$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38760.roa File: AS38760.roa (raw, json) Hash identifier: fSpRo3aBk+5BA8AfNV2izeNG5bfYevpjl6iQjFlWHlY= Subject key identifier: A6:4B:6F:DE:C1:71:B5:D1:18:E3:CF:9C:B3:D4:65:30:4F:3E:DF:B9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 14CBECFC40981B6E6259FFE969DAEFE7F3FD6742 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38760.roa Signing time: Fri 06 Sep 2024 03:00:00 +0000 ROA not before: Fri 06 Sep 2024 02:55:00 +0000 ROA not after: Fri 05 Sep 2025 03:00:00 +0000 asID: 38760 IP address blocks: 103.4.52.0/23 maxlen: 24 103.99.164.0/22 maxlen: 24 2400:9b60::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:cb:ec:fc:40:98:1b:6e:62:59:ff:e9:69:da:ef:e7:f3:fd:67:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 6 02:55:00 2024 GMT Not After : Sep 5 03:00:00 2025 GMT Subject: CN=A64B6FDEC171B5D118E3CF9CB3D465304F3EDFB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ea:50:cf:bd:de:f4:08:91:82:d7:cf:f0:10: 65:a9:3c:e8:b3:05:19:9a:46:0a:aa:65:cb:b9:0c: 09:25:c3:3b:e2:e8:6f:89:24:2d:fa:27:c8:9e:00: f4:7a:3f:c3:90:47:0c:82:ed:59:a5:5d:8d:9f:27: 09:4a:3d:21:d8:fc:9b:3d:a3:fa:ff:17:ad:1a:fe: 23:bc:00:11:b6:07:03:0c:da:18:ec:05:66:66:4c: eb:59:8f:5d:3a:69:dc:59:5c:59:f6:65:e4:5e:91: 63:95:6f:2c:fd:5a:86:2c:c8:52:77:e9:96:df:a2: 43:cd:36:66:d0:82:90:ee:c2:b4:fd:4c:50:f4:ce: 85:a2:2b:6c:86:8d:54:cb:ec:d9:03:e4:99:87:35: ca:6d:7e:75:13:f9:ba:ad:01:53:40:73:d0:65:02: 4a:30:5b:ff:0c:b9:69:b2:b8:9e:db:be:69:ed:0b: 9e:ed:25:f4:89:dc:81:23:61:7e:87:ab:dd:1f:95: bc:94:e2:c1:78:db:6a:f6:60:11:57:f3:66:93:32: ce:2e:71:de:c8:4e:7e:e5:dd:ea:b6:53:c4:ab:1c: 52:ac:5f:fe:0b:23:07:bc:83:5a:44:79:ef:e8:1d: 31:bb:d4:bf:c6:c1:6b:c5:07:e3:f9:20:91:ab:29: b5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4B:6F:DE:C1:71:B5:D1:18:E3:CF:9C:B3:D4:65:30:4F:3E:DF:B9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38760.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.52.0/23 103.99.164.0/22 IPv6: 2400:9b60::/32 Signature Algorithm: sha256WithRSAEncryption 24:e3:42:3f:f3:0c:e8:ac:08:5f:47:7d:3b:a6:49:d3:2b:44: 53:d5:9f:ee:09:7a:35:21:54:b5:0d:d4:b3:bc:df:6e:87:e8: 61:91:15:bb:c7:5a:70:04:0e:74:b3:7a:80:3e:49:f1:9f:6f: b9:b5:26:08:c8:8c:aa:ec:be:f8:4d:32:c7:63:7b:60:fb:b5: 8b:e1:1e:f9:b8:43:fc:f5:b2:d3:34:86:79:3c:9b:f4:90:5a: 4c:fb:86:1d:85:85:48:7b:10:b8:a2:33:83:98:12:b6:7f:ff: 15:b1:ca:7c:1e:0e:9c:4e:86:f7:e4:ab:3f:fa:22:11:22:f8: c9:d7:fa:ae:19:fa:43:58:a8:fb:a1:60:73:26:3d:e9:6b:c0: 9d:5c:2d:28:f7:7d:3b:99:f2:15:83:4e:6f:bf:bf:39:d7:96: d9:b0:ad:09:d1:2d:ca:c9:2d:42:d9:e9:33:24:4a:76:4d:b3: c1:90:75:c9:39:05:c8:8c:78:88:9a:ca:ac:d0:56:0c:76:45: 20:5c:27:be:82:e9:21:cc:22:35:a3:dd:ae:9e:94:30:48:1d: 8e:d2:2d:33:1d:7a:ba:03:11:a4:47:f3:f4:0a:cc:e4:13:7e: 5c:de:c8:05:6a:08:f3:9c:55:9c:01:40:36:0e:02:4a:c4:ff: bf:6a:42:f8 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUFMvs/ECYG25iWf/padrv5/P9Z0IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkwNjAyNTUwMFoX DTI1MDkwNTAzMDAwMFowMzExMC8GA1UEAxMoQTY0QjZGREVDMTcxQjVEMTE4RTND RjlDQjNENDY1MzA0RjNFREZCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7qUM+93vQIkYLXz/AQZak86LMFGZpGCqply7kMCSXDO+Lob4kkLfonyJ4A 9Ho/w5BHDILtWaVdjZ8nCUo9Idj8mz2j+v8XrRr+I7wAEbYHAwzaGOwFZmZM61mP XTpp3FlcWfZl5F6RY5VvLP1ahizIUnfplt+iQ802ZtCCkO7CtP1MUPTOhaIrbIaN VMvs2QPkmYc1ym1+dRP5uq0BU0Bz0GUCSjBb/wy5abK4ntu+ae0Lnu0l9IncgSNh foer3R+VvJTiwXjbavZgEVfzZpMyzi5x3shOfuXd6rZTxKscUqxf/gsjB7yDWkR5 7+gdMbvUv8bBa8UH4/kgkasptTECAwEAAaOCAeQwggHgMB0GA1UdDgQWBBSmS2/e wXG10Rjjz5yz1GUwTz7fuTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4NzYwLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZwQ0AwQCZ2OkMA0EAgACMAcDBQAkAJtgMA0GCSqGSIb3DQEBCwUA A4IBAQAk40I/8wzorAhfR307pknTK0RT1Z/uCXo1IVS1DdSzvN9uh+hhkRW7x1pw BA50s3qAPknxn2+5tSYIyIyq7L74TTLHY3tg+7WL4R75uEP89bLTNIZ5PJv0kFpM +4YdhYVIexC4ojODmBK2f/8Vscp8Hg6cTob35Ks/+iIRIvjJ1/quGfpDWKj7oWBz Jj3pa8CdXC0o9307mfIVg05vv78515bZsK0J0S3KyS1C2ekzJEp2TbPBkHXJOQXI jHiImsqs0FYMdkUgXCe+gukhzCI1o92unpQwSB2O0i0zHXq6AxGkR/P0CszkE35c 3sgFagjznFWcAUA2DgJKxP+/akL4 -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:30 2024 by rpki-client on console-ams.rpki-client.org