$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136844.roa File: AS136844.roa (raw, json) Hash identifier: cX5bmvCWsGy7MrRUfXDb5xGIwylafY03YEDRdGXBcuI= Subject key identifier: 6B:9A:7F:30:C7:F4:FD:68:81:91:5A:91:CF:BA:E9:83:97:71:A9:97 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 69C934FF5CE89BAE6C92AC3F023B84496711CD59 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136844.roa Signing time: Tue 12 Dec 2023 02:09:19 +0000 ROA not before: Tue 12 Dec 2023 02:04:19 +0000 ROA not after: Tue 10 Dec 2024 02:09:19 +0000 asID: 136844 IP address blocks: 103.100.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c9:34:ff:5c:e8:9b:ae:6c:92:ac:3f:02:3b:84:49:67:11:cd:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 12 02:04:19 2023 GMT Not After : Dec 10 02:09:19 2024 GMT Subject: CN=6B9A7F30C7F4FD6881915A91CFBAE9839771A997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1c:5e:ea:2b:e1:d5:cd:bd:f1:bc:03:28:19: 81:c4:ee:6d:9d:c0:63:29:c7:2f:8b:15:12:20:e7: 72:b4:0d:8c:2e:23:12:1d:df:52:b4:1c:70:35:d1: 04:0c:d1:2b:69:57:41:97:9b:5c:44:ad:11:cd:b8: 8c:5e:7e:1e:3b:56:48:5a:3f:4e:07:fc:6e:32:6b: 4c:0a:ff:c7:e4:1b:f1:8e:cd:19:38:fc:e6:d4:7c: af:e8:b4:e2:c5:56:09:ed:e2:bf:69:3a:cd:5a:10: 91:63:13:8f:a4:dc:59:6e:a0:df:8a:25:7f:27:78: 34:64:08:0e:56:dd:c3:c0:d0:a4:03:cd:cc:1b:c5: 3c:76:f7:69:c6:b2:bb:e7:84:53:f6:5c:cd:ec:20: b5:ee:40:8c:04:29:16:72:d6:2c:97:2f:42:cc:42: 1c:c6:d0:a0:25:86:33:e3:ae:ae:cc:ef:9e:24:d0: 08:c8:ac:f4:bc:04:c9:38:3c:a3:75:ea:b8:26:50: 2e:02:1a:09:6c:96:58:cd:5c:b7:64:09:3d:3c:d6: d7:d1:26:ab:44:77:02:44:b6:73:20:44:f4:46:45: cb:fb:7c:62:e3:7e:81:88:ac:d6:ef:f1:38:21:3a: 64:f3:7b:df:4c:93:d1:50:16:75:c6:a4:c0:02:72: aa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9A:7F:30:C7:F4:FD:68:81:91:5A:91:CF:BA:E9:83:97:71:A9:97 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136844.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.193.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:10:bb:55:1a:d5:94:f9:f6:a9:1b:37:19:05:2d:d1:e3:5e: 2c:a9:b6:8e:d9:d0:a4:b5:7c:e7:99:ae:ed:2c:e0:02:e7:8b: ea:d3:69:08:f0:2f:2d:01:b5:c1:51:7e:c4:ba:95:ae:95:1e: b9:10:28:41:b7:b3:25:43:9e:8c:21:72:d2:93:eb:64:da:ac: d1:c7:17:61:32:ac:1e:16:d8:08:20:10:79:06:41:7d:bb:91: 98:c1:30:82:7c:fb:f8:74:8b:7e:02:19:8e:78:76:c9:2a:68: 31:3e:72:d4:c3:d6:9e:ef:9f:a2:f1:bc:be:3c:24:83:d6:e4: 51:c7:f0:dd:2f:60:3f:16:85:0d:29:fb:a6:63:a3:bd:94:8b: 7d:f1:42:21:9e:57:4b:b6:dd:13:7e:12:20:f6:aa:09:55:9e: b0:2b:e0:d6:1f:eb:b2:9a:20:62:98:f1:68:48:e9:a0:6a:a2: 32:33:a8:f7:c5:d5:02:42:78:10:5d:7a:c6:df:4c:37:12:cd: 5a:c6:f5:df:d5:08:bd:4b:18:a1:d5:02:c1:08:d1:4f:ea:5e: 8a:39:05:bc:e2:c0:eb:39:7c:fa:2e:d8:f9:8c:f4:b2:27:98: 0e:85:74:b1:ab:fe:d7:89:a3:3a:d2:f4:95:cf:0f:4f:dc:8f: 98:50:58:cd -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUack0/1zom65skqw/AjuESWcRzVkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIxMjAyMDQxOVoX DTI0MTIxMDAyMDkxOVowMzExMC8GA1UEAxMoNkI5QTdGMzBDN0Y0RkQ2ODgxOTE1 QTkxQ0ZCQUU5ODM5NzcxQTk5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkcXuor4dXNvfG8AygZgcTubZ3AYynHL4sVEiDncrQNjC4jEh3fUrQccDXR BAzRK2lXQZebXEStEc24jF5+HjtWSFo/Tgf8bjJrTAr/x+Qb8Y7NGTj85tR8r+i0 4sVWCe3iv2k6zVoQkWMTj6TcWW6g34olfyd4NGQIDlbdw8DQpAPNzBvFPHb3acay u+eEU/Zczewgte5AjAQpFnLWLJcvQsxCHMbQoCWGM+OurszvniTQCMis9LwEyTg8 o3XquCZQLgIaCWyWWM1ct2QJPTzW19Emq0R3AkS2cyBE9EZFy/t8YuN+gYis1u/x OCE6ZPN730yT0VAWdcakwAJyqiMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRrmn8w x/T9aIGRWpHPuumDl3GplzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjg0NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGdkwTANBgkqhkiG9w0BAQsFAAOCAQEAbhC7VRrVlPn2qRs3GQUt 0eNeLKm2jtnQpLV855mu7SzgAueL6tNpCPAvLQG1wVF+xLqVrpUeuRAoQbezJUOe jCFy0pPrZNqs0ccXYTKsHhbYCCAQeQZBfbuRmMEwgnz7+HSLfgIZjnh2ySpoMT5y 1MPWnu+fovG8vjwkg9bkUcfw3S9gPxaFDSn7pmOjvZSLffFCIZ5XS7bdE34SIPaq CVWesCvg1h/rspogYpjxaEjpoGqiMjOo98XVAkJ4EF16xt9MNxLNWsb139UIvUsY odUCwQjRT+peijkFvOLA6zl8+i7Y+Yz0sieYDoV0sav+14mjOtL0lc8PT9yPmFBY zQ== -----END CERTIFICATE-----Generated at Wed May 8 14:59:55 2024 by rpki-client on console-ams.rpki-client.org