$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa File: AS56242.roa (raw, json) Hash identifier: Cp+oC3UzlNuIpBOitsjAmArAsajIyniI40Cn7KQpxEY= Subject key identifier: BD:53:C8:19:A3:76:49:35:36:1D:4A:FC:C4:21:C6:1E:AC:23:51:62 Certificate issuer: /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Certificate serial: 73E06E223C0C7A38205CA8A1E8284D5B6D5DA429 Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa Signing time: Tue 13 Feb 2024 07:00:00 +0000 ROA not before: Tue 13 Feb 2024 06:55:00 +0000 ROA not after: Tue 11 Feb 2025 07:00:00 +0000 asID: 56242 IP address blocks: 101.255.170.0/23 maxlen: 23 101.255.170.0/24 maxlen: 24 101.255.171.0/24 maxlen: 24 115.124.70.0/23 maxlen: 23 115.124.70.0/24 maxlen: 24 115.124.71.0/24 maxlen: 24 202.182.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 15:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e0:6e:22:3c:0c:7a:38:20:5c:a8:a1:e8:28:4d:5b:6d:5d:a4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Validity Not Before: Feb 13 06:55:00 2024 GMT Not After : Feb 11 07:00:00 2025 GMT Subject: CN=BD53C819A3764935361D4AFCC421C61EAC235162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:48:e3:8c:a1:f0:c2:1f:f6:39:e7:d3:75: de:18:ac:e2:70:d4:49:c7:a4:3e:76:2d:7f:d4:d9: 1f:3c:5b:ba:d1:b2:c8:0d:57:55:29:6b:23:1b:ea: 09:01:16:ac:d5:24:b9:cc:e4:d7:97:38:7b:5b:22: 83:f3:fa:29:4e:e9:2e:dc:61:fa:3c:36:eb:7e:be: 01:d0:12:f5:55:77:38:58:88:2c:b1:25:b3:d3:ad: a9:89:2c:45:a7:d4:a1:03:c1:73:18:31:5d:4c:05: 3d:8a:b2:21:45:8d:64:ba:7b:fc:ae:5a:25:c2:3d: 27:0c:91:f3:b9:05:ca:15:b4:2e:08:ba:5a:59:fc: c2:ac:19:61:e8:59:77:2c:34:bb:b5:63:71:dd:f2: 83:f2:17:6b:86:ae:18:bc:8a:41:a5:6a:40:e8:44: f9:16:f9:9c:1b:4a:31:73:c5:5f:fd:b1:52:0f:f7: 37:d5:a6:9e:aa:39:00:62:af:a4:dd:7f:d3:a4:2d: 47:bb:b9:5d:60:8e:fe:df:d1:0d:d1:b9:98:4d:a2: f9:ec:2e:d1:22:5a:82:ef:14:e5:af:1f:8b:c0:01: 70:08:8b:e2:5d:e6:3b:6e:64:5b:79:4e:4c:54:ad: 8b:d3:b7:11:c3:c5:1c:5a:a6:46:0d:d2:6e:c1:86: b6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:53:C8:19:A3:76:49:35:36:1D:4A:FC:C4:21:C6:1E:AC:23:51:62 X509v3 Authority Key Identifier: keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.255.170.0/23 115.124.70.0/23 202.182.49.0/24 Signature Algorithm: sha256WithRSAEncryption 04:22:e6:df:c8:3c:09:b3:e1:26:f5:a0:b4:99:c6:4e:95:86: 4d:b2:ea:8a:44:f3:5d:ce:9d:eb:92:1e:8d:92:d8:f2:cf:65: 71:8c:76:60:c1:b0:0b:36:a8:fd:31:96:52:fe:7e:a6:4a:df: f0:3d:7c:d5:28:33:bb:f8:df:47:c0:85:be:b1:f2:42:db:09: 8e:48:84:6c:60:b9:19:68:f7:8b:5f:35:85:95:13:77:1a:f3: 20:02:44:c9:20:fa:3a:a9:6b:53:f1:de:82:a9:10:d6:78:b5: 4b:7a:35:02:10:10:37:71:a9:88:23:5f:5b:62:fb:d0:1b:98: 0c:f1:a2:76:bb:c2:6c:26:ac:17:76:96:73:45:8c:55:0b:4c: c0:0e:d4:44:10:5a:c9:df:1a:80:0f:60:0b:2c:e6:75:de:06: 6a:ee:72:b5:ac:8e:a8:c5:4c:c8:f0:9d:ad:6d:b6:2f:50:71: 72:27:32:16:f1:10:89:8e:40:47:af:b2:d4:66:f5:01:0e:c9: 73:a6:42:53:0f:91:27:57:b3:49:b2:9e:82:f6:7d:57:b9:be: e9:ef:81:b2:fe:5e:51:4c:56:5c:71:f5:89:7b:31:c5:44:6d: 44:2e:0f:77:7c:33:c0:0b:ea:fb:cb:df:e5:93:be:d2:d8:05: 2c:1d:51:e5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUc+BuIjwMejggXKih6ChNW21dpCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF N0FCQzE3RjAeFw0yNDAyMTMwNjU1MDBaFw0yNTAyMTEwNzAwMDBaMDMxMTAvBgNV BAMTKEJENTNDODE5QTM3NjQ5MzUzNjFENEFGQ0M0MjFDNjFFQUMyMzUxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJEjjjKHwwh/2OefTdd4YrOJw 1EnHpD52LX/U2R88W7rRssgNV1UpayMb6gkBFqzVJLnM5NeXOHtbIoPz+ilO6S7c Yfo8Nut+vgHQEvVVdzhYiCyxJbPTramJLEWn1KEDwXMYMV1MBT2KsiFFjWS6e/yu WiXCPScMkfO5BcoVtC4IulpZ/MKsGWHoWXcsNLu1Y3Hd8oPyF2uGrhi8ikGlakDo RPkW+ZwbSjFzxV/9sVIP9zfVpp6qOQBir6Tdf9OkLUe7uV1gjv7f0Q3RuZhNovns LtEiWoLvFOWvH4vAAXAIi+Jd5jtuZFt5TkxUrYvTtxHDxRxapkYN0m7BhrbVAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUvVPIGaN2STU2HUr8xCHGHqwjUWIwHwYDVR0j BBgwFoAUkWm5tlJs0UmE3eOkLiTdj+erwX8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC85MTY5QjlCNjUy NkNEMTQ5ODREREUzQTQyRTI0REQ4RkU3QUJDMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZFN0FC QzE3Ri5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0y MDc0YzU5ODA4OTgvMC9BUzU2MjQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBZf+qAwQBc3xGAwQAyrYx MA0GCSqGSIb3DQEBCwUAA4IBAQAEIubfyDwJs+Em9aC0mcZOlYZNsuqKRPNdzp3r kh6Nktjyz2VxjHZgwbALNqj9MZZS/n6mSt/wPXzVKDO7+N9HwIW+sfJC2wmOSIRs YLkZaPeLXzWFlRN3GvMgAkTJIPo6qWtT8d6CqRDWeLVLejUCEBA3camII19bYvvQ G5gM8aJ2u8JsJqwXdpZzRYxVC0zADtREEFrJ3xqAD2ALLOZ13gZq7nK1rI6oxUzI 8J2tbbYvUHFyJzIW8RCJjkBHr7LUZvUBDslzpkJTD5EnV7NJsp6C9n1Xub7p74Gy /l5RTFZccfWJezHFRG1ELg93fDPAC+r7y9/lk77S2AUsHVHl -----END CERTIFICATE-----Generated at Wed May 1 13:28:04 2024 by rpki-client on console-fra.rpki-client.org