$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137341.roa File: AS137341.roa (raw, json) Hash identifier: U9Qir9XN59NZI63crFmFcEO/uq0Zff+QN8UpzjXZ04k= Subject key identifier: D9:DE:E5:93:D1:4C:EB:50:15:D3:30:E2:35:01:5C:21:82:5C:D7:46 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 27D2A7F9358B810D1E9F8A72EEDFC217096153A4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137341.roa Signing time: Tue 10 Dec 2024 05:00:01 +0000 ROA not before: Tue 10 Dec 2024 04:55:01 +0000 ROA not after: Tue 09 Dec 2025 05:00:01 +0000 asID: 137341 IP address blocks: 103.28.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d2:a7:f9:35:8b:81:0d:1e:9f:8a:72:ee:df:c2:17:09:61:53:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:01 2024 GMT Not After : Dec 9 05:00:01 2025 GMT Subject: CN=D9DEE593D14CEB5015D330E235015C21825CD746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c8:44:e9:d1:f1:9d:3c:55:86:e9:de:5b:2d: 0b:13:89:bb:17:12:e9:0b:d5:49:cf:a7:b7:8b:50: c3:bd:16:74:fc:04:db:72:b9:f7:51:b8:be:85:0a: 3b:65:6b:5f:cc:18:66:ab:8c:80:1e:bb:e2:3e:ed: c5:4e:11:2a:68:41:f8:18:ec:2e:bb:e4:b3:a2:41: 67:1b:30:f0:98:60:45:f6:b5:e2:7a:8d:6f:d1:7a: 30:9d:5b:99:32:53:fc:47:d8:a5:4b:9e:68:18:12: 89:3e:2c:73:36:d7:e9:dd:25:fb:9d:77:8f:3a:fc: cc:32:62:8f:5d:c4:3e:e8:93:24:64:71:55:ff:31: de:10:3a:58:ff:1d:e8:7e:80:4e:b3:17:ce:45:11: ad:32:6b:4f:4a:64:21:03:fc:c8:8a:75:4d:df:42: 9e:c0:c9:d8:15:c4:fb:d9:c0:9a:50:d4:e1:1a:bb: 14:de:70:9b:df:1b:52:a0:38:0d:1f:7b:dd:82:c8: 4c:e7:eb:9c:97:0b:7b:c1:dc:b7:4a:40:cf:ab:ae: 0e:4b:54:d2:ad:cc:9a:41:c1:96:ba:ad:03:dd:b5: 11:37:94:fe:ff:80:5a:41:b2:a5:f5:b7:6b:67:52: f6:58:e9:f1:53:85:6c:92:9a:89:ac:10:fc:09:e6: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DE:E5:93:D1:4C:EB:50:15:D3:30:E2:35:01:5C:21:82:5C:D7:46 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137341.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.22.0/23 Signature Algorithm: sha256WithRSAEncryption 46:16:78:af:c2:34:a7:07:12:fd:8b:e6:49:0e:84:75:1e:ab: 0d:83:7b:f8:98:79:c4:1f:cc:4b:79:b8:ba:cb:d1:6a:02:ef: d2:4b:9e:22:a3:8a:fb:17:6d:5d:9b:1f:66:ea:70:94:fe:59: 62:c4:e2:de:cb:49:a9:2b:ea:d6:48:4a:e3:bc:78:60:32:5f: aa:cc:6f:03:88:ba:15:fd:86:d7:51:e0:d1:20:0b:b6:8d:c4: e0:62:b5:02:e1:91:c1:04:24:9e:47:6c:82:1f:05:da:d2:d6: 0b:ca:12:2e:17:8b:81:91:3a:f6:0a:a3:a1:9d:2e:31:2b:b0: 09:9e:51:1b:1e:aa:12:1d:08:9c:9b:12:a5:92:dd:e4:87:17: fe:86:35:bc:90:c1:28:67:4a:b1:18:7d:b4:57:7f:6f:a7:b8: 58:10:53:20:b4:d6:db:c4:46:0d:32:e1:e1:de:d2:4c:3f:69: e4:9a:87:04:94:e6:11:7e:35:a1:67:da:96:07:aa:a9:5e:c6: 62:38:45:2c:4b:7b:b8:b2:7f:ff:bd:25:ce:59:64:76:b7:b7: 16:d5:87:ff:90:f9:3f:3b:cd:30:43:d0:ff:19:7f:05:6d:90: 7d:e3:63:84:a1:ea:97:b4:d4:ef:63:b0:21:0e:28:eb:9a:fc: 51:2d:f1:c6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJ9Kn+TWLgQ0en4py7t/CFwlhU6QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwMVoX DTI1MTIwOTA1MDAwMVowMzExMC8GA1UEAxMoRDlERUU1OTNEMTRDRUI1MDE1RDMz MEUyMzUwMTVDMjE4MjVDRDc0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHIROnR8Z08VYbp3lstCxOJuxcS6QvVSc+nt4tQw70WdPwE23K591G4voUK O2VrX8wYZquMgB674j7txU4RKmhB+BjsLrvks6JBZxsw8JhgRfa14nqNb9F6MJ1b mTJT/EfYpUueaBgSiT4sczbX6d0l+513jzr8zDJij13EPuiTJGRxVf8x3hA6WP8d 6H6ATrMXzkURrTJrT0pkIQP8yIp1Td9CnsDJ2BXE+9nAmlDU4Rq7FN5wm98bUqA4 DR973YLITOfrnJcLe8Hct0pAz6uuDktU0q3MmkHBlrqtA921ETeU/v+AWkGypfW3 a2dS9ljp8VOFbJKaiawQ/Anm6jUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTZ3uWT 0UzrUBXTMOI1AVwhglzXRjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNzM0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWccFjANBgkqhkiG9w0BAQsFAAOCAQEARhZ4r8I0pwcS/YvmSQ6E dR6rDYN7+Jh5xB/MS3m4usvRagLv0kueIqOK+xdtXZsfZupwlP5ZYsTi3stJqSvq 1khK47x4YDJfqsxvA4i6Ff2G11Hg0SALto3E4GK1AuGRwQQknkdsgh8F2tLWC8oS LheLgZE69gqjoZ0uMSuwCZ5RGx6qEh0InJsSpZLd5IcX/oY1vJDBKGdKsRh9tFd/ b6e4WBBTILTW28RGDTLh4d7STD9p5JqHBJTmEX41oWfalgeqqV7GYjhFLEt7uLJ/ /70lzllkdre3FtWH/5D5PzvNMEPQ/xl/BW2QfeNjhKHql7TU72OwIQ4o65r8US3x xg== -----END CERTIFICATE-----Generated at Sun Feb 16 20:55:49 2025 by rpki-client