$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56233.roa File: AS56233.roa (raw, json) Hash identifier: rrq8002zS17prm8vEC8nON0OHu/P6mt/BApTfRi3jPE= Subject key identifier: D0:68:8D:E9:FA:98:9F:2E:C8:4A:F9:86:96:EC:66:F7:AD:AB:71:A1 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6174013916EBA6C85CEDF12BA50FA3A9554E7F9B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56233.roa Signing time: Tue 21 May 2024 04:00:00 +0000 ROA not before: Tue 21 May 2024 03:55:00 +0000 ROA not after: Tue 20 May 2025 04:00:00 +0000 asID: 56233 IP address blocks: 59.153.80.0/22 maxlen: 24 103.184.28.0/23 maxlen: 24 202.160.136.0/23 maxlen: 24 202.160.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:74:01:39:16:eb:a6:c8:5c:ed:f1:2b:a5:0f:a3:a9:55:4e:7f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 21 03:55:00 2024 GMT Not After : May 20 04:00:00 2025 GMT Subject: CN=D0688DE9FA989F2EC84AF98696EC66F7ADAB71A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:b6:8f:5d:be:23:30:f4:a7:23:55:6e:ff: 5a:ad:96:fe:1e:c9:20:d3:c3:c5:a4:9f:fc:34:2d: eb:d3:7d:59:81:73:48:74:9b:81:f7:10:28:41:70: b5:c4:9e:ef:4a:8a:57:02:51:3b:28:1d:f1:95:a1: d9:af:89:d0:4d:65:a9:31:b9:8b:e5:84:b4:f9:91: 8e:72:4f:a9:d7:c0:10:06:fa:0a:a5:d8:a5:d8:44: 4f:77:e7:1f:e4:72:a3:eb:bc:6f:af:5a:42:04:48: 10:1f:ab:34:38:bf:de:c8:2b:86:2e:25:fc:74:5a: 34:f1:77:0a:e8:10:32:bd:df:07:b2:80:bd:09:7f: 09:d6:f9:b9:1a:0d:d7:e5:d6:5e:2f:c9:6d:71:80: 7f:21:76:2e:33:64:79:7e:75:e1:3c:b3:f4:c1:2a: d6:52:65:2f:3f:35:d8:bf:79:7d:0c:54:1a:fa:6e: 6e:b0:bf:77:24:a6:70:2c:a4:c6:9d:a0:b0:31:b4: ca:7d:e3:57:ce:ee:9b:91:ac:d3:4d:e2:05:07:5d: 3e:78:ac:6f:ea:7a:bd:20:f8:3f:93:bc:74:94:0f: 02:cb:d9:d1:79:cb:6d:3c:b9:63:a2:3e:8a:f0:8a: 61:bc:19:f5:fa:89:f2:e9:73:1c:08:fa:86:bf:0b: 07:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:68:8D:E9:FA:98:9F:2E:C8:4A:F9:86:96:EC:66:F7:AD:AB:71:A1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.80.0/22 103.184.28.0/23 202.160.136.0-202.160.138.255 Signature Algorithm: sha256WithRSAEncryption 8b:3f:ca:01:7e:63:2d:da:34:e4:e2:e4:23:53:ff:d6:13:f2: 0d:d6:2c:e0:6f:45:e1:f1:e9:31:a4:a2:a0:81:93:09:09:9d: 19:6b:0d:51:63:3f:7a:3b:89:b8:29:1f:73:f5:15:81:4c:f8: 43:4b:c0:9c:52:8b:2e:17:2c:b6:06:de:a1:ea:35:3b:27:7e: 73:e5:7e:ce:39:f9:83:71:c4:45:5c:c2:c5:26:f9:58:62:50: ad:44:43:01:05:f6:e8:12:75:1b:05:82:6a:3c:21:05:fa:a6: 43:e0:bc:32:8d:36:fb:3c:04:8c:a7:f3:a3:91:9c:0f:fc:57: 4b:90:91:a5:8b:ed:0a:3d:8b:e0:6b:9e:c6:3f:a7:db:ee:72: 6e:3a:30:52:73:a4:f3:9b:91:6a:4d:34:a1:77:2d:3f:7b:15: c6:7a:5c:f9:28:24:2d:98:87:07:02:a2:db:45:67:83:f6:01: 4e:94:50:a8:63:2c:e0:7d:24:fa:7e:9f:01:ab:55:9d:9a:1d: cb:6f:ab:05:de:14:76:51:87:74:9e:ae:90:7b:d7:f1:65:86: 72:97:39:94:be:c0:98:de:b3:13:fb:9a:f2:fa:2a:21:88:5d: 7a:fd:37:8b:92:5f:cd:43:b9:fc:75:a1:5e:82:d5:1d:b9:52: de:45:53:6e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUYXQBORbrpshc7fErpQ+jqVVOf5swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMTAzNTUwMFoX DTI1MDUyMDA0MDAwMFowMzExMC8GA1UEAxMoRDA2ODhERTlGQTk4OUYyRUM4NEFG OTg2OTZFQzY2RjdBREFCNzFBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVKto9dviMw9KcjVW7/Wq2W/h7JINPDxaSf/DQt69N9WYFzSHSbgfcQKEFw tcSe70qKVwJROygd8ZWh2a+J0E1lqTG5i+WEtPmRjnJPqdfAEAb6CqXYpdhET3fn H+Ryo+u8b69aQgRIEB+rNDi/3sgrhi4l/HRaNPF3CugQMr3fB7KAvQl/Cdb5uRoN 1+XWXi/JbXGAfyF2LjNkeX514Tyz9MEq1lJlLz812L95fQxUGvpubrC/dySmcCyk xp2gsDG0yn3jV87um5Gs003iBQddPnisb+p6vSD4P5O8dJQPAsvZ0XnLbTy5Y6I+ ivCKYbwZ9fqJ8ulzHAj6hr8LB+MCAwEAAaOCAeMwggHfMB0GA1UdDgQWBBTQaI3p +pifLshK+YaW7Gb3ratxoTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU2MjMzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQCO5lQAwQBZ7gcMAwDBAPKoIgDBADKoIowDQYJKoZIhvcNAQELBQAD ggEBAIs/ygF+Yy3aNOTi5CNT/9YT8g3WLOBvReHx6TGkoqCBkwkJnRlrDVFjP3o7 ibgpH3P1FYFM+ENLwJxSiy4XLLYG3qHqNTsnfnPlfs45+YNxxEVcwsUm+VhiUK1E QwEF9ugSdRsFgmo8IQX6pkPgvDKNNvs8BIyn86ORnA/8V0uQkaWL7Qo9i+BrnsY/ p9vucm46MFJzpPObkWpNNKF3LT97FcZ6XPkoJC2YhwcCottFZ4P2AU6UUKhjLOB9 JPp+nwGrVZ2aHctvqwXeFHZRh3SerpB71/FlhnKXOZS+wJjesxP7mvL6KiGIXXr9 N4uSX81Dufx1oV6C1R25Ut5FU24= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:50 2024 by rpki-client on console-ams.rpki-client.org