$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133817.roa File: AS133817.roa (raw, json) Hash identifier: DFGNE6jBY4bqkKVG0F1+4tL7ZFX+hYHFBSf9tBsY9WQ= Subject key identifier: 2F:C2:5A:C7:2C:A8:2D:8F:CA:86:AB:89:42:3D:2E:C9:12:BD:31:C3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4FB99DE61470BEB1749B244136F1444E1E3C6B5C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133817.roa Signing time: Thu 04 Jul 2024 09:00:00 +0000 ROA not before: Thu 04 Jul 2024 08:55:00 +0000 ROA not after: Thu 03 Jul 2025 09:00:00 +0000 asID: 133817 IP address blocks: 103.173.232.0/24 maxlen: 24 103.187.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b9:9d:e6:14:70:be:b1:74:9b:24:41:36:f1:44:4e:1e:3c:6b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 4 08:55:00 2024 GMT Not After : Jul 3 09:00:00 2025 GMT Subject: CN=2FC25AC72CA82D8FCA86AB89423D2EC912BD31C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:6f:1d:19:d7:a4:97:31:8a:af:76:1a:92: 8f:23:a7:2d:88:b3:59:a9:47:c6:d4:b3:cf:b8:e2: a4:96:12:ca:e2:c8:1d:ab:1e:36:d5:e2:47:26:c6: e2:f7:75:7d:6e:44:b3:a2:00:70:b1:07:95:cb:f7: 3c:1d:a3:63:a2:c4:8f:32:e8:14:0a:14:c6:2f:ad: 40:bd:72:2b:4a:7d:06:b1:8a:d4:70:1b:4b:b5:7d: 7f:5e:7f:04:4f:65:62:52:ff:fd:3b:de:41:f4:c1: cc:28:63:5c:89:aa:82:52:73:14:ca:9a:db:63:89: 73:1b:52:86:e5:35:bb:78:8a:12:c9:e7:e9:4e:7b: e7:80:51:85:65:01:19:01:2a:7f:cf:b0:85:fa:c9: 18:72:c8:fd:12:25:67:83:e3:89:8b:cb:99:d3:e5: d9:f4:36:4c:9d:37:3e:75:7b:61:50:76:b1:0a:17: e0:b8:cd:3b:c1:a7:24:90:96:43:f4:db:f4:9f:3d: a1:0b:35:7a:2b:eb:d9:19:76:21:f7:17:a2:c1:09: d4:c5:fc:5d:3e:06:db:15:0d:e8:34:4c:34:28:6c: 69:f3:2b:73:db:98:ab:69:66:f5:57:9d:2b:3b:b7: ef:01:65:ad:92:69:90:a3:7f:3c:16:6c:72:75:4a: 1b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C2:5A:C7:2C:A8:2D:8F:CA:86:AB:89:42:3D:2E:C9:12:BD:31:C3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133817.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.232.0/24 103.187.214.0/23 Signature Algorithm: sha256WithRSAEncryption 64:d5:59:33:60:49:63:c5:b8:10:b7:3c:0c:2b:d7:19:61:08: 2d:0c:52:73:1d:2f:33:41:42:0c:47:45:7a:0c:b8:6c:b6:27: 04:27:83:37:fc:28:8c:1a:11:e4:86:41:09:fd:28:f8:a5:66: ad:98:f0:cf:c4:34:5e:ff:12:4e:6a:2d:47:82:3b:0a:29:ff: 76:2b:dd:b9:5d:da:44:ec:c7:74:6d:f9:1d:00:74:bd:c6:6a: 41:92:c0:87:6b:b6:56:ea:db:c0:31:9f:61:9d:cf:20:93:29: 5e:f1:42:81:6e:c3:7f:c2:70:01:b6:ec:43:ec:69:a9:ab:22: 96:2f:8b:10:a6:80:a1:da:fc:cf:1d:ec:fd:44:d3:9e:fd:5b: 0b:9e:44:20:a0:66:34:86:1e:1a:29:65:8e:f4:98:72:4d:46: 54:53:9a:3a:16:4c:e3:47:71:c9:62:42:b6:17:e4:ac:5b:36: 67:d3:9b:20:03:7b:c2:4c:15:08:0a:cd:66:5e:d4:09:db:e5: 46:94:47:0f:5b:59:68:00:a5:7f:07:0a:9d:73:03:76:b9:55: 21:2b:b1:86:50:f5:b7:43:7d:9a:16:41:43:e9:43:df:8e:c7: 65:6d:ba:ff:0b:96:ef:9f:2a:23:ac:3d:0e:5a:40:9b:a2:5a: 89:59:a8:af -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUT7md5hRwvrF0myRBNvFETh48a1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwNDA4NTUwMFoX DTI1MDcwMzA5MDAwMFowMzExMC8GA1UEAxMoMkZDMjVBQzcyQ0E4MkQ4RkNBODZB Qjg5NDIzRDJFQzkxMkJEMzFDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMolbx0Z16SXMYqvdhqSjyOnLYizWalHxtSzz7jipJYSyuLIHaseNtXiRybG 4vd1fW5Es6IAcLEHlcv3PB2jY6LEjzLoFAoUxi+tQL1yK0p9BrGK1HAbS7V9f15/ BE9lYlL//TveQfTBzChjXImqglJzFMqa22OJcxtShuU1u3iKEsnn6U5754BRhWUB GQEqf8+whfrJGHLI/RIlZ4PjiYvLmdPl2fQ2TJ03PnV7YVB2sQoX4LjNO8GnJJCW Q/Tb9J89oQs1eivr2Rl2IfcXosEJ1MX8XT4G2xUN6DRMNChsafMrc9uYq2lm9Ved Kzu37wFlrZJpkKN/PBZscnVKG4UCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBQvwlrH LKgtj8qGq4lCPS7JEr0xwzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzgxNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGet6AMEAWe71jANBgkqhkiG9w0BAQsFAAOCAQEAZNVZM2BJY8W4 ELc8DCvXGWEILQxScx0vM0FCDEdFegy4bLYnBCeDN/wojBoR5IZBCf0o+KVmrZjw z8Q0Xv8STmotR4I7Cin/divduV3aROzHdG35HQB0vcZqQZLAh2u2VurbwDGfYZ3P IJMpXvFCgW7Df8JwAbbsQ+xpqasili+LEKaAodr8zx3s/UTTnv1bC55EIKBmNIYe GilljvSYck1GVFOaOhZM40dxyWJCthfkrFs2Z9ObIAN7wkwVCArNZl7UCdvlRpRH D1tZaAClfwcKnXMDdrlVISuxhlD1t0N9mhZBQ+lD347HZW26/wuW758qI6w9DlpA m6JaiVmorw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:23 2024 by rpki-client on console-fra.rpki-client.org