$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45701.roa File: AS45701.roa (raw, json) Hash identifier: t1Gdh4CPkjYOZhtQm2HmpdqA/jazUNgvDBBag3HbSJk= Subject key identifier: 12:54:A2:91:07:9C:5E:B0:BE:EF:D8:2D:24:2F:5C:A1:D3:0C:36:08 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5281DA8803170A7D6CFA4017EDF31278D221089A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45701.roa Signing time: Thu 18 Jul 2024 06:36:08 +0000 ROA not before: Thu 18 Jul 2024 06:31:08 +0000 ROA not after: Thu 17 Jul 2025 06:36:08 +0000 asID: 45701 IP address blocks: 103.46.6.0/23 maxlen: 24 103.47.8.0/23 maxlen: 24 103.79.246.0/23 maxlen: 24 103.186.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:81:da:88:03:17:0a:7d:6c:fa:40:17:ed:f3:12:78:d2:21:08:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 18 06:31:08 2024 GMT Not After : Jul 17 06:36:08 2025 GMT Subject: CN=1254A291079C5EB0BEEFD82D242F5CA1D30C3608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:00:52:21:b9:e9:ed:15:fa:ac:fe:59:fc:e8: 94:52:13:aa:d3:07:a2:2c:34:af:1e:09:98:5b:4a: 85:ae:b3:70:3e:b0:05:c8:81:1d:12:5d:98:42:1e: fa:eb:52:41:42:fd:fb:85:79:ef:23:26:67:c4:8f: 19:f3:7e:f6:bd:cb:a0:bc:ba:ce:74:50:06:87:f7: cf:ac:af:d3:6e:a5:71:bc:ec:51:4c:57:90:30:d6: d0:1c:7e:fe:dc:81:d2:22:c0:0d:df:42:26:83:5f: 9f:d3:2b:3f:f6:ee:3e:79:a6:d6:31:58:02:36:8e: a6:90:20:2f:a4:88:26:b7:f2:73:9c:5d:be:07:fd: 73:12:0a:32:fe:1c:98:6d:3a:ff:41:f4:c4:2d:2e: ad:7c:1e:42:aa:8b:a4:b5:10:25:e0:65:bd:0c:78: 8e:0f:df:79:89:52:2c:78:cc:fa:19:d8:0d:99:08: 6e:e3:96:b7:8a:24:ea:1c:17:b3:30:d1:9e:55:40: 25:ac:b0:85:3e:30:a3:07:d8:56:fd:0d:21:33:60: 70:95:71:11:a6:43:a7:10:b2:6b:ca:0b:be:de:90: 5c:f4:49:32:46:b9:ed:08:5a:6e:fd:c9:4f:b5:65: 96:2c:fb:21:7a:49:4a:51:ab:fd:29:71:05:53:d7: 22:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:54:A2:91:07:9C:5E:B0:BE:EF:D8:2D:24:2F:5C:A1:D3:0C:36:08 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45701.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.46.6.0/23 103.47.8.0/23 103.79.246.0/23 103.186.62.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:b0:f7:41:4b:ef:4c:9b:47:68:0d:c3:f3:d3:d7:87:b2:6e: c0:75:4c:be:9a:dd:bc:d3:6c:2f:6c:67:15:a5:ed:6b:f0:50: 69:9c:7c:9e:5b:6f:17:8e:a8:07:67:2c:6d:94:3a:4e:c1:fb: 0f:dd:82:41:76:1a:cb:5e:bb:c6:49:c7:75:3e:30:c5:dd:bc: 1e:ab:0c:4d:15:af:4e:ac:11:e0:73:58:92:fa:08:99:1e:be: 99:2c:a4:9b:89:64:ec:1f:c5:7c:1c:41:b3:40:c5:9d:da:38: 70:90:6b:55:ee:3d:0c:ef:21:5e:3b:25:e9:59:94:c1:22:e0: 85:ec:86:bf:b3:16:da:95:f2:ff:ab:ad:0b:c5:ed:86:61:32: fa:4a:74:4b:74:66:56:15:d0:5e:63:5c:24:e3:b2:99:5c:ab: cb:8f:1a:a1:ee:55:52:59:40:ba:e1:b6:92:16:5a:ac:a7:13: 9e:8a:a8:b0:2b:3a:a9:c7:b0:cc:2d:b2:19:b8:39:c2:88:94: 54:e4:83:d1:d6:45:6d:3a:48:2d:5b:df:40:fd:a1:3f:ef:30: ff:ee:7d:17:61:d1:43:14:35:ff:32:04:f6:fd:04:9c:2f:e2: 3b:c3:06:b0:7b:81:b4:af:3d:37:5b:1c:95:59:a5:cc:55:a0: 43:38:d1:5d -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUUoHaiAMXCn1s+kAX7fMSeNIhCJowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxODA2MzEwOFoX DTI1MDcxNzA2MzYwOFowMzExMC8GA1UEAxMoMTI1NEEyOTEwNzlDNUVCMEJFRUZE ODJEMjQyRjVDQTFEMzBDMzYwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8AUiG56e0V+qz+WfzolFITqtMHoiw0rx4JmFtKha6zcD6wBciBHRJdmEIe +utSQUL9+4V57yMmZ8SPGfN+9r3LoLy6znRQBof3z6yv026lcbzsUUxXkDDW0Bx+ /tyB0iLADd9CJoNfn9MrP/buPnmm1jFYAjaOppAgL6SIJrfyc5xdvgf9cxIKMv4c mG06/0H0xC0urXweQqqLpLUQJeBlvQx4jg/feYlSLHjM+hnYDZkIbuOWt4ok6hwX szDRnlVAJaywhT4wowfYVv0NITNgcJVxEaZDpxCya8oLvt6QXPRJMka57Qhabv3J T7Vlliz7IXpJSlGr/SlxBVPXIjsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQSVKKR B5xesL7v2C0kL1yh0ww2CDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzQ1NzAxLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQBZy4GAwQBZy8IAwQBZ0/2AwQBZ7o+MA0GCSqGSIb3DQEBCwUAA4IB AQA/sPdBS+9Mm0doDcPz09eHsm7AdUy+mt2802wvbGcVpe1r8FBpnHyeW28XjqgH ZyxtlDpOwfsP3YJBdhrLXrvGScd1PjDF3bweqwxNFa9OrBHgc1iS+giZHr6ZLKSb iWTsH8V8HEGzQMWd2jhwkGtV7j0M7yFeOyXpWZTBIuCF7Ia/sxbalfL/q60Lxe2G YTL6SnRLdGZWFdBeY1wk47KZXKvLjxqh7lVSWUC64baSFlqspxOeiqiwKzqpx7DM LbIZuDnCiJRU5IPR1kVtOkgtW99A/aE/7zD/7n0XYdFDFDX/MgT2/QScL+I7wwaw e4G0rz03WxyVWaXMVaBDONFd -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:50 2024 by rpki-client on console-ams.rpki-client.org