$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133826.roa File: AS133826.roa (raw, json) Hash identifier: sHHYKHPFInkOQlxBRtESAFD1hguUxHhuk+vALgz/ooc= Subject key identifier: E1:F5:87:B3:C1:3D:1E:D3:CB:4E:CA:B9:D2:A7:EB:54:60:F3:B5:59 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3DBDD6BDCC95B557A26F0F93C44065BDD9F9DF26 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133826.roa Signing time: Tue 25 Feb 2025 07:31:57 +0000 ROA not before: Tue 25 Feb 2025 07:26:57 +0000 ROA not after: Tue 24 Feb 2026 07:31:57 +0000 asID: 133826 IP address blocks: 103.56.188.0/24 maxlen: 24 103.56.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:bd:d6:bd:cc:95:b5:57:a2:6f:0f:93:c4:40:65:bd:d9:f9:df:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 25 07:26:57 2025 GMT Not After : Feb 24 07:31:57 2026 GMT Subject: CN=E1F587B3C13D1ED3CB4ECAB9D2A7EB5460F3B559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:31:aa:0f:3f:e8:bd:ff:10:df:60:11:70:5c: 1d:4a:5c:65:90:db:46:d8:7a:43:3d:ca:b3:31:64: 56:8d:d6:52:54:d8:02:13:70:cd:ac:18:25:a0:1d: cd:da:a3:7b:6d:3d:06:b9:8c:f7:f7:a5:56:38:e3: aa:1f:93:eb:97:44:8d:69:d6:5d:3b:39:2b:a1:58: 29:af:df:04:e5:32:59:70:74:54:97:6a:bd:46:f7: b9:94:0c:d2:67:2f:83:6a:90:51:de:5b:05:bb:2a: 11:02:3c:c5:2d:4e:99:00:1a:d3:73:bd:54:f6:eb: ee:fe:d8:63:9c:34:d8:5e:76:23:51:ed:be:30:10: 0e:06:b0:5b:9d:02:c3:16:80:27:09:82:26:64:ae: 4c:12:08:02:30:4e:2f:aa:ff:ef:09:e0:59:cb:70: 89:12:e4:33:ca:63:46:90:b1:27:9b:e3:1a:a7:2f: 55:eb:b8:ec:44:aa:73:07:90:24:54:b9:ce:3a:ad: a6:8f:95:df:4b:28:6e:9a:e1:34:ef:73:23:16:55: a6:ee:07:df:06:73:22:7f:7f:bd:ed:55:a6:27:29: 34:11:38:a8:9c:96:df:cf:f0:e6:07:56:0b:96:6b: 7e:22:9e:3b:31:d6:17:45:61:f7:39:e4:4d:32:f2: 97:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F5:87:B3:C1:3D:1E:D3:CB:4E:CA:B9:D2:A7:EB:54:60:F3:B5:59 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133826.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.188.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:b2:88:6f:b2:28:d4:fb:30:5c:43:13:02:67:0a:93:40:c3: 33:b9:b4:2b:cd:2f:bb:7f:63:c8:2f:9a:38:c4:8f:b9:13:e1: 7b:8f:50:06:71:a4:f8:f3:81:75:b7:11:c6:9e:a8:ac:b7:3b: d7:3c:0f:c2:1e:e8:cb:22:42:87:c4:c3:5f:eb:0a:35:a5:ab: 04:d5:95:d0:61:f5:ea:c9:74:76:4b:b2:64:d1:97:b1:ff:3c: 55:b4:f6:72:3c:eb:ee:93:86:a2:05:a1:9e:c6:4f:0b:55:d5: cf:37:d3:01:57:17:46:02:0e:c8:ee:24:d5:60:3b:42:51:9f: 1b:45:ea:bc:6b:0b:d8:46:44:21:b4:0e:b8:81:98:93:50:03: 0b:b6:53:6f:62:85:08:1e:dc:08:5f:c0:44:c9:f0:e2:a0:be: fe:48:68:4b:e3:80:dc:5e:a7:9f:24:18:0c:70:79:ef:ef:48: 70:6b:98:8c:3d:65:92:97:dd:71:fc:73:ea:55:c3:17:47:a8: 72:50:ff:c9:7e:f7:da:e1:99:be:c9:d1:a0:e8:0c:35:45:53: cd:6a:81:df:e3:80:26:5e:40:cc:83:11:9b:15:28:ee:2f:5b: 2c:c6:60:b4:a1:ce:d4:5b:a3:d9:84:8d:0c:02:64:ab:45:1f: 63:40:f6:de -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUPb3WvcyVtVeibw+TxEBlvdn53yYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIyNTA3MjY1N1oX DTI2MDIyNDA3MzE1N1owMzExMC8GA1UEAxMoRTFGNTg3QjNDMTNEMUVEM0NCNEVD QUI5RDJBN0VCNTQ2MEYzQjU1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYxqg8/6L3/EN9gEXBcHUpcZZDbRth6Qz3KszFkVo3WUlTYAhNwzawYJaAd zdqje209BrmM9/elVjjjqh+T65dEjWnWXTs5K6FYKa/fBOUyWXB0VJdqvUb3uZQM 0mcvg2qQUd5bBbsqEQI8xS1OmQAa03O9VPbr7v7YY5w02F52I1HtvjAQDgawW50C wxaAJwmCJmSuTBIIAjBOL6r/7wngWctwiRLkM8pjRpCxJ5vjGqcvVeu47ESqcweQ JFS5zjqtpo+V30sobprhNO9zIxZVpu4H3wZzIn9/ve1VpicpNBE4qJyW38/w5gdW C5ZrfiKeOzHWF0Vh9znkTTLyl4kCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTh9Yez wT0e08tOyrnSp+tUYPO1WTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzgyNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWc4vDANBgkqhkiG9w0BAQsFAAOCAQEAerKIb7Io1PswXEMTAmcK k0DDM7m0K80vu39jyC+aOMSPuRPhe49QBnGk+POBdbcRxp6orLc71zwPwh7oyyJC h8TDX+sKNaWrBNWV0GH16sl0dkuyZNGXsf88VbT2cjzr7pOGogWhnsZPC1XVzzfT AVcXRgIOyO4k1WA7QlGfG0XqvGsL2EZEIbQOuIGYk1ADC7ZTb2KFCB7cCF/ARMnw 4qC+/khoS+OA3F6nnyQYDHB57+9IcGuYjD1lkpfdcfxz6lXDF0eoclD/yX732uGZ vsnRoOgMNUVTzWqB3+OAJl5AzIMRmxUo7i9bLMZgtKHO1Fuj2YSNDAJkq0UfY0D2 3g== -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:01 2025 by rpki-client