$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135476.roa File: AS135476.roa (raw, json) Hash identifier: nQ6eJk31tLa7hRZsZNbbe7qh1nDp22/rTZVV6AyJrv0= Subject key identifier: 63:B1:3D:9C:52:9F:E5:1A:70:4F:C4:AF:8C:7F:B0:08:4C:3D:B8:D5 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6A5B448DB077C0832AACFD8C2EF030E9CF7BBB89 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135476.roa Signing time: Tue 10 Dec 2024 05:00:11 +0000 ROA not before: Tue 10 Dec 2024 04:55:11 +0000 ROA not after: Tue 09 Dec 2025 05:00:11 +0000 asID: 135476 IP address blocks: 103.75.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5b:44:8d:b0:77:c0:83:2a:ac:fd:8c:2e:f0:30:e9:cf:7b:bb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:11 2024 GMT Not After : Dec 9 05:00:11 2025 GMT Subject: CN=63B13D9C529FE51A704FC4AF8C7FB0084C3DB8D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c6:2a:95:be:cb:9d:b6:e3:7f:32:13:dc:c1: 4b:2d:8c:dc:3a:30:51:2c:ad:03:24:e1:fe:20:b5: d9:c2:65:fb:cc:20:47:35:61:1e:5c:8b:54:4d:fb: b4:26:a9:a6:af:d0:a3:2a:c0:73:6b:6a:9d:a5:10: 13:ab:6c:8f:83:52:1e:ef:fe:1e:fc:8f:10:d2:99: 2e:f9:bf:f3:46:3a:c1:4e:45:e5:a1:22:4b:26:69: 91:a5:49:8e:f2:44:3d:3c:3f:dc:11:1d:19:9a:b4: 85:e2:a1:7d:9b:e8:fc:98:97:d9:9c:cd:85:fb:0a: db:dc:63:a7:83:9d:eb:4e:00:9d:82:5f:8f:18:90: da:e9:75:75:54:e0:a5:a8:ac:70:47:c8:0d:8c:e7: 12:1b:d9:65:aa:f2:37:61:c6:06:d7:6e:cc:f1:2c: 9e:f9:50:4f:29:99:86:2d:df:6b:b1:fa:ed:46:37: 02:04:62:c4:76:d2:6f:f0:02:7d:11:76:b4:40:03: a3:42:03:56:23:c9:98:3d:4a:df:98:fc:b1:4e:59: 8c:eb:5a:4d:0f:f1:d5:fe:f9:dd:d4:26:6a:30:73: 2c:15:d6:62:b4:53:1c:fd:d8:4f:5c:3f:52:94:de: cd:a8:60:e4:31:b3:d5:5f:02:fa:c8:3d:42:92:5b: 45:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B1:3D:9C:52:9F:E5:1A:70:4F:C4:AF:8C:7F:B0:08:4C:3D:B8:D5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135476.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.50.0/24 Signature Algorithm: sha256WithRSAEncryption 16:44:52:04:5d:1e:50:a1:7e:1b:2a:e2:f9:d2:d1:ad:00:30: 83:21:95:64:79:0a:61:5a:ed:a1:17:5b:0c:ba:c8:f3:f6:ab: 2d:4f:91:88:f5:e4:25:6b:dd:e3:d1:86:41:cc:1a:66:eb:8d: 4d:5d:6f:eb:76:c6:61:d9:a0:29:00:42:55:c5:e6:4c:d8:ec: b9:c4:a1:f3:ac:08:c9:e0:55:0f:c1:36:57:07:74:19:4a:bb: e4:e2:a0:a2:61:74:2f:42:84:ba:1e:89:02:7a:83:34:37:50: 3c:ca:c9:35:44:64:67:72:4b:31:ac:12:d3:38:4c:54:37:19: 0c:ad:39:4b:c0:de:56:42:91:ac:78:e0:fa:a0:e6:0c:9d:23: 38:ae:f1:52:10:4c:e5:f3:0a:a1:a2:ef:61:9b:5e:ec:fe:7e: 26:b6:24:b9:20:16:ce:34:9f:48:4a:6f:4f:8b:17:71:68:54: 7d:19:c5:b1:2e:be:01:79:cd:15:6b:b2:f0:d3:c9:47:0e:f3: 99:4b:72:50:ec:db:55:75:7a:79:e1:43:a9:8a:b6:4c:cb:a9: d8:b9:8d:5d:a6:33:66:f1:84:39:fa:4d:83:90:31:c4:42:4a: 28:53:60:84:ae:22:0b:be:65:1a:52:56:2f:fc:82:7d:89:54: 2b:b9:38:93 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUaltEjbB3wIMqrP2MLvAw6c97u4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxMVoX DTI1MTIwOTA1MDAxMVowMzExMC8GA1UEAxMoNjNCMTNEOUM1MjlGRTUxQTcwNEZD NEFGOEM3RkIwMDg0QzNEQjhENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7GKpW+y522438yE9zBSy2M3DowUSytAyTh/iC12cJl+8wgRzVhHlyLVE37 tCappq/QoyrAc2tqnaUQE6tsj4NSHu/+HvyPENKZLvm/80Y6wU5F5aEiSyZpkaVJ jvJEPTw/3BEdGZq0heKhfZvo/JiX2ZzNhfsK29xjp4Od604AnYJfjxiQ2ul1dVTg paiscEfIDYznEhvZZaryN2HGBtduzPEsnvlQTymZhi3fa7H67UY3AgRixHbSb/AC fRF2tEADo0IDViPJmD1K35j8sU5ZjOtaTQ/x1f753dQmajBzLBXWYrRTHP3YT1w/ UpTezahg5DGz1V8C+sg9QpJbRS8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRjsT2c Up/lGnBPxK+Mf7AITD241TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNTQ3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGdLMjANBgkqhkiG9w0BAQsFAAOCAQEAFkRSBF0eUKF+Gyri+dLR rQAwgyGVZHkKYVrtoRdbDLrI8/arLU+RiPXkJWvd49GGQcwaZuuNTV1v63bGYdmg KQBCVcXmTNjsucSh86wIyeBVD8E2Vwd0GUq75OKgomF0L0KEuh6JAnqDNDdQPMrJ NURkZ3JLMawS0zhMVDcZDK05S8DeVkKRrHjg+qDmDJ0jOK7xUhBM5fMKoaLvYZte 7P5+JrYkuSAWzjSfSEpvT4sXcWhUfRnFsS6+AXnNFWuy8NPJRw7zmUtyUOzbVXV6 eeFDqYq2TMup2LmNXaYzZvGEOfpNg5AxxEJKKFNghK4iC75lGlJWL/yCfYlUK7k4 kw== -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:29 2025 by rpki-client