$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56239.roa File: AS56239.roa (raw, json) Hash identifier: atIpZ0okCsAk2h73qXfLj4rwxDchoA9W4Rbsx/UQgVo= Subject key identifier: B7:BE:4D:D7:F2:EB:71:78:9D:90:68:D7:B3:B2:42:2B:C3:56:FB:8C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 024B6C037FF79AF173C456BE5DC9E74B06586372 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56239.roa Signing time: Tue 21 Nov 2023 10:00:00 +0000 ROA not before: Tue 21 Nov 2023 09:55:00 +0000 ROA not after: Tue 19 Nov 2024 10:00:00 +0000 asID: 56239 IP address blocks: 103.157.64.0/23 maxlen: 24 210.211.16.0/21 maxlen: 24 2407:ff40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4b:6c:03:7f:f7:9a:f1:73:c4:56:be:5d:c9:e7:4b:06:58:63:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 21 09:55:00 2023 GMT Not After : Nov 19 10:00:00 2024 GMT Subject: CN=B7BE4DD7F2EB71789D9068D7B3B2422BC356FB8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:cb:f9:91:00:1f:9b:46:e9:d9:7c:9e:14: 3d:34:a0:42:5d:ad:37:06:c5:af:be:13:60:2e:f1: e8:38:8b:f9:ad:95:a4:9c:33:58:f2:b9:a1:ba:36: 5b:77:93:da:62:56:f2:0b:6c:c5:b3:9f:87:d0:3d: 80:09:1e:95:6d:c2:db:f1:c0:63:d2:89:63:38:32: b0:10:d9:df:63:15:29:6e:97:48:f2:bd:4c:90:b3: 26:4a:47:c2:8d:a6:67:53:76:d5:22:1f:2b:9c:05: 88:3c:b5:02:99:81:50:a7:46:2a:91:46:4f:63:91: e9:93:d2:00:ab:81:2a:4c:af:bc:00:08:63:00:cf: ee:74:76:8d:7f:53:51:9a:40:b2:3b:62:c8:a8:b9: 94:b6:e2:12:d3:a6:cd:a8:aa:62:4d:84:2a:c0:0c: b1:ff:65:f9:82:df:3e:47:dd:1a:96:70:51:78:f8: 6b:a9:aa:86:6a:87:46:da:b2:6a:ed:29:81:e8:e9: 35:15:76:cb:8c:62:3c:71:e5:0a:b0:68:14:f9:67: 45:e6:98:5e:db:93:f4:ed:0f:14:ee:d2:56:ca:0d: ed:c8:61:0e:a3:84:32:f0:ec:51:b7:c9:3a:ba:71: 4c:d9:99:0b:b9:57:9f:3e:85:2f:8e:c3:58:53:72: c4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BE:4D:D7:F2:EB:71:78:9D:90:68:D7:B3:B2:42:2B:C3:56:FB:8C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.64.0/23 210.211.16.0/21 IPv6: 2407:ff40::/32 Signature Algorithm: sha256WithRSAEncryption 14:3c:70:49:75:1e:ed:00:bf:cc:7a:41:22:af:b6:59:44:34: af:eb:b2:e9:07:5c:43:b7:f3:6a:ba:03:6d:ba:95:12:28:e5: 0b:bc:e7:6a:c0:5f:ed:d0:d2:31:17:75:ee:b2:d4:74:32:b4: 19:3b:8b:cf:23:bd:ca:3d:80:fc:91:74:c8:8b:43:59:94:e0: d8:dd:c6:81:e0:3b:8e:1c:b5:d4:5a:0e:7d:38:b1:69:cb:31: 88:b1:e2:54:88:9c:77:4e:c3:9e:73:41:73:af:60:e5:69:73: fa:c8:16:4d:6f:8f:d0:5d:dc:86:55:43:36:2c:82:3b:e8:4a: 95:fb:98:e1:79:7f:39:3d:aa:c3:c8:8e:53:85:cf:c6:56:db: 07:8e:9e:8e:01:12:74:10:09:f9:48:7c:9d:08:e9:8e:6d:e8: 07:5a:8b:e8:79:6c:6e:35:b9:50:be:33:18:35:51:07:24:5b: c1:78:4a:99:4a:0f:2b:e1:3a:f7:5d:48:c7:b3:4a:8e:da:81: d9:fb:8d:a0:71:16:a3:14:d1:db:c4:52:97:9f:f1:57:45:26: 2a:81:18:b4:8c:38:7b:0e:4d:06:cd:0a:fe:01:d6:50:23:7a: 19:04:ac:88:20:f8:55:05:f4:87:7a:e6:b9:b1:61:02:a0:0b: a6:c9:d4:37 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUAktsA3/3mvFzxFa+XcnnSwZYY3IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyMTA5NTUwMFoX DTI0MTExOTEwMDAwMFowMzExMC8GA1UEAxMoQjdCRTRERDdGMkVCNzE3ODlEOTA2 OEQ3QjNCMjQyMkJDMzU2RkI4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTBy/mRAB+bRunZfJ4UPTSgQl2tNwbFr74TYC7x6DiL+a2VpJwzWPK5obo2 W3eT2mJW8gtsxbOfh9A9gAkelW3C2/HAY9KJYzgysBDZ32MVKW6XSPK9TJCzJkpH wo2mZ1N21SIfK5wFiDy1ApmBUKdGKpFGT2OR6ZPSAKuBKkyvvAAIYwDP7nR2jX9T UZpAsjtiyKi5lLbiEtOmzaiqYk2EKsAMsf9l+YLfPkfdGpZwUXj4a6mqhmqHRtqy au0pgejpNRV2y4xiPHHlCrBoFPlnReaYXtuT9O0PFO7SVsoN7chhDqOEMvDsUbfJ OrpxTNmZC7lXnz6FL47DWFNyxMkCAwEAAaOCAeQwggHgMB0GA1UdDgQWBBS3vk3X 8utxeJ2QaNezskIrw1b7jDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU2MjM5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ51AAwQD0tMQMA0EAgACMAcDBQAkB/9AMA0GCSqGSIb3DQEBCwUA A4IBAQAUPHBJdR7tAL/MekEir7ZZRDSv67LpB1xDt/NqugNtupUSKOULvOdqwF/t 0NIxF3XustR0MrQZO4vPI73KPYD8kXTIi0NZlODY3caB4DuOHLXUWg59OLFpyzGI seJUiJx3TsOec0Fzr2DlaXP6yBZNb4/QXdyGVUM2LII76EqV+5jheX85ParDyI5T hc/GVtsHjp6OARJ0EAn5SHydCOmObegHWovoeWxuNblQvjMYNVEHJFvBeEqZSg8r 4Tr3XUjHs0qO2oHZ+42gcRajFNHbxFKXn/FXRSYqgRi0jDh7Dk0GzQr+AdZQI3oZ BKyIIPhVBfSHeua5sWECoAumydQ3 -----END CERTIFICATE-----Generated at Wed May 8 22:46:44 2024 by rpki-client on console-ams.rpki-client.org