$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55674.roa File: AS55674.roa (raw, json) Hash identifier: BCWdYX2Qp2RmV+SqeHFrDWpspeQM4jeQTiOpybVcimA= Subject key identifier: AE:AD:EC:2D:40:59:3C:ED:C2:CA:4B:F1:EB:A7:34:B4:BC:39:D5:36 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 72395D6F616A2BFEAD9A039856D539B99671E232 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55674.roa Signing time: Mon 19 Feb 2024 04:00:00 +0000 ROA not before: Mon 19 Feb 2024 03:55:00 +0000 ROA not after: Mon 17 Feb 2025 04:00:00 +0000 asID: 55674 IP address blocks: 103.185.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:39:5d:6f:61:6a:2b:fe:ad:9a:03:98:56:d5:39:b9:96:71:e2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 19 03:55:00 2024 GMT Not After : Feb 17 04:00:00 2025 GMT Subject: CN=AEADEC2D40593CEDC2CA4BF1EBA734B4BC39D536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:9a:d4:3a:5b:bb:11:06:74:77:15:6a:c7: 67:53:32:93:66:f8:28:ed:d1:c3:b4:0c:07:22:01: a5:fc:b6:23:8b:38:91:1b:7c:9f:60:94:df:0f:7e: 35:32:99:f5:e4:ce:34:4a:23:ac:d7:3a:01:23:26: bd:0f:cb:5a:97:94:65:d5:c9:bb:e9:86:c3:26:ae: c6:ad:3e:79:49:25:1f:ea:2c:c2:92:ce:a2:17:a9: 6d:64:ab:9a:9a:71:4f:56:23:70:c4:3d:fa:eb:65: b1:63:e8:f7:91:18:b0:8a:13:58:af:bb:8c:8a:32: 5f:31:be:f5:e1:33:d2:e7:a5:7f:09:1e:3e:d2:72: 96:1e:a8:48:ac:c7:d1:51:1c:5c:69:41:35:31:85: 31:99:89:e2:0e:02:3f:90:16:7c:e6:3e:4b:6c:2a: 3c:f9:69:88:c2:04:e5:9f:da:38:83:0f:7a:b4:ff: 0f:b4:cc:70:6c:c5:2e:e6:79:63:27:e0:c0:05:6d: 14:67:5f:48:14:53:f7:1f:43:7a:41:81:49:e4:41: 36:51:37:13:76:c0:54:f2:66:bc:a9:89:92:22:c9: 85:2c:fa:b7:30:be:0a:83:71:ca:eb:ed:04:52:27: 59:a8:dd:1b:a5:73:63:d2:4c:1c:e0:00:4a:45:b9: 31:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AD:EC:2D:40:59:3C:ED:C2:CA:4B:F1:EB:A7:34:B4:BC:39:D5:36 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55674.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.194.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:fa:3a:b1:8e:54:3f:6d:74:d4:bd:31:44:3e:f1:5c:09:a2: 72:40:2c:23:28:a9:6c:70:67:3d:6e:cc:db:2e:9a:7b:ba:ea: 14:c1:04:1b:ec:81:0e:ef:ae:88:7a:c2:66:1c:cf:d9:16:be: 67:f4:ad:df:e0:b5:9a:da:cc:71:a6:c4:ec:12:4d:77:35:86: 82:0d:79:82:1c:03:af:b2:28:b3:42:a6:d2:91:07:94:d1:8c: 27:52:99:04:13:23:7a:57:2f:ad:19:ef:d6:6d:6e:1c:92:db: e5:d6:89:83:78:82:41:c1:d7:bb:78:f8:a1:b0:7f:ec:b3:03: ba:92:b7:bf:8c:21:1a:40:98:ce:85:b5:3c:c9:4e:24:eb:ec: 4e:c2:10:ee:00:fa:86:39:9f:eb:87:58:88:37:18:70:8f:06: 0b:df:21:7b:41:56:b0:04:2e:cb:c8:22:18:4b:fb:b0:ca:13: d4:29:f3:cc:69:bc:48:7a:07:61:1f:10:ca:88:71:34:a6:00: df:c8:6b:fa:f7:3b:16:02:ee:5d:03:52:15:2d:77:cd:62:4a: 66:0f:a8:fe:b4:cd:38:59:e9:d8:53:51:5a:2a:2d:6d:f9:c0: 04:67:ab:b6:14:e6:90:88:33:e8:96:4c:b9:46:d4:86:03:9f: 46:4e:37:74 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUcjldb2FqK/6tmgOYVtU5uZZx4jIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIxOTAzNTUwMFoX DTI1MDIxNzA0MDAwMFowMzExMC8GA1UEAxMoQUVBREVDMkQ0MDU5M0NFREMyQ0E0 QkYxRUJBNzM0QjRCQzM5RDUzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1MmtQ6W7sRBnR3FWrHZ1Myk2b4KO3Rw7QMByIBpfy2I4s4kRt8n2CU3w9+ NTKZ9eTONEojrNc6ASMmvQ/LWpeUZdXJu+mGwyauxq0+eUklH+oswpLOohepbWSr mppxT1YjcMQ9+utlsWPo95EYsIoTWK+7jIoyXzG+9eEz0uelfwkePtJylh6oSKzH 0VEcXGlBNTGFMZmJ4g4CP5AWfOY+S2wqPPlpiMIE5Z/aOIMPerT/D7TMcGzFLuZ5 YyfgwAVtFGdfSBRT9x9DekGBSeRBNlE3E3bAVPJmvKmJkiLJhSz6tzC+CoNxyuvt BFInWajdG6VzY9JMHOAASkW5MRcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSurewt QFk87cLKS/HrpzS0vDnVNjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1Njc0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ7nCMA0GCSqGSIb3DQEBCwUAA4IBAQCa+jqxjlQ/bXTUvTFEPvFc CaJyQCwjKKlscGc9bszbLpp7uuoUwQQb7IEO766IesJmHM/ZFr5n9K3f4LWa2sxx psTsEk13NYaCDXmCHAOvsiizQqbSkQeU0YwnUpkEEyN6Vy+tGe/WbW4cktvl1omD eIJBwde7ePihsH/sswO6kre/jCEaQJjOhbU8yU4k6+xOwhDuAPqGOZ/rh1iINxhw jwYL3yF7QVawBC7LyCIYS/uwyhPUKfPMabxIegdhHxDKiHE0pgDfyGv69zsWAu5d A1IVLXfNYkpmD6j+tM04WenYU1FaKi1t+cAEZ6u2FOaQiDPolky5RtSGA59GTjd0 -----END CERTIFICATE-----Generated at Tue May 7 18:07:20 2024 by rpki-client on console-fra.rpki-client.org