$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136103.roa File: AS136103.roa (raw, json) Hash identifier: YyFL/Q/uESwMAYSKXjCiTdNyNMEvQabVtj3/u6tsqKI= Subject key identifier: 22:C6:02:DE:70:B6:E1:6A:44:D3:9B:C8:59:10:14:A2:AF:03:97:EC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1594DF33B31BE9472174D26B79DD6220DEEBC7FC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136103.roa Signing time: Tue 09 Jan 2024 04:00:08 +0000 ROA not before: Tue 09 Jan 2024 03:55:08 +0000 ROA not after: Tue 07 Jan 2025 04:00:08 +0000 asID: 136103 IP address blocks: 103.90.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 05:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:94:df:33:b3:1b:e9:47:21:74:d2:6b:79:dd:62:20:de:eb:c7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:08 2024 GMT Not After : Jan 7 04:00:08 2025 GMT Subject: CN=22C602DE70B6E16A44D39BC8591014A2AF0397EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:fa:1f:6a:fe:a0:cf:ce:3c:be:0c:d6:9c: 81:67:da:4f:cb:58:0a:b6:d2:cb:6b:a2:d4:ca:36: fe:cd:f7:7d:3a:74:23:cf:ff:81:d8:66:99:11:b0: 4b:83:10:57:dd:29:c3:63:8c:71:90:f1:44:7e:f3: 43:99:e2:57:1d:c7:1e:d8:c8:6b:82:48:93:60:8e: 73:17:af:82:8c:52:b7:fa:04:b9:e2:51:af:00:24: c0:e7:77:ee:5e:70:56:c9:5e:01:30:31:c7:8a:51: f2:98:63:8e:3a:17:e9:a6:5c:38:1a:7e:2d:e4:b7: 51:7d:5b:d5:c2:61:4a:57:1b:79:79:3f:ca:2c:72: 3f:c7:ac:e6:e9:56:b9:86:d0:db:3b:fb:fb:98:8c: 58:45:cf:f5:04:7e:f7:99:79:ee:65:9b:d6:96:14: 5f:c2:75:d3:21:73:2c:71:56:a7:b9:42:5d:12:75: 81:e6:a9:6d:c9:a6:82:bc:94:c0:ba:fa:57:0a:ae: 99:50:46:50:d6:d1:ec:18:c0:0e:1f:82:c7:07:d9: 1e:8d:71:f8:4d:47:2f:7f:bb:98:8f:3a:ce:1a:26: 97:67:b4:a5:f0:09:43:ed:e6:29:61:fb:1f:26:82: b4:9d:80:72:2e:60:f5:cc:29:5a:47:af:ef:ff:75: 07:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C6:02:DE:70:B6:E1:6A:44:D3:9B:C8:59:10:14:A2:AF:03:97:EC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136103.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.210.0/24 Signature Algorithm: sha256WithRSAEncryption 45:2f:39:c5:9b:24:11:8d:49:cd:b9:fa:43:37:4d:09:d3:5d: d2:c7:b6:86:7a:52:6c:75:6b:41:9b:1d:c8:63:32:df:5f:2e: 6b:1e:d2:e4:63:bb:d6:56:64:a4:0d:9e:b7:55:cf:cc:39:88: 69:ad:7e:17:7d:02:dd:4f:e0:69:50:c8:c8:cb:82:02:dc:a2: cf:75:28:1d:5c:f0:8c:1b:12:23:1a:3c:d5:0f:ae:5f:8b:aa: 54:b8:00:e7:e4:ab:cd:d1:d8:e0:9b:88:b8:a5:b4:ac:61:36: 20:d4:8a:f7:36:3c:6d:c6:ae:49:f6:4e:a6:72:57:af:95:dd: ed:65:e9:53:3b:aa:5d:81:58:ba:a0:19:11:ae:93:92:dd:15: b7:f9:19:72:6d:a9:66:c1:0b:4a:ad:e5:fa:f1:dd:08:48:41: da:90:29:b0:03:dd:43:c2:74:61:6a:ae:f7:b3:12:85:d8:e3: 49:ee:27:43:17:ca:93:22:66:72:0e:d3:2c:f1:77:76:89:5b: a4:2c:f4:09:54:a7:81:31:3b:98:e0:83:1c:bd:d6:6a:f8:53: 1a:8a:b3:4b:80:12:42:95:74:1c:23:aa:5a:d9:ef:81:99:1f: 1a:1e:1c:55:32:d6:e6:3f:84:c3:b7:66:55:66:8b:6d:a1:54: 67:af:17:08 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUFZTfM7Mb6UchdNJred1iIN7rx/wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwOFoX DTI1MDEwNzA0MDAwOFowMzExMC8GA1UEAxMoMjJDNjAyREU3MEI2RTE2QTQ0RDM5 QkM4NTkxMDE0QTJBRjAzOTdFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6E+h9q/qDPzjy+DNacgWfaT8tYCrbSy2ui1Mo2/s33fTp0I8//gdhmmRGw S4MQV90pw2OMcZDxRH7zQ5niVx3HHtjIa4JIk2COcxevgoxSt/oEueJRrwAkwOd3 7l5wVsleATAxx4pR8phjjjoX6aZcOBp+LeS3UX1b1cJhSlcbeXk/yixyP8es5ulW uYbQ2zv7+5iMWEXP9QR+95l57mWb1pYUX8J10yFzLHFWp7lCXRJ1geapbcmmgryU wLr6VwqumVBGUNbR7BjADh+CxwfZHo1x+E1HL3+7mI86zhoml2e0pfAJQ+3mKWH7 HyaCtJ2Aci5g9cwpWkev7/91B8UCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQixgLe cLbhakTTm8hZEBSirwOX7DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjEwMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGda0jANBgkqhkiG9w0BAQsFAAOCAQEARS85xZskEY1Jzbn6QzdN CdNd0se2hnpSbHVrQZsdyGMy318uax7S5GO71lZkpA2et1XPzDmIaa1+F30C3U/g aVDIyMuCAtyiz3UoHVzwjBsSIxo81Q+uX4uqVLgA5+SrzdHY4JuIuKW0rGE2INSK 9zY8bcauSfZOpnJXr5Xd7WXpUzuqXYFYuqAZEa6Tkt0Vt/kZcm2pZsELSq3l+vHd CEhB2pApsAPdQ8J0YWqu97MShdjjSe4nQxfKkyJmcg7TLPF3dolbpCz0CVSngTE7 mOCDHL3WavhTGoqzS4ASQpV0HCOqWtnvgZkfGh4cVTLW5j+Ew7dmVWaLbaFUZ68X CA== -----END CERTIFICATE-----Generated at Thu May 2 23:01:59 2024 by rpki-client on console-fra.rpki-client.org