$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133823.roa File: AS133823.roa (raw, json) Hash identifier: jFyKEdqbHbTSSij/tBRyYhz3omtaviRDNjkuXdTdGfQ= Subject key identifier: 2C:EC:57:FF:E6:6B:A5:B5:BE:5D:3B:A8:F2:C5:D3:5B:B2:34:D7:46 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0697FF8E82744876E5F753303A3FE731E6FFDF39 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133823.roa Signing time: Tue 09 Jan 2024 04:00:16 +0000 ROA not before: Tue 09 Jan 2024 03:55:16 +0000 ROA not after: Tue 07 Jan 2025 04:00:16 +0000 asID: 133823 IP address blocks: 103.161.140.0/24 maxlen: 24 103.161.141.0/24 maxlen: 24 103.162.130.0/24 maxlen: 24 103.162.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:97:ff:8e:82:74:48:76:e5:f7:53:30:3a:3f:e7:31:e6:ff:df:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:16 2024 GMT Not After : Jan 7 04:00:16 2025 GMT Subject: CN=2CEC57FFE66BA5B5BE5D3BA8F2C5D35BB234D746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:99:82:8a:b3:d7:6a:69:f7:f1:50:88:81:8b: 39:41:4f:25:6f:68:3a:ec:57:83:8c:31:91:3a:8e: ee:dd:4a:f9:7d:8d:1b:52:79:60:34:b2:8c:df:95: 9a:ea:66:1b:38:04:3d:89:b5:54:4a:12:7a:40:1c: f4:77:ea:46:95:83:c7:dc:96:95:fb:97:2c:03:40: b2:0d:08:1c:46:85:da:ab:15:98:fa:7b:86:aa:99: e6:91:6e:77:5f:fe:d4:45:08:11:2b:e7:48:3e:e8: 82:88:3c:ff:3c:c7:b3:54:76:68:18:3a:11:b0:bc: e9:19:56:43:8a:e8:27:95:2c:9a:fb:55:7d:df:10: f7:bf:e1:a8:ca:12:af:e5:62:63:f6:5f:e5:6f:04: 67:8a:84:f7:fa:b9:c4:ac:a6:d2:6e:f3:f5:2b:0b: 10:63:4b:2e:09:b2:f3:77:ec:07:1a:5c:b7:29:96: 51:50:7d:59:01:e8:bd:df:15:28:21:69:72:5a:8a: 54:c3:13:c4:ad:fe:4f:e9:23:9e:08:25:92:83:6f: 9d:29:6a:e8:52:a2:48:3d:ae:c5:66:fd:30:7a:86: 56:8b:ae:2d:f8:f4:bf:7c:d6:87:67:ac:86:08:b6: ea:b7:7d:01:28:36:ca:b6:d5:67:b8:6c:da:6d:a1: a4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EC:57:FF:E6:6B:A5:B5:BE:5D:3B:A8:F2:C5:D3:5B:B2:34:D7:46 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133823.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.140.0/23 103.162.130.0/23 Signature Algorithm: sha256WithRSAEncryption 71:e4:ab:bd:de:c3:3f:8f:40:ac:de:ec:7d:31:0b:da:d3:94: 3a:de:e0:db:a8:fd:6e:ac:40:ea:98:3d:b6:f4:82:64:af:83: 0a:3c:dc:ec:4a:b5:f2:8f:56:ca:92:1a:90:b6:53:5c:df:90: 08:94:1d:06:76:e7:a5:e5:f3:10:6f:ed:5f:0a:8c:c3:63:d0: e2:2c:12:c2:26:c0:87:3f:a5:e1:b1:f3:aa:a8:fb:4e:f8:03: 1f:23:a7:c0:f7:6b:d0:c4:e7:e8:46:21:a6:d5:f7:27:bb:40: 63:17:91:33:24:50:6c:87:0f:e7:76:ad:24:f1:e8:5d:3b:00: 26:3d:06:64:df:3b:d9:5f:23:04:cc:45:c0:34:51:e8:0c:21: de:68:5e:be:e7:0e:83:83:2e:69:0f:b9:86:8d:d3:a8:e3:8c: 68:98:8b:b1:32:17:8a:c5:ef:64:81:65:a8:9b:87:98:7f:1e: e7:7a:ec:c1:3a:76:a1:31:5b:f6:71:e4:f6:3a:cf:8a:25:02: db:fe:4f:d0:4b:77:61:35:dc:0f:5f:b4:7a:26:d0:1b:7a:c6: ce:4c:a0:60:bb:09:e1:fc:23:f2:e3:68:08:77:75:4f:72:64: f8:0e:be:fd:14:29:15:1b:5e:4a:f3:76:44:ec:e3:c9:e8:b2: ce:36:22:5f -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUBpf/joJ0SHbl91MwOj/nMeb/3zkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxNloX DTI1MDEwNzA0MDAxNlowMzExMC8GA1UEAxMoMkNFQzU3RkZFNjZCQTVCNUJFNUQz QkE4RjJDNUQzNUJCMjM0RDc0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOZgoqz12pp9/FQiIGLOUFPJW9oOuxXg4wxkTqO7t1K+X2NG1J5YDSyjN+V mupmGzgEPYm1VEoSekAc9HfqRpWDx9yWlfuXLANAsg0IHEaF2qsVmPp7hqqZ5pFu d1/+1EUIESvnSD7ogog8/zzHs1R2aBg6EbC86RlWQ4roJ5UsmvtVfd8Q97/hqMoS r+ViY/Zf5W8EZ4qE9/q5xKym0m7z9SsLEGNLLgmy83fsBxpctymWUVB9WQHovd8V KCFpclqKVMMTxK3+T+kjngglkoNvnSlq6FKiSD2uxWb9MHqGVouuLfj0v3zWh2es hgi26rd9ASg2yrbVZ7hs2m2hpGMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBQs7Ff/ 5multb5dO6jyxdNbsjTXRjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzgyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWehjAMEAWeigjANBgkqhkiG9w0BAQsFAAOCAQEAceSrvd7DP49A rN7sfTEL2tOUOt7g26j9bqxA6pg9tvSCZK+DCjzc7Eq18o9WypIakLZTXN+QCJQd BnbnpeXzEG/tXwqMw2PQ4iwSwibAhz+l4bHzqqj7TvgDHyOnwPdr0MTn6EYhptX3 J7tAYxeRMyRQbIcP53atJPHoXTsAJj0GZN872V8jBMxFwDRR6Awh3mhevucOg4Mu aQ+5ho3TqOOMaJiLsTIXisXvZIFlqJuHmH8e53rswTp2oTFb9nHk9jrPiiUC2/5P 0Et3YTXcD1+0eibQG3rGzkygYLsJ4fwj8uNoCHd1T3Jk+A6+/RQpFRteSvN2ROzj yeiyzjYiXw== -----END CERTIFICATE-----Generated at Wed May 1 22:50:32 2024 by rpki-client on console-ams.rpki-client.org