$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38505.roa File: AS38505.roa (raw, json) Hash identifier: u8rqY3o52VtnJis8OY3kQADp63Q0vpX/aD0GgkcPfRg= Subject key identifier: 59:08:20:65:DD:E4:12:AB:CE:69:DE:31:99:F9:09:EB:57:E5:D9:26 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3440A3F064AB647770977C1677D30821C825F02F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38505.roa Signing time: Tue 09 Jan 2024 04:00:26 +0000 ROA not before: Tue 09 Jan 2024 03:55:26 +0000 ROA not after: Tue 07 Jan 2025 04:00:26 +0000 asID: 38505 IP address blocks: 103.11.186.0/23 maxlen: 24 203.217.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:40:a3:f0:64:ab:64:77:70:97:7c:16:77:d3:08:21:c8:25:f0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:26 2024 GMT Not After : Jan 7 04:00:26 2025 GMT Subject: CN=59082065DDE412ABCE69DE3199F909EB57E5D926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bc:f3:cc:e6:69:77:3a:95:85:2c:3f:cf:34: f4:08:a7:5b:41:03:6f:b2:df:13:3a:7f:20:95:0a: e9:c1:88:cf:a8:12:ef:dd:a1:23:49:c5:f7:8b:44: 4c:38:45:c1:49:72:01:31:00:2f:3f:4c:9c:1a:b9: 4e:0d:15:35:db:8b:5a:1e:46:24:a2:21:c6:c3:2e: 7d:0e:61:8d:c0:57:25:87:7a:5e:c3:ed:48:b6:66: a4:81:1c:7d:ce:9a:3b:0b:f0:1b:70:2f:da:6d:04: 85:b7:41:3a:a3:c7:7f:58:39:52:24:b2:a0:1a:d9: 49:c9:ad:d3:38:72:16:a8:1e:a0:02:da:ce:07:f6: fb:87:c1:10:a0:65:cd:ed:0d:93:3d:c3:15:fd:49: 95:69:b1:7c:9d:f7:fd:92:3d:f9:73:f7:8d:8c:af: fe:7d:62:51:07:05:0d:b4:bb:c9:e3:d2:43:87:6a: 93:79:2c:95:54:16:c6:14:82:7c:b7:fb:64:c7:ee: 79:83:9a:8e:30:09:de:a1:e9:6d:c8:bb:06:cc:21: c0:b1:2a:57:6a:dd:0f:8f:3a:cc:e5:5e:43:55:2f: 41:a2:35:83:33:49:10:f9:82:b3:b8:9c:50:d4:89: 78:8a:3a:9d:fe:55:cf:0a:3c:96:56:3a:ab:da:23: e2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:08:20:65:DD:E4:12:AB:CE:69:DE:31:99:F9:09:EB:57:E5:D9:26 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38505.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.186.0/23 203.217.132.0/23 Signature Algorithm: sha256WithRSAEncryption 36:f8:8c:b6:19:18:3c:14:01:25:04:42:e2:c0:3e:cf:f2:f0: cf:ef:c6:7f:43:53:84:90:f0:d6:82:94:1c:1c:73:5d:2f:8a: b6:d3:0a:96:e8:1d:cb:80:f2:23:4e:3f:0e:b3:bd:bf:3c:d4: b5:2d:b0:42:04:c8:97:2c:85:e7:41:b7:65:bf:e5:86:17:6c: 9a:b0:b9:b8:0e:17:d9:1d:d4:ad:53:04:1a:fc:67:fb:0f:04: 17:39:e0:6d:6e:17:ba:17:71:a5:e7:50:07:c0:ff:7e:d5:fb: 9e:96:5c:e5:96:2d:ff:e6:3f:61:9b:de:de:ea:cd:8e:bd:7e: ca:b0:eb:12:4b:2e:df:67:df:fb:45:1f:c7:7a:29:a5:a3:c5: 07:4f:c8:44:61:35:0f:23:34:b9:0e:ed:2a:80:c0:cb:25:15: 01:62:00:92:0b:36:2e:86:bc:58:6f:89:4a:b3:76:ea:d5:7f: 0a:1e:12:3c:63:af:49:81:97:bd:02:c2:f4:cb:f0:7f:4b:2c: c9:79:bb:de:57:94:b5:91:6b:36:45:25:32:32:55:fe:75:75: 8f:d7:b2:87:8d:e4:0b:75:3d:86:51:d7:23:d6:20:fc:e3:de: 6a:4e:3d:67:64:02:63:0d:34:d2:c5:9b:28:fb:82:77:ab:75: 2f:6f:0e:3a -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUNECj8GSrZHdwl3wWd9MIIcgl8C8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyNloX DTI1MDEwNzA0MDAyNlowMzExMC8GA1UEAxMoNTkwODIwNjVEREU0MTJBQkNFNjlE RTMxOTlGOTA5RUI1N0U1RDkyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANS888zmaXc6lYUsP8809AinW0EDb7LfEzp/IJUK6cGIz6gS792hI0nF94tE TDhFwUlyATEALz9MnBq5Tg0VNduLWh5GJKIhxsMufQ5hjcBXJYd6XsPtSLZmpIEc fc6aOwvwG3Av2m0EhbdBOqPHf1g5UiSyoBrZScmt0zhyFqgeoALazgf2+4fBEKBl ze0Nkz3DFf1JlWmxfJ33/ZI9+XP3jYyv/n1iUQcFDbS7yePSQ4dqk3kslVQWxhSC fLf7ZMfueYOajjAJ3qHpbci7BswhwLEqV2rdD486zOVeQ1UvQaI1gzNJEPmCs7ic UNSJeIo6nf5Vzwo8llY6q9oj4ksCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBRZCCBl 3eQSq85p3jGZ+QnrV+XZJjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4NTA1LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZwu6AwQBy9mEMA0GCSqGSIb3DQEBCwUAA4IBAQA2+Iy2GRg8FAEl BELiwD7P8vDP78Z/Q1OEkPDWgpQcHHNdL4q20wqW6B3LgPIjTj8Os72/PNS1LbBC BMiXLIXnQbdlv+WGF2yasLm4DhfZHdStUwQa/Gf7DwQXOeBtbhe6F3Gl51AHwP9+ 1fuellzlli3/5j9hm97e6s2OvX7KsOsSSy7fZ9/7RR/Heimlo8UHT8hEYTUPIzS5 Du0qgMDLJRUBYgCSCzYuhrxYb4lKs3bq1X8KHhI8Y69JgZe9AsL0y/B/SyzJebve V5S1kWs2RSUyMlX+dXWP17KHjeQLdT2GUdcj1iD8495qTj1nZAJjDTTSxZso+4J3 q3Uvbw46 -----END CERTIFICATE-----Generated at Wed May 8 17:45:24 2024 by rpki-client on console-ams.rpki-client.org