$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133816.roa File: AS133816.roa (raw, json) Hash identifier: mSjWQpZQGfECFTsHX/jRoDJjGuUsdENKyV/Btim9fIM= Subject key identifier: FF:96:7B:7C:E4:DC:B4:7D:71:EF:81:19:CD:48:30:A6:BF:DE:11:60 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3667CAB8D8141499176C8D7E763AD8555EB0E58A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133816.roa Signing time: Tue 09 Jan 2024 04:00:09 +0000 ROA not before: Tue 09 Jan 2024 03:55:09 +0000 ROA not after: Tue 07 Jan 2025 04:00:09 +0000 asID: 133816 IP address blocks: 103.52.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:67:ca:b8:d8:14:14:99:17:6c:8d:7e:76:3a:d8:55:5e:b0:e5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:09 2024 GMT Not After : Jan 7 04:00:09 2025 GMT Subject: CN=FF967B7CE4DCB47D71EF8119CD4830A6BFDE1160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:99:36:33:7b:ef:f5:ab:60:39:6a:0e:68: 13:a0:b1:28:f5:a9:9e:a5:72:3c:08:67:74:12:f8: df:39:68:81:c4:81:78:c1:c8:bf:dc:fc:2f:a2:a2: ad:7a:70:f4:fc:52:b8:ce:f4:5b:03:3f:8a:1f:8a: a6:03:f3:77:09:65:64:b0:01:fa:10:ab:53:fb:7e: 5a:b0:f1:9b:88:86:63:7b:06:65:f8:39:2d:c9:bc: f8:40:ca:f2:c8:42:59:e3:27:1a:1e:c0:b2:37:75: d9:b1:ba:df:5b:9b:14:3c:eb:09:3d:bd:38:01:f9: 13:e6:94:0a:9d:63:89:21:9b:f4:12:b5:ac:7f:7f: bc:4a:43:59:c7:fa:4b:87:d6:18:b3:7f:44:29:12: f8:08:a5:60:f2:79:d6:68:69:18:c5:8d:05:56:2b: ed:a1:31:2e:35:9c:b1:63:32:59:62:cf:2b:72:70: 06:32:ec:fb:eb:1f:6a:9e:d9:a4:93:74:f9:31:7d: 47:ba:98:cd:fe:2d:93:90:22:ff:23:90:3b:79:43: 90:de:0e:7d:5c:5d:62:cf:4a:0e:ab:91:99:9c:d3: 2f:dc:ef:08:08:2e:3b:7a:84:82:5f:ea:43:a6:77: d0:89:eb:7d:42:eb:4a:60:4b:da:5c:59:aa:68:54: 00:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:96:7B:7C:E4:DC:B4:7D:71:EF:81:19:CD:48:30:A6:BF:DE:11:60 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.213.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:5a:c4:61:43:e6:39:6a:e5:cb:98:35:38:14:5e:6d:73:89: 62:29:f6:6d:0c:b8:93:ac:4d:38:d8:06:e0:38:f5:00:fa:47: 3f:63:d6:f4:19:9d:61:93:78:b8:77:d5:2a:dc:90:31:04:c6: 75:12:3f:72:87:41:d4:82:bc:b2:47:14:68:d0:be:6b:50:2b: 93:87:dd:7d:68:b7:cb:e5:6a:96:89:00:ce:f8:24:47:ee:1d: d4:ba:46:35:01:42:33:3d:53:f2:76:25:c1:71:1b:d2:0c:3d: d4:54:f6:13:c0:d6:bf:8c:b0:f8:a2:71:60:f6:49:bb:35:65: 05:43:96:af:b4:6d:73:45:40:44:75:f4:0a:fc:f5:5e:e6:0c: 26:6a:04:1e:55:7f:2b:03:5f:bc:09:30:9b:b9:b2:7b:ea:60: e0:17:26:32:76:bd:b6:37:e4:36:86:79:1f:64:c6:bf:aa:d8: 1c:bd:3d:66:ea:08:26:71:98:51:f6:75:95:1f:64:10:94:32: fa:a2:80:cd:1f:01:39:6e:aa:db:0a:5a:6b:4f:20:60:89:ed: 80:4a:3c:40:e9:d1:10:3d:40:01:36:d8:f7:09:da:0d:9a:08: 2e:e5:12:aa:04:e0:2c:61:ec:c5:b4:5d:6c:6c:fa:c5:74:ee: 88:c4:ae:0c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUNmfKuNgUFJkXbI1+djrYVV6w5YowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwOVoX DTI1MDEwNzA0MDAwOVowMzExMC8GA1UEAxMoRkY5NjdCN0NFNERDQjQ3RDcxRUY4 MTE5Q0Q0ODMwQTZCRkRFMTE2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoFmTYze+/1q2A5ag5oE6CxKPWpnqVyPAhndBL43zlogcSBeMHIv9z8L6Ki rXpw9PxSuM70WwM/ih+KpgPzdwllZLAB+hCrU/t+WrDxm4iGY3sGZfg5Lcm8+EDK 8shCWeMnGh7Asjd12bG631ubFDzrCT29OAH5E+aUCp1jiSGb9BK1rH9/vEpDWcf6 S4fWGLN/RCkS+AilYPJ51mhpGMWNBVYr7aExLjWcsWMyWWLPK3JwBjLs++sfap7Z pJN0+TF9R7qYzf4tk5Ai/yOQO3lDkN4OfVxdYs9KDquRmZzTL9zvCAguO3qEgl/q Q6Z30InrfULrSmBL2lxZqmhUAG0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT/lnt8 5Ny0fXHvgRnNSDCmv94RYDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzgxNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGc01TANBgkqhkiG9w0BAQsFAAOCAQEAPVrEYUPmOWrly5g1OBRe bXOJYin2bQy4k6xNONgG4Dj1APpHP2PW9BmdYZN4uHfVKtyQMQTGdRI/codB1IK8 skcUaNC+a1Ark4fdfWi3y+VqlokAzvgkR+4d1LpGNQFCMz1T8nYlwXEb0gw91FT2 E8DWv4yw+KJxYPZJuzVlBUOWr7Rtc0VARHX0Cvz1XuYMJmoEHlV/KwNfvAkwm7my e+pg4BcmMna9tjfkNoZ5H2TGv6rYHL09ZuoIJnGYUfZ1lR9kEJQy+qKAzR8BOW6q 2wpaa08gYIntgEo8QOnRED1AATbY9wnaDZoILuUSqgTgLGHsxbRdbGz6xXTuiMSu DA== -----END CERTIFICATE-----Generated at Wed May 8 09:50:36 2024 by rpki-client on console-fra.rpki-client.org