$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56253.roa File: AS56253.roa (raw, json) Hash identifier: kNHQVthuifVkX+EUSgE4/V1OKxnTgmvYef1Y1mGw6ro= Subject key identifier: 44:13:C0:80:9D:28:39:5E:7D:7E:2D:A0:48:81:9C:BA:C0:4C:3E:E7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 24455E228DFC36A974B18B8A52AAFBB2F07A549A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56253.roa Signing time: Tue 09 Jan 2024 04:00:14 +0000 ROA not before: Tue 09 Jan 2024 03:55:14 +0000 ROA not after: Tue 07 Jan 2025 04:00:14 +0000 asID: 56253 IP address blocks: 103.10.146.0/23 maxlen: 24 103.75.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:45:5e:22:8d:fc:36:a9:74:b1:8b:8a:52:aa:fb:b2:f0:7a:54:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:14 2024 GMT Not After : Jan 7 04:00:14 2025 GMT Subject: CN=4413C0809D28395E7D7E2DA048819CBAC04C3EE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:50:c6:5c:80:ea:67:21:d8:9b:40:4a:26:47: f5:83:3b:27:cc:00:f9:a6:1e:d7:a4:85:87:0e:9b: eb:87:27:d7:e6:5e:6a:72:90:4d:6e:4e:00:c1:33: cc:4a:77:dc:f4:aa:bb:34:6f:85:c2:de:6f:03:1a: 05:6b:23:5f:d9:4a:0f:9c:57:ef:a5:1c:6c:de:a9: 6e:28:2d:0c:43:7d:8e:96:0b:78:a7:87:e1:c2:e5: 75:23:76:84:71:34:c1:12:20:77:e7:cc:1a:6f:20: 41:ed:48:95:80:d7:6b:0c:af:1a:2d:8f:2b:fc:32: 0e:27:ef:c7:7a:4d:cd:dc:2e:ec:d4:d8:41:ba:7b: 63:2b:de:55:66:6a:f2:b4:4a:2b:71:41:de:2b:a0: 0c:a7:cf:e3:19:8c:5b:d1:10:72:16:9b:e2:03:e7: 91:c1:0e:31:16:18:d8:10:69:6c:78:bf:9d:6d:ec: a0:01:ef:66:9a:a1:12:02:8b:90:a1:8f:ea:ad:19: ce:28:53:a4:ac:38:d2:26:9f:de:f4:c7:ce:cf:bf: 0d:b4:b3:0e:dd:63:b4:6f:c6:d2:da:12:bf:ab:14: c3:f1:11:e7:fe:ea:d6:b3:bf:9f:8a:4a:7b:f4:8b: f9:76:15:2e:7f:06:b0:64:7c:f3:9c:f1:01:16:bb: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:13:C0:80:9D:28:39:5E:7D:7E:2D:A0:48:81:9C:BA:C0:4C:3E:E7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56253.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.146.0/23 103.75.51.0/24 Signature Algorithm: sha256WithRSAEncryption 34:10:14:5b:ef:d6:ce:94:2e:89:b3:56:d8:5b:c9:4f:89:20: 04:31:d5:01:8a:59:5b:8b:23:c1:60:73:67:0a:62:bd:33:a6: e7:f5:f8:6b:87:9c:28:89:7c:ba:8d:0f:3a:bb:56:1c:75:2f: 96:21:3c:b4:ce:62:78:b0:d2:bf:34:f0:ed:f9:21:a1:af:2f: b3:81:85:f0:e2:b0:76:0d:8b:e7:5a:5e:14:3c:95:50:1c:15: a3:b6:8c:11:81:6b:08:43:e3:51:be:66:03:6b:96:e3:e1:de: a8:fd:83:6a:82:ef:1f:00:bf:43:49:80:36:14:67:08:42:d3: e4:ab:a3:26:87:6b:47:83:ef:23:cd:b9:26:d5:7c:8e:bc:0e: 27:0c:46:32:e0:e1:a5:d5:59:19:e3:a6:6f:35:e0:24:1b:17: 08:a0:28:be:6e:1d:32:56:97:a6:07:b0:8a:93:f3:02:20:d7: ed:95:8a:cc:78:10:a0:f4:1e:a0:63:7c:5a:46:96:8a:17:8e: 03:e0:5a:ca:af:37:1d:b6:a7:d7:af:c5:fd:c3:55:80:44:d9: e9:6d:fb:98:55:30:22:d0:f3:d7:e5:54:1c:0c:85:5c:7e:d2: c9:b6:e0:fe:17:69:7f:7a:c0:07:df:b4:13:3c:4a:53:d8:4e: 24:27:11:1a -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUJEVeIo38Nql0sYuKUqr7svB6VJowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxNFoX DTI1MDEwNzA0MDAxNFowMzExMC8GA1UEAxMoNDQxM0MwODA5RDI4Mzk1RTdEN0Uy REEwNDg4MTlDQkFDMDRDM0VFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN9QxlyA6mch2JtASiZH9YM7J8wA+aYe16SFhw6b64cn1+ZeanKQTW5OAMEz zEp33PSquzRvhcLebwMaBWsjX9lKD5xX76UcbN6pbigtDEN9jpYLeKeH4cLldSN2 hHE0wRIgd+fMGm8gQe1IlYDXawyvGi2PK/wyDifvx3pNzdwu7NTYQbp7YyveVWZq 8rRKK3FB3iugDKfP4xmMW9EQchab4gPnkcEOMRYY2BBpbHi/nW3soAHvZpqhEgKL kKGP6q0ZzihTpKw40iaf3vTHzs+/DbSzDt1jtG/G0toSv6sUw/ER5/7q1rO/n4pK e/SL+XYVLn8GsGR885zxARa7clUCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBREE8CA nSg5Xn1+LaBIgZy6wEw+5zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU2MjUzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZwqSAwQAZ0szMA0GCSqGSIb3DQEBCwUAA4IBAQA0EBRb79bOlC6J s1bYW8lPiSAEMdUBillbiyPBYHNnCmK9M6bn9fhrh5woiXy6jQ86u1YcdS+WITy0 zmJ4sNK/NPDt+SGhry+zgYXw4rB2DYvnWl4UPJVQHBWjtowRgWsIQ+NRvmYDa5bj 4d6o/YNqgu8fAL9DSYA2FGcIQtPkq6Mmh2tHg+8jzbkm1XyOvA4nDEYy4OGl1VkZ 46ZvNeAkGxcIoCi+bh0yVpemB7CKk/MCINftlYrMeBCg9B6gY3xaRpaKF44D4FrK rzcdtqfXr8X9w1WARNnpbfuYVTAi0PPX5VQcDIVcftLJtuD+F2l/esAH37QTPEpT 2E4kJxEa -----END CERTIFICATE-----Generated at Tue Apr 30 12:55:55 2024 by rpki-client on console-fra.rpki-client.org