$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58385.roa File: AS58385.roa (raw, json) Hash identifier: BGgquAwIkY4yixZu0WQXvUyw4+506RsVWbZBcyFrBQE= Subject key identifier: 8F:64:A7:D3:0D:F4:ED:82:14:F9:5C:86:38:9B:07:1E:C2:CB:68:53 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3C300BACA2BD1B135096E7E949E5104CE15F44D4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58385.roa Signing time: Wed 16 Oct 2024 08:31:14 +0000 ROA not before: Wed 16 Oct 2024 08:26:14 +0000 ROA not after: Wed 15 Oct 2025 08:31:14 +0000 asID: 58385 IP address blocks: 110.92.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:30:0b:ac:a2:bd:1b:13:50:96:e7:e9:49:e5:10:4c:e1:5f:44:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 16 08:26:14 2024 GMT Not After : Oct 15 08:31:14 2025 GMT Subject: CN=8F64A7D30DF4ED8214F95C86389B071EC2CB6853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:4a:5d:72:ce:fb:25:d8:1e:df:60:cb:04: ae:a6:51:5a:ed:85:34:f5:4e:87:0a:c3:a1:8d:a1: 9b:c4:2c:7e:30:ca:eb:bc:fd:08:92:f3:19:2a:03: c7:61:f8:fe:86:52:73:f6:3a:10:a5:b4:51:ea:c1: 9c:95:b2:4f:91:1c:eb:62:c2:cd:f1:cc:de:ff:90: 3b:d1:fc:39:db:38:0e:ab:23:7e:bb:19:70:d7:ce: a7:7f:69:f5:20:4e:30:a1:03:7b:8d:5e:c6:39:bd: ad:9c:c0:c1:94:d1:aa:a4:5f:98:ff:cd:d0:0e:e6: 10:b5:38:03:90:f6:90:17:71:bf:60:92:5e:91:fa: b4:cd:15:83:f8:24:f7:0b:45:8f:b7:7e:9d:ce:f2: 74:58:cf:c8:bb:43:b2:2d:3d:3e:a6:6c:d0:c0:02: d0:cf:ea:ea:12:65:f9:8d:bb:21:30:b7:b1:72:f6: c8:68:19:2a:dd:44:1e:31:71:f6:f4:89:e9:b1:b9: b7:3b:df:fd:80:2a:83:dd:7e:0a:9f:cc:2c:9f:ae: 2d:9c:ed:29:e8:a8:5a:c9:8b:45:2b:b8:dc:98:9b: 13:d6:04:04:49:6a:b6:15:19:ff:8b:b5:83:5b:d9: dc:79:d6:7d:b9:f5:01:58:65:b2:7a:91:64:23:9e: 2e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:64:A7:D3:0D:F4:ED:82:14:F9:5C:86:38:9B:07:1E:C2:CB:68:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58385.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.92.74.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:da:8c:53:47:a3:c8:64:08:8a:22:2e:6f:5f:0b:a5:b1:b0: f0:6f:6b:9f:0e:23:ab:9a:44:67:b6:57:04:4d:8a:25:8e:86: fd:82:ac:4a:ac:3e:85:26:cc:86:4d:72:a3:b2:f8:eb:e0:a5: e3:56:55:ad:12:46:c5:ec:d7:d3:62:34:70:13:b7:18:72:dc: f0:f1:c4:76:f5:4d:f8:85:9d:a6:bb:46:70:7f:f1:c4:1e:3f: 79:72:f6:95:48:80:f5:7d:75:c3:5e:0e:5b:08:bb:38:e2:d1: 85:70:bd:60:1c:ac:05:45:fb:97:6f:9a:cb:ab:2c:ca:fc:fc: b5:eb:19:47:c2:87:e7:92:17:57:9c:0f:3a:2d:d2:d3:67:17: e9:58:10:bd:9b:a1:2f:08:5d:4f:1c:43:a7:3c:db:5e:78:25: f3:8f:11:4e:f0:fd:58:d5:08:74:f8:cd:25:e4:da:a9:06:db: e1:bd:2e:78:2b:f0:92:b7:d8:b4:54:eb:e0:e9:e4:53:a9:9c: f2:62:0a:f6:7d:ae:95:fe:c4:d6:4f:a8:36:22:21:80:7c:0f: d8:c8:dd:d3:37:cd:73:a6:b3:eb:ce:4e:d7:a6:41:28:c1:b9: 66:8a:e2:31:48:e3:5e:91:77:8d:07:f9:36:c0:f3:93:95:5a: 80:0d:3f:16 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUPDALrKK9GxNQlufpSeUQTOFfRNQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxNjA4MjYxNFoX DTI1MTAxNTA4MzExNFowMzExMC8GA1UEAxMoOEY2NEE3RDMwREY0RUQ4MjE0Rjk1 Qzg2Mzg5QjA3MUVDMkNCNjg1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMe4Sl1yzvsl2B7fYMsErqZRWu2FNPVOhwrDoY2hm8QsfjDK67z9CJLzGSoD x2H4/oZSc/Y6EKW0UerBnJWyT5Ec62LCzfHM3v+QO9H8Ods4DqsjfrsZcNfOp39p 9SBOMKEDe41exjm9rZzAwZTRqqRfmP/N0A7mELU4A5D2kBdxv2CSXpH6tM0Vg/gk 9wtFj7d+nc7ydFjPyLtDsi09PqZs0MAC0M/q6hJl+Y27ITC3sXL2yGgZKt1EHjFx 9vSJ6bG5tzvf/YAqg91+Cp/MLJ+uLZztKeioWsmLRSu43JibE9YEBElqthUZ/4u1 g1vZ3HnWfbn1AVhlsnqRZCOeLs8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSPZKfT DfTtghT5XIY4mwcewstoUzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4Mzg1LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBblxKMA0GCSqGSIb3DQEBCwUAA4IBAQBO2oxTR6PIZAiKIi5vXwul sbDwb2ufDiOrmkRntlcETYoljob9gqxKrD6FJsyGTXKjsvjr4KXjVlWtEkbF7NfT YjRwE7cYctzw8cR29U34hZ2mu0Zwf/HEHj95cvaVSID1fXXDXg5bCLs44tGFcL1g HKwFRfuXb5rLqyzK/Py16xlHwofnkhdXnA86LdLTZxfpWBC9m6EvCF1PHEOnPNte eCXzjxFO8P1Y1Qh0+M0l5NqpBtvhvS54K/CSt9i0VOvg6eRTqZzyYgr2fa6V/sTW T6g2IiGAfA/YyN3TN81zprPrzk7XpkEowblmiuIxSONekXeNB/k2wPOTlVqADT8W -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:28 2024 by rpki-client on console-fra.rpki-client.org