$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56233.roa File: AS56233.roa (raw, json) Hash identifier: /gPGUG9tVui8kjtnWwrLoQGxM8mbZjWUE5oprAGpU8c= Subject key identifier: 18:0B:43:B7:21:DF:2F:46:2B:70:08:0C:47:E2:9B:95:8A:51:09:1E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7B563898BC5E6C4507D81F7E90725DEF78853110 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56233.roa Signing time: Tue 20 Jun 2023 03:55:41 +0000 ROA not before: Tue 20 Jun 2023 03:50:41 +0000 ROA not after: Tue 18 Jun 2024 03:55:41 +0000 asID: 56233 IP address blocks: 59.153.80.0/22 maxlen: 24 103.184.28.0/23 maxlen: 24 202.160.136.0/23 maxlen: 24 202.160.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 12:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:56:38:98:bc:5e:6c:45:07:d8:1f:7e:90:72:5d:ef:78:85:31:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 20 03:50:41 2023 GMT Not After : Jun 18 03:55:41 2024 GMT Subject: CN=180B43B721DF2F462B70080C47E29B958A51091E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:8f:69:b4:fd:0e:30:60:7c:c3:8c:e9:e9: 5c:cc:49:cb:ad:18:10:8a:6e:fb:0d:a8:64:76:e1: 58:a2:18:43:5a:88:12:79:61:da:1c:84:9e:d2:4f: 91:b3:8c:59:3c:bb:43:d0:4d:54:a2:5c:6f:b0:fd: 6c:32:3f:71:3a:f9:ed:95:3a:db:db:d8:e0:27:f2: cc:41:ac:e1:08:48:06:a7:49:15:61:77:00:08:0c: 1b:18:33:4c:9a:76:85:cb:7e:41:57:37:9f:64:68: ec:f3:df:d9:7d:b9:58:ae:01:ef:8f:9f:7b:63:9e: 50:d5:c9:6c:4a:52:87:f5:46:04:31:d3:50:4e:66: 14:ab:d8:4c:c8:df:46:e4:ab:45:1b:18:27:b5:ab: db:a1:55:09:17:a9:74:82:91:82:4e:34:01:fb:fc: 52:75:8a:49:88:89:87:14:74:de:a3:6c:f2:7e:03: 3b:97:ac:64:cb:8b:1e:95:10:d2:53:5f:82:54:9a: fe:6e:ea:f0:dd:4b:b9:15:d5:4c:e4:f7:e0:02:9c: fb:33:e3:37:e6:50:90:8e:33:d8:f4:e5:9f:e4:98: 30:54:2b:cb:b1:e3:21:b8:a6:d1:b0:69:23:00:80: 56:fd:c7:a5:ae:a8:b0:f5:f5:46:ce:ff:b2:a7:6f: ca:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0B:43:B7:21:DF:2F:46:2B:70:08:0C:47:E2:9B:95:8A:51:09:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.80.0/22 103.184.28.0/23 202.160.136.0-202.160.138.255 Signature Algorithm: sha256WithRSAEncryption 96:73:0c:61:59:8e:9f:a5:b9:c3:47:01:ef:4d:1b:17:1f:90: b8:b8:c6:1f:c3:5b:3f:4d:d2:6e:28:14:ed:8e:93:8f:7a:fd: a4:11:2b:7b:a6:75:99:0f:ed:71:75:7f:1f:78:c3:95:90:a0: ed:3d:df:a0:87:97:19:4a:51:83:b3:ec:99:12:96:43:5f:e2: 2e:7c:8a:6b:5b:0a:1f:d8:88:48:68:60:b2:de:f3:d7:55:53: 82:f0:3d:b4:f3:f8:e3:3b:99:a4:3e:2d:4b:32:26:8f:76:26: 73:d9:d8:80:92:32:4e:3c:0c:7c:11:49:36:59:63:67:e6:46: 05:5b:4b:f6:15:5d:8c:48:59:68:b6:3a:03:45:e5:e0:db:0c: 4e:c7:08:c8:6d:91:f3:9d:4e:5b:c5:fe:53:66:c4:f6:60:52: fc:97:25:e3:02:b3:44:c1:25:5e:91:98:7e:d2:7e:a3:a2:c6: bc:61:68:9b:3c:15:00:d0:49:52:12:fd:4e:50:4a:7d:22:2d: 05:7b:d2:57:73:8b:8e:c2:d2:0b:f8:31:00:05:a9:60:00:9c: 40:14:ae:ab:7f:e8:b2:95:01:a6:e4:74:52:d2:7c:be:31:c8: da:db:b4:00:a9:28:a1:1c:2e:9f:c2:69:42:68:16:58:e0:2b: 72:73:c8:59 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUe1Y4mLxebEUH2B9+kHJd73iFMRAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyMDAzNTA0MVoX DTI0MDYxODAzNTU0MVowMzExMC8GA1UEAxMoMTgwQjQzQjcyMURGMkY0NjJCNzAw ODBDNDdFMjlCOTU4QTUxMDkxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKp4j2m0/Q4wYHzDjOnpXMxJy60YEIpu+w2oZHbhWKIYQ1qIEnlh2hyEntJP kbOMWTy7Q9BNVKJcb7D9bDI/cTr57ZU629vY4CfyzEGs4QhIBqdJFWF3AAgMGxgz TJp2hct+QVc3n2Ro7PPf2X25WK4B74+fe2OeUNXJbEpSh/VGBDHTUE5mFKvYTMjf RuSrRRsYJ7Wr26FVCRepdIKRgk40Afv8UnWKSYiJhxR03qNs8n4DO5esZMuLHpUQ 0lNfglSa/m7q8N1LuRXVTOT34AKc+zPjN+ZQkI4z2PTln+SYMFQry7HjIbim0bBp IwCAVv3Hpa6osPX1Rs7/sqdvytUCAwEAAaOCAeMwggHfMB0GA1UdDgQWBBQYC0O3 Id8vRitwCAxH4puVilEJHjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU2MjMzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQCO5lQAwQBZ7gcMAwDBAPKoIgDBADKoIowDQYJKoZIhvcNAQELBQAD ggEBAJZzDGFZjp+lucNHAe9NGxcfkLi4xh/DWz9N0m4oFO2Ok496/aQRK3umdZkP 7XF1fx94w5WQoO0936CHlxlKUYOz7JkSlkNf4i58imtbCh/YiEhoYLLe89dVU4Lw PbTz+OM7maQ+LUsyJo92JnPZ2ICSMk48DHwRSTZZY2fmRgVbS/YVXYxIWWi2OgNF 5eDbDE7HCMhtkfOdTlvF/lNmxPZgUvyXJeMCs0TBJV6RmH7SfqOixrxhaJs8FQDQ SVIS/U5QSn0iLQV70ldzi47C0gv4MQAFqWAAnEAUrqt/6LKVAabkdFLSfL4xyNrb tACpKKEcLp/CaUJoFljgK3JzyFk= -----END CERTIFICATE-----Generated at Wed May 1 07:54:40 2024 by rpki-client on console-fra.rpki-client.org