$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38505.roa File: AS38505.roa (raw, json) Hash identifier: WFYbIoLpl6zer5Y1vxLCQ0Ol9ELyxRmQz/+sB3t/qpY= Subject key identifier: 3F:91:18:2C:D1:87:7E:7F:D2:52:6E:19:F2:95:64:C6:70:F2:14:CF Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1A63B2E8E810ED7942069D86F9127E7B32A03ACA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38505.roa Signing time: Tue 10 Dec 2024 05:00:21 +0000 ROA not before: Tue 10 Dec 2024 04:55:21 +0000 ROA not after: Tue 09 Dec 2025 05:00:21 +0000 asID: 38505 IP address blocks: 103.11.186.0/23 maxlen: 24 203.217.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:63:b2:e8:e8:10:ed:79:42:06:9d:86:f9:12:7e:7b:32:a0:3a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:21 2024 GMT Not After : Dec 9 05:00:21 2025 GMT Subject: CN=3F91182CD1877E7FD2526E19F29564C670F214CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:e0:bf:7f:a8:9f:b6:cc:53:2b:2f:f5:f6: fb:af:a2:c3:36:e0:dd:9f:87:b0:0c:aa:45:51:d7: d5:37:14:e5:68:2e:17:92:78:02:cf:a6:4f:7b:a3: b0:92:6c:90:c1:35:59:ed:d6:95:ee:64:70:d5:7b: d5:c2:db:65:c4:01:ad:46:5c:cf:7d:ae:25:ee:23: aa:f4:66:7c:e7:57:8a:80:fd:1f:34:fc:5e:26:68: c9:8a:3c:b2:fe:6a:0b:fc:7d:d3:00:dc:a0:e1:ba: 04:6c:27:f6:6f:43:31:7e:fe:1c:9e:94:60:b8:44: ae:b9:dc:47:c6:29:8c:b1:96:f6:32:96:d1:43:36: 4b:36:0c:79:44:1a:52:bf:09:31:ab:2d:e0:eb:b1: c1:5b:09:ab:d9:af:b1:83:35:98:67:d7:d8:41:a1: ec:00:2b:3a:9c:ef:22:1e:d2:1a:e0:c6:91:50:d6: aa:96:e1:ec:7f:c7:24:4c:b2:3f:ef:69:d4:43:9f: b0:10:6d:9b:6d:9c:b2:a0:7f:f1:6b:0b:73:de:ef: 6d:31:5d:fd:43:a6:1f:02:f5:11:c7:80:98:8c:71: 4d:7f:06:5c:01:9d:3e:0f:64:4f:e3:4b:54:ba:77: 7f:ba:32:81:53:ce:8d:05:ba:e5:c8:33:a4:ed:47: 6c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:91:18:2C:D1:87:7E:7F:D2:52:6E:19:F2:95:64:C6:70:F2:14:CF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38505.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.186.0/23 203.217.132.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:95:56:04:85:71:e2:18:a3:b3:26:2c:84:e8:d3:9a:21:97: 7e:a7:bc:a3:f3:69:4e:14:b1:63:99:1d:db:ef:2d:30:63:ff: 7d:b4:21:fb:fc:98:65:17:65:c7:91:2c:43:27:14:7f:e1:b0: 0a:82:94:16:a6:c6:14:6b:61:fa:ba:ff:9b:47:61:bf:61:3d: 0e:e0:2f:84:d8:87:de:3e:cc:31:f5:3c:d9:4a:46:ec:fa:ca: 51:18:6d:fb:45:44:89:d5:c0:7b:8f:da:fc:88:cf:2f:76:42: a9:11:36:47:31:f5:46:62:a3:28:1d:68:aa:fc:a8:3f:62:5d: 72:a5:d6:8b:6d:b4:3a:89:1e:2b:c0:39:cf:41:ac:7b:b8:44: f4:9a:e0:b1:b7:c9:90:5b:b5:e9:1d:f8:d9:bd:24:1e:25:ed: b8:3a:24:24:de:08:9f:36:6d:d7:62:20:9c:d8:9e:4e:4a:d7: 1e:2e:b9:a1:03:89:01:0d:23:91:cd:f1:3b:45:d6:1d:d1:7c: 32:5f:f5:50:e1:8a:3b:22:8e:f2:0c:bc:47:54:08:6d:cf:e1: 49:ae:2c:ca:98:e4:ee:9e:19:99:60:02:07:92:fe:d9:df:7a: 57:f2:3d:bb:3b:46:2c:0e:84:2e:15:64:72:79:e7:d2:02:ac: 6f:a0:87:38 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUGmOy6OgQ7XlCBp2G+RJ+ezKgOsowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUyMVoX DTI1MTIwOTA1MDAyMVowMzExMC8GA1UEAxMoM0Y5MTE4MkNEMTg3N0U3RkQyNTI2 RTE5RjI5NTY0QzY3MEYyMTRDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHm4L9/qJ+2zFMrL/X2+6+iwzbg3Z+HsAyqRVHX1TcU5WguF5J4As+mT3uj sJJskME1We3Wle5kcNV71cLbZcQBrUZcz32uJe4jqvRmfOdXioD9HzT8XiZoyYo8 sv5qC/x90wDcoOG6BGwn9m9DMX7+HJ6UYLhErrncR8YpjLGW9jKW0UM2SzYMeUQa Ur8JMast4OuxwVsJq9mvsYM1mGfX2EGh7AArOpzvIh7SGuDGkVDWqpbh7H/HJEyy P+9p1EOfsBBtm22csqB/8WsLc97vbTFd/UOmHwL1EceAmIxxTX8GXAGdPg9kT+NL VLp3f7oygVPOjQW65cgzpO1HbLcCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBQ/kRgs 0Yd+f9JSbhnylWTGcPIUzzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4NTA1LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZwu6AwQBy9mEMA0GCSqGSIb3DQEBCwUAA4IBAQBflVYEhXHiGKOz JiyE6NOaIZd+p7yj82lOFLFjmR3b7y0wY/99tCH7/JhlF2XHkSxDJxR/4bAKgpQW psYUa2H6uv+bR2G/YT0O4C+E2IfePswx9TzZSkbs+spRGG37RUSJ1cB7j9r8iM8v dkKpETZHMfVGYqMoHWiq/Kg/Yl1ypdaLbbQ6iR4rwDnPQax7uET0muCxt8mQW7Xp HfjZvSQeJe24OiQk3gifNm3XYiCc2J5OStceLrmhA4kBDSORzfE7RdYd0XwyX/VQ 4Yo7Io7yDLxHVAhtz+FJrizKmOTunhmZYAIHkv7Z33pX8j27O0YsDoQuFWRyeefS AqxvoIc4 -----END CERTIFICATE-----Generated at Sat Apr 5 06:22:27 2025 by rpki-client