$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137301.roa File: AS137301.roa (raw, json) Hash identifier: /7nwMQBQCS/vGH6aUqo0SsKszRV6ySV+6wKW4j7oTGM= Subject key identifier: 31:D5:15:9A:AD:07:54:FC:2A:E1:5C:75:75:46:B9:7D:49:36:90:42 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 078466A507B1C1B77E4B8E9F95EF57A543362EEA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137301.roa Signing time: Tue 09 Jan 2024 04:00:14 +0000 ROA not before: Tue 09 Jan 2024 03:55:14 +0000 ROA not after: Tue 07 Jan 2025 04:00:14 +0000 asID: 137301 IP address blocks: 103.108.87.0/24 maxlen: 24 2001:df5:7b00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:84:66:a5:07:b1:c1:b7:7e:4b:8e:9f:95:ef:57:a5:43:36:2e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:14 2024 GMT Not After : Jan 7 04:00:14 2025 GMT Subject: CN=31D5159AAD0754FC2AE15C757546B97D49369042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:e4:9b:69:00:68:3f:fe:3d:1b:cf:03:21: 17:69:4d:50:f1:1d:89:57:e0:5e:ed:cc:4b:d2:ab: d1:99:63:6d:a9:da:86:f3:50:00:b6:c5:54:1b:10: b7:e7:98:6a:20:50:04:68:48:f1:cc:e4:e8:67:64: 72:64:ae:23:7a:4f:67:71:73:ea:6a:a2:bf:fe:5b: db:78:10:5e:b7:c0:80:cf:76:ea:4e:01:2c:de:05: 1a:88:0f:08:da:eb:5f:6c:98:03:84:49:1c:44:ec: fe:fc:51:de:05:13:a0:1e:3c:a2:87:ff:c0:98:d3: 79:cb:aa:60:4e:d4:38:8b:fe:fc:9b:1e:f8:f6:91: dd:b3:6e:e9:78:1a:3d:96:54:0d:82:7e:06:d0:3b: 4e:21:93:14:90:68:df:c5:b5:98:32:67:82:b2:9c: 94:a1:de:85:32:08:2a:38:1c:92:3f:77:fb:dd:a8: 49:4f:1f:c8:eb:fa:c0:3e:70:25:75:17:c8:a0:42: a2:fb:8e:e5:66:fa:4b:33:7e:c9:99:f0:54:e6:d3: f1:aa:3e:d5:1a:2b:8b:fd:50:fd:bb:9a:73:f2:22: dd:a4:81:cb:bc:87:85:1d:40:1c:94:47:d8:63:5e: 8a:82:71:22:77:b4:aa:32:86:61:9c:50:d3:e6:4c: 69:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D5:15:9A:AD:07:54:FC:2A:E1:5C:75:75:46:B9:7D:49:36:90:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137301.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.87.0/24 IPv6: 2001:df5:7b00::/48 Signature Algorithm: sha256WithRSAEncryption 43:7c:c5:74:93:b0:b2:9c:65:de:ab:06:43:8b:f7:e5:d4:2e: 88:3b:d5:a4:d4:1a:fb:8e:75:84:18:b3:85:0c:3d:fb:10:ee: 4d:80:0f:10:0c:fb:00:d8:ff:9e:6f:c7:6d:60:b7:c8:b0:bc: f3:ec:6e:3d:d1:3e:d2:1f:de:48:2e:b7:bf:f5:1a:ab:50:39: b4:f9:46:bc:2d:9b:77:18:c9:c8:e5:3a:6a:20:b6:73:10:eb: d0:6e:b4:c5:75:c8:f7:c2:5a:8d:3a:20:7e:76:53:aa:f3:c1: ce:e4:3a:2c:f1:5f:e8:24:b9:8e:f3:ac:b3:e4:2f:c7:b6:34: d2:17:33:35:b1:8a:83:e5:88:b7:c6:65:5d:be:f3:de:a7:41: b0:62:a9:1d:aa:0d:50:3a:5a:59:fb:cc:a2:43:8e:93:a4:b9: d2:06:a7:8e:7f:20:fc:3e:3b:4c:4f:21:53:8f:96:f6:6d:10: eb:18:d3:bb:de:05:b1:9d:20:4f:66:a2:ea:a6:5b:f5:04:7c: 97:d0:e1:e3:ab:47:00:5d:2a:8f:93:a4:14:41:6e:52:be:8b: 08:e0:0f:9d:ec:b6:2f:41:6a:9d:aa:5d:48:3c:ca:8c:d6:58: 2c:fc:2c:15:32:c7:12:c7:9c:3e:1e:8b:aa:d0:15:94:b4:51: 4e:59:ae:f2 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUB4RmpQexwbd+S46fle9XpUM2LuowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxNFoX DTI1MDEwNzA0MDAxNFowMzExMC8GA1UEAxMoMzFENTE1OUFBRDA3NTRGQzJBRTE1 Qzc1NzU0NkI5N0Q0OTM2OTA0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5y5JtpAGg//j0bzwMhF2lNUPEdiVfgXu3MS9Kr0ZljbanahvNQALbFVBsQ t+eYaiBQBGhI8czk6GdkcmSuI3pPZ3Fz6mqiv/5b23gQXrfAgM926k4BLN4FGogP CNrrX2yYA4RJHETs/vxR3gUToB48oof/wJjTecuqYE7UOIv+/Jse+PaR3bNu6Xga PZZUDYJ+BtA7TiGTFJBo38W1mDJngrKclKHehTIIKjgckj93+92oSU8fyOv6wD5w JXUXyKBCovuO5Wb6SzN+yZnwVObT8ao+1Rori/1Q/buac/Ii3aSBy7yHhR1AHJRH 2GNeioJxIne0qjKGYZxQ0+ZMabMCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQx1RWa rQdU/CrhXHV1Rrl9STaQQjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNzMwMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGdsVzAPBAIAAjAJAwcAIAEN9XsAMA0GCSqGSIb3DQEBCwUAA4IB AQBDfMV0k7CynGXeqwZDi/fl1C6IO9Wk1Br7jnWEGLOFDD37EO5NgA8QDPsA2P+e b8dtYLfIsLzz7G490T7SH95ILre/9RqrUDm0+Ua8LZt3GMnI5TpqILZzEOvQbrTF dcj3wlqNOiB+dlOq88HO5Dos8V/oJLmO86yz5C/HtjTSFzM1sYqD5Yi3xmVdvvPe p0GwYqkdqg1QOlpZ+8yiQ46TpLnSBqeOfyD8PjtMTyFTj5b2bRDrGNO73gWxnSBP ZqLqplv1BHyX0OHjq0cAXSqPk6QUQW5SvosI4A+d7LYvQWqdql1IPMqM1lgs/CwV MscSx5w+Houq0BWUtFFOWa7y -----END CERTIFICATE-----Generated at Sat Apr 27 21:40:19 2024 by rpki-client on console-ams.rpki-client.org