$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58552.roa File: AS58552.roa (raw, json) Hash identifier: n4393eHzzm6V1eUkfNrBAGfpKpd2SDGyQrXH5kp77aU= Subject key identifier: 6E:62:0E:F8:D8:88:92:8F:F1:EE:A8:61:E8:29:13:60:1F:31:70:59 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 047BF723AB8F2AC604467CFED6258011202AB457 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58552.roa Signing time: Tue 25 Jul 2023 06:39:56 +0000 ROA not before: Tue 25 Jul 2023 06:34:56 +0000 ROA not after: Tue 23 Jul 2024 06:39:56 +0000 asID: 58552 IP address blocks: 103.143.223.0/24 maxlen: 24 114.198.247.0/24 maxlen: 24 116.68.164.0/24 maxlen: 24 116.68.165.0/24 maxlen: 24 116.68.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7b:f7:23:ab:8f:2a:c6:04:46:7c:fe:d6:25:80:11:20:2a:b4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 25 06:34:56 2023 GMT Not After : Jul 23 06:39:56 2024 GMT Subject: CN=6E620EF8D888928FF1EEA861E82913601F317059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:6f:10:cd:79:18:8f:d7:fd:e6:0a:23:03: e5:c7:34:78:7b:53:2e:ab:9d:b4:d5:9a:12:ae:e2: 45:43:08:54:1e:f3:29:ee:e1:2f:92:76:e6:77:5e: 6f:3c:e0:3f:56:d7:6f:c0:29:83:6e:0e:25:54:3c: 37:24:66:64:43:c9:44:95:00:79:30:43:74:d1:1c: 7f:5f:4b:4c:2c:a4:ff:17:3d:d2:96:c2:1a:0d:17: 22:15:5c:96:30:87:19:24:45:42:d1:31:63:89:71: 62:c1:e5:62:27:cb:46:ee:19:de:1f:f7:51:26:a7: 9a:28:60:72:20:a5:7e:4c:48:b0:ae:00:79:53:95: 34:b4:1b:6a:d2:df:46:02:5a:92:bf:25:e1:fe:c1: 12:d4:8d:b3:e2:5c:5a:34:b7:70:72:fd:f9:72:11: cc:55:6e:2d:52:ae:95:e6:3e:b2:a9:a1:ae:f3:de: f1:af:e2:99:45:66:29:63:91:8d:2f:ba:2b:9c:a5: c1:65:5c:a0:9f:fb:05:25:99:af:98:3d:0d:ce:9b: af:4b:e4:24:43:35:fe:2c:78:b3:af:3c:f7:5e:d5: 1a:6a:9e:6b:bb:00:58:3b:99:e3:7d:3c:10:cc:5f: 38:5f:95:83:3e:77:1a:c7:8a:a6:52:d3:2a:d4:f3: 5c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:62:0E:F8:D8:88:92:8F:F1:EE:A8:61:E8:29:13:60:1F:31:70:59 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58552.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.223.0/24 114.198.247.0/24 116.68.164.0/23 116.68.173.0/24 Signature Algorithm: sha256WithRSAEncryption 66:e8:65:45:d6:d9:c4:b9:e0:35:ce:f8:8f:18:0d:9d:a4:c4: 42:06:24:a1:23:be:b0:3c:2d:16:fd:72:2f:9b:cd:9e:48:9e: 05:95:9a:79:4a:13:fa:4c:3a:71:c0:eb:27:b9:b0:45:a8:d9: 59:fb:ce:16:60:54:ca:65:60:6d:92:a9:38:e8:66:5a:e3:62: f6:3f:97:dd:42:f3:e3:78:8e:78:09:4c:eb:23:3a:5d:53:ba: f6:00:ff:95:62:9b:7d:a8:fb:eb:e7:d2:4c:33:8d:d9:d5:c3: 0e:1b:ee:c5:46:ce:1d:15:6d:8c:14:87:27:f5:6c:3d:0f:64: ad:50:f3:77:74:6b:33:34:1d:ad:94:21:ea:81:43:fe:ac:38: 89:08:91:4d:07:21:be:b4:94:38:7b:06:d5:d0:f0:36:3e:dc: 2b:da:49:b7:7c:45:99:d0:81:8a:28:67:30:f7:15:9b:12:0a: 98:a9:35:c9:09:16:3c:e2:c6:db:48:e6:0d:bc:cb:2c:95:ec: 80:4f:ca:b2:95:ea:fe:25:70:24:96:3c:26:c3:94:66:ae:6e: c6:80:37:07:29:93:39:6c:3d:7c:9c:6c:fc:0a:a9:0d:af:31: d2:46:3f:a0:be:05:d4:f1:15:5a:b0:7c:f3:46:dd:c9:8a:1a: 07:36:fa:3f -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUBHv3I6uPKsYERnz+1iWAESAqtFcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcyNTA2MzQ1NloX DTI0MDcyMzA2Mzk1NlowMzExMC8GA1UEAxMoNkU2MjBFRjhEODg4OTI4RkYxRUVB ODYxRTgyOTEzNjAxRjMxNzA1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwqbxDNeRiP1/3mCiMD5cc0eHtTLqudtNWaEq7iRUMIVB7zKe7hL5J25nde bzzgP1bXb8Apg24OJVQ8NyRmZEPJRJUAeTBDdNEcf19LTCyk/xc90pbCGg0XIhVc ljCHGSRFQtExY4lxYsHlYifLRu4Z3h/3USanmihgciClfkxIsK4AeVOVNLQbatLf RgJakr8l4f7BEtSNs+JcWjS3cHL9+XIRzFVuLVKuleY+sqmhrvPe8a/imUVmKWOR jS+6K5ylwWVcoJ/7BSWZr5g9Dc6br0vkJEM1/ix4s688917VGmqea7sAWDuZ4308 EMxfOF+Vgz53GseKplLTKtTzXDUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRuYg74 2IiSj/HuqGHoKRNgHzFwWTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4NTUyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAZ4/fAwQAcsb3AwQBdESkAwQAdEStMA0GCSqGSIb3DQEBCwUAA4IB AQBm6GVF1tnEueA1zviPGA2dpMRCBiShI76wPC0W/XIvm82eSJ4FlZp5ShP6TDpx wOsnubBFqNlZ+84WYFTKZWBtkqk46GZa42L2P5fdQvPjeI54CUzrIzpdU7r2AP+V Ypt9qPvr59JMM43Z1cMOG+7FRs4dFW2MFIcn9Ww9D2StUPN3dGszNB2tlCHqgUP+ rDiJCJFNByG+tJQ4ewbV0PA2Ptwr2km3fEWZ0IGKKGcw9xWbEgqYqTXJCRY84sbb SOYNvMssleyAT8qyler+JXAkljwmw5Rmrm7GgDcHKZM5bD18nGz8CqkNrzHSRj+g vgXU8RVasHzzRt3JihoHNvo/ -----END CERTIFICATE-----Generated at Fri May 3 03:08:32 2024 by rpki-client on console-ams.rpki-client.org