$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59273.roa File: AS59273.roa (raw, json) Hash identifier: bbpupFf5cCcKIwz3QUO+4K4mxBbxm2gtRI9alg9y+ic= Subject key identifier: 08:F6:8C:C7:17:C5:DE:FE:FF:96:E0:7F:C9:27:46:1C:4F:BD:3D:F0 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 552AC1EC4CBF0FCE661381C2D178260EDE362CC2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59273.roa Signing time: Mon 10 Jun 2024 03:15:41 +0000 ROA not before: Mon 10 Jun 2024 03:10:41 +0000 ROA not after: Mon 09 Jun 2025 03:15:41 +0000 asID: 59273 IP address blocks: 103.80.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2a:c1:ec:4c:bf:0f:ce:66:13:81:c2:d1:78:26:0e:de:36:2c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 10 03:10:41 2024 GMT Not After : Jun 9 03:15:41 2025 GMT Subject: CN=08F68CC717C5DEFEFF96E07FC927461C4FBD3DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:b7:2d:ce:3e:f7:b2:55:6f:81:4b:9c:ce: c5:88:10:83:f8:a7:1a:2c:e2:ca:6e:33:48:ea:01: 07:1a:37:53:64:21:2a:c1:a2:30:c5:ca:08:cc:f9: 22:68:97:19:34:98:77:2e:0a:28:50:26:55:35:f9: 09:48:a1:2d:10:66:fe:ed:df:05:ce:47:a3:1d:37: ab:e3:1d:92:7b:70:02:9e:7e:99:66:54:58:e4:29: 5c:13:c6:b5:e7:a8:26:4d:bf:f5:a8:c7:a6:6a:a5: 26:32:76:a5:9f:54:94:0c:6f:7e:cb:6f:bb:2b:e8: 3f:d1:16:0a:0a:36:4a:58:7b:0d:42:01:42:c4:47: 12:62:fb:e5:dd:85:0d:a2:46:70:b3:a5:c1:a2:db: 52:f2:75:1b:1d:b3:84:ab:fb:64:a3:d8:ad:3e:14: 37:5a:eb:d2:18:90:c3:f0:e8:86:aa:ca:78:89:37: 31:dc:fc:6a:8f:b7:67:12:e8:8b:e5:54:7c:dd:57: ed:08:50:41:1e:ad:ed:b0:af:53:09:21:3a:1c:c6: 9f:31:c7:23:ad:ef:2b:ea:8b:b7:4d:fa:8f:83:da: b3:a9:cc:b3:1f:4c:12:1f:18:0d:f1:71:8d:88:79: 02:54:a6:80:b2:d7:4f:e0:d0:1a:cd:07:4b:b6:99: e5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F6:8C:C7:17:C5:DE:FE:FF:96:E0:7F:C9:27:46:1C:4F:BD:3D:F0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59273.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.80.96.0/23 Signature Algorithm: sha256WithRSAEncryption 58:bf:18:29:36:45:ad:6e:8a:54:c5:f7:ad:fb:e3:db:07:a2: 81:d5:f2:92:64:47:b2:ed:61:2a:47:79:26:e4:17:d0:17:be: fc:09:7f:5a:64:b9:26:95:8d:95:08:ee:b8:b4:32:7e:f5:70: 19:2d:9f:c0:7b:4a:2f:09:ab:6b:c2:a0:7b:d6:5f:b0:53:e2: 1b:57:d5:96:cf:f8:a1:04:42:82:8a:29:21:a8:17:c0:de:5f: b3:8a:ee:b7:69:00:6a:5f:17:a0:65:96:05:73:98:36:d3:2f: ca:be:57:07:03:86:3b:7e:b2:5b:d4:04:d4:3a:00:c7:af:3e: 6a:45:cd:5c:06:80:84:62:8d:ea:3e:67:69:9f:a8:34:78:67: 05:24:92:3d:98:cb:9a:4f:ab:dd:39:ff:bb:28:b1:27:e4:2d: 54:a5:80:33:0a:45:af:7c:73:5e:25:a9:9b:c8:41:bb:80:83: f0:e1:f6:6f:d8:e8:ad:3e:05:89:0e:bc:ae:4b:0b:92:1a:cb: 5e:90:1a:d0:86:5d:73:d3:df:12:c2:76:83:9c:5f:55:c3:3d: 74:17:f0:b9:a7:09:ca:4f:b5:3f:1f:76:81:71:04:cf:db:9f: 45:5f:82:6e:ad:c8:11:17:62:4c:32:1a:ad:45:73:32:0b:be: 06:a8:3b:bf -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUVSrB7Ey/D85mE4HC0XgmDt42LMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYxMDAzMTA0MVoX DTI1MDYwOTAzMTU0MVowMzExMC8GA1UEAxMoMDhGNjhDQzcxN0M1REVGRUZGOTZF MDdGQzkyNzQ2MUM0RkJEM0RGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGJty3OPveyVW+BS5zOxYgQg/inGiziym4zSOoBBxo3U2QhKsGiMMXKCMz5 ImiXGTSYdy4KKFAmVTX5CUihLRBm/u3fBc5Hox03q+MdkntwAp5+mWZUWOQpXBPG teeoJk2/9ajHpmqlJjJ2pZ9UlAxvfstvuyvoP9EWCgo2Slh7DUIBQsRHEmL75d2F DaJGcLOlwaLbUvJ1Gx2zhKv7ZKPYrT4UN1rr0hiQw/DohqrKeIk3Mdz8ao+3ZxLo i+VUfN1X7QhQQR6t7bCvUwkhOhzGnzHHI63vK+qLt036j4Pas6nMsx9MEh8YDfFx jYh5AlSmgLLXT+DQGs0HS7aZ5S8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQI9ozH F8Xe/v+W4H/JJ0YcT7098DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU5MjczLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ1BgMA0GCSqGSIb3DQEBCwUAA4IBAQBYvxgpNkWtbopUxfet++Pb B6KB1fKSZEey7WEqR3km5BfQF778CX9aZLkmlY2VCO64tDJ+9XAZLZ/Ae0ovCatr wqB71l+wU+IbV9WWz/ihBEKCiikhqBfA3l+ziu63aQBqXxegZZYFc5g20y/KvlcH A4Y7frJb1ATUOgDHrz5qRc1cBoCEYo3qPmdpn6g0eGcFJJI9mMuaT6vdOf+7KLEn 5C1UpYAzCkWvfHNeJambyEG7gIPw4fZv2OitPgWJDryuSwuSGstekBrQhl1z098S wnaDnF9Vwz10F/C5pwnKT7U/H3aBcQTP259FX4JurcgRF2JMMhqtRXMyC74GqDu/ -----END CERTIFICATE-----Generated at Sat Jun 22 23:54:04 2024 by rpki-client on console-fra.rpki-client.org