$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45312.roa File: AS45312.roa (raw, json) Hash identifier: C9QxK670oOi9Git6hAe4Cj5/xnYYdDwiVrBjaiU5jr0= Subject key identifier: 86:1C:57:75:7D:0A:20:42:A7:1B:CA:7F:37:B9:16:C9:90:10:99:1A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0E61FE9CD68EBF6D4655777FA66BF50C13735E7C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45312.roa Signing time: Tue 10 Dec 2024 05:00:09 +0000 ROA not before: Tue 10 Dec 2024 04:55:09 +0000 ROA not after: Tue 09 Dec 2025 05:00:09 +0000 asID: 45312 IP address blocks: 103.134.66.0/23 maxlen: 24 2001:df7:bd00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:61:fe:9c:d6:8e:bf:6d:46:55:77:7f:a6:6b:f5:0c:13:73:5e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:09 2024 GMT Not After : Dec 9 05:00:09 2025 GMT Subject: CN=861C57757D0A2042A71BCA7F37B916C99010991A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cd:7b:71:b9:94:57:7a:70:40:5b:62:43:cc: eb:83:6e:e0:1d:df:21:3a:c4:70:52:df:5b:2c:be: af:f8:72:00:b6:e9:16:27:b3:be:5c:e4:39:0e:b1: fa:a1:f8:22:b3:47:7a:b7:78:44:19:fc:c5:65:3e: 6a:2c:7c:31:98:ab:84:70:a8:b2:ba:b8:16:98:8f: 2c:36:5a:af:18:4f:d5:58:7f:0d:cb:dd:03:d6:0c: 9c:24:cd:ec:00:cf:de:08:77:14:62:5d:d4:ac:0f: c8:0c:30:a7:53:61:d0:e2:88:08:ec:29:df:92:e2: 6c:4e:b3:23:a1:e9:ae:33:c4:41:27:a5:ef:c1:93: 40:51:6b:53:c9:39:2f:d1:11:2c:bd:38:61:be:bc: d5:85:d0:d2:44:98:62:dd:fd:64:84:fd:c2:7a:ae: 08:cb:b1:c7:ee:0c:06:b3:d0:fa:a3:90:b6:cf:04: 3d:16:0b:b8:fb:b5:c7:60:af:70:67:52:68:10:49: f5:e7:36:b4:6a:89:54:c6:19:db:a0:70:5d:fe:94: b7:ef:9c:24:c4:93:b1:d1:fd:0a:35:de:4c:58:48: c6:82:f4:4a:7d:e9:ae:e4:68:c6:80:49:bd:ea:48: c0:b3:95:54:31:e9:b6:73:e6:93:c9:11:f6:8e:5f: 5d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1C:57:75:7D:0A:20:42:A7:1B:CA:7F:37:B9:16:C9:90:10:99:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45312.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.66.0/23 IPv6: 2001:df7:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 44:47:a5:90:6f:34:42:27:7f:46:c4:1f:24:01:99:98:bd:1c: 0b:47:d1:71:86:b9:cc:5c:5f:ae:40:ba:bf:20:94:07:a2:ca: 4a:32:02:bb:c1:07:3a:3c:ba:2d:50:24:1d:d4:79:48:95:a1: b9:61:63:62:f9:78:f5:e2:9d:ff:03:1d:5d:0f:2f:a5:f3:ee: 14:98:2a:9d:cf:f9:11:f1:8f:c1:c8:4d:5c:34:b0:b9:55:7f: 61:01:f0:45:c1:41:fa:10:ef:36:c7:05:e0:f2:9e:9b:53:25: e1:f9:4a:84:a8:d9:df:32:d9:e2:70:6a:5e:88:ad:e8:8d:63: 6a:8a:07:d2:89:26:2f:a1:92:48:c5:d1:9c:d1:0c:1b:d8:21: 0c:91:5b:20:d2:08:d1:09:e4:e9:9d:af:f5:9d:b0:c5:e5:bd: 22:9b:4e:53:9a:54:82:64:6f:46:d4:47:8e:c1:93:62:76:d6: 22:0e:fe:0c:76:1f:97:9e:e8:28:f4:9e:fa:e0:bf:de:05:50: 2c:9a:87:61:50:36:1a:5b:c6:d8:b2:d7:ef:0c:cc:f2:21:8a: 3f:2f:b1:d2:f1:18:c3:22:6a:b2:a7:84:f2:83:fd:33:9d:59: c6:7a:44:28:ba:09:2b:fe:84:4b:20:94:df:f1:99:e4:5b:46: e1:d1:74:3a -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUDmH+nNaOv21GVXd/pmv1DBNzXnwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwOVoX DTI1MTIwOTA1MDAwOVowMzExMC8GA1UEAxMoODYxQzU3NzU3RDBBMjA0MkE3MUJD QTdGMzdCOTE2Qzk5MDEwOTkxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLNe3G5lFd6cEBbYkPM64Nu4B3fITrEcFLfWyy+r/hyALbpFiezvlzkOQ6x +qH4IrNHerd4RBn8xWU+aix8MZirhHCosrq4FpiPLDZarxhP1Vh/DcvdA9YMnCTN 7ADP3gh3FGJd1KwPyAwwp1Nh0OKICOwp35LibE6zI6HprjPEQSel78GTQFFrU8k5 L9ERLL04Yb681YXQ0kSYYt39ZIT9wnquCMuxx+4MBrPQ+qOQts8EPRYLuPu1x2Cv cGdSaBBJ9ec2tGqJVMYZ26BwXf6Ut++cJMSTsdH9CjXeTFhIxoL0Sn3pruRoxoBJ vepIwLOVVDHptnPmk8kR9o5fXecCAwEAAaOCAeAwggHcMB0GA1UdDgQWBBSGHFd1 fQogQqcbyn83uRbJkBCZGjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzQ1MzEyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4ZCMA8EAgACMAkDBwAgAQ33vQAwDQYJKoZIhvcNAQELBQADggEB AERHpZBvNEInf0bEHyQBmZi9HAtH0XGGucxcX65Aur8glAeiykoyArvBBzo8ui1Q JB3UeUiVoblhY2L5ePXinf8DHV0PL6Xz7hSYKp3P+RHxj8HITVw0sLlVf2EB8EXB QfoQ7zbHBeDynptTJeH5SoSo2d8y2eJwal6IreiNY2qKB9KJJi+hkkjF0ZzRDBvY IQyRWyDSCNEJ5Omdr/WdsMXlvSKbTlOaVIJkb0bUR47Bk2J21iIO/gx2H5ee6Cj0 nvrgv94FUCyah2FQNhpbxtiy1+8MzPIhij8vsdLxGMMiarKnhPKD/TOdWcZ6RCi6 CSv+hEsglN/xmeRbRuHRdDo= -----END CERTIFICATE-----Generated at Sat Apr 5 06:19:52 2025 by rpki-client