$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa File: AS23679.roa (raw, json) Hash identifier: tGSxDeLRADJscG3avRS17HNMuBI8+XF09vRP39X1odA= Subject key identifier: 05:CE:DF:05:31:4C:BE:B6:BE:FD:D1:62:95:88:A2:50:43:31:DF:D4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7CB21D91C5DF65DC8B455D5791E94FA7A844886B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa Signing time: Mon 04 Nov 2024 07:36:08 +0000 ROA not before: Mon 04 Nov 2024 07:31:08 +0000 ROA not after: Mon 03 Nov 2025 07:36:08 +0000 asID: 23679 IP address blocks: 103.31.46.0/24 maxlen: 24 103.114.76.0/24 maxlen: 24 110.232.65.0/24 maxlen: 24 110.232.68.0/23 maxlen: 24 110.232.70.0/24 maxlen: 24 110.232.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b2:1d:91:c5:df:65:dc:8b:45:5d:57:91:e9:4f:a7:a8:44:88:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Nov 4 07:31:08 2024 GMT Not After : Nov 3 07:36:08 2025 GMT Subject: CN=05CEDF05314CBEB6BEFDD1629588A2504331DFD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2a:a9:c1:19:2d:bd:ad:45:01:d6:13:99:4a: d9:7c:bf:60:2a:0a:6e:a8:43:95:7b:7e:98:88:f6: 74:45:49:8a:84:26:23:e3:e2:31:6f:af:68:fb:d4: 8c:57:19:30:55:49:6a:af:33:86:9b:fd:2b:56:0c: e8:47:f4:16:20:6c:05:7f:5b:8d:08:27:c3:0f:4b: ac:5e:ab:7e:45:01:a6:34:6b:ca:17:8e:97:77:15: a7:bb:d8:ca:94:e8:0f:cf:46:c7:16:60:b3:de:1d: 93:27:5e:44:b9:04:0c:8c:aa:1a:86:f5:2a:97:a5: f2:c0:65:b0:97:09:10:00:40:4b:98:a7:f1:96:f9: b8:41:ac:d1:ef:73:42:37:90:56:88:5d:80:91:64: 3e:09:86:5e:3f:5b:29:66:95:8b:48:c5:20:0e:d3: f5:90:b1:2a:35:62:94:de:2c:5a:6a:1d:0a:cb:b6: d8:cb:c2:1e:d1:df:13:1b:20:0e:6e:07:9d:3e:93: 11:18:c2:fa:61:40:30:42:e4:f0:de:f3:6e:c3:15: 35:b8:41:e0:ac:f4:45:bf:ce:58:61:32:02:98:39: c6:44:6e:00:17:cb:43:9c:f9:a0:0b:0a:f0:4d:87: 53:04:d4:4b:d3:ab:49:21:06:11:9e:53:da:81:0c: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CE:DF:05:31:4C:BE:B6:BE:FD:D1:62:95:88:A2:50:43:31:DF:D4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.46.0/24 103.114.76.0/24 110.232.65.0/24 110.232.68.0-110.232.70.255 110.232.91.0/24 Signature Algorithm: sha256WithRSAEncryption 10:aa:f4:a2:71:72:7d:1b:7c:e6:41:c7:86:5f:5b:9c:58:f1: ef:84:7f:65:52:83:35:e5:67:8d:32:d2:e5:a3:29:da:43:c3: 5d:1e:bc:eb:0b:9a:7e:c7:e8:81:89:eb:aa:6d:b2:ee:06:8d: ad:a3:2a:ee:85:7f:e8:bf:52:4d:a5:de:ad:4b:aa:0a:2b:dc: 16:ef:ae:18:10:54:44:22:43:82:31:b7:65:20:04:86:f6:64: 8b:5d:a0:a7:e6:4a:25:e3:53:5a:6e:84:18:26:50:5e:90:6a: 04:12:a6:c5:c1:5b:aa:15:50:c1:a1:46:ca:dc:a5:81:ee:62: bb:9f:5a:4e:9b:ff:5e:11:28:86:41:2a:0b:95:b6:d6:3c:c5: f6:94:72:8b:71:ab:ef:b7:c2:c8:e4:02:d0:a5:a1:6b:f5:d1: d6:48:e7:cf:39:e5:b3:f4:14:05:8e:92:d8:92:c1:7d:8c:cd: e9:c4:08:df:9f:f0:2d:6d:49:13:91:6c:d6:4f:81:fc:e0:b8: 63:55:8b:de:15:6b:ed:28:c9:08:8b:fe:50:6c:6d:47:2c:a3: 24:7b:e9:f4:92:43:de:09:6c:43:34:ec:0e:98:0a:f5:00:f0: e8:e9:e0:e6:cc:04:52:42:db:aa:cb:71:b1:0d:ee:13:4b:77: 4c:5b:13:54 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUfLIdkcXfZdyLRV1XkelPp6hEiGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEwNDA3MzEwOFoX DTI1MTEwMzA3MzYwOFowMzExMC8GA1UEAxMoMDVDRURGMDUzMTRDQkVCNkJFRkRE MTYyOTU4OEEyNTA0MzMxREZENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4qqcEZLb2tRQHWE5lK2Xy/YCoKbqhDlXt+mIj2dEVJioQmI+PiMW+vaPvU jFcZMFVJaq8zhpv9K1YM6Ef0FiBsBX9bjQgnww9LrF6rfkUBpjRryheOl3cVp7vY ypToD89GxxZgs94dkydeRLkEDIyqGob1Kpel8sBlsJcJEABAS5in8Zb5uEGs0e9z QjeQVohdgJFkPgmGXj9bKWaVi0jFIA7T9ZCxKjVilN4sWmodCsu22MvCHtHfExsg Dm4HnT6TERjC+mFAMELk8N7zbsMVNbhB4Kz0Rb/OWGEyApg5xkRuABfLQ5z5oAsK 8E2HUwTUS9OrSSEGEZ5T2oEMw3UCAwEAAaOCAe8wggHrMB0GA1UdDgQWBBQFzt8F MUy+tr790WKViKJQQzHf1DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzIzNjc5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQAZx8uAwQAZ3JMAwQAbuhBMAwDBAJu6EQDBABu6EYDBABu6FswDQYJ KoZIhvcNAQELBQADggEBABCq9KJxcn0bfOZBx4ZfW5xY8e+Ef2VSgzXlZ40y0uWj KdpDw10evOsLmn7H6IGJ66ptsu4Gja2jKu6Ff+i/Uk2l3q1Lqgor3BbvrhgQVEQi Q4Ixt2UgBIb2ZItdoKfmSiXjU1puhBgmUF6QagQSpsXBW6oVUMGhRsrcpYHuYruf Wk6b/14RKIZBKguVttY8xfaUcotxq++3wsjkAtCloWv10dZI58855bP0FAWOktiS wX2MzenECN+f8C1tSRORbNZPgfzguGNVi94Va+0oyQiL/lBsbUcsoyR76fSSQ94J bEM07A6YCvUA8Ojp4ObMBFJC26rLcbEN7hNLd0xbE1Q= -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:02 2025 by rpki-client