$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55652.roa File: AS55652.roa (raw, json) Hash identifier: 1ulkyCd2uHRoRwA6IjEhjFNE7d+pOKPta0evA+77afU= Subject key identifier: 4E:5A:C8:81:66:22:0B:9C:E4:F6:7D:73:FE:E9:FE:32:6B:08:53:AF Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 364689E2B0820DDD5A995342BB2AD599BC56E98C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55652.roa Signing time: Thu 12 Oct 2023 03:00:00 +0000 ROA not before: Thu 12 Oct 2023 02:55:00 +0000 ROA not after: Thu 10 Oct 2024 03:00:00 +0000 asID: 55652 IP address blocks: 103.24.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:46:89:e2:b0:82:0d:dd:5a:99:53:42:bb:2a:d5:99:bc:56:e9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 12 02:55:00 2023 GMT Not After : Oct 10 03:00:00 2024 GMT Subject: CN=4E5AC88166220B9CE4F67D73FEE9FE326B0853AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:47:76:4d:ad:4e:d9:de:41:8b:9f:b9:d2: e5:ca:b7:7f:30:9c:eb:b6:4c:ac:9b:7f:9c:f9:b9: af:8e:de:72:6a:65:bd:aa:da:d2:04:74:a3:27:f4: 9f:ec:91:fb:13:80:b0:13:6d:33:1c:15:4b:d0:35: b2:41:02:13:36:5d:c2:07:03:ac:ce:75:de:b2:bd: 07:53:7c:f6:d6:1a:90:4f:37:be:64:a7:d7:b2:ed: d9:ff:6e:9c:36:1e:af:64:72:67:db:a8:a8:40:52: e6:c2:43:df:8e:34:f8:4c:86:9b:26:1d:87:6c:17: 9d:a1:e5:17:9c:55:cc:7f:9a:d2:f8:da:3e:70:3c: 0b:b3:14:ee:ca:cb:e4:ed:56:ac:35:5c:5b:eb:d7: 15:72:7b:3e:47:73:b8:95:c3:90:dc:74:31:58:e1: 7f:85:86:f9:cc:b4:f5:a3:a8:3a:9b:8c:09:38:7d: 63:e1:6b:0e:e9:82:9d:f2:82:d4:0a:5e:39:cb:66: e5:f8:4f:8c:85:41:9b:80:1a:15:3b:0b:fa:9a:e4: 66:6c:2a:74:7a:47:92:ce:99:c5:03:a0:cb:5b:37: bb:e6:89:b3:3c:a1:b5:32:37:ad:12:3d:fd:4c:c7: 77:8c:55:5d:cc:29:d7:45:07:3a:cd:5c:3c:af:a7: cb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5A:C8:81:66:22:0B:9C:E4:F6:7D:73:FE:E9:FE:32:6B:08:53:AF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55652.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.196.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:b2:40:c4:44:9c:21:c3:2c:5a:f6:ea:e4:90:70:59:a4:97: 54:2b:74:90:3a:e9:64:22:f3:b4:87:b2:f6:7f:58:15:df:a5: 00:6b:35:bc:62:c7:a1:9a:7f:94:67:53:0d:7f:4a:ef:3f:bb: b4:72:bb:8f:32:3b:ad:34:92:74:d2:ae:eb:c3:c8:df:e7:ff: 28:1a:1d:78:90:34:29:2e:3f:aa:e4:58:43:93:5a:fd:9b:75: 20:92:05:6f:3e:92:ab:bd:5d:53:c6:e2:24:85:87:55:c6:5c: 9b:d0:38:b7:17:41:2c:5e:a4:2a:74:77:13:0e:24:6d:a5:74: 74:43:0a:7d:38:44:e6:d5:f0:17:bb:76:2a:ac:56:cb:fb:fd: 07:6d:7b:b9:6e:6c:2b:12:59:4e:e1:bf:df:6c:b7:68:f3:3a: b7:1e:76:76:8f:3a:82:33:70:16:6a:f1:05:8f:be:50:37:f0: f7:0e:2d:85:8a:c1:51:45:4c:d7:c5:84:22:e0:d5:6d:ea:32: 39:54:7c:ea:14:32:59:b3:fd:bb:18:76:39:c5:c2:f0:31:c5: a0:87:56:83:03:d8:7f:59:33:ac:e0:1c:30:5a:29:01:cb:be: 1b:57:f5:61:b3:2a:57:87:49:5c:08:49:49:44:71:e4:30:c2: 12:5c:80:fb -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUNkaJ4rCCDd1amVNCuyrVmbxW6YwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxMjAyNTUwMFoX DTI0MTAxMDAzMDAwMFowMzExMC8GA1UEAxMoNEU1QUM4ODE2NjIyMEI5Q0U0RjY3 RDczRkVFOUZFMzI2QjA4NTNBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALn3R3ZNrU7Z3kGLn7nS5cq3fzCc67ZMrJt/nPm5r47ecmplvara0gR0oyf0 n+yR+xOAsBNtMxwVS9A1skECEzZdwgcDrM513rK9B1N89tYakE83vmSn17Lt2f9u nDYer2RyZ9uoqEBS5sJD3440+EyGmyYdh2wXnaHlF5xVzH+a0vjaPnA8C7MU7srL 5O1WrDVcW+vXFXJ7PkdzuJXDkNx0MVjhf4WG+cy09aOoOpuMCTh9Y+FrDumCnfKC 1ApeOctm5fhPjIVBm4AaFTsL+prkZmwqdHpHks6ZxQOgy1s3u+aJszyhtTI3rRI9 /UzHd4xVXcwp10UHOs1cPK+ny1UCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBROWsiB ZiILnOT2fXP+6f4yawhTrzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1NjUyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZxjEMA0GCSqGSIb3DQEBCwUAA4IBAQBOskDERJwhwyxa9urkkHBZ pJdUK3SQOulkIvO0h7L2f1gV36UAazW8Ysehmn+UZ1MNf0rvP7u0cruPMjutNJJ0 0q7rw8jf5/8oGh14kDQpLj+q5FhDk1r9m3UgkgVvPpKrvV1TxuIkhYdVxlyb0Di3 F0EsXqQqdHcTDiRtpXR0Qwp9OETm1fAXu3YqrFbL+/0HbXu5bmwrEllO4b/fbLdo 8zq3HnZ2jzqCM3AWavEFj75QN/D3Di2FisFRRUzXxYQi4NVt6jI5VHzqFDJZs/27 GHY5xcLwMcWgh1aDA9h/WTOs4BwwWikBy74bV/VhsypXh0lcCElJRHHkMMISXID7 -----END CERTIFICATE-----Generated at Wed May 8 07:45:28 2024 by rpki-client on console-ams.rpki-client.org