$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55652.roa File: AS55652.roa (raw, json) Hash identifier: hw4sHzhCnMJ+m2TcG7BVD+Uw6eqOIWOr8yETiiql1aA= Subject key identifier: 50:3F:1D:2C:00:AD:A8:8C:4F:0D:69:26:31:4D:65:3C:42:48:19:52 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 37A13CF9B435363FDE38DEE4CB9BA24645582B17 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55652.roa Signing time: Thu 12 Sep 2024 03:00:00 +0000 ROA not before: Thu 12 Sep 2024 02:55:00 +0000 ROA not after: Thu 11 Sep 2025 03:00:00 +0000 asID: 55652 IP address blocks: 103.24.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a1:3c:f9:b4:35:36:3f:de:38:de:e4:cb:9b:a2:46:45:58:2b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 12 02:55:00 2024 GMT Not After : Sep 11 03:00:00 2025 GMT Subject: CN=503F1D2C00ADA88C4F0D6926314D653C42481952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:35:d1:0f:ed:5b:9e:08:45:49:67:f4:07: 5f:ce:47:1b:e9:e9:a5:44:12:2a:25:2e:e1:b8:1a: eb:f3:9d:05:fc:a6:00:7e:64:d6:fa:80:88:15:17: e6:44:b6:8c:f4:ba:2c:af:7e:86:dd:78:b2:33:a8: 50:4a:ee:76:5a:97:fe:0a:ea:e3:bd:26:e9:93:1d: 82:4f:44:44:72:2f:81:5f:7e:04:67:e5:e4:2d:8d: 89:23:10:f6:9a:9c:6f:fc:f4:5e:53:ec:d7:3c:8c: 94:96:64:97:fa:b1:25:3e:b7:b1:17:33:bf:c6:10: 1b:aa:40:2e:28:f2:05:4c:fa:3e:b8:02:91:30:82: d4:02:09:a5:05:c3:11:c5:20:c6:5e:1b:fc:8a:f8: a8:22:42:08:fb:62:97:1f:d6:0c:40:de:e9:a7:dc: 43:d2:0f:f3:b4:94:0c:f4:d0:f3:19:35:08:97:40: 62:89:71:59:8d:65:d6:22:30:ed:27:d7:cd:42:ca: 2b:b5:b1:f4:d4:bd:29:57:7b:d4:db:c8:50:ef:18: e5:16:e4:26:36:c8:24:80:ff:b5:3f:11:02:fd:62: 74:40:7d:5d:6f:20:2e:ea:d0:19:f9:09:bd:e6:20: 42:80:26:b8:ab:73:e7:22:60:5d:7c:d7:29:4a:8c: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3F:1D:2C:00:AD:A8:8C:4F:0D:69:26:31:4D:65:3C:42:48:19:52 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55652.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.196.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:36:63:1e:da:76:63:62:04:dc:9e:11:70:c4:e2:8e:0c:d9: a9:af:3f:04:94:0e:9c:5e:8c:5c:5c:d2:d0:91:bf:a7:b3:b4: 7e:31:cd:d0:a2:21:22:c8:54:a2:e5:ac:c2:a0:e7:72:66:3f: dc:a4:53:2c:63:9a:3a:ae:dc:7b:72:64:43:59:2c:0b:06:87: e4:f5:06:1d:54:30:9a:d8:54:36:61:2e:c2:76:59:6e:ca:1e: 80:34:76:a4:a8:e4:29:eb:f4:a7:f7:e3:0c:4b:ec:87:eb:c8: 4f:ea:55:75:ad:b6:09:c3:49:80:cb:08:44:15:7e:2a:c6:3c: 9a:37:db:06:22:71:e8:06:18:15:ae:89:67:13:60:2f:b0:4a: db:f2:c3:79:99:e5:e2:5b:bb:83:02:87:1f:0d:eb:6e:3c:33: 44:d9:f3:9d:da:b4:96:44:8f:5d:a5:de:21:54:05:69:fe:1b: c3:2c:36:3f:95:cd:77:d7:0a:d2:3e:aa:57:fe:8c:69:bf:3e: f6:80:61:86:a3:bc:87:bd:53:ab:1c:16:2f:82:d3:ea:4c:a6: f7:77:45:01:03:10:c0:cb:85:22:84:ea:b2:51:1d:58:83:3f: 89:71:7b:28:b2:d3:4a:68:8c:a4:f4:d8:74:30:40:d9:ef:f5: d9:cf:ce:85 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUN6E8+bQ1Nj/eON7ky5uiRkVYKxcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxMjAyNTUwMFoX DTI1MDkxMTAzMDAwMFowMzExMC8GA1UEAxMoNTAzRjFEMkMwMEFEQTg4QzRGMEQ2 OTI2MzE0RDY1M0M0MjQ4MTk1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKSZNdEP7VueCEVJZ/QHX85HG+nppUQSKiUu4bga6/OdBfymAH5k1vqAiBUX 5kS2jPS6LK9+ht14sjOoUErudlqX/grq470m6ZMdgk9ERHIvgV9+BGfl5C2NiSMQ 9pqcb/z0XlPs1zyMlJZkl/qxJT63sRczv8YQG6pALijyBUz6PrgCkTCC1AIJpQXD EcUgxl4b/Ir4qCJCCPtilx/WDEDe6afcQ9IP87SUDPTQ8xk1CJdAYolxWY1l1iIw 7SfXzULKK7Wx9NS9KVd71NvIUO8Y5RbkJjbIJID/tT8RAv1idEB9XW8gLurQGfkJ veYgQoAmuKtz5yJgXXzXKUqMKcsCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRQPx0s AK2ojE8NaSYxTWU8QkgZUjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1NjUyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZxjEMA0GCSqGSIb3DQEBCwUAA4IBAQB+NmMe2nZjYgTcnhFwxOKO DNmprz8ElA6cXoxcXNLQkb+ns7R+Mc3QoiEiyFSi5azCoOdyZj/cpFMsY5o6rtx7 cmRDWSwLBofk9QYdVDCa2FQ2YS7Cdlluyh6ANHakqOQp6/Sn9+MMS+yH68hP6lV1 rbYJw0mAywhEFX4qxjyaN9sGInHoBhgVrolnE2AvsErb8sN5meXiW7uDAocfDetu PDNE2fOd2rSWRI9dpd4hVAVp/hvDLDY/lc131wrSPqpX/oxpvz72gGGGo7yHvVOr HBYvgtPqTKb3d0UBAxDAy4UihOqyUR1Ygz+JcXsostNKaIyk9Nh0MEDZ7/XZz86F -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:28 2024 by rpki-client on console-fra.rpki-client.org