$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147089.roa File: AS147089.roa (raw, json) Hash identifier: EjQbYU3I/GtHUGpveejnvXKRFC5oduaT2en7J+TDmBg= Subject key identifier: 1B:57:8A:CF:0B:1A:F6:4E:F7:B8:99:9D:D7:3A:74:EA:C4:D3:F0:7B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78006801FC03EA32CF1FE418E3CDF42681DD8ADD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147089.roa Signing time: Mon 27 May 2024 04:00:00 +0000 ROA not before: Mon 27 May 2024 03:55:00 +0000 ROA not after: Mon 26 May 2025 04:00:00 +0000 asID: 147089 IP address blocks: 103.173.232.0/24 maxlen: 24 103.173.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:00:68:01:fc:03:ea:32:cf:1f:e4:18:e3:cd:f4:26:81:dd:8a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 27 03:55:00 2024 GMT Not After : May 26 04:00:00 2025 GMT Subject: CN=1B578ACF0B1AF64EF7B8999DD73A74EAC4D3F07B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:6b:ed:5d:e3:05:c4:4d:b3:de:b7:ac:ef: 16:7e:ce:35:d5:9e:67:60:64:28:30:fd:12:6b:34: 0b:e8:c3:d0:3a:bc:7b:c7:43:5b:29:88:09:d9:dc: a2:76:fd:0d:dd:2d:fa:97:b6:5c:69:ce:27:34:24: 39:4e:8a:d2:50:27:c7:ae:27:c8:a7:27:e0:2c:44: 32:4c:a8:ec:a7:4b:af:cc:d8:0b:95:40:e0:35:1f: e2:84:73:d7:14:7e:7a:8c:7d:c1:30:b1:30:27:85: f9:94:63:b2:f8:a0:b5:9f:c2:6f:a3:e5:04:2f:30: 5f:80:83:ab:34:47:49:e2:61:7a:dd:07:8b:44:82: 65:12:a7:14:7b:18:e8:fc:7c:21:ae:14:27:94:75: 5a:33:10:55:39:8e:7d:4f:e8:e1:a5:0c:5c:35:e8: aa:8d:96:95:22:45:76:79:65:33:2c:42:f9:0e:19: 89:f9:20:bb:67:be:6f:e5:b4:f6:66:a8:aa:b2:d1: 1e:52:6f:e2:46:11:c3:37:31:ff:2b:44:7b:f8:95: f2:76:35:47:21:d7:12:f9:2e:cb:c0:c7:2b:c2:89: d6:8f:e3:ff:66:af:a7:2d:3f:2e:d8:f5:2a:22:dd: d0:64:06:81:7b:ca:e7:68:3d:4e:fb:e8:f4:ac:6b: 92:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:57:8A:CF:0B:1A:F6:4E:F7:B8:99:9D:D7:3A:74:EA:C4:D3:F0:7B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147089.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.232.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:64:3b:63:00:82:65:5f:3e:27:c9:17:e1:5a:f7:47:33:b5: ed:1a:c8:e6:bc:e7:01:05:80:a8:ba:39:80:42:81:4d:33:72: f9:94:db:7e:f2:95:93:75:b2:6a:ad:79:f2:54:17:df:23:43: 06:13:15:1f:f6:8b:1d:41:34:a0:41:6e:0d:46:d3:bb:6f:4b: 42:48:f7:54:c6:44:8c:1e:77:60:46:8a:e4:42:e2:f8:61:fe: 21:66:bd:68:62:98:10:1b:b1:a9:ea:c6:7c:da:c7:a0:8e:d6: c0:ef:ac:32:c4:f6:ba:53:7d:ad:31:ae:e5:00:09:1e:69:da: 09:ee:21:4c:a2:f9:96:87:f7:13:b2:ef:15:b6:4f:5c:18:d7: 51:3a:8a:64:27:f5:ea:ba:13:47:1c:90:5c:a7:c7:ef:99:d9: bb:7d:55:a7:09:7b:25:2d:fe:0d:d1:cb:ad:fc:1f:98:3d:4f: 18:bf:13:8f:11:75:58:c1:6a:e9:f8:fa:45:f8:78:c0:0a:21: 6b:91:40:4b:d3:90:1a:87:24:66:51:d4:43:21:05:00:c5:47: 04:74:1f:01:22:51:c4:1d:98:d2:56:fe:13:34:c9:d7:81:2f: e7:49:ee:de:4f:8d:d9:8c:9a:89:77:d2:bc:46:d0:2e:fd:6c: 16:b4:21:c5 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUeABoAfwD6jLPH+QY4830JoHdit0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyNzAzNTUwMFoX DTI1MDUyNjA0MDAwMFowMzExMC8GA1UEAxMoMUI1NzhBQ0YwQjFBRjY0RUY3Qjg5 OTlERDczQTc0RUFDNEQzRjA3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMi9a+1d4wXETbPet6zvFn7ONdWeZ2BkKDD9Ems0C+jD0Dq8e8dDWymICdnc onb9Dd0t+pe2XGnOJzQkOU6K0lAnx64nyKcn4CxEMkyo7KdLr8zYC5VA4DUf4oRz 1xR+eox9wTCxMCeF+ZRjsvigtZ/Cb6PlBC8wX4CDqzRHSeJhet0Hi0SCZRKnFHsY 6Px8Ia4UJ5R1WjMQVTmOfU/o4aUMXDXoqo2WlSJFdnllMyxC+Q4Zifkgu2e+b+W0 9maoqrLRHlJv4kYRwzcx/ytEe/iV8nY1RyHXEvkuy8DHK8KJ1o/j/2avpy0/Ltj1 KiLd0GQGgXvK52g9Tvvo9KxrktMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQbV4rP Cxr2Tve4mZ3XOnTqxNPwezAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzA4OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWet6DANBgkqhkiG9w0BAQsFAAOCAQEAOmQ7YwCCZV8+J8kX4Vr3 RzO17RrI5rznAQWAqLo5gEKBTTNy+ZTbfvKVk3Wyaq158lQX3yNDBhMVH/aLHUE0 oEFuDUbTu29LQkj3VMZEjB53YEaK5ELi+GH+IWa9aGKYEBuxqerGfNrHoI7WwO+s MsT2ulN9rTGu5QAJHmnaCe4hTKL5lof3E7LvFbZPXBjXUTqKZCf16roTRxyQXKfH 75nZu31Vpwl7JS3+DdHLrfwfmD1PGL8TjxF1WMFq6fj6Rfh4wAoha5FAS9OQGock ZlHUQyEFAMVHBHQfASJRxB2Y0lb+EzTJ14Ev50nu3k+N2YyaiXfSvEbQLv1sFrQh xQ== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:28 2024 by rpki-client on console-ams.rpki-client.org