$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133789.roa File: AS133789.roa (raw, json) Hash identifier: KAoGXwUu+rHIZulo1El3PaaP5fdcbqHZt2S2qxn07Z0= Subject key identifier: EA:D4:73:DD:04:DE:68:56:44:CB:1C:91:08:47:D6:65:ED:29:91:F6 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 70FBBFA6C4F6076FB8721B7312D9A085D3B54E55 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133789.roa Signing time: Wed 09 Oct 2024 09:00:00 +0000 ROA not before: Wed 09 Oct 2024 08:55:00 +0000 ROA not after: Wed 08 Oct 2025 09:00:00 +0000 asID: 133789 IP address blocks: 103.143.98.0/23 maxlen: 24 103.143.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fb:bf:a6:c4:f6:07:6f:b8:72:1b:73:12:d9:a0:85:d3:b5:4e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 9 08:55:00 2024 GMT Not After : Oct 8 09:00:00 2025 GMT Subject: CN=EAD473DD04DE685644CB1C910847D665ED2991F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:46:e3:47:48:b7:ec:ed:ad:3c:2e:f9:a8: 49:e8:1f:13:93:cb:ca:39:f2:6a:46:21:f6:51:37: 58:66:6e:f5:84:85:a6:2b:f2:6f:42:4b:d5:f9:4f: 84:80:c4:22:50:ef:0d:a9:12:aa:0b:7b:14:ac:39: 10:0e:ee:bf:99:b6:1f:49:0e:ec:04:5c:08:71:2b: f3:12:2e:10:f3:54:4c:d3:c0:d1:9d:ee:09:40:cb: 17:a7:23:f4:d1:49:48:cf:74:09:b2:d3:af:ed:dd: 4b:df:04:3a:b0:c2:95:75:69:7a:da:c9:2d:f8:9a: 78:f0:03:16:2d:a3:a5:e0:4b:bb:de:3a:29:2a:37: 21:26:5c:c1:e9:b4:e8:53:4e:4e:3f:39:81:3e:d1: 1d:e2:d9:b4:09:80:4b:83:db:11:92:38:86:04:ca: 6b:32:3c:8d:10:0f:9c:3c:ee:04:52:9c:d5:44:cf: 9b:85:de:1f:7e:f6:c1:65:10:45:aa:00:98:ef:f5: 64:ea:c9:9c:14:90:75:de:cf:64:15:77:ca:d7:72: 8e:dd:81:13:a5:81:e3:b4:85:20:b3:57:86:7d:30: 9a:1a:9b:2d:c3:63:d6:06:98:1d:10:a9:bd:7a:98: a4:43:a5:64:58:8f:33:d7:c7:73:ea:68:92:a8:d3: 24:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D4:73:DD:04:DE:68:56:44:CB:1C:91:08:47:D6:65:ED:29:91:F6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133789.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.98.0-103.143.101.255 Signature Algorithm: sha256WithRSAEncryption 4e:c3:21:78:44:7c:fa:8c:c0:ab:3a:a7:43:c3:9c:1b:dd:7f: 34:13:e7:47:9a:10:20:d8:3e:d9:6e:ac:72:c8:86:f3:a6:f3: 3b:8d:b9:6e:92:04:cf:4d:ed:e4:01:ce:68:7a:76:46:12:f8: 68:2c:b1:71:2b:f3:66:6f:02:53:92:fb:05:fd:fe:72:c2:b0: 20:6a:5f:e2:49:71:04:da:f2:35:d7:53:d6:f4:83:31:cc:46: 72:e9:34:d2:20:d4:79:fd:4c:cf:c4:57:a5:c5:a8:31:c4:6d: 7c:7a:a0:6d:5b:fd:8a:cb:a3:6c:47:64:fc:ea:e5:ae:0a:e4: 0b:1a:3c:c2:b2:db:6c:c5:23:af:c6:fd:48:70:ff:b2:fa:aa: 80:6f:ef:6e:c5:0d:9a:8e:a7:cf:26:1b:e6:d1:94:ae:b7:37: 2f:53:70:e0:1c:ba:16:08:6c:2d:59:f0:5e:b4:1c:4a:9c:89: f5:99:f4:2f:70:78:21:65:d6:1f:75:79:69:78:de:2e:20:b4: 5a:50:70:10:da:c4:b5:46:b7:79:58:8e:41:c8:27:be:48:12: 1d:e0:38:18:00:b0:f1:10:51:ee:0b:97:e2:db:83:61:7f:70: b2:7a:10:4e:fb:59:cd:56:e5:6b:39:cc:cc:14:5c:1f:17:dc: 79:00:bc:1f -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUcPu/psT2B2+4chtzEtmghdO1TlUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwOTA4NTUwMFoX DTI1MTAwODA5MDAwMFowMzExMC8GA1UEAxMoRUFENDczREQwNERFNjg1NjQ0Q0Ix QzkxMDg0N0Q2NjVFRDI5OTFGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbPRuNHSLfs7a08LvmoSegfE5PLyjnyakYh9lE3WGZu9YSFpivyb0JL1flP hIDEIlDvDakSqgt7FKw5EA7uv5m2H0kO7ARcCHEr8xIuEPNUTNPA0Z3uCUDLF6cj 9NFJSM90CbLTr+3dS98EOrDClXVpetrJLfiaePADFi2jpeBLu946KSo3ISZcwem0 6FNOTj85gT7RHeLZtAmAS4PbEZI4hgTKazI8jRAPnDzuBFKc1UTPm4XeH372wWUQ RaoAmO/1ZOrJnBSQdd7PZBV3ytdyjt2BE6WB47SFILNXhn0wmhqbLcNj1gaYHRCp vXqYpEOlZFiPM9fHc+pokqjTJDkCAwEAAaOCAdgwggHUMB0GA1UdDgQWBBTq1HPd BN5oVkTLHJEIR9Zl7SmR9jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzc4OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYw FAQCAAEwDjAMAwQBZ49iAwQBZ49kMA0GCSqGSIb3DQEBCwUAA4IBAQBOwyF4RHz6 jMCrOqdDw5wb3X80E+dHmhAg2D7ZbqxyyIbzpvM7jblukgTPTe3kAc5oenZGEvho LLFxK/NmbwJTkvsF/f5ywrAgal/iSXEE2vI111PW9IMxzEZy6TTSINR5/UzPxFel xagxxG18eqBtW/2Ky6NsR2T86uWuCuQLGjzCsttsxSOvxv1IcP+y+qqAb+9uxQ2a jqfPJhvm0ZSutzcvU3DgHLoWCGwtWfBetBxKnIn1mfQvcHghZdYfdXlpeN4uILRa UHAQ2sS1Rrd5WI5ByCe+SBId4DgYALDxEFHuC5fi24Nhf3CyehBO+1nNVuVrOczM FFwfF9x5ALwf -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:23 2024 by rpki-client on console-fra.rpki-client.org