$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17769.roa File: AS17769.roa (raw, json) Hash identifier: C+tKpmlgGbNk9dUlliORb3JGgsqfZWL93UYiNjtqYbc= Subject key identifier: 1E:A1:99:DF:7C:1D:3C:70:D8:55:F4:C3:FD:29:72:6E:B7:57:6E:93 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 08DA6CC644AF557EB4B7F228C7878FCB20886C56 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17769.roa Signing time: Tue 09 Jan 2024 04:00:26 +0000 ROA not before: Tue 09 Jan 2024 03:55:26 +0000 ROA not after: Tue 07 Jan 2025 04:00:26 +0000 asID: 17769 IP address blocks: 103.158.70.0/23 maxlen: 24 103.158.72.0/23 maxlen: 24 103.158.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 08:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:da:6c:c6:44:af:55:7e:b4:b7:f2:28:c7:87:8f:cb:20:88:6c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:26 2024 GMT Not After : Jan 7 04:00:26 2025 GMT Subject: CN=1EA199DF7C1D3C70D855F4C3FD29726EB7576E93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:75:62:3c:36:40:f2:2b:c3:87:4f:9b:62: 59:e3:b7:97:13:df:a0:bf:9b:5e:63:94:0c:26:03: 64:86:33:a9:eb:bf:4f:7d:82:fa:48:5e:6d:76:47: cc:b2:d9:fa:d6:c6:0f:83:32:50:c0:bd:58:d9:c3: 7c:37:db:15:ae:93:8c:2a:30:12:66:43:42:9c:68: 93:8e:b2:e9:00:53:d8:2a:12:f5:5d:bc:d5:33:c4: 96:dd:5d:f3:ea:02:5c:34:c7:bc:5b:3b:ce:97:12: fe:41:e6:7f:29:7f:4f:09:6d:4e:3e:96:24:bd:87: 9d:b5:9f:d2:d0:46:16:fe:93:51:58:a8:1b:6d:c2: fd:58:7b:c8:29:ae:d6:93:6b:09:4d:5b:7c:d4:e3: 9d:d3:e3:f9:27:d6:dc:8b:98:a1:3f:1a:ce:58:c0: 3e:4c:a9:bf:b4:6f:0e:1a:4a:04:c4:61:e4:8a:b3: 87:39:59:de:22:e7:5e:af:41:1c:b3:bd:af:a9:55: 56:ae:1b:e8:c4:27:5f:83:7f:ec:e3:df:f9:a3:0c: 0e:c5:23:4c:c5:b3:49:ee:e2:92:57:52:92:77:67: 06:1b:18:41:80:3a:3b:c7:b5:00:d5:6f:28:78:e7: 65:e8:97:af:10:4e:6b:b6:39:19:92:36:28:b1:45: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A1:99:DF:7C:1D:3C:70:D8:55:F4:C3:FD:29:72:6E:B7:57:6E:93 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17769.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.70.0-103.158.73.255 103.158.164.0/23 Signature Algorithm: sha256WithRSAEncryption 71:bc:cd:37:9f:66:0b:df:0e:78:23:e6:c3:bc:1d:14:7a:d0: 26:a1:f5:50:c0:1a:e9:de:6d:a1:fe:50:90:77:77:1b:ac:68: 36:57:b7:a3:8b:86:66:4b:06:40:76:9b:67:30:d2:0d:b4:23: ce:9c:64:3d:58:bc:49:bd:8b:4a:c9:17:c4:76:da:6a:f2:01: 09:a1:c5:ad:60:9a:1e:ff:cc:0e:33:60:ff:d8:c5:b1:c7:be: 4b:bb:e3:4d:b5:f4:a4:5a:95:17:85:8e:03:ad:c5:18:58:5b: a4:0e:96:14:6b:32:19:6d:57:3a:5c:0a:be:2d:de:a6:66:b8: a8:9e:71:41:1d:35:02:50:c1:c1:9e:10:53:7c:7a:fc:7e:6d: 6a:48:9f:6f:6d:56:d9:31:e6:5e:29:62:3b:db:d9:ca:2b:58: 0a:24:a8:7e:62:4c:4e:68:43:f3:d4:55:71:69:17:2e:4a:a9: ec:ad:b9:c9:09:b0:b1:0c:f0:99:8b:ac:6c:60:f3:17:3a:93: 54:be:68:6f:ac:1d:1c:e9:72:23:ac:86:55:d8:9d:e0:c8:71: 60:53:89:24:d3:b0:8f:93:0c:65:97:b1:e3:8b:00:a7:da:f9: 74:23:5c:d3:c1:33:09:77:70:6a:35:15:ab:2a:b6:ff:f5:cc: cb:7a:56:9d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCNpsxkSvVX60t/Iox4ePyyCIbFYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyNloX DTI1MDEwNzA0MDAyNlowMzExMC8GA1UEAxMoMUVBMTk5REY3QzFEM0M3MEQ4NTVG NEMzRkQyOTcyNkVCNzU3NkU5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJmbdWI8NkDyK8OHT5tiWeO3lxPfoL+bXmOUDCYDZIYzqeu/T32C+khebXZH zLLZ+tbGD4MyUMC9WNnDfDfbFa6TjCowEmZDQpxok46y6QBT2CoS9V281TPElt1d 8+oCXDTHvFs7zpcS/kHmfyl/TwltTj6WJL2HnbWf0tBGFv6TUVioG23C/Vh7yCmu 1pNrCU1bfNTjndPj+SfW3IuYoT8azljAPkypv7RvDhpKBMRh5IqzhzlZ3iLnXq9B HLO9r6lVVq4b6MQnX4N/7OPf+aMMDsUjTMWzSe7ikldSkndnBhsYQYA6O8e1ANVv KHjnZeiXrxBOa7Y5GZI2KLFFeHUCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQeoZnf fB08cNhV9MP9KXJut1dukzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE3NzY5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAFnnkYDBAFnnkgDBAFnnqQwDQYJKoZIhvcNAQELBQADggEBAHG8 zTefZgvfDngj5sO8HRR60Cah9VDAGunebaH+UJB3dxusaDZXt6OLhmZLBkB2m2cw 0g20I86cZD1YvEm9i0rJF8R22mryAQmhxa1gmh7/zA4zYP/YxbHHvku740219KRa lReFjgOtxRhYW6QOlhRrMhltVzpcCr4t3qZmuKiecUEdNQJQwcGeEFN8evx+bWpI n29tVtkx5l4pYjvb2corWAokqH5iTE5oQ/PUVXFpFy5KqeytuckJsLEM8JmLrGxg 8xc6k1S+aG+sHRzpciOshlXYneDIcWBTiSTTsI+TDGWXseOLAKfa+XQjXNPBMwl3 cGo1Fasqtv/1zMt6Vp0= -----END CERTIFICATE-----Generated at Thu May 2 03:11:00 2024 by rpki-client on console-ams.rpki-client.org