$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137341.roa File: AS137341.roa (raw, json) Hash identifier: uKn8HjlFngXcl0dNxyFwkYaDZDN/2RBMJTDRScSEp1k= Subject key identifier: B9:E6:07:81:8D:7A:57:A3:DB:0E:33:B5:71:2F:CB:C5:95:EC:B9:9B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0241B4A77BBAE6B67F1E8A2D7A3328F55ADC1AE3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137341.roa Signing time: Tue 09 Jan 2024 04:00:02 +0000 ROA not before: Tue 09 Jan 2024 03:55:02 +0000 ROA not after: Tue 07 Jan 2025 04:00:02 +0000 asID: 137341 IP address blocks: 103.28.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:41:b4:a7:7b:ba:e6:b6:7f:1e:8a:2d:7a:33:28:f5:5a:dc:1a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:02 2024 GMT Not After : Jan 7 04:00:02 2025 GMT Subject: CN=B9E607818D7A57A3DB0E33B5712FCBC595ECB99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ba:5b:66:a3:af:f0:01:44:a4:85:2c:f1:56: d5:8d:3f:9f:19:f1:29:a7:fe:66:aa:43:b3:76:ca: be:fb:e8:df:42:8f:4f:2e:2d:44:e0:d1:cc:71:c2: 17:50:16:b2:10:e2:5a:a0:26:9c:04:6c:b0:45:22: ad:f5:19:f8:1c:12:2b:da:a5:de:6d:75:b1:12:17: cf:22:91:9f:bd:62:85:01:eb:48:ea:79:f4:9c:a6: 2e:9b:5b:ef:d0:53:b9:83:13:dd:3b:b4:15:ad:e9: af:e3:b8:6e:19:6b:4d:f3:2e:9f:32:fe:b0:1c:22: 79:28:a5:38:53:fa:b6:c7:66:58:e4:e5:14:bb:91: c0:d6:9a:1b:b1:bf:27:8c:f5:22:8e:18:9c:29:dd: c2:dc:c4:7f:b5:dd:25:c1:89:4a:68:e1:9e:26:07: 75:8b:f8:1c:82:67:2b:9c:83:7c:7b:9d:9d:e9:61: 9b:df:8b:d1:d6:b4:62:92:40:cc:2d:39:d7:fa:06: 84:dd:ba:2c:be:16:e4:4f:a8:13:48:14:9d:12:89: 58:78:0f:bc:8e:b3:ea:62:fe:e1:87:9d:4f:57:39: 7e:c9:76:fa:e7:54:f7:92:65:77:f3:ae:62:a8:de: a1:4e:ae:d7:a8:44:d0:b0:a3:29:93:df:0b:d7:f6: 52:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E6:07:81:8D:7A:57:A3:DB:0E:33:B5:71:2F:CB:C5:95:EC:B9:9B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137341.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.22.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:b9:24:97:99:31:1a:0e:cc:74:62:f0:1a:84:c7:a9:f7:9e: 58:91:3d:a9:f1:c3:5b:a3:e3:04:7d:58:12:4a:5e:7a:72:25: f8:02:fb:75:c3:1e:aa:cf:af:92:d9:19:9c:66:55:7d:84:e6: ab:69:b5:cf:09:c3:f1:da:58:54:f0:9e:8e:09:fe:0b:e9:d1: 67:bf:93:21:d5:aa:a1:ae:ad:db:80:47:53:ae:2b:11:bd:5c: 5b:e0:b8:6c:f5:77:16:60:ec:d5:8a:66:83:5c:9c:07:5d:c1: f5:9e:00:86:e7:1a:4c:4f:59:57:bd:a5:76:32:d6:b7:7e:6b: 8f:ba:87:83:97:4f:b4:4b:ec:f4:82:2b:6f:6c:8c:7d:db:1c: 87:37:78:6d:44:6d:96:cf:49:a6:7f:43:32:8d:22:47:d1:9d: ae:cf:ad:be:48:97:40:9f:f8:7a:45:5f:9f:cd:b6:55:22:8f: b6:07:c0:6f:cb:5a:36:7a:7a:5a:28:8d:5a:c1:f8:4a:12:bc: 28:d3:1b:12:dd:76:18:80:e4:e5:47:de:58:ea:8a:67:02:7d: b2:74:b0:a1:97:25:3b:46:95:98:64:b2:12:67:e2:c7:19:03: 42:32:1d:89:32:65:95:50:9c:69:f3:28:2f:76:e0:d3:00:39: ab:38:05:22 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUAkG0p3u65rZ/HootejMo9VrcGuMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwMloX DTI1MDEwNzA0MDAwMlowMzExMC8GA1UEAxMoQjlFNjA3ODE4RDdBNTdBM0RCMEUz M0I1NzEyRkNCQzU5NUVDQjk5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPK6W2ajr/ABRKSFLPFW1Y0/nxnxKaf+ZqpDs3bKvvvo30KPTy4tRODRzHHC F1AWshDiWqAmnARssEUirfUZ+BwSK9ql3m11sRIXzyKRn71ihQHrSOp59JymLptb 79BTuYMT3Tu0Fa3pr+O4bhlrTfMunzL+sBwieSilOFP6tsdmWOTlFLuRwNaaG7G/ J4z1Io4YnCndwtzEf7XdJcGJSmjhniYHdYv4HIJnK5yDfHudnelhm9+L0da0YpJA zC051/oGhN26LL4W5E+oE0gUnRKJWHgPvI6z6mL+4YedT1c5fsl2+udU95Jld/Ou YqjeoU6u16hE0LCjKZPfC9f2UqcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS55geB jXpXo9sOM7VxL8vFley5mzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNzM0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWccFjANBgkqhkiG9w0BAQsFAAOCAQEAT7kkl5kxGg7MdGLwGoTH qfeeWJE9qfHDW6PjBH1YEkpeenIl+AL7dcMeqs+vktkZnGZVfYTmq2m1zwnD8dpY VPCejgn+C+nRZ7+TIdWqoa6t24BHU64rEb1cW+C4bPV3FmDs1Ypmg1ycB13B9Z4A hucaTE9ZV72ldjLWt35rj7qHg5dPtEvs9IIrb2yMfdschzd4bURtls9Jpn9DMo0i R9Gdrs+tvkiXQJ/4ekVfn822VSKPtgfAb8taNnp6WiiNWsH4ShK8KNMbEt12GIDk 5UfeWOqKZwJ9snSwoZclO0aVmGSyEmfixxkDQjIdiTJllVCcafMoL3bg0wA5qzgF Ig== -----END CERTIFICATE-----Generated at Wed May 8 17:45:21 2024 by rpki-client on console-ams.rpki-client.org