$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147088.roa File: AS147088.roa (raw, json) Hash identifier: O14PW9CGLjFCGzwyX0zHpuZjvImCvsAig4qhr+xw8+8= Subject key identifier: 50:41:EC:96:72:5C:54:62:32:EA:24:69:0B:67:E0:65:B9:F8:F8:11 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 79C0A65D66728E0A8FD2C52308381FFAB6661E26 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147088.roa Signing time: Tue 10 Dec 2024 05:00:13 +0000 ROA not before: Tue 10 Dec 2024 04:55:13 +0000 ROA not after: Tue 09 Dec 2025 05:00:13 +0000 asID: 147088 IP address blocks: 103.172.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c0:a6:5d:66:72:8e:0a:8f:d2:c5:23:08:38:1f:fa:b6:66:1e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:13 2024 GMT Not After : Dec 9 05:00:13 2025 GMT Subject: CN=5041EC96725C546232EA24690B67E065B9F8F811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:aa:75:14:5b:44:c7:fc:86:c2:81:6c:78: 9a:46:b2:1e:1c:58:3e:8d:2b:4d:c3:0c:c5:f3:fc: 26:12:63:8a:60:90:0a:e9:fc:16:00:3c:0d:ce:64: 6c:c9:be:1a:80:1e:f6:47:ec:0e:0c:78:e6:2e:83: 5e:1f:a6:f5:6d:a4:c9:b4:a4:34:6f:34:c3:3d:41: 5a:2d:f9:1e:24:84:15:1a:63:fc:bf:f6:00:6f:b7: 9e:06:47:21:0e:4c:db:21:80:c7:86:b9:b6:4c:86: 26:89:f3:b6:4e:7a:b1:8a:a9:18:74:2c:75:71:80: c3:97:54:d2:43:ca:ef:a2:86:58:cd:b2:6d:d6:d0: e2:fd:bf:13:22:52:e0:b0:0f:dd:6e:3c:99:c2:5b: 5b:03:02:b8:f0:d7:9d:db:de:f4:83:82:fe:20:27: 3e:f0:75:6f:fe:7e:55:c5:01:38:ae:70:59:a7:6f: 4b:c9:8e:d0:05:7b:61:fc:3c:90:3d:36:a3:2f:69: 0b:32:42:81:1b:75:87:c6:ff:f0:e4:e8:6f:84:4b: 1e:2a:f7:f6:e2:9a:bf:1f:ad:14:14:1b:67:8d:f7: a3:c2:52:b6:b9:d3:c3:8e:93:b7:18:80:29:b1:84: 4d:f2:63:67:3b:51:95:dd:07:09:ee:76:99:62:94: 5d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:41:EC:96:72:5C:54:62:32:EA:24:69:0B:67:E0:65:B9:F8:F8:11 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147088.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.172.0/24 Signature Algorithm: sha256WithRSAEncryption 04:13:d9:38:0b:89:3d:98:cc:32:6b:47:53:47:ce:60:18:be: 1b:42:d8:1d:99:1a:20:14:bc:f7:3a:c5:9b:5c:59:f3:d1:c9: 5b:dd:de:a3:8d:82:64:b8:80:c2:3d:88:50:ad:64:db:be:1d: dd:8a:2a:93:56:79:7c:1e:8d:45:fd:0c:be:7e:36:78:a8:ee: 80:c9:0f:be:9d:bd:ed:69:6e:6b:1a:db:50:27:58:54:31:c8: 01:b8:89:83:08:5b:bb:ce:5f:c5:d3:b8:dd:d6:37:f1:68:2d: 4b:47:62:02:77:51:81:89:09:85:57:66:a5:b6:11:6b:3c:a9: 69:3e:6a:05:fd:c7:8c:4e:34:0a:25:00:9d:c5:57:ca:79:a2: 59:88:26:24:c2:71:8c:f5:b1:d0:17:0d:96:55:59:ba:81:35: 4c:d7:0e:3c:cc:93:44:2a:3c:04:f7:c9:8f:49:52:49:5c:d2: 95:6f:bc:71:e0:ab:30:03:12:18:48:78:78:a1:eb:c3:07:3f: 8c:3d:77:0c:d9:df:1a:a7:d8:e8:bc:e5:5b:0e:35:07:0d:da: 83:e2:05:ca:2e:dd:53:29:f1:5e:33:b0:c5:9d:e9:65:55:3d: 41:ba:5a:c9:33:84:e2:ec:52:88:d1:8e:6d:57:32:82:32:f9: 34:3d:bc:a1 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUecCmXWZyjgqP0sUjCDgf+rZmHiYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxM1oX DTI1MTIwOTA1MDAxM1owMzExMC8GA1UEAxMoNTA0MUVDOTY3MjVDNTQ2MjMyRUEy NDY5MEI2N0UwNjVCOUY4RjgxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjZqnUUW0TH/IbCgWx4mkayHhxYPo0rTcMMxfP8JhJjimCQCun8FgA8Dc5k bMm+GoAe9kfsDgx45i6DXh+m9W2kybSkNG80wz1BWi35HiSEFRpj/L/2AG+3ngZH IQ5M2yGAx4a5tkyGJonztk56sYqpGHQsdXGAw5dU0kPK76KGWM2ybdbQ4v2/EyJS 4LAP3W48mcJbWwMCuPDXndve9IOC/iAnPvB1b/5+VcUBOK5wWadvS8mO0AV7Yfw8 kD02oy9pCzJCgRt1h8b/8OTob4RLHir39uKavx+tFBQbZ433o8JStrnTw46TtxiA KbGETfJjZztRld0HCe52mWKUXc8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRQQeyW clxUYjLqJGkLZ+Blufj4ETAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzA4OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGesrDANBgkqhkiG9w0BAQsFAAOCAQEABBPZOAuJPZjMMmtHU0fO YBi+G0LYHZkaIBS89zrFm1xZ89HJW93eo42CZLiAwj2IUK1k274d3Yoqk1Z5fB6N Rf0Mvn42eKjugMkPvp297WluaxrbUCdYVDHIAbiJgwhbu85fxdO43dY38WgtS0di AndRgYkJhVdmpbYRazypaT5qBf3HjE40CiUAncVXynmiWYgmJMJxjPWx0BcNllVZ uoE1TNcOPMyTRCo8BPfJj0lSSVzSlW+8ceCrMAMSGEh4eKHrwwc/jD13DNnfGqfY 6LzlWw41Bw3ag+IFyi7dUynxXjOwxZ3pZVU9QbpayTOE4uxSiNGObVcygjL5ND28 oQ== -----END CERTIFICATE-----Generated at Sun Feb 16 20:45:22 2025 by rpki-client