$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133789.roa File: AS133789.roa (raw, json) Hash identifier: UiFSyWAp/N2Q44FrJOmZGsZlssPk5i1MsNQ3WGXTzzo= Subject key identifier: E3:7A:81:00:7D:23:16:35:E7:83:A6:D2:9E:EB:2D:43:6F:10:6D:B9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 644E0DFFDBDEB804244BE0D44FA70F6E7D9EC782 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133789.roa Signing time: Wed 08 Nov 2023 08:53:59 +0000 ROA not before: Wed 08 Nov 2023 08:48:59 +0000 ROA not after: Wed 06 Nov 2024 08:53:59 +0000 asID: 133789 IP address blocks: 103.143.98.0/23 maxlen: 24 103.143.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4e:0d:ff:db:de:b8:04:24:4b:e0:d4:4f:a7:0f:6e:7d:9e:c7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 8 08:48:59 2023 GMT Not After : Nov 6 08:53:59 2024 GMT Subject: CN=E37A81007D231635E783A6D29EEB2D436F106DB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2b:f4:62:93:7d:75:e5:3e:31:b8:f3:c5:2e: 44:4f:80:cf:a0:c0:6c:61:09:46:4f:9e:3f:75:55: 52:bf:2e:62:08:b2:3d:39:e3:ee:82:37:90:93:80: 4b:93:3f:eb:02:c6:fd:0a:8f:38:af:85:b1:64:51: bf:f1:ee:f3:74:78:10:4a:0b:50:21:38:2c:c9:73: b5:75:ac:d1:5d:6e:ec:1d:f8:36:8b:1a:e7:59:87: 33:57:81:eb:98:f3:2b:0e:81:68:d8:8b:37:9d:65: 4e:5f:f3:12:ce:ac:56:c6:38:44:0a:a6:5f:b2:0c: 2c:1b:aa:91:ee:a9:bc:d8:e9:91:0b:d3:5b:de:8a: f3:06:17:84:31:fb:47:c6:4f:58:2f:b0:f8:d5:d2: 4e:2a:68:9b:ce:b2:d0:47:5b:cc:ad:c3:46:7c:52: 23:37:c9:ce:8d:bc:5b:cb:af:5e:e5:6b:89:9a:25: 4d:2c:95:f0:12:04:12:57:96:26:05:a9:e9:da:8c: 1c:81:08:f5:af:46:0d:f7:e4:17:3d:a1:3d:22:15: 7a:51:b8:5f:47:5e:e7:0d:af:83:77:af:32:55:c4: c8:7b:c2:83:d7:c4:0c:5a:db:99:0b:3d:2e:3b:f8: f5:14:ee:98:3e:ef:1a:be:ae:6a:c7:bb:5f:a2:b0: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7A:81:00:7D:23:16:35:E7:83:A6:D2:9E:EB:2D:43:6F:10:6D:B9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133789.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.98.0-103.143.101.255 Signature Algorithm: sha256WithRSAEncryption 70:d6:1c:33:e6:0f:c5:92:0d:73:7d:eb:30:65:54:5c:8a:5a: 6d:a7:4c:90:fb:2a:32:fa:fd:3c:da:22:f1:d4:2a:a7:0a:0e: 14:9d:8b:ef:01:b5:fb:60:bc:cd:5d:e9:8b:de:aa:5e:c1:5e: d6:e3:32:04:79:9f:f8:52:90:14:72:01:07:af:93:be:ad:46: ea:ab:0b:42:f4:6f:df:87:ba:a5:88:ce:0c:1f:dc:e1:67:d1: 73:dc:3d:14:13:a1:5b:49:51:14:44:05:13:ef:92:47:f2:b1: 02:f9:3e:af:dd:ab:a4:df:c3:b1:4f:6b:28:1a:86:97:2c:93: 22:d2:2d:6d:34:28:37:8e:cd:40:83:f9:ac:0c:c4:f4:45:25: 24:c9:8a:82:3f:87:8f:b4:dd:9e:ea:4f:05:c6:12:cc:e5:96: d7:dd:23:b2:fa:50:80:44:fb:9f:b7:43:ae:ca:fa:27:0f:70: 4f:96:78:71:cc:93:3c:f0:e0:73:b0:35:e8:d2:9d:65:eb:27: fb:9b:2b:24:8f:43:ce:90:82:0f:ff:7b:a5:e8:46:d5:d1:49: b8:30:1c:fa:78:d8:bc:6f:d3:db:b7:0f:58:22:0b:3e:f0:a0: 33:1d:38:e8:3c:31:c0:37:1e:be:2e:59:7b:89:e2:d1:7f:8d: f3:32:13:11 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUZE4N/9veuAQkS+DUT6cPbn2ex4IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwODA4NDg1OVoX DTI0MTEwNjA4NTM1OVowMzExMC8GA1UEAxMoRTM3QTgxMDA3RDIzMTYzNUU3ODNB NkQyOUVFQjJENDM2RjEwNkRCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYr9GKTfXXlPjG488UuRE+Az6DAbGEJRk+eP3VVUr8uYgiyPTnj7oI3kJOA S5M/6wLG/QqPOK+FsWRRv/Hu83R4EEoLUCE4LMlztXWs0V1u7B34Nosa51mHM1eB 65jzKw6BaNiLN51lTl/zEs6sVsY4RAqmX7IMLBuqke6pvNjpkQvTW96K8wYXhDH7 R8ZPWC+w+NXSTipom86y0EdbzK3DRnxSIzfJzo28W8uvXuVriZolTSyV8BIEEleW JgWp6dqMHIEI9a9GDffkFz2hPSIVelG4X0de5w2vg3evMlXEyHvCg9fEDFrbmQs9 Ljv49RTumD7vGr6uase7X6KwLi8CAwEAAaOCAdgwggHUMB0GA1UdDgQWBBTjeoEA fSMWNeeDptKe6y1DbxBtuTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzc4OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYw FAQCAAEwDjAMAwQBZ49iAwQBZ49kMA0GCSqGSIb3DQEBCwUAA4IBAQBw1hwz5g/F kg1zfeswZVRcilptp0yQ+yoy+v082iLx1CqnCg4UnYvvAbX7YLzNXemL3qpewV7W 4zIEeZ/4UpAUcgEHr5O+rUbqqwtC9G/fh7qliM4MH9zhZ9Fz3D0UE6FbSVEURAUT 75JH8rEC+T6v3auk38OxT2soGoaXLJMi0i1tNCg3js1Ag/msDMT0RSUkyYqCP4eP tN2e6k8FxhLM5ZbX3SOy+lCARPuft0OuyvonD3BPlnhxzJM88OBzsDXo0p1l6yf7 myskj0POkIIP/3ul6EbV0Um4MBz6eNi8b9Pbtw9YIgs+8KAzHTjoPDHANx6+Lll7 ieLRf43zMhMR -----END CERTIFICATE-----Generated at Thu May 9 00:29:14 2024 by rpki-client on console-ams.rpki-client.org