$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55697.roa File: AS55697.roa (raw, json) Hash identifier: v+ey9jzd7u6AfUuQrF3JR2UwBW6Abyuu3wwm/F+DHeE= Subject key identifier: 28:DC:0F:DE:E1:1A:CD:0D:2A:34:F9:6F:5B:7E:2F:4E:FC:8F:2D:92 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0DCFFF2C398EC31F60F64BD4F1F19F207B096474 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55697.roa Signing time: Tue 09 Jan 2024 03:00:00 +0000 ROA not before: Tue 09 Jan 2024 02:55:00 +0000 ROA not after: Tue 07 Jan 2025 03:00:00 +0000 asID: 55697 IP address blocks: 103.174.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 09:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:cf:ff:2c:39:8e:c3:1f:60:f6:4b:d4:f1:f1:9f:20:7b:09:64:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 02:55:00 2024 GMT Not After : Jan 7 03:00:00 2025 GMT Subject: CN=28DC0FDEE11ACD0D2A34F96F5B7E2F4EFC8F2D92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:3c:05:a1:ae:c2:26:0b:5a:e0:18:6f:a8: 21:19:bb:99:53:8a:10:33:c1:75:7f:a4:34:10:10: 0a:b7:84:40:98:f6:93:40:1b:85:a9:fd:59:d2:b0: 66:99:6c:bd:cb:21:eb:ba:26:29:09:39:4f:25:9c: 1c:d4:f4:92:a1:eb:36:31:76:2d:61:0f:20:d2:fb: ce:60:a5:bd:48:73:62:fb:e9:d1:85:28:f8:1e:88: 47:fe:73:ee:ea:0c:3b:e3:cd:23:52:c9:98:b3:93: 15:5f:97:fd:89:3d:80:d2:ae:f4:4a:0f:5d:8b:6e: f2:90:c0:ea:5a:30:92:2c:88:ac:57:84:37:18:fb: f7:76:ea:93:b5:dd:bc:57:3d:ee:e4:2b:fd:0e:08: 98:7a:67:af:84:9d:79:c9:f0:9f:c0:31:15:b4:23: 9b:db:fc:36:40:32:c3:b7:65:ca:e4:a0:e3:df:6c: 3f:76:23:46:81:d8:28:9a:0d:d1:1a:ad:59:f2:8f: 79:73:5d:2f:bb:d2:16:16:1e:4c:b0:70:90:8f:5f: 6f:22:38:81:32:fb:40:4d:98:54:84:bc:dc:d9:15: 05:e8:25:b3:fb:f4:7b:40:df:26:29:f3:bb:5e:dc: 83:86:30:09:e9:fe:79:88:ef:2b:1c:5f:2e:75:80: 46:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DC:0F:DE:E1:1A:CD:0D:2A:34:F9:6F:5B:7E:2F:4E:FC:8F:2D:92 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55697.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.222.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:0a:4d:4b:b4:f3:0e:44:63:61:db:7f:eb:03:73:2c:d1:22: da:93:4d:2f:a0:77:0f:8b:ad:24:fb:53:74:ee:ac:72:bf:2a: c2:d3:d7:79:dd:7a:ce:22:08:4d:d1:f3:a6:e4:a1:d9:17:43: ba:38:f7:b4:72:64:73:b6:b3:d8:23:63:44:28:6f:5a:4c:9b: 0f:3a:7c:b9:9c:72:39:7b:ea:2b:72:2a:8d:c0:b7:83:8e:19: 04:ea:e6:96:1e:1f:ff:4d:95:22:2c:10:3d:ba:3c:ed:c0:25: f5:b7:ae:8b:ec:59:e6:2e:b5:0f:db:79:24:c0:e7:09:28:e0: a7:ab:98:2f:4f:f6:7b:3a:41:a3:d6:e4:25:17:68:5a:33:04: 6b:4f:57:27:f5:a0:ed:33:fd:30:0a:b8:47:77:28:86:ed:6d: 8f:99:d3:d4:73:0e:65:8b:f4:35:34:5f:0b:0f:b6:64:cf:55: 38:ed:8f:6f:24:9a:8b:c9:e4:48:bf:0c:aa:73:e9:dc:8e:d0: 72:0b:9d:11:e3:a5:69:5d:c6:4e:bf:ba:a3:ee:04:ef:c8:78: a2:93:4c:5e:e6:ae:87:7d:bb:a6:00:1e:38:f9:e5:36:c0:52: 91:9d:fb:e3:be:da:8b:18:5e:e3:2f:91:b6:d5:4d:ff:ac:81: f7:9d:bf:f1 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUDc//LDmOwx9g9kvU8fGfIHsJZHQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAyNTUwMFoX DTI1MDEwNzAzMDAwMFowMzExMC8GA1UEAxMoMjhEQzBGREVFMTFBQ0QwRDJBMzRG OTZGNUI3RTJGNEVGQzhGMkQ5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmsPAWhrsImC1rgGG+oIRm7mVOKEDPBdX+kNBAQCreEQJj2k0Abhan9WdKw Zplsvcsh67omKQk5TyWcHNT0kqHrNjF2LWEPINL7zmClvUhzYvvp0YUo+B6IR/5z 7uoMO+PNI1LJmLOTFV+X/Yk9gNKu9EoPXYtu8pDA6lowkiyIrFeENxj793bqk7Xd vFc97uQr/Q4ImHpnr4Sdecnwn8AxFbQjm9v8NkAyw7dlyuSg499sP3YjRoHYKJoN 0RqtWfKPeXNdL7vSFhYeTLBwkI9fbyI4gTL7QE2YVIS83NkVBegls/v0e0DfJinz u17cg4YwCen+eYjvKxxfLnWARucCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQo3A/e 4RrNDSo0+W9bfi9O/I8tkjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1Njk3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ67eMA0GCSqGSIb3DQEBCwUAA4IBAQBdCk1LtPMORGNh23/rA3Ms 0SLak00voHcPi60k+1N07qxyvyrC09d53XrOIghN0fOm5KHZF0O6OPe0cmRztrPY I2NEKG9aTJsPOny5nHI5e+orciqNwLeDjhkE6uaWHh//TZUiLBA9ujztwCX1t66L 7FnmLrUP23kkwOcJKOCnq5gvT/Z7OkGj1uQlF2haMwRrT1cn9aDtM/0wCrhHdyiG 7W2PmdPUcw5li/Q1NF8LD7Zkz1U47Y9vJJqLyeRIvwyqc+ncjtByC50R46VpXcZO v7qj7gTvyHiik0xe5q6HfbumAB44+eU2wFKRnfvjvtqLGF7jL5G21U3/rIH3nb/x -----END CERTIFICATE-----Generated at Thu May 2 05:09:58 2024 by rpki-client on console-ams.rpki-client.org