$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136844.roa File: AS136844.roa (raw, json) Hash identifier: OEwGgowKf9IQySgOSuVdq9cAiIQoV1dA1CMk4l8w3/Q= Subject key identifier: 13:6F:4A:57:A8:3B:69:0C:4A:17:86:FD:D3:4D:E9:96:BB:71:CA:4B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C4D4CC23921D71FE26B2932BAEAAD725C173A35 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136844.roa Signing time: Tue 12 Nov 2024 03:00:00 +0000 ROA not before: Tue 12 Nov 2024 02:55:00 +0000 ROA not after: Tue 11 Nov 2025 03:00:00 +0000 asID: 136844 IP address blocks: 103.100.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:4d:4c:c2:39:21:d7:1f:e2:6b:29:32:ba:ea:ad:72:5c:17:3a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 12 02:55:00 2024 GMT Not After : Nov 11 03:00:00 2025 GMT Subject: CN=136F4A57A83B690C4A1786FDD34DE996BB71CA4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:e5:41:c7:2b:dd:14:92:91:b2:b8:d8:04: c3:05:e7:e9:1c:13:00:c8:a4:d8:22:9b:f1:f9:80: be:3f:1d:0c:24:b3:c5:57:6a:3a:bd:a5:b8:c7:e7: 56:2d:8f:7a:6c:94:93:fb:e2:12:fa:97:07:85:b1: 3e:ca:f9:79:3b:7e:f3:2b:e5:b8:4c:34:68:f2:b1: a7:5e:9d:18:71:fc:42:a1:a4:1f:1f:f5:c7:a2:67: 5e:78:d4:ab:23:75:e7:89:9c:e7:80:80:3d:a8:30: 64:db:ea:cd:81:e3:35:01:9c:09:8c:cd:91:67:e7: 92:7c:4d:46:d6:47:e9:f9:40:0e:34:71:a6:65:cc: c8:4a:3e:87:29:b4:fb:63:c6:4b:a4:b9:57:46:8a: cb:1c:71:70:45:c4:e5:b8:f2:2b:9c:d3:97:c5:79: 65:d0:97:1f:66:ac:58:a5:5f:36:50:78:c8:78:45: 9b:f8:67:23:6b:d6:2e:eb:bb:ee:a8:67:ae:d1:4e: 49:4d:2f:a1:e8:d8:fe:17:8a:18:35:6a:be:a2:51: c9:ac:dc:b4:28:4d:58:72:8d:0c:54:d0:61:3a:85: 88:50:73:03:df:83:a5:97:53:cd:94:cb:f3:a5:a3: 50:31:fa:e2:1a:cb:48:ea:1e:22:f5:f0:1f:6d:bd: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6F:4A:57:A8:3B:69:0C:4A:17:86:FD:D3:4D:E9:96:BB:71:CA:4B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136844.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.193.0/24 Signature Algorithm: sha256WithRSAEncryption 74:a7:00:d7:b2:6f:e6:94:88:63:b1:5d:53:07:ca:18:56:89: 64:e5:17:0c:77:d3:ef:28:87:b0:a5:9b:97:5e:98:38:45:76: 85:92:1e:e7:ac:ad:19:7a:8b:bf:16:ce:7a:1b:f4:f2:68:1e: 7f:93:ac:7d:ef:b3:af:50:70:1b:98:69:d9:b9:31:d9:bb:88: 8c:fd:74:af:5b:1c:29:b3:b9:13:1f:73:2f:cc:c6:98:59:53: 74:ca:f8:a2:d4:f5:52:a6:2a:3b:07:a4:c8:39:86:17:e0:bd: 4f:04:fc:37:97:6a:94:85:ee:24:c1:72:0a:94:7f:eb:01:5e: a4:b2:28:74:13:90:67:54:9d:11:e0:3c:77:9b:7f:87:9e:8b: 15:26:44:ac:ef:23:3f:f3:2b:28:38:5d:4a:4e:f6:e8:fa:5d: 7d:de:4a:19:10:46:b2:c9:21:ec:c1:0c:cc:47:2e:2e:40:ac: 3c:6a:a4:d3:82:34:75:a2:0f:45:cc:f8:10:63:1a:97:a1:0d: b5:38:a4:c1:79:21:76:59:96:3e:b9:fb:1a:15:22:06:4a:c0: b4:88:9d:af:e5:8e:a4:55:eb:36:13:c9:ae:db:c9:2a:13:f7: ae:07:4b:71:0c:49:ff:54:6a:1c:33:b6:3e:c9:dd:8b:93:38: dc:4a:23:fc -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUTE1Mwjkh1x/iaykyuuqtclwXOjUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTExMjAyNTUwMFoX DTI1MTExMTAzMDAwMFowMzExMC8GA1UEAxMoMTM2RjRBNTdBODNCNjkwQzRBMTc4 NkZERDM0REU5OTZCQjcxQ0E0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoG5UHHK90UkpGyuNgEwwXn6RwTAMik2CKb8fmAvj8dDCSzxVdqOr2luMfn Vi2PemyUk/viEvqXB4WxPsr5eTt+8yvluEw0aPKxp16dGHH8QqGkHx/1x6JnXnjU qyN154mc54CAPagwZNvqzYHjNQGcCYzNkWfnknxNRtZH6flADjRxpmXMyEo+hym0 +2PGS6S5V0aKyxxxcEXE5bjyK5zTl8V5ZdCXH2asWKVfNlB4yHhFm/hnI2vWLuu7 7qhnrtFOSU0voejY/heKGDVqvqJRyazctChNWHKNDFTQYTqFiFBzA9+DpZdTzZTL 86WjUDH64hrLSOoeIvXwH229XYECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQTb0pX qDtpDEoXhv3TTemWu3HKSzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjg0NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGdkwTANBgkqhkiG9w0BAQsFAAOCAQEAdKcA17Jv5pSIY7FdUwfK GFaJZOUXDHfT7yiHsKWbl16YOEV2hZIe56ytGXqLvxbOehv08mgef5Osfe+zr1Bw G5hp2bkx2buIjP10r1scKbO5Ex9zL8zGmFlTdMr4otT1UqYqOwekyDmGF+C9TwT8 N5dqlIXuJMFyCpR/6wFepLIodBOQZ1SdEeA8d5t/h56LFSZErO8jP/MrKDhdSk72 6Ppdfd5KGRBGsskh7MEMzEcuLkCsPGqk04I0daIPRcz4EGMal6ENtTikwXkhdlmW Prn7GhUiBkrAtIidr+WOpFXrNhPJrtvJKhP3rgdLcQxJ/1RqHDO2Psndi5M43Eoj /A== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:46 2024 by rpki-client on console-ams.rpki-client.org