00:98:bf:29:2b:90:37:a8:02:f3:19:fa:a1:27: 66:fc:69:e7:82:99:79:c9:ec:1e:99:ef:dc:7f:a6: 30:de:ce:b1:a3:3e:26:ed:12:0a:46:bf:9c:50:72: 26:a4:62:2d:ce:c5:57:81:4d:1e:e2:23:95:bc:25: 46:e9:67:c7:7c:ca:c3:fb:39:5a:c9:8c:2c:81:2b: 1c:3d:0c:94:89:25:40:da:8b:69:e6:09:06:75:b6: 9c:7b:2c:94:1f:52:d9:d7:95:56:d7:7b:22:f8:23: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:87:41:13:4B:BA:6B:56:B7:22:61:17:61:64:A1:51:FD:99:79:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55680.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.60.234.0/23 IPv6: 2400:dbe0::/32 Signature Algorithm: sha256WithRSAEncryption 62:76:98:18:fc:d0:68:4e:a1:f7:af:d1:51:07:10:f9:47:6e: 43:4b:9a:c1:ed:aa:c4:9d:84:42:92:63:1f:db:df:04:02:a4: 0e:81:c5:e3:bb:2f:8f:91:d8:0a:24:e2:d9:2d:ce:bd:3c:c5: 8e:2d:a9:ff:bf:37:5f:35:12:f6:c5:6a:8c:8f:8a:fd:9c:65: 37:e1:b5:2a:92:e1:16:9e:9c:f3:f1:ad:b6:83:28:dd:70:ea: d0:9b:90:97:24:2f:ac:84:56:24:07:be:db:66:d6:d2:6a:ca: cb:5c:89:47:08:4d:7c:cf:dd:a8:bf:25:db:cc:66:a6:20:66: 90:35:e8:86:7a:89:a3:03:9b:12:4c:f0:95:22:0d:d7:38:36: b7:19:ee:f6:51:e0:7e:d1:e8:c8:08:ab:84:11:5a:66:e4:67: 39:c1:d5:a3:3f:3e:c5:66:33:c4:f3:8e:7c:fb:2b:8b:bf:3f: e7:2e:88:d5:c3:88:d6:fb:68:b6:46:e2:aa:4d:81:8c:f2:90: 08:cb:53:19:b0:32:ac:b2:0f:5d:62:07:53:10:c5:62:a5:6a: c3:9d:09:cc:ee:90:c3:ac:9f:08:50:84:cf:e0:c1:1d:91:c3: 9b:e1:11:90:f2:69:e0:f9:ce:81:87:da:f3:1b:18:3b:d5:7b: 87:71:b6:be -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUOs7ftPMKu5l6MH6v5ndumRqA0SMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExNjA4NTUwMFoX DTI1MDExNDA5MDAwMFowMzExMC8GA1UEAxMoQjk4NzQxMTM0QkJBNkI1NkI3MjI2 MTE3NjE2NEExNTFGRDk5Nzk0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNB5LDl7UnM/K9EOKcLb77yMVJuQl38cr1qGd+qcHtqk0u7AdcN24q1pNKn DXlt42hYdgxP2c7G7dSTo/cO9BPgeH4dIBERQp+fcsSnxd/rWBO0OdYF7XgfUunX DbxcJm8LyR+GPFUz0txJK/k3f9cdLfWUssBYJJyzu0/AY1FI6KU3hbLe00DKUhjZ 55TCXeNhQ8kSlACYvykrkDeoAvMZ+qEnZvxp54KZecnsHpnv3H+mMN7OsaM+Ju0S Cka/nFByJqRiLc7FV4FNHuIjlbwlRulnx3zKw/s5WsmMLIErHD0MlIklQNqLaeYJ BnW2nHsslB9S2deVVtd7IvgjiZ8CAwEAAaOCAd4wggHaMB0GA1UdDgQWBBS5h0ET S7prVrciYRdhZKFR/Zl5TDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1NjgwLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZzzqMA0EAgACMAcDBQAkANvgMA0GCSqGSIb3DQEBCwUAA4IBAQBi dpgY/NBoTqH3r9FRBxD5R25DS5rB7arEnYRCkmMf298EAqQOgcXjuy+PkdgKJOLZ Lc69PMWOLan/vzdfNRL2xWqMj4r9nGU34bUqkuEWnpzz8a22gyjdcOrQm5CXJC+s hFYkB77bZtbSasrLXIlHCE18z92ovyXbzGamIGaQNeiGeomjA5sSTPCVIg3XODa3 Ge72UeB+0ejICKuEEVpm5Gc5wdWjPz7FZjPE8458+yuLvz/nLojVw4jW+2i2RuKq TYGM8pAIy1MZsDKssg9dYgdTEMVipWrDnQnM7pDDrJ8IUITP4MEdkcOb4RGQ8mng +c6Bh9rzGxg71XuHcba+ -----END CERTIFICATE-----Generated at Tue May 7 04:35:03 2024 by rpki-client on console-ams.rpki-client.org