$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58552.roa File: AS58552.roa (raw, json) Hash identifier: gzy7wLUZeDnCuiuj8DE7u4z0JlIphy84XN5sG5naiLk= Subject key identifier: 83:33:D0:9E:F0:AA:E7:42:F0:F6:79:2E:7A:3F:D2:04:77:31:38:42 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 70D9F0C1553B2BEC7BA896A691530D5069EFDE3D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58552.roa Signing time: Tue 14 Jan 2025 03:13:47 +0000 ROA not before: Tue 14 Jan 2025 03:08:47 +0000 ROA not after: Tue 13 Jan 2026 03:13:47 +0000 asID: 58552 IP address blocks: 103.143.223.0/24 maxlen: 24 114.198.241.0/24 maxlen: 24 114.198.247.0/24 maxlen: 24 116.68.164.0/24 maxlen: 24 116.68.165.0/24 maxlen: 24 116.68.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d9:f0:c1:55:3b:2b:ec:7b:a8:96:a6:91:53:0d:50:69:ef:de:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 14 03:08:47 2025 GMT Not After : Jan 13 03:13:47 2026 GMT Subject: CN=8333D09EF0AAE742F0F6792E7A3FD20477313842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:50:84:a7:3f:b6:62:3f:05:1e:c3:fc:0e: 27:b5:5c:3f:6d:2a:a8:ef:7b:3a:ba:c1:1d:8c:ac: dd:e8:b0:cf:ad:eb:4d:e8:69:bf:d1:fe:79:db:f5: 3a:f5:8d:d9:55:c0:bb:f8:7d:65:7e:93:4e:94:14: 7d:f4:32:c1:57:3d:d2:6e:2e:f4:e6:16:06:a0:0d: 5f:5d:88:e1:bf:cb:86:c0:68:98:0e:84:50:23:70: 0a:ed:f3:15:64:07:2f:3a:03:4c:38:7d:87:f1:23: 35:c1:3a:32:a2:16:a5:1c:2f:0a:27:70:5d:d0:bb: f4:ad:7c:8d:40:05:f6:2d:02:f3:d5:a5:db:e2:22: be:cf:5a:5f:55:d7:31:a9:41:e7:2e:c7:bf:bd:59: 83:f9:d1:12:fa:31:99:40:9a:21:8e:ca:1f:c5:9f: a0:66:2c:61:51:f6:dc:82:1c:64:07:56:99:d2:ef: c1:40:be:3c:9d:36:45:71:2d:a2:13:5a:99:74:c6: ed:6b:c8:50:69:aa:84:80:0d:73:63:e1:1f:09:55: 37:42:99:c2:89:83:00:b9:81:ba:8d:90:d4:25:0d: 2d:16:b7:31:a7:5d:18:e1:5a:40:a3:ed:e1:0d:03: 42:e9:48:28:7a:11:da:4a:f6:b5:bf:66:11:28:de: 4b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:33:D0:9E:F0:AA:E7:42:F0:F6:79:2E:7A:3F:D2:04:77:31:38:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58552.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.223.0/24 114.198.241.0/24 114.198.247.0/24 116.68.164.0/23 116.68.173.0/24 Signature Algorithm: sha256WithRSAEncryption 67:44:91:bc:47:a5:09:83:4b:c2:2e:3f:38:66:de:e8:1f:67: 4c:97:34:b8:98:25:d6:2a:32:0d:48:79:ad:65:31:51:1c:da: ab:2e:98:05:90:7a:23:97:8e:f8:10:85:72:40:4d:33:0b:a0: 9b:c7:5c:82:13:0c:0d:ab:25:78:74:12:f7:63:0c:38:6f:4c: a7:b9:ef:5a:47:ed:68:ed:38:db:39:de:9c:52:9b:26:7c:36: a4:ac:ce:0f:70:15:10:fb:9e:55:9b:67:90:b9:00:e7:b8:94: 29:32:f8:24:3f:e2:21:55:b0:60:7d:81:37:ff:8a:9f:83:47: b8:a0:e2:4c:8d:7d:2a:75:ff:fa:c9:b3:27:62:5d:6f:f0:d5: 23:8c:9e:e8:bd:ec:b6:9e:1d:48:bb:de:dc:4b:6f:bf:f5:12: b7:61:0f:bb:91:c5:e5:44:ed:f8:91:96:fe:b5:e1:c9:db:51: 95:b2:dd:f7:33:01:fc:01:0c:0d:5e:c8:9d:f3:10:fb:96:09: 06:f6:4f:e8:fb:17:b7:e7:5e:ab:98:93:67:e4:21:5d:a8:a1: d3:fa:98:85:2a:f2:04:f6:0f:94:6e:d3:ad:7c:03:a5:e5:d1: 99:fd:a9:a9:2c:df:05:b6:67:b1:36:ec:cd:fd:34:f6:60:76: 38:e8:04:9c -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUcNnwwVU7K+x7qJamkVMNUGnv3j0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDExNDAzMDg0N1oX DTI2MDExMzAzMTM0N1owMzExMC8GA1UEAxMoODMzM0QwOUVGMEFBRTc0MkYwRjY3 OTJFN0EzRkQyMDQ3NzMxMzg0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/xUISnP7ZiPwUew/wOJ7VcP20qqO97OrrBHYys3eiwz63rTehpv9H+edv1 OvWN2VXAu/h9ZX6TTpQUffQywVc90m4u9OYWBqANX12I4b/LhsBomA6EUCNwCu3z FWQHLzoDTDh9h/EjNcE6MqIWpRwvCidwXdC79K18jUAF9i0C89Wl2+Iivs9aX1XX MalB5y7Hv71Zg/nREvoxmUCaIY7KH8WfoGYsYVH23IIcZAdWmdLvwUC+PJ02RXEt ohNamXTG7WvIUGmqhIANc2PhHwlVN0KZwomDALmBuo2Q1CUNLRa3MaddGOFaQKPt 4Q0DQulIKHoR2kr2tb9mESjeS7ECAwEAAaOCAecwggHjMB0GA1UdDgQWBBSDM9Ce 8KrnQvD2eS56P9IEdzE4QjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4NTUyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQAZ4/fAwQAcsbxAwQAcsb3AwQBdESkAwQAdEStMA0GCSqGSIb3DQEB CwUAA4IBAQBnRJG8R6UJg0vCLj84Zt7oH2dMlzS4mCXWKjINSHmtZTFRHNqrLpgF kHojl474EIVyQE0zC6Cbx1yCEwwNqyV4dBL3Yww4b0ynue9aR+1o7TjbOd6cUpsm fDakrM4PcBUQ+55Vm2eQuQDnuJQpMvgkP+IhVbBgfYE3/4qfg0e4oOJMjX0qdf/6 ybMnYl1v8NUjjJ7ovey2nh1Iu97cS2+/9RK3YQ+7kcXlRO34kZb+teHJ21GVst33 MwH8AQwNXsid8xD7lgkG9k/o+xe3516rmJNn5CFdqKHT+piFKvIE9g+UbtOtfAOl 5dGZ/ampLN8FtmexNuzN/TT2YHY46ASc -----END CERTIFICATE-----Generated at Sun Feb 16 20:50:47 2025 by rpki-client