$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55697.roa File: AS55697.roa (raw, json) Hash identifier: qoNAh2Dip1HHUGGr4CObDtIhIxBh8Y9ieK9h7k5P3yE= Subject key identifier: 5E:82:27:90:6B:4A:3C:B8:0D:FA:FB:1F:C5:77:E6:43:05:56:C3:7B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1973E812062CB049455436A5E663EBAAAD8F784F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55697.roa Signing time: Tue 10 Dec 2024 04:00:00 +0000 ROA not before: Tue 10 Dec 2024 03:55:00 +0000 ROA not after: Tue 09 Dec 2025 04:00:00 +0000 asID: 55697 IP address blocks: 103.174.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:73:e8:12:06:2c:b0:49:45:54:36:a5:e6:63:eb:aa:ad:8f:78:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 03:55:00 2024 GMT Not After : Dec 9 04:00:00 2025 GMT Subject: CN=5E8227906B4A3CB80DFAFB1FC577E6430556C37B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:05:d7:4a:84:25:50:94:37:29:c2:b1:1d:76: 13:b9:44:a3:01:ad:36:b4:32:74:39:c5:5b:4c:4b: c5:13:f0:f9:d5:40:ff:7b:48:d6:ee:72:98:82:39: d8:c8:57:ea:2e:75:bd:a1:d0:6c:2e:4c:34:2f:8b: 90:00:c1:a5:f1:8d:82:b4:ff:51:98:e7:80:7c:78: 72:1a:71:dc:2f:ed:f4:04:81:d9:b9:7e:66:eb:7c: 2c:b6:0f:b7:1a:33:f3:f1:f0:4b:df:0c:a5:3b:23: 6a:f4:88:9b:e3:cc:32:71:47:69:18:43:f6:49:21: 09:0a:c4:55:7e:ee:a1:64:5f:a8:13:ed:54:db:c6: 1d:d6:6e:e3:39:a8:6f:99:2e:c7:fc:b0:bf:e4:5a: 81:0a:99:0a:07:5f:89:e2:31:53:f9:80:0b:42:78: 93:cd:e7:28:e3:09:a1:67:7d:96:0b:05:fa:96:2d: 7b:66:f1:71:f5:89:81:6f:89:c9:25:32:0f:31:66: 87:67:a6:41:3f:87:b3:63:5e:b1:31:59:53:34:f4: a9:0c:4a:58:8e:e0:f6:29:ac:91:ab:ad:70:e1:39: e9:a2:fe:eb:92:d7:e3:69:98:bc:23:a6:70:cb:f2: 86:4d:33:29:59:d2:a1:b1:80:38:37:61:a5:a2:e8: 89:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:82:27:90:6B:4A:3C:B8:0D:FA:FB:1F:C5:77:E6:43:05:56:C3:7B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55697.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.222.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:f0:32:69:da:1c:cd:cd:c7:1c:b8:c7:f8:7e:ff:fd:21:57: a9:c8:33:26:80:71:be:4a:04:16:73:d0:97:11:8f:12:5a:06: 68:31:70:f2:e1:9c:79:c0:f8:72:3c:cb:7b:9c:ea:19:0f:44: 4b:d2:d3:f6:e4:b9:80:c5:3f:94:f4:f3:69:96:87:18:ce:15: 3a:2c:22:3b:74:a7:2d:60:0d:80:30:cf:51:4f:dc:56:b4:92: 72:7e:69:d2:ab:05:d4:22:52:de:dc:9d:c8:ce:d8:3a:dd:05: a2:28:f0:b7:bf:a0:37:94:c0:0f:a9:a1:b4:1d:09:12:eb:51: 62:5e:99:4c:f2:fd:d6:c2:9f:ce:0d:6d:3b:06:97:5a:33:37: d6:c5:65:41:32:0e:04:57:ee:39:05:07:22:b6:d5:69:e1:02: 7a:f8:da:99:8b:b4:0d:01:8c:fe:83:5b:78:d0:16:4f:e7:1d: ea:cf:9c:a4:47:d9:4d:73:5d:3c:16:44:b9:12:f4:ad:63:98: 66:ca:af:ab:24:d0:9d:18:e9:2b:b7:23:be:27:75:7f:bf:b0: 23:61:ee:26:75:58:27:68:89:b1:df:03:c9:cf:30:ae:1b:3c: 18:c7:c9:8f:be:f1:32:8c:f2:33:49:b0:c8:f5:f7:73:99:97: 72:c3:f3:ad -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUGXPoEgYssElFVDal5mPrqq2PeE8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDAzNTUwMFoX DTI1MTIwOTA0MDAwMFowMzExMC8GA1UEAxMoNUU4MjI3OTA2QjRBM0NCODBERkFG QjFGQzU3N0U2NDMwNTU2QzM3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO8F10qEJVCUNynCsR12E7lEowGtNrQydDnFW0xLxRPw+dVA/3tI1u5ymII5 2MhX6i51vaHQbC5MNC+LkADBpfGNgrT/UZjngHx4chpx3C/t9ASB2bl+Zut8LLYP txoz8/HwS98MpTsjavSIm+PMMnFHaRhD9kkhCQrEVX7uoWRfqBPtVNvGHdZu4zmo b5kux/ywv+RagQqZCgdfieIxU/mAC0J4k83nKOMJoWd9lgsF+pYte2bxcfWJgW+J ySUyDzFmh2emQT+Hs2NesTFZUzT0qQxKWI7g9imskautcOE56aL+65LX42mYvCOm cMvyhk0zKVnSobGAODdhpaLoiTUCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRegieQ a0o8uA36+x/Fd+ZDBVbDezAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1Njk3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ67eMA0GCSqGSIb3DQEBCwUAA4IBAQCO8DJp2hzNzcccuMf4fv/9 IVepyDMmgHG+SgQWc9CXEY8SWgZoMXDy4Zx5wPhyPMt7nOoZD0RL0tP25LmAxT+U 9PNplocYzhU6LCI7dKctYA2AMM9RT9xWtJJyfmnSqwXUIlLe3J3Iztg63QWiKPC3 v6A3lMAPqaG0HQkS61FiXplM8v3Wwp/ODW07BpdaMzfWxWVBMg4EV+45BQcittVp 4QJ6+NqZi7QNAYz+g1t40BZP5x3qz5ykR9lNc108FkS5EvStY5hmyq+rJNCdGOkr tyO+J3V/v7AjYe4mdVgnaImx3wPJzzCuGzwYx8mPvvEyjPIzSbDI9fdzmZdyw/Ot -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:01 2025 by rpki-client