$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137370.roa File: AS137370.roa (raw, json) Hash identifier: S7Pb1ldLw4DBvjLZKJ5zIW7Fcpzf8nYNQtb7AR7kNOw= Subject key identifier: CA:CA:92:C6:C8:BB:39:54:8D:32:11:87:8A:F7:F5:8A:65:7F:5C:60 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3246ADE0D3434032B8F94305A71D27F0C8AC0F0C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137370.roa Signing time: Tue 10 Dec 2024 05:00:04 +0000 ROA not before: Tue 10 Dec 2024 04:55:04 +0000 ROA not after: Tue 09 Dec 2025 05:00:04 +0000 asID: 137370 IP address blocks: 103.118.176.0/22 maxlen: 24 2403:3540::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:46:ad:e0:d3:43:40:32:b8:f9:43:05:a7:1d:27:f0:c8:ac:0f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:04 2024 GMT Not After : Dec 9 05:00:04 2025 GMT Subject: CN=CACA92C6C8BB39548D3211878AF7F58A657F5C60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:80:03:04:ae:3b:e0:f6:0e:19:11:7d:0f: cb:8d:88:e7:14:1a:86:b4:d2:83:ec:4a:dd:2d:4f: a9:e0:b2:1f:e3:17:b1:cb:0b:f2:52:fb:a8:30:42: 3b:b8:04:27:8b:6c:4e:0a:89:5b:30:e8:3d:f7:d8: 88:ca:5b:5d:61:5c:d3:b3:ba:e8:1f:54:40:1b:c9: 6b:06:75:37:dd:b8:51:76:06:4c:9e:09:e0:3f:75: 67:72:ef:be:12:a5:45:94:ab:27:35:92:22:a4:11: 0b:2c:fa:0f:f3:0c:29:cc:78:db:24:06:1e:33:5a: 75:e7:e8:2c:54:7c:6e:d8:50:f3:14:93:85:df:a4: 89:eb:35:13:76:88:c5:52:75:af:9e:38:e5:36:a2: ee:6a:f5:d9:97:69:14:32:1e:e5:a6:e3:e9:0d:09: 99:3b:b1:a4:2e:ca:6e:86:df:9d:87:6f:d0:d6:2a: 30:7e:3f:f0:c0:e4:f1:f3:9e:f1:cb:6f:90:39:c6: bd:ec:00:6c:9f:8c:42:d3:5c:c2:f6:c1:10:66:58: 36:e6:e6:fe:e1:86:71:d1:c7:17:64:af:3b:30:d4: 06:59:e5:b4:84:95:98:ca:83:1d:25:ad:a5:fc:76: 4f:26:af:e2:53:39:50:cd:db:3f:7b:73:bb:89:d5: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CA:92:C6:C8:BB:39:54:8D:32:11:87:8A:F7:F5:8A:65:7F:5C:60 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137370.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.176.0/22 IPv6: 2403:3540::/32 Signature Algorithm: sha256WithRSAEncryption 13:2e:d7:62:e2:44:43:c4:45:7e:24:15:91:0f:89:b8:ad:90: fa:c1:b7:3a:88:d0:e4:7f:b7:83:b6:b6:2a:7e:18:fa:8f:6b: 58:1d:ab:c6:53:e2:94:6c:d6:d9:ec:ad:03:b0:96:0c:f3:e0: d6:d8:27:09:b2:86:5f:ed:76:2f:54:fa:d8:13:0f:40:2a:33: 8a:cd:38:f7:42:6a:1e:e1:99:c1:91:92:33:ae:fb:da:2c:e4: cd:31:02:92:a0:1d:c8:6a:18:6a:19:38:82:e5:c5:b0:30:82: 07:b5:bb:d2:9f:a5:65:06:bb:05:c1:99:b6:43:25:91:d5:ad: 70:0a:c6:fe:19:15:52:b9:de:6a:5a:b6:8a:0c:8f:91:37:2f: 57:35:27:45:d6:aa:5c:bc:bc:f0:82:09:67:88:39:f1:d6:28: a0:0f:cd:31:3b:3c:d0:f8:f5:ad:54:e5:78:e2:6b:0c:02:5b: fd:9d:1c:e1:86:fd:bf:61:e1:bc:d1:03:17:97:b7:86:8d:6b: 31:22:e8:39:4d:89:19:13:b8:b1:68:aa:00:fc:4c:43:58:a3: 1c:8b:4c:5a:25:9c:7c:21:24:f3:54:df:83:43:c0:b1:fe:d4: c2:6c:50:df:7c:fb:04:f1:ed:15:28:a0:12:97:44:e9:90:07: be:e9:63:2a -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUMkat4NNDQDK4+UMFpx0n8MisDwwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwNFoX DTI1MTIwOTA1MDAwNFowMzExMC8GA1UEAxMoQ0FDQTkyQzZDOEJCMzk1NDhEMzIx MTg3OEFGN0Y1OEE2NTdGNUM2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1LgAMErjvg9g4ZEX0Py42I5xQahrTSg+xK3S1PqeCyH+MXscsL8lL7qDBC O7gEJ4tsTgqJWzDoPffYiMpbXWFc07O66B9UQBvJawZ1N924UXYGTJ4J4D91Z3Lv vhKlRZSrJzWSIqQRCyz6D/MMKcx42yQGHjNadefoLFR8bthQ8xSThd+kies1E3aI xVJ1r5445Tai7mr12ZdpFDIe5abj6Q0JmTuxpC7KbobfnYdv0NYqMH4/8MDk8fOe 8ctvkDnGvewAbJ+MQtNcwvbBEGZYNubm/uGGcdHHF2SvOzDUBlnltISVmMqDHSWt pfx2Tyav4lM5UM3bP3tzu4nVn3UCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBTKypLG yLs5VI0yEYeK9/WKZX9cYDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNzM3MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmd2sDANBAIAAjAHAwUAJAM1QDANBgkqhkiG9w0BAQsFAAOCAQEA Ey7XYuJEQ8RFfiQVkQ+JuK2Q+sG3OojQ5H+3g7a2Kn4Y+o9rWB2rxlPilGzW2eyt A7CWDPPg1tgnCbKGX+12L1T62BMPQCozis0490JqHuGZwZGSM6772izkzTECkqAd yGoYahk4guXFsDCCB7W70p+lZQa7BcGZtkMlkdWtcArG/hkVUrnealq2igyPkTcv VzUnRdaqXLy88IIJZ4g58dYooA/NMTs80Pj1rVTleOJrDAJb/Z0c4Yb9v2HhvNED F5e3ho1rMSLoOU2JGRO4sWiqAPxMQ1ijHItMWiWcfCEk81Tfg0PAsf7UwmxQ33z7 BPHtFSigEpdE6ZAHvuljKg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:23:04 2025 by rpki-client