$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59281.roa File: AS59281.roa (raw, json) Hash identifier: h8pgShDEpRNcS8d/0uK2tHemua5YN32Kc8NsylN8j2Q= Subject key identifier: 85:0A:1D:19:6F:BA:38:C2:2B:F7:F5:AD:D4:F5:A7:AD:18:61:CD:BD Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 101B6FB89831CECF8D0685CB6D8788EF1A8B2F3A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59281.roa Signing time: Fri 01 Mar 2024 06:24:43 +0000 ROA not before: Fri 01 Mar 2024 06:19:43 +0000 ROA not after: Fri 28 Feb 2025 06:24:43 +0000 asID: 59281 IP address blocks: 103.10.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1b:6f:b8:98:31:ce:cf:8d:06:85:cb:6d:87:88:ef:1a:8b:2f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 1 06:19:43 2024 GMT Not After : Feb 28 06:24:43 2025 GMT Subject: CN=850A1D196FBA38C22BF7F5ADD4F5A7AD1861CDBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:d8:c6:28:43:81:0e:f1:00:bf:1d:2a:4e: 23:30:80:61:ae:91:a4:38:09:36:3b:c8:df:71:a7: eb:9c:c0:21:7d:3b:fa:e1:43:2e:07:99:4e:ee:ca: 4e:e1:82:43:bc:ec:ca:61:f5:14:7e:21:5d:a7:ed: 0a:f5:01:c0:6b:7e:f8:44:82:b3:d3:3b:e5:31:de: b4:ed:05:01:dc:a4:ef:06:11:e1:0c:fa:29:14:2b: 5d:5f:a7:be:38:49:8f:0a:31:ec:6f:fb:b8:8f:b1: b7:71:8c:63:4a:e4:b0:63:48:d5:8c:50:47:1c:a1: 99:13:4b:81:4f:84:d3:65:56:51:da:c7:48:25:0a: 61:a3:ca:cc:57:60:d3:25:47:55:97:49:6d:ee:4d: ad:84:f5:0d:74:43:95:61:f7:df:fa:20:51:48:68: 97:68:0b:26:2f:47:31:58:d3:2c:fc:10:b4:19:6a: 2a:ca:7f:87:07:5a:00:de:ad:d3:cf:33:c2:9d:73: 54:e5:a5:da:5d:ed:20:cb:e3:9d:d9:c1:ed:e4:a1: 8d:58:74:c6:98:aa:17:59:3b:bc:09:97:4e:09:42: 77:d6:32:e2:a1:a6:c9:79:e9:77:74:8c:e5:2c:46: fd:3d:81:72:36:9f:8e:47:84:fd:36:c1:f6:d5:09: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0A:1D:19:6F:BA:38:C2:2B:F7:F5:AD:D4:F5:A7:AD:18:61:CD:BD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.58.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:70:df:e9:c3:33:d6:8f:e7:3e:83:43:f1:fc:9b:a9:58:26: 03:21:91:71:86:f9:6b:ab:01:cc:65:26:20:b3:74:8f:14:eb: f8:af:04:53:94:04:68:c4:c7:ad:4b:41:ee:f7:bf:a9:24:4f: f6:f3:6b:ef:f9:4d:88:15:a4:da:2d:65:d0:33:07:c2:98:74: 6d:61:c5:5d:b7:fa:6e:25:13:77:2e:16:0b:89:06:d6:f4:ce: 72:12:10:82:0c:62:5d:4c:14:c6:7e:ba:84:09:d5:46:00:35: 01:7c:06:4d:83:6c:61:63:91:d3:90:0f:1c:5f:fa:63:7d:af: 8b:41:35:fa:a5:26:41:67:f6:2e:1e:4f:60:d1:a8:d8:96:49: 40:7b:c6:6c:2c:f5:af:74:63:6a:61:a1:a9:23:81:cb:c6:2e: a6:ac:14:1f:f3:83:ff:03:73:16:1a:38:c0:68:a9:9d:55:e4: cf:ca:c7:e1:2d:89:f9:6c:a4:3c:00:3c:0e:ed:8f:c3:7d:de: b2:ed:3a:d9:78:b5:ff:aa:76:e6:2e:a7:62:ff:d7:72:28:b3: f3:61:63:6f:06:55:c8:f7:b7:6f:89:99:67:86:46:48:14:4b: 0c:1f:47:5f:79:2d:6b:2e:e0:b5:54:30:9a:30:a6:e3:58:79: 8e:22:c3:70 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUEBtvuJgxzs+NBoXLbYeI7xqLLzowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMwMTA2MTk0M1oX DTI1MDIyODA2MjQ0M1owMzExMC8GA1UEAxMoODUwQTFEMTk2RkJBMzhDMjJCRjdG NUFERDRGNUE3QUQxODYxQ0RCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZg2MYoQ4EO8QC/HSpOIzCAYa6RpDgJNjvI33Gn65zAIX07+uFDLgeZTu7K TuGCQ7zsymH1FH4hXaftCvUBwGt++ESCs9M75THetO0FAdyk7wYR4Qz6KRQrXV+n vjhJjwox7G/7uI+xt3GMY0rksGNI1YxQRxyhmRNLgU+E02VWUdrHSCUKYaPKzFdg 0yVHVZdJbe5NrYT1DXRDlWH33/ogUUhol2gLJi9HMVjTLPwQtBlqKsp/hwdaAN6t 088zwp1zVOWl2l3tIMvjndnB7eShjVh0xpiqF1k7vAmXTglCd9Yy4qGmyXnpd3SM 5SxG/T2BcjafjkeE/TbB9tUJOUsCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSFCh0Z b7o4wiv39a3U9aetGGHNvTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU5MjgxLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZwo6MA0GCSqGSIb3DQEBCwUAA4IBAQAccN/pwzPWj+c+g0Px/Jup WCYDIZFxhvlrqwHMZSYgs3SPFOv4rwRTlARoxMetS0Hu97+pJE/282vv+U2IFaTa LWXQMwfCmHRtYcVdt/puJRN3LhYLiQbW9M5yEhCCDGJdTBTGfrqECdVGADUBfAZN g2xhY5HTkA8cX/pjfa+LQTX6pSZBZ/YuHk9g0ajYlklAe8ZsLPWvdGNqYaGpI4HL xi6mrBQf84P/A3MWGjjAaKmdVeTPysfhLYn5bKQ8ADwO7Y/Dfd6y7TrZeLX/qnbm Lqdi/9dyKLPzYWNvBlXI97dviZlnhkZIFEsMH0dfeS1rLuC1VDCaMKbjWHmOIsNw -----END CERTIFICATE-----Generated at Thu May 9 00:37:09 2024 by rpki-client on console-fra.rpki-client.org