$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58821.roa File: AS58821.roa (raw, json) Hash identifier: OofErhySC23JlTi8l7iSkZbXTuCOgv+8546SnVxtU3Q= Subject key identifier: D3:67:23:86:FD:EE:20:6C:4C:D2:6B:AA:96:40:A9:F4:98:80:12:DA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 21390B956903B7E2222B55826828649045DE9AD8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58821.roa Signing time: Tue 09 Jan 2024 04:00:03 +0000 ROA not before: Tue 09 Jan 2024 03:55:03 +0000 ROA not after: Tue 07 Jan 2025 04:00:03 +0000 asID: 58821 IP address blocks: 103.156.248.0/23 maxlen: 24 2001:df5:9f80::/48 maxlen: 48 2406:9140::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:39:0b:95:69:03:b7:e2:22:2b:55:82:68:28:64:90:45:de:9a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:03 2024 GMT Not After : Jan 7 04:00:03 2025 GMT Subject: CN=D3672386FDEE206C4CD26BAA9640A9F4988012DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:1d:d5:88:c3:dd:ce:5b:13:17:26:8b:e1: 01:96:ac:11:c6:d5:31:85:1b:69:de:0d:dd:c2:13: 1e:75:67:f5:78:5d:97:21:ef:87:70:d1:17:cd:23: ea:e7:41:e3:36:b3:38:00:c5:1e:ea:ca:4f:83:c3: dd:bd:4f:ba:36:13:fd:a7:35:8d:3c:4d:75:43:97: c6:f9:0b:df:5a:b4:23:90:80:6c:77:d3:0f:bc:80: 51:3c:df:f2:94:5a:61:87:c8:81:00:97:5a:ba:f3: 9a:f3:30:94:bb:ff:ac:ca:b1:43:98:7c:1e:40:34: 27:1e:80:ea:eb:e7:48:a9:4b:11:bc:7b:69:d7:49: 45:c7:76:f9:d8:2d:ec:18:81:25:e6:9b:ac:e5:26: 7e:39:cd:16:f3:c2:e5:4d:a1:6f:70:7e:d5:ab:5e: fa:e2:b5:8b:98:3a:d7:ac:a0:8d:8a:8c:eb:be:61: c5:3a:62:ff:63:26:a2:4e:cc:7d:6f:f7:ee:73:86: c3:3f:92:4b:cf:04:9e:c1:3a:85:db:3a:f4:c7:af: 96:dc:06:42:fd:f3:14:b3:91:33:a8:06:a4:6c:f2: c7:a3:19:a1:ca:94:ee:d7:c0:cf:a6:fd:f9:32:31: d2:00:96:3c:a7:ce:0d:dd:68:92:e2:59:49:e9:84: 1f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:67:23:86:FD:EE:20:6C:4C:D2:6B:AA:96:40:A9:F4:98:80:12:DA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58821.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.248.0/23 IPv6: 2001:df5:9f80::/48 2406:9140::/32 Signature Algorithm: sha256WithRSAEncryption 5a:a4:99:51:88:41:c3:e0:0b:1f:c2:2d:91:be:5d:d8:5e:d8: dd:ff:d4:f1:e5:dc:16:c1:73:0c:24:96:71:ee:3c:40:9a:92: 06:e1:26:8e:5c:37:5c:e1:8b:fb:39:66:e9:f5:9d:c5:ec:07: f3:7c:45:58:ee:81:ec:60:5d:08:6a:ca:d8:d2:7e:5b:2a:a0: 67:56:28:2e:34:98:b5:a6:09:8c:34:40:54:62:13:73:dd:bf: 18:bc:81:5c:13:4e:20:00:3c:c9:e4:50:32:38:fd:00:e0:d1: b0:b0:f2:ae:de:1b:90:ed:b2:40:c8:d7:d9:e9:38:a2:95:de: 48:6c:e0:bf:df:45:92:d6:e9:0f:9d:16:f5:1a:e7:1b:38:88: 82:46:87:8c:6e:5d:b8:8e:e8:9c:fb:64:e2:15:df:15:5a:21: 59:99:ce:cc:f6:84:4e:90:d5:46:db:56:e2:0c:1c:73:1c:5b: 5e:79:1f:a3:fc:4e:64:c4:6c:c3:0b:28:de:03:e2:38:13:c7: e4:b3:23:ea:ec:70:c2:9c:b9:3b:3e:7e:d2:03:5d:12:f8:08: bc:79:61:e2:5d:37:50:22:7e:76:44:75:d8:49:57:f0:80:7f: db:86:d3:27:40:7d:47:0c:4a:51:a1:65:b1:a7:f6:20:aa:f1: ea:0e:1b:c8 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUITkLlWkDt+IiK1WCaChkkEXemtgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwM1oX DTI1MDEwNzA0MDAwM1owMzExMC8GA1UEAxMoRDM2NzIzODZGREVFMjA2QzRDRDI2 QkFBOTY0MEE5RjQ5ODgwMTJEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGMHdWIw93OWxMXJovhAZasEcbVMYUbad4N3cITHnVn9XhdlyHvh3DRF80j 6udB4zazOADFHurKT4PD3b1PujYT/ac1jTxNdUOXxvkL31q0I5CAbHfTD7yAUTzf 8pRaYYfIgQCXWrrzmvMwlLv/rMqxQ5h8HkA0Jx6A6uvnSKlLEbx7addJRcd2+dgt 7BiBJeabrOUmfjnNFvPC5U2hb3B+1ate+uK1i5g616ygjYqM675hxTpi/2Mmok7M fW/37nOGwz+SS88EnsE6hds69MevltwGQv3zFLORM6gGpGzyx6MZocqU7tfAz6b9 +TIx0gCWPKfODd1okuJZSemEH7ECAwEAAaOCAecwggHjMB0GA1UdDgQWBBTTZyOG /e4gbEzSa6qWQKn0mIAS2jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4ODIxLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAM BAIAATAGAwQBZ5z4MBYEAgACMBADBwAgAQ31n4ADBQAkBpFAMA0GCSqGSIb3DQEB CwUAA4IBAQBapJlRiEHD4Asfwi2Rvl3YXtjd/9Tx5dwWwXMMJJZx7jxAmpIG4SaO XDdc4Yv7OWbp9Z3F7AfzfEVY7oHsYF0IasrY0n5bKqBnViguNJi1pgmMNEBUYhNz 3b8YvIFcE04gADzJ5FAyOP0A4NGwsPKu3huQ7bJAyNfZ6Tiild5IbOC/30WS1ukP nRb1GucbOIiCRoeMbl24juic+2TiFd8VWiFZmc7M9oROkNVG21biDBxzHFteeR+j /E5kxGzDCyjeA+I4E8fksyPq7HDCnLk7Pn7SA10S+Ai8eWHiXTdQIn52RHXYSVfw gH/bhtMnQH1HDEpRoWWxp/YgqvHqDhvI -----END CERTIFICATE-----Generated at Thu May 2 20:47:33 2024 by rpki-client on console-fra.rpki-client.org