$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136824.roa File: AS136824.roa (raw, json) Hash identifier: 1EgOYalSDzTQW9zO98mUZWci2W2LjHp899tSe/r+XJg= Subject key identifier: 34:E6:23:10:54:CB:D4:A3:C5:57:06:55:14:5A:EF:34:21:40:51:A5 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2F7A11206F618E62287AD91356734F4537B45F81 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136824.roa Signing time: Fri 26 Jul 2024 05:00:00 +0000 ROA not before: Fri 26 Jul 2024 04:55:00 +0000 ROA not after: Fri 25 Jul 2025 05:00:00 +0000 asID: 136824 IP address blocks: 103.52.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7a:11:20:6f:61:8e:62:28:7a:d9:13:56:73:4f:45:37:b4:5f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 26 04:55:00 2024 GMT Not After : Jul 25 05:00:00 2025 GMT Subject: CN=34E6231054CBD4A3C5570655145AEF34214051A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:d2:f8:0b:d9:f9:71:f7:ef:ab:90:b6:d8: f0:71:b5:7c:d9:b6:ad:b2:5e:39:f5:b9:7b:8e:17: 56:24:79:c7:3f:aa:9f:74:b3:93:8a:e9:8d:ef:75: ef:72:19:1b:a3:d7:a9:21:2f:54:c2:8c:f1:72:63: ca:e4:d3:4e:1f:f4:55:c6:36:4d:52:f8:8a:06:33: 7a:67:66:00:50:0e:c9:10:f6:59:a3:11:ef:22:32: e2:1b:8e:68:cb:a6:59:03:1a:dc:27:f7:f0:25:fe: 78:30:30:bd:48:0a:9a:67:d0:d2:56:d7:83:3a:0d: 5a:0f:24:d8:ee:bf:c5:7c:44:79:58:10:57:e6:9c: cc:46:00:30:af:67:6f:67:09:69:6e:80:a8:86:60: 97:11:78:80:5f:c8:88:87:36:75:1d:f3:0f:ef:6b: 46:46:ac:fc:43:e1:a4:0a:7e:ea:5c:92:ab:b0:40: 3e:d2:42:c6:58:e1:7a:57:65:3b:9d:6b:1d:c4:05: 8f:3a:95:b6:18:ee:16:3e:4b:83:bf:3d:48:54:9f: 1c:a1:54:2f:0f:2c:2e:76:cf:03:09:44:f2:42:35: 0e:14:13:a6:a7:ad:a5:95:7f:ce:40:c8:32:b7:22: 9f:92:58:cb:de:5a:27:9a:34:8e:9c:d1:1b:ab:0a: b8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E6:23:10:54:CB:D4:A3:C5:57:06:55:14:5A:EF:34:21:40:51:A5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136824.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.212.0/24 Signature Algorithm: sha256WithRSAEncryption 22:2f:76:3d:51:0e:74:a4:8e:1f:30:ec:2e:01:b0:07:eb:d0: cf:e6:fe:c2:2a:a0:f5:a3:65:e6:b8:5c:c3:90:58:a6:3f:4d: 54:66:40:11:57:ac:c5:1d:24:3c:e0:44:02:db:b9:27:06:04: a2:75:f5:c2:0c:ce:41:83:7e:2c:f8:ba:d1:28:76:50:1e:63: 55:d8:88:ca:dd:7b:70:f1:f6:36:b5:00:e4:70:dd:5d:06:a8: 58:ee:40:c1:2d:a7:27:d0:e0:6c:52:e9:2d:64:eb:b9:4d:53: 19:8f:74:62:3a:9a:8c:01:a1:72:ef:7c:a1:fa:0c:33:aa:06: 0c:be:90:3e:bf:da:f0:ff:73:ad:e6:21:e1:1d:89:b0:c2:40: 94:9b:65:cf:bf:30:08:0b:19:a3:24:eb:8a:3b:e0:92:d1:a4: 50:8e:c1:64:63:01:60:3b:57:92:02:be:b7:9e:b7:13:27:91: cf:ae:be:ef:c3:a7:70:04:c5:6e:26:35:43:8f:08:16:5e:22: b6:2e:ff:bf:24:71:61:b9:2e:6b:36:d9:ab:df:a3:fa:48:61: bf:41:8d:77:4c:ff:e4:ed:c3:df:9e:70:1c:a7:dc:ae:a2:69: 0e:d9:31:03:1c:a9:a4:ed:e7:cb:c3:6f:1b:ae:68:be:3d:ff: 3e:79:69:58 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUL3oRIG9hjmIoetkTVnNPRTe0X4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyNjA0NTUwMFoX DTI1MDcyNTA1MDAwMFowMzExMC8GA1UEAxMoMzRFNjIzMTA1NENCRDRBM0M1NTcw NjU1MTQ1QUVGMzQyMTQwNTFBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMc30vgL2flx9++rkLbY8HG1fNm2rbJeOfW5e44XViR5xz+qn3Szk4rpje91 73IZG6PXqSEvVMKM8XJjyuTTTh/0VcY2TVL4igYzemdmAFAOyRD2WaMR7yIy4huO aMumWQMa3Cf38CX+eDAwvUgKmmfQ0lbXgzoNWg8k2O6/xXxEeVgQV+aczEYAMK9n b2cJaW6AqIZglxF4gF/IiIc2dR3zD+9rRkas/EPhpAp+6lySq7BAPtJCxljheldl O51rHcQFjzqVthjuFj5Lg789SFSfHKFULw8sLnbPAwlE8kI1DhQTpqetpZV/zkDI Mrcin5JYy95aJ5o0jpzRG6sKuP8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ05iMQ VMvUo8VXBlUUWu80IUBRpTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjgyNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGc01DANBgkqhkiG9w0BAQsFAAOCAQEAIi92PVEOdKSOHzDsLgGw B+vQz+b+wiqg9aNl5rhcw5BYpj9NVGZAEVesxR0kPOBEAtu5JwYEonX1wgzOQYN+ LPi60Sh2UB5jVdiIyt17cPH2NrUA5HDdXQaoWO5AwS2nJ9DgbFLpLWTruU1TGY90 YjqajAGhcu98ofoMM6oGDL6QPr/a8P9zreYh4R2JsMJAlJtlz78wCAsZoyTrijvg ktGkUI7BZGMBYDtXkgK+t563EyeRz66+78OncATFbiY1Q48IFl4iti7/vyRxYbku azbZq9+j+khhv0GNd0z/5O3D355wHKfcrqJpDtkxAxyppO3ny8NvG65ovj3/Pnlp WA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:23 2024 by rpki-client on console-fra.rpki-client.org