$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136100.roa File: AS136100.roa (raw, json) Hash identifier: mw15FgZWoFmdq96J4wf8AhMzXEBSSEQsIxIG0EiHiv0= Subject key identifier: 31:F4:07:60:C1:ED:26:F2:D8:96:8A:F2:0F:6F:72:99:5A:14:34:A3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2B4220AB5144DB7E23F8046D160D45A968663AF6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136100.roa Signing time: Tue 09 Jan 2024 04:00:28 +0000 ROA not before: Tue 09 Jan 2024 03:55:28 +0000 ROA not after: Tue 07 Jan 2025 04:00:28 +0000 asID: 136100 IP address blocks: 103.89.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:42:20:ab:51:44:db:7e:23:f8:04:6d:16:0d:45:a9:68:66:3a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:28 2024 GMT Not After : Jan 7 04:00:28 2025 GMT Subject: CN=31F40760C1ED26F2D8968AF20F6F72995A1434A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:6b:5a:cf:f0:dc:25:a7:81:c2:6a:09:fa: c5:0e:87:ad:92:9c:83:12:83:98:95:87:06:a2:26: fc:ad:23:11:74:3d:1c:df:8a:8e:8a:75:d2:75:77: c1:6b:ed:0d:50:85:fe:b8:eb:69:a4:7a:e0:fe:d2: 19:ee:43:7d:9b:a8:47:65:49:db:f4:53:fb:2c:e2: 2b:f5:dd:79:73:ba:fe:7d:6c:fe:58:71:7b:b9:c8: 16:00:4e:9c:93:e0:96:03:56:05:73:41:b7:07:88: 1f:9b:a0:40:72:e2:3a:9c:c0:5b:83:d0:cf:47:9f: 88:6b:63:2d:59:0a:1d:b3:5d:c6:c0:a8:e1:1a:d0: a1:01:82:ff:6e:9d:fd:f7:a6:54:4b:ea:14:de:2a: 2e:6e:84:04:e3:0b:d8:ac:95:13:14:e8:78:8e:b9: 74:ad:01:f1:09:12:d7:d2:4d:1e:91:26:2b:a0:8c: f6:52:51:1e:69:94:f8:a1:2a:aa:1b:92:74:f1:c6: 6f:8d:c9:3e:1d:53:de:94:0f:49:fd:5f:08:11:f3: 3f:7a:ed:c0:77:3f:08:05:c6:91:84:fb:f1:28:56: b7:18:79:41:cd:b3:51:92:a8:44:64:b6:89:bf:01: 23:97:86:ea:4b:ea:cf:40:52:b5:e2:94:6c:99:0a: 40:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F4:07:60:C1:ED:26:F2:D8:96:8A:F2:0F:6F:72:99:5A:14:34:A3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136100.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.160.0/22 Signature Algorithm: sha256WithRSAEncryption 57:4f:3a:02:50:a2:03:a0:b1:3d:69:05:07:57:49:67:b9:03: ac:e6:f3:2c:1a:79:78:b8:68:0f:54:82:a0:39:8c:c4:82:4f: 33:cc:2a:07:e9:25:3b:63:d3:29:62:e7:ea:35:92:88:b1:62: 22:37:ad:55:23:dc:d8:c0:3c:1c:e2:ae:6d:da:a9:96:82:41: ed:df:d4:28:15:94:62:59:b2:4a:df:59:ee:19:7a:f9:eb:0d: 2a:44:18:4a:9b:b6:81:4b:fa:10:b9:88:aa:8a:d7:a5:55:32: 8c:63:19:8b:36:a4:e5:9c:ae:6f:fb:54:39:9c:55:fb:ae:ea: b9:9d:f1:b2:83:72:7b:17:42:fb:63:80:89:1c:9c:44:0e:4c: 43:2e:b7:7f:a1:66:7d:f3:96:c3:bc:09:40:7c:ec:18:05:53: e0:c1:a3:35:63:c7:f7:d8:96:64:2c:81:7f:2d:da:b8:a1:6c: d6:1e:f1:28:db:64:f1:0e:f1:01:c6:f3:9d:6a:19:90:d3:4c: d5:c6:18:e7:5f:38:2c:2c:2c:a5:83:6d:b0:f4:b5:98:82:43: 66:dc:70:6a:25:b6:2b:09:50:74:c8:10:50:2e:2a:86:12:fa: dc:b9:f6:4b:88:d9:cf:0a:ea:a6:30:c2:21:2a:45:94:6b:cc: 49:7b:6d:b7 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUK0Igq1FE234j+ARtFg1FqWhmOvYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyOFoX DTI1MDEwNzA0MDAyOFowMzExMC8GA1UEAxMoMzFGNDA3NjBDMUVEMjZGMkQ4OTY4 QUYyMEY2RjcyOTk1QTE0MzRBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALp3a1rP8Nwlp4HCagn6xQ6HrZKcgxKDmJWHBqIm/K0jEXQ9HN+Kjop10nV3 wWvtDVCF/rjraaR64P7SGe5DfZuoR2VJ2/RT+yziK/XdeXO6/n1s/lhxe7nIFgBO nJPglgNWBXNBtweIH5ugQHLiOpzAW4PQz0efiGtjLVkKHbNdxsCo4RrQoQGC/26d /femVEvqFN4qLm6EBOML2KyVExToeI65dK0B8QkS19JNHpEmK6CM9lJRHmmU+KEq qhuSdPHGb43JPh1T3pQPSf1fCBHzP3rtwHc/CAXGkYT78ShWtxh5Qc2zUZKoRGS2 ib8BI5eG6kvqz0BSteKUbJkKQK8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQx9Adg we0m8tiWivIPb3KZWhQ0ozAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjEwMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdZoDANBgkqhkiG9w0BAQsFAAOCAQEAV086AlCiA6CxPWkFB1dJ Z7kDrObzLBp5eLhoD1SCoDmMxIJPM8wqB+klO2PTKWLn6jWSiLFiIjetVSPc2MA8 HOKubdqploJB7d/UKBWUYlmySt9Z7hl6+esNKkQYSpu2gUv6ELmIqorXpVUyjGMZ izak5Zyub/tUOZxV+67quZ3xsoNyexdC+2OAiRycRA5MQy63f6FmffOWw7wJQHzs GAVT4MGjNWPH99iWZCyBfy3auKFs1h7xKNtk8Q7xAcbznWoZkNNM1cYY5184LCws pYNtsPS1mIJDZtxwaiW2KwlQdMgQUC4qhhL63Ln2S4jZzwrqpjDCISpFlGvMSXtt tw== -----END CERTIFICATE-----Generated at Thu May 2 17:40:05 2024 by rpki-client on console-fra.rpki-client.org