$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17884.roa File: AS17884.roa (raw, json) Hash identifier: yF9wL880NQDP8pRT2knlAVaDhO0FM+9/nzq//7ItCbw= Subject key identifier: 53:0D:ED:C4:37:7E:CC:AE:83:8C:56:65:44:C0:21:27:AA:B9:19:4A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 733DCC61F9E0725C0DAB580D76756E61072F100B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17884.roa Signing time: Tue 09 Jan 2024 04:00:17 +0000 ROA not before: Tue 09 Jan 2024 03:55:17 +0000 ROA not after: Tue 07 Jan 2025 04:00:17 +0000 asID: 17884 IP address blocks: 103.158.56.0/23 maxlen: 24 103.174.234.0/23 maxlen: 24 202.145.0.0/22 maxlen: 24 2402:7980::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3d:cc:61:f9:e0:72:5c:0d:ab:58:0d:76:75:6e:61:07:2f:10:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:17 2024 GMT Not After : Jan 7 04:00:17 2025 GMT Subject: CN=530DEDC4377ECCAE838C566544C02127AAB9194A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:5b:f7:3b:45:f6:e4:23:9c:fd:53:31:f9: 96:99:4b:88:cf:5e:04:55:6c:93:1a:8a:f6:8f:91: 65:af:e6:48:29:e8:2d:c1:52:56:5f:80:42:18:fa: e6:db:49:92:41:39:00:dd:3b:2f:32:f6:1b:7e:69: 02:a5:e7:69:b1:62:22:7e:5e:50:2d:72:06:90:03: ab:86:ab:bb:e6:da:f9:0d:f8:0e:20:1d:2f:2e:bc: 9e:1d:c3:c1:35:3f:a8:9b:3a:ef:10:af:aa:ec:c8: 73:b0:ea:64:b4:d9:60:e8:27:64:a2:4b:15:51:8f: 21:04:62:a9:ce:1e:d7:8e:41:c1:f0:a7:7f:0f:00: bd:e6:a2:85:d4:fd:e7:84:9a:11:5a:d2:fd:00:93: 75:9f:02:0d:3b:88:43:df:77:e0:4b:d7:be:e2:86: a4:a2:35:41:5b:27:3d:7a:3a:59:8d:08:51:a4:de: 2d:7d:47:54:71:88:b8:ae:89:25:f3:c8:c9:11:e4: 30:ae:e4:fa:c5:2c:b5:ca:5c:44:1c:ad:98:55:0f: f1:06:4b:d7:cc:28:e9:ee:d8:4f:b6:7e:3e:29:75: a9:fa:df:a9:78:46:33:4a:c9:3a:1b:e4:44:e6:7e: a9:fd:fe:8d:f2:19:f6:01:6d:53:6c:aa:33:22:8f: 81:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0D:ED:C4:37:7E:CC:AE:83:8C:56:65:44:C0:21:27:AA:B9:19:4A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17884.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.56.0/23 103.174.234.0/23 202.145.0.0/22 IPv6: 2402:7980::/32 Signature Algorithm: sha256WithRSAEncryption 04:23:0b:76:dd:54:82:00:66:c2:32:7f:8a:3a:a5:89:89:2d: 16:bc:bd:b6:a9:5e:8a:9a:4e:19:f1:2c:82:53:5d:43:9a:ae: 96:f2:42:94:ab:7d:26:84:cb:6e:9d:1b:bc:fe:ab:b0:62:d6: a4:26:8e:d7:f1:14:8a:cd:d4:48:80:7d:23:e5:9b:07:59:20: 03:5a:33:66:a5:7e:b9:63:8d:25:f5:88:7e:d8:a4:bc:f9:a1: 91:13:a7:cb:77:76:cb:54:1f:62:12:22:da:15:48:f3:bb:4f: f8:38:a4:21:ca:7a:97:73:2c:07:45:e0:3e:6f:dc:a6:94:77: 99:1e:8f:fc:5c:50:c5:db:ca:36:bd:56:fc:6c:4b:8f:18:66: 7d:bb:a6:ad:dd:03:9e:5e:1d:6d:70:65:03:70:db:de:b8:6d: e8:16:22:4d:5d:00:f6:8e:ad:0c:6b:98:a6:9e:48:b3:ad:bc: b5:78:27:38:c4:e1:a0:a2:a5:9f:aa:93:3a:be:c7:f0:f9:bc: 03:29:8b:b3:c5:54:48:91:cb:18:15:48:4f:d5:b9:b8:1e:25: 6b:41:dd:7a:ad:66:cf:5c:6d:ec:d4:46:90:88:8d:3c:0c:c2: 7e:9b:75:b7:9a:9a:54:d3:1b:fb:9e:19:59:82:5a:d4:1d:ea: 7c:94:cc:bf -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUcz3MYfngclwNq1gNdnVuYQcvEAswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxN1oX DTI1MDEwNzA0MDAxN1owMzExMC8GA1UEAxMoNTMwREVEQzQzNzdFQ0NBRTgzOEM1 NjY1NDRDMDIxMjdBQUI5MTk0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSGW/c7RfbkI5z9UzH5lplLiM9eBFVskxqK9o+RZa/mSCnoLcFSVl+AQhj6 5ttJkkE5AN07LzL2G35pAqXnabFiIn5eUC1yBpADq4aru+ba+Q34DiAdLy68nh3D wTU/qJs67xCvquzIc7DqZLTZYOgnZKJLFVGPIQRiqc4e145BwfCnfw8AveaihdT9 54SaEVrS/QCTdZ8CDTuIQ9934EvXvuKGpKI1QVsnPXo6WY0IUaTeLX1HVHGIuK6J JfPIyRHkMK7k+sUstcpcRBytmFUP8QZL18wo6e7YT7Z+Pil1qfrfqXhGM0rJOhvk ROZ+qf3+jfIZ9gFtU2yqMyKPgVUCAwEAAaOCAeowggHmMB0GA1UdDgQWBBRTDe3E N37MroOMVmVEwCEnqrkZSjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE3ODg0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQBZ544AwQBZ67qAwQCypEAMA0EAgACMAcDBQAkAnmAMA0GCSqGSIb3 DQEBCwUAA4IBAQAEIwt23VSCAGbCMn+KOqWJiS0WvL22qV6Kmk4Z8SyCU11Dmq6W 8kKUq30mhMtunRu8/quwYtakJo7X8RSKzdRIgH0j5ZsHWSADWjNmpX65Y40l9Yh+ 2KS8+aGRE6fLd3bLVB9iEiLaFUjzu0/4OKQhynqXcywHReA+b9ymlHeZHo/8XFDF 28o2vVb8bEuPGGZ9u6at3QOeXh1tcGUDcNveuG3oFiJNXQD2jq0Ma5imnkizrby1 eCc4xOGgoqWfqpM6vsfw+bwDKYuzxVRIkcsYFUhP1bm4HiVrQd16rWbPXG3s1EaQ iI08DMJ+m3W3mppU0xv7nhlZglrUHep8lMy/ -----END CERTIFICATE-----Generated at Sun May 5 00:13:53 2024 by rpki-client on console-ams.rpki-client.org