$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136825.roa File: AS136825.roa (raw, json) Hash identifier: uvK21dRm32uYuExQwxk+2pZvrzkocgBwrl0FZtPjUtc= Subject key identifier: AF:BF:19:F2:80:00:54:A9:3B:15:61:F6:70:52:B8:85:5F:DD:8B:2E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 07AB9F6098B403C0EF50C2F7F6481CFA238F86CE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136825.roa Signing time: Tue 09 Jan 2024 04:00:11 +0000 ROA not before: Tue 09 Jan 2024 03:55:11 +0000 ROA not after: Tue 07 Jan 2025 04:00:11 +0000 asID: 136825 IP address blocks: 103.91.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ab:9f:60:98:b4:03:c0:ef:50:c2:f7:f6:48:1c:fa:23:8f:86:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:11 2024 GMT Not After : Jan 7 04:00:11 2025 GMT Subject: CN=AFBF19F2800054A93B1561F67052B8855FDD8B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:69:9a:f9:e6:4e:36:e7:b7:8d:7e:ba:e9: b7:ad:e2:51:9d:55:43:8f:aa:5f:a1:d8:16:01:eb: 1a:77:29:ea:ee:6c:4d:3a:f4:9a:44:8a:b2:56:50: 9f:08:d0:b3:50:65:85:05:10:17:20:65:f0:bf:21: 47:26:aa:7a:97:38:af:2c:e8:63:cf:32:8c:4d:14: 83:de:55:f5:05:74:ba:34:7b:3c:4c:8e:e0:59:7f: 93:0d:82:43:d1:9b:a3:3b:58:d2:88:d9:fb:6b:26: 25:f8:c9:31:2a:0a:17:fd:ba:6f:6b:b0:6a:bb:d1: 4a:89:8a:59:b9:85:9a:94:a9:af:7b:91:d0:8e:f5: 55:5a:37:21:9d:42:7a:70:27:14:13:57:29:26:ff: 72:35:37:14:22:c1:be:3f:f1:84:b9:b0:93:ba:87: c7:19:9c:36:f4:2e:37:e4:d2:1f:53:ee:58:fb:3d: b5:50:49:a9:95:35:71:d8:8d:b0:bc:b0:7f:c6:b5: c5:e4:45:11:13:c1:06:35:97:cb:e9:0e:07:bc:70: 52:e7:5a:0f:2c:75:90:a9:75:6e:36:61:84:69:1e: 1d:99:2a:fa:c7:ad:36:8d:36:06:d5:f6:a7:00:b0: 28:14:28:8e:22:29:f0:64:2d:d3:cd:d8:c0:c2:a8: 04:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BF:19:F2:80:00:54:A9:3B:15:61:F6:70:52:B8:85:5F:DD:8B:2E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136825.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.24.0/22 Signature Algorithm: sha256WithRSAEncryption 98:5f:14:b7:72:8d:b8:8c:0b:51:d1:44:85:78:51:8d:9f:f6: 05:1a:9c:6f:b4:4a:59:41:8f:b1:ba:0a:3f:a8:db:4a:b1:13: 17:89:db:5f:fe:a0:35:e6:dd:d6:f5:45:5d:e3:e9:a0:a5:fc: 7c:00:78:9e:b7:a6:4d:bb:60:a8:e2:2a:26:63:15:9b:6f:d3: 93:f7:4d:40:70:e9:54:ea:3c:92:f6:57:06:b6:eb:d8:ed:5d: 8b:1a:a7:00:d1:c5:fa:78:76:ae:d3:0d:ec:65:c5:85:cd:41: 30:85:30:fd:b2:67:4a:ef:91:ef:c6:90:4c:97:e7:9b:88:40: 70:46:96:d0:47:0e:ff:78:44:0b:06:97:dc:90:d9:ac:b2:4b: 05:b0:ba:f6:bf:11:25:77:e0:82:b2:fc:d0:ac:7b:43:19:68: e2:4c:7d:51:19:ba:d3:17:b4:21:2c:02:96:cb:f4:87:48:97: 10:24:43:8d:8a:57:ed:d2:3d:f9:f0:03:f2:0c:41:96:54:a2: 56:8b:35:52:b6:1e:3a:55:f2:33:1f:b9:3c:d9:f4:c9:17:4c: ff:4e:06:6c:9f:47:a1:42:d6:83:eb:4c:f7:7d:79:21:e8:2c: 78:71:2f:44:d8:81:db:e8:a5:40:97:2d:e8:14:00:aa:3f:83: 9c:0a:88:d2 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUB6ufYJi0A8DvUML39kgc+iOPhs4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxMVoX DTI1MDEwNzA0MDAxMVowMzExMC8GA1UEAxMoQUZCRjE5RjI4MDAwNTRBOTNCMTU2 MUY2NzA1MkI4ODU1RkREOEIyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlpaZr55k4257eNfrrpt63iUZ1VQ4+qX6HYFgHrGncp6u5sTTr0mkSKslZQ nwjQs1BlhQUQFyBl8L8hRyaqepc4ryzoY88yjE0Ug95V9QV0ujR7PEyO4Fl/kw2C Q9GboztY0ojZ+2smJfjJMSoKF/26b2uwarvRSomKWbmFmpSpr3uR0I71VVo3IZ1C enAnFBNXKSb/cjU3FCLBvj/xhLmwk7qHxxmcNvQuN+TSH1PuWPs9tVBJqZU1cdiN sLywf8a1xeRFERPBBjWXy+kOB7xwUudaDyx1kKl1bjZhhGkeHZkq+setNo02BtX2 pwCwKBQojiIp8GQt083YwMKoBF0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSvvxny gABUqTsVYfZwUriFX92LLjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjgyNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdbGDANBgkqhkiG9w0BAQsFAAOCAQEAmF8Ut3KNuIwLUdFEhXhR jZ/2BRqcb7RKWUGPsboKP6jbSrETF4nbX/6gNebd1vVFXePpoKX8fAB4nremTbtg qOIqJmMVm2/Tk/dNQHDpVOo8kvZXBrbr2O1dixqnANHF+nh2rtMN7GXFhc1BMIUw /bJnSu+R78aQTJfnm4hAcEaW0EcO/3hECwaX3JDZrLJLBbC69r8RJXfggrL80Kx7 Qxlo4kx9URm60xe0ISwClsv0h0iXECRDjYpX7dI9+fAD8gxBllSiVos1UrYeOlXy Mx+5PNn0yRdM/04GbJ9HoULWg+tM9315IegseHEvRNiB2+ilQJct6BQAqj+DnAqI 0g== -----END CERTIFICATE-----Generated at Sun May 5 09:49:41 2024 by rpki-client on console-fra.rpki-client.org