$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147135.roa File: AS147135.roa (raw, json) Hash identifier: 6eh2WEcUnMJ+0vKRGJVSRp1dEjbZxk+yx3pXy5s8oHU= Subject key identifier: 91:6E:55:96:4B:0F:9F:50:6A:8D:B1:85:D9:37:ED:75:2D:BC:19:B0 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6A28B82A37BE0D8F1D33D5E72A18C8E1DD60F434 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147135.roa Signing time: Tue 09 Jan 2024 04:00:26 +0000 ROA not before: Tue 09 Jan 2024 03:55:26 +0000 ROA not after: Tue 07 Jan 2025 04:00:26 +0000 asID: 147135 IP address blocks: 103.176.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:28:b8:2a:37:be:0d:8f:1d:33:d5:e7:2a:18:c8:e1:dd:60:f4:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:26 2024 GMT Not After : Jan 7 04:00:26 2025 GMT Subject: CN=916E55964B0F9F506A8DB185D937ED752DBC19B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ea:53:2c:33:e7:ac:53:70:dd:ee:c1:c5:ef: 65:b4:0a:79:a2:7e:9d:0b:ec:b2:fe:67:1b:6a:43: 54:c4:15:f8:21:cc:d4:d0:ad:ec:5b:3e:4a:76:b6: 82:10:d0:7f:6e:ef:2e:3f:1c:e3:7e:5c:88:ce:32: 95:bb:2e:8f:e0:f0:dd:9b:10:2d:95:ba:c2:cc:a5: 66:23:96:af:0b:37:bd:59:c8:a5:ff:52:39:09:1e: 2a:cb:a2:e9:3f:cc:3f:1a:e2:ed:b6:a4:56:6f:51: 30:7d:7d:4c:7d:0c:ae:36:74:20:3c:7d:20:94:be: 46:07:e4:da:c7:0d:90:76:73:67:95:40:3b:c0:6d: 35:73:15:9a:93:bb:f6:f9:ba:30:e2:a5:ac:9c:7d: ea:7a:9e:88:ed:d9:de:ea:0b:ac:c9:d0:3e:61:ea: ab:67:b1:3a:f3:69:4d:1c:aa:17:58:0a:b5:24:58: 1f:b1:02:f0:b3:9c:ba:eb:0e:9d:1a:e5:2e:16:d6: bf:b0:3e:8a:e2:af:ac:a4:e6:f4:b2:97:23:f4:45: f7:2d:eb:fc:6d:aa:09:5d:11:4f:bc:58:5f:e2:ed: d2:25:52:f0:44:35:ba:af:de:22:cd:86:f9:63:ec: 60:d5:66:7e:9e:59:b6:2a:48:d8:87:30:ed:73:1c: 24:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6E:55:96:4B:0F:9F:50:6A:8D:B1:85:D9:37:ED:75:2D:BC:19:B0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.177.0/24 Signature Algorithm: sha256WithRSAEncryption 49:8c:e8:2a:64:49:ac:31:02:b1:32:4c:bd:05:c4:1d:28:c4: cf:cd:fd:60:aa:5b:ac:03:7f:f9:d4:c2:6f:9c:5c:53:a8:89: 29:05:df:b8:fc:58:4c:8d:c2:97:7c:4e:19:72:2d:29:ff:43: d2:d6:08:6f:66:9d:ec:e9:c1:14:53:1c:27:f8:77:18:db:b0: ab:fb:d6:b7:5b:37:e8:bc:09:8d:58:31:f3:26:07:a5:8e:b1: 45:eb:37:f7:3d:10:dd:0a:46:a0:0d:fb:ac:d1:2b:e6:14:70: f8:a5:19:00:14:48:33:87:50:f0:31:c4:c9:3b:70:5e:0f:35: 99:a7:d9:9f:6c:10:5a:54:bd:bd:22:08:c6:c1:bd:6c:8b:e3: 46:39:42:17:c9:2b:0d:2c:5b:20:6c:26:e5:bd:22:9a:14:17: cc:de:9b:1c:74:cd:e6:9c:c6:6b:c4:b6:f8:56:3a:4a:85:5d: 39:36:07:08:bc:ae:88:3a:03:76:d8:f1:3c:2d:08:bd:62:ee: 77:fe:90:07:44:e9:f8:f4:e5:b3:72:97:dd:e4:1d:58:5e:86: 85:25:ef:74:0f:d0:42:46:6e:e4:15:01:97:33:a0:ce:46:e6: 41:ae:84:1e:83:90:b0:1a:eb:87:77:df:5f:d1:77:8c:ce:80: d1:19:bf:fa -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUaii4Kje+DY8dM9XnKhjI4d1g9DQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyNloX DTI1MDEwNzA0MDAyNlowMzExMC8GA1UEAxMoOTE2RTU1OTY0QjBGOUY1MDZBOERC MTg1RDkzN0VENzUyREJDMTlCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODqUywz56xTcN3uwcXvZbQKeaJ+nQvssv5nG2pDVMQV+CHM1NCt7Fs+Sna2 ghDQf27vLj8c435ciM4ylbsuj+Dw3ZsQLZW6wsylZiOWrws3vVnIpf9SOQkeKsui 6T/MPxri7bakVm9RMH19TH0MrjZ0IDx9IJS+Rgfk2scNkHZzZ5VAO8BtNXMVmpO7 9vm6MOKlrJx96nqeiO3Z3uoLrMnQPmHqq2exOvNpTRyqF1gKtSRYH7EC8LOcuusO nRrlLhbWv7A+iuKvrKTm9LKXI/RF9y3r/G2qCV0RT7xYX+Lt0iVS8EQ1uq/eIs2G +WPsYNVmfp5ZtipI2Icw7XMcJFcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSRblWW Sw+fUGqNsYXZN+11LbwZsDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzEzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGewsTANBgkqhkiG9w0BAQsFAAOCAQEASYzoKmRJrDECsTJMvQXE HSjEz839YKpbrAN/+dTCb5xcU6iJKQXfuPxYTI3Cl3xOGXItKf9D0tYIb2ad7OnB FFMcJ/h3GNuwq/vWt1s36LwJjVgx8yYHpY6xRes39z0Q3QpGoA37rNEr5hRw+KUZ ABRIM4dQ8DHEyTtwXg81mafZn2wQWlS9vSIIxsG9bIvjRjlCF8krDSxbIGwm5b0i mhQXzN6bHHTN5pzGa8S2+FY6SoVdOTYHCLyuiDoDdtjxPC0IvWLud/6QB0Tp+PTl s3KX3eQdWF6GhSXvdA/QQkZu5BUBlzOgzkbmQa6EHoOQsBrrh3ffX9F3jM6A0Rm/ +g== -----END CERTIFICATE-----Generated at Wed May 8 21:02:23 2024 by rpki-client on console-fra.rpki-client.org