$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136824.roa File: AS136824.roa (raw, json) Hash identifier: +5PiBo8vrARImWt7ckrZ1duwwx3ZsH4d3NomfkXXiQ4= Subject key identifier: B6:6A:16:20:DC:5B:56:BB:7E:4E:A4:5C:6A:8E:DE:1E:50:A9:77:1E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0DC8B045C4A9671151C12EDA8FD12BE96ACFC30B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136824.roa Signing time: Fri 25 Aug 2023 04:15:03 +0000 ROA not before: Fri 25 Aug 2023 04:10:03 +0000 ROA not after: Fri 23 Aug 2024 04:15:03 +0000 asID: 136824 IP address blocks: 103.52.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c8:b0:45:c4:a9:67:11:51:c1:2e:da:8f:d1:2b:e9:6a:cf:c3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 25 04:10:03 2023 GMT Not After : Aug 23 04:15:03 2024 GMT Subject: CN=B66A1620DC5B56BB7E4EA45C6A8EDE1E50A9771E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:41:0e:05:bb:c6:28:a0:64:a3:ed:8e:4a: 1a:84:db:f9:c2:47:fc:85:ed:d4:1e:0a:b0:5c:ec: 10:90:c0:e5:7f:14:11:04:f9:af:3d:e4:55:8b:ed: e5:d5:31:f3:75:9d:da:a0:ff:39:fa:62:e4:c9:de: e1:02:8c:99:2c:c7:23:9e:9d:60:eb:70:41:08:f0: 18:9f:9e:78:af:a0:a0:26:8d:5f:f3:32:ab:ee:a9: 47:07:cf:a6:81:6d:91:b3:2a:d9:ca:9d:68:a7:a5: a8:31:e9:89:e0:bf:2d:50:d2:8d:b9:d5:a2:c1:81: 70:7a:a0:70:ad:1f:56:3c:76:ec:ea:4b:a6:cb:a6: 81:45:3c:4a:90:a0:22:e8:f3:1d:8d:e9:d4:0f:1f: e3:05:bf:fa:0c:2f:fe:5c:20:a1:9f:9e:b9:39:0c: a0:db:7d:53:16:e5:c3:f1:45:45:35:57:ad:32:be: b1:c1:e9:8c:e6:58:d0:c9:8e:95:13:fa:49:35:48: fc:2f:ca:1e:5d:5b:82:29:8d:1d:e8:30:c0:1c:ca: 8e:8e:26:cb:c3:52:f6:d5:52:22:e3:80:89:fc:dc: 3b:1c:c2:18:ff:e3:cd:dd:56:6d:a5:58:be:06:37: ff:14:b9:23:14:91:75:0c:88:d7:6d:0f:cb:8a:b2: 93:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6A:16:20:DC:5B:56:BB:7E:4E:A4:5C:6A:8E:DE:1E:50:A9:77:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136824.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.212.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:2c:3c:4e:e7:a9:8b:dd:1c:4f:a3:83:07:5c:1d:8e:69:1f: cc:33:9f:a3:8b:3e:36:b4:42:14:f4:a9:81:05:24:9f:b0:b3: ce:18:f3:75:18:4b:98:85:27:72:5b:8b:9e:ee:16:e4:b0:f3: 08:c5:27:4a:3e:3d:2d:2b:01:c9:e3:f5:40:be:7e:7d:9d:05: a1:0e:2e:46:3d:a6:3f:af:7e:2a:d5:e1:2c:5b:e5:02:ab:6d: 4a:3b:80:bc:74:f4:ea:5c:d8:9a:52:48:b1:3b:39:0f:e2:a8: 2f:df:aa:a7:ee:4e:21:b9:de:3c:df:d3:63:eb:1b:6a:89:73: 71:df:e6:88:54:32:b4:08:e7:b6:f0:d0:91:28:9d:df:05:1b: c2:ad:88:eb:d6:8c:17:59:dc:be:87:c4:a3:04:3b:91:dc:f0: eb:4c:9b:6d:d0:bf:1d:08:9e:cc:f9:24:7e:48:c4:7a:e9:3b: f0:9d:fc:8d:f1:e0:f8:cd:91:0f:49:bd:43:7e:9a:62:cb:ed: 88:a5:5f:4e:c2:b4:85:86:97:87:74:92:26:72:47:3c:10:c5: 9e:67:ca:19:69:30:c6:ce:7c:01:1e:0a:c7:7c:b8:59:38:67: 93:2e:2f:01:e5:5a:26:6e:b0:c1:6d:83:6f:97:7d:27:31:b0: 1e:d5:7d:ab -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUDciwRcSpZxFRwS7aj9Er6WrPwwswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyNTA0MTAwM1oX DTI0MDgyMzA0MTUwM1owMzExMC8GA1UEAxMoQjY2QTE2MjBEQzVCNTZCQjdFNEVB NDVDNkE4RURFMUU1MEE5NzcxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBKQQ4Fu8YooGSj7Y5KGoTb+cJH/IXt1B4KsFzsEJDA5X8UEQT5rz3kVYvt 5dUx83Wd2qD/Ofpi5Mne4QKMmSzHI56dYOtwQQjwGJ+eeK+goCaNX/Myq+6pRwfP poFtkbMq2cqdaKelqDHpieC/LVDSjbnVosGBcHqgcK0fVjx27OpLpsumgUU8SpCg IujzHY3p1A8f4wW/+gwv/lwgoZ+euTkMoNt9Uxblw/FFRTVXrTK+scHpjOZY0MmO lRP6STVI/C/KHl1bgimNHegwwBzKjo4my8NS9tVSIuOAifzcOxzCGP/jzd1WbaVY vgY3/xS5IxSRdQyI120Py4qyk9cCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS2ahYg 3FtWu35OpFxqjt4eUKl3HjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjgyNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGc01DANBgkqhkiG9w0BAQsFAAOCAQEASiw8Tuepi90cT6ODB1wd jmkfzDOfo4s+NrRCFPSpgQUkn7CzzhjzdRhLmIUncluLnu4W5LDzCMUnSj49LSsB yeP1QL5+fZ0FoQ4uRj2mP69+KtXhLFvlAqttSjuAvHT06lzYmlJIsTs5D+KoL9+q p+5OIbnePN/TY+sbaolzcd/miFQytAjntvDQkSid3wUbwq2I69aMF1ncvofEowQ7 kdzw60ybbdC/HQiezPkkfkjEeuk78J38jfHg+M2RD0m9Q36aYsvtiKVfTsK0hYaX h3SSJnJHPBDFnmfKGWkwxs58AR4Kx3y4WThnky4vAeVaJm6wwW2Db5d9JzGwHtV9 qw== -----END CERTIFICATE-----Generated at Wed May 8 15:17:41 2024 by rpki-client on console-fra.rpki-client.org