$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134621.roa File: AS134621.roa (raw, json) Hash identifier: IugC8YrMQVWJdXwUodG7lRuOQQ+/rRRcnTx7FQdcGyc= Subject key identifier: C0:B4:2A:34:30:E9:AE:25:57:4B:AB:B2:C6:66:F9:79:7E:4C:C1:B4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6D6E84EDC9913FA4532D71E9EA5AD6CA0ECE9389 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134621.roa Signing time: Tue 09 Jan 2024 04:00:06 +0000 ROA not before: Tue 09 Jan 2024 03:55:06 +0000 ROA not after: Tue 07 Jan 2025 04:00:06 +0000 asID: 134621 IP address blocks: 103.197.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6e:84:ed:c9:91:3f:a4:53:2d:71:e9:ea:5a:d6:ca:0e:ce:93:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:06 2024 GMT Not After : Jan 7 04:00:06 2025 GMT Subject: CN=C0B42A3430E9AE25574BABB2C666F9797E4CC1B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5e:26:65:0f:c8:52:bb:3b:48:d1:fa:10:01: 28:1a:40:73:5f:0f:34:6c:74:40:da:fa:b5:d2:1c: 18:90:da:9e:0c:64:8e:92:21:7f:06:a1:1e:38:fe: 15:46:f5:19:6c:88:95:b6:27:8d:ba:69:88:f8:42: d2:af:0e:8d:c2:4e:21:9b:ca:51:91:51:95:7c:81: 28:a5:e8:70:41:db:99:b9:2a:d8:60:f6:3b:fd:b9: 4a:93:53:31:e4:80:4b:0e:c3:40:a9:48:89:1a:22: 90:02:51:31:df:ec:5c:8a:a2:72:62:1d:4d:3c:6d: 8b:ee:e5:b1:58:bd:2b:a1:0c:22:1b:f0:fe:23:7f: 16:17:8a:cd:d2:e1:91:47:e1:51:eb:52:79:70:c0: ce:46:ce:cc:e7:27:6b:6f:a9:c0:7c:2d:c6:41:ba: 7d:3b:71:1a:12:98:13:69:84:7f:66:aa:5e:4d:fa: 0b:4a:be:b9:e6:1f:2e:95:ad:64:d3:89:4e:54:09: 1c:11:d3:35:f3:d2:25:62:e0:f3:59:8a:0c:38:13: a8:40:40:4f:48:30:61:9c:45:e3:e2:f8:01:e1:6f: 1f:34:26:90:a1:3e:2c:2a:48:77:25:48:41:c3:4b: 89:3d:39:f0:08:eb:78:50:25:c4:5c:77:11:68:fd: 5d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B4:2A:34:30:E9:AE:25:57:4B:AB:B2:C6:66:F9:79:7E:4C:C1:B4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134621.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.89.0/24 Signature Algorithm: sha256WithRSAEncryption 79:9e:4f:36:95:c5:a0:91:78:2f:d5:c8:ae:02:ea:78:52:10: 9a:ee:81:8b:06:e8:43:02:3c:d5:26:05:ea:6e:1d:8c:2a:fa: b9:78:33:31:c2:76:2e:36:e1:d7:2e:f1:fc:f2:ea:90:ac:5c: 64:56:47:3d:80:5d:0b:76:8d:a7:51:ec:89:d9:4d:dd:2d:c7: 1f:8b:54:25:1b:e5:66:90:ae:e1:4a:11:d9:d3:9f:bf:2a:a1: 38:fc:76:45:be:3c:0c:63:41:6c:57:fe:e8:80:d7:1c:f6:72: f2:f9:4a:fc:40:eb:f6:1c:65:8b:75:59:c9:6c:22:ec:7c:63: 24:4a:c9:d5:4f:7c:8b:37:68:89:41:c0:f3:c4:1f:43:0e:dd: 5c:95:0d:0e:99:50:28:a9:6f:e2:cb:e4:fc:6f:d0:52:a4:9f: 5a:ea:5b:a6:e8:7d:46:94:79:38:90:6b:d3:1e:c0:4b:4a:a4: c0:b7:eb:14:4d:3d:f5:f9:18:36:bc:6a:08:11:0f:9c:af:1d: 3e:6d:cd:ba:cc:fc:ab:75:6c:db:65:bc:1b:78:81:62:5a:4b: 74:95:bd:0e:bc:6f:13:1a:54:bd:bd:d6:6d:58:e5:a0:e9:c5: b9:ff:da:4a:d1:cb:ec:21:5a:d7:6f:af:d6:6d:fa:95:65:5e: 8a:41:06:4e -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUbW6E7cmRP6RTLXHp6lrWyg7Ok4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwNloX DTI1MDEwNzA0MDAwNlowMzExMC8GA1UEAxMoQzBCNDJBMzQzMEU5QUUyNTU3NEJB QkIyQzY2NkY5Nzk3RTRDQzFCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5eJmUPyFK7O0jR+hABKBpAc18PNGx0QNr6tdIcGJDangxkjpIhfwahHjj+ FUb1GWyIlbYnjbppiPhC0q8OjcJOIZvKUZFRlXyBKKXocEHbmbkq2GD2O/25SpNT MeSASw7DQKlIiRoikAJRMd/sXIqicmIdTTxti+7lsVi9K6EMIhvw/iN/FheKzdLh kUfhUetSeXDAzkbOzOcna2+pwHwtxkG6fTtxGhKYE2mEf2aqXk36C0q+ueYfLpWt ZNOJTlQJHBHTNfPSJWLg81mKDDgTqEBAT0gwYZxF4+L4AeFvHzQmkKE+LCpIdyVI QcNLiT058AjreFAlxFx3EWj9XdkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTAtCo0 MOmuJVdLq7LGZvl5fkzBtDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNDYyMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfFWTANBgkqhkiG9w0BAQsFAAOCAQEAeZ5PNpXFoJF4L9XIrgLq eFIQmu6BiwboQwI81SYF6m4djCr6uXgzMcJ2Ljbh1y7x/PLqkKxcZFZHPYBdC3aN p1HsidlN3S3HH4tUJRvlZpCu4UoR2dOfvyqhOPx2Rb48DGNBbFf+6IDXHPZy8vlK /EDr9hxli3VZyWwi7HxjJErJ1U98izdoiUHA88QfQw7dXJUNDplQKKlv4svk/G/Q UqSfWupbpuh9RpR5OJBr0x7AS0qkwLfrFE099fkYNrxqCBEPnK8dPm3Nusz8q3Vs 22W8G3iBYlpLdJW9DrxvExpUvb3WbVjloOnFuf/aStHL7CFa12+v1m36lWVeikEG Tg== -----END CERTIFICATE-----Generated at Wed May 8 17:45:21 2024 by rpki-client on console-ams.rpki-client.org