$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38165.roa File: AS38165.roa (raw, json) Hash identifier: SaGUHFUQ+ifSiGVZDPIgbxYTnOTKzN830JSC8tZmrzs= Subject key identifier: 9C:00:E6:8B:14:37:8B:18:6C:AE:A3:D0:5C:7A:07:4A:3C:89:09:43 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 127F480D195548B2515CCA5F6557615250593A6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38165.roa Signing time: Tue 19 Nov 2024 07:00:00 +0000 ROA not before: Tue 19 Nov 2024 06:55:00 +0000 ROA not after: Tue 18 Nov 2025 07:00:00 +0000 asID: 38165 IP address blocks: 103.17.182.0/23 maxlen: 24 103.247.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7f:48:0d:19:55:48:b2:51:5c:ca:5f:65:57:61:52:50:59:3a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 19 06:55:00 2024 GMT Not After : Nov 18 07:00:00 2025 GMT Subject: CN=9C00E68B14378B186CAEA3D05C7A074A3C890943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:ab:4a:ac:bf:c9:b7:16:a2:01:16:f9:78: 12:31:b7:68:26:65:1c:a8:1a:35:64:94:9e:87:0f: ed:9a:e3:7b:a2:b4:c8:aa:14:9b:bd:75:1a:61:b7: d6:2c:a3:69:bd:4d:12:ec:f7:76:9c:26:2e:c0:bc: af:cd:96:12:b9:14:1b:73:ba:cd:4b:98:9e:06:0c: 49:52:a3:88:1e:83:d8:60:d6:5f:2c:9a:05:70:b2: 92:b9:7d:6b:d9:a1:60:0d:f6:f9:f1:b3:25:b1:fe: b7:1a:89:fb:39:68:78:59:83:a7:bd:21:86:78:56: db:22:db:4e:8f:11:3b:f5:18:0b:25:56:e9:4a:7d: a2:45:2f:15:95:12:83:d0:09:62:3f:4e:b9:86:80: e0:cb:bb:00:2b:1a:f8:ea:e7:52:c4:91:61:47:3a: cc:09:77:53:d2:9e:88:8d:4f:10:75:60:62:58:3f: d3:e0:d1:73:bc:3d:c8:79:06:0f:dc:96:51:86:16: 69:4e:84:2c:28:51:e4:71:43:f9:97:aa:fb:03:b4: b7:9d:60:a5:78:cf:e8:b7:74:11:c5:3e:06:cc:3e: 4b:87:94:03:37:f0:b2:03:8a:36:27:89:1a:db:e9: 64:9a:41:fc:1b:d0:8f:03:ca:2c:06:cb:a9:8f:84: 9d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:00:E6:8B:14:37:8B:18:6C:AE:A3:D0:5C:7A:07:4A:3C:89:09:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38165.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.182.0/23 103.247.16.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:31:66:2a:54:7a:75:4f:ad:65:8f:92:79:d5:ac:8d:28:9a: c5:38:e8:a1:79:ec:db:b9:0c:e1:8d:98:a1:eb:2f:44:4c:b7: 9f:3a:9c:67:a8:ba:ae:69:70:18:86:1b:b0:ed:91:95:b9:46: 6f:59:2f:84:3b:47:83:f5:a1:c5:a3:9b:ed:cf:ad:93:95:dc: 81:c6:f6:4f:7c:16:03:6f:73:ff:63:d8:a1:6d:8d:6c:da:0b: 8f:43:d7:8e:df:35:5e:1e:50:38:ac:ca:03:96:58:5f:f9:4d: aa:65:b9:ce:c1:60:e7:ca:2f:fc:d0:6f:76:8a:eb:52:bb:55: 7f:cb:ce:3f:b2:c0:ac:92:f9:1a:bb:28:3a:ab:37:6b:dc:33: d7:c9:ca:1c:60:8c:15:b7:50:12:6c:b7:85:41:e9:2b:d7:44: f1:d2:3c:20:aa:cd:9c:93:48:97:f0:e6:a7:24:78:62:c6:ac: 01:2d:92:f2:22:af:23:b1:8e:b5:a8:54:9c:22:5c:7f:56:89: a1:69:9b:75:67:89:7a:6e:a8:ae:2e:c4:1c:6d:37:fe:f5:22: f5:66:90:3e:d8:c7:9d:76:58:92:d5:0b:4e:78:4e:69:68:00: 47:78:31:f0:81:82:c9:4d:a0:3e:7c:f2:27:13:62:e7:04:cb: 86:45:2a:9b -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUEn9IDRlVSLJRXMpfZVdhUlBZOm8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTExOTA2NTUwMFoX DTI1MTExODA3MDAwMFowMzExMC8GA1UEAxMoOUMwMEU2OEIxNDM3OEIxODZDQUVB M0QwNUM3QTA3NEEzQzg5MDk0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM64q0qsv8m3FqIBFvl4EjG3aCZlHKgaNWSUnocP7Zrje6K0yKoUm711GmG3 1iyjab1NEuz3dpwmLsC8r82WErkUG3O6zUuYngYMSVKjiB6D2GDWXyyaBXCykrl9 a9mhYA32+fGzJbH+txqJ+zloeFmDp70hhnhW2yLbTo8RO/UYCyVW6Up9okUvFZUS g9AJYj9OuYaA4Mu7ACsa+OrnUsSRYUc6zAl3U9KeiI1PEHVgYlg/0+DRc7w9yHkG D9yWUYYWaU6ELChR5HFD+Zeq+wO0t51gpXjP6Ld0EcU+Bsw+S4eUAzfwsgOKNieJ GtvpZJpB/BvQjwPKLAbLqY+EnV8CAwEAAaOCAdUwggHRMB0GA1UdDgQWBBScAOaL FDeLGGyuo9BcegdKPIkJQzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4MTY1LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZxG2AwQBZ/cQMA0GCSqGSIb3DQEBCwUAA4IBAQAdMWYqVHp1T61l j5J51ayNKJrFOOiheezbuQzhjZih6y9ETLefOpxnqLquaXAYhhuw7ZGVuUZvWS+E O0eD9aHFo5vtz62TldyBxvZPfBYDb3P/Y9ihbY1s2guPQ9eO3zVeHlA4rMoDllhf +U2qZbnOwWDnyi/80G92iutSu1V/y84/ssCskvkauyg6qzdr3DPXycocYIwVt1AS bLeFQekr10Tx0jwgqs2ck0iX8OanJHhixqwBLZLyIq8jsY61qFScIlx/VomhaZt1 Z4l6bqiuLsQcbTf+9SL1ZpA+2MeddliS1QtOeE5paABHeDHwgYLJTaA+fPInE2Ln BMuGRSqb -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:30 2024 by rpki-client on console-ams.rpki-client.org