$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59282.roa File: AS59282.roa (raw, json) Hash identifier: x5GhZ2EAgRx4kqdrSrY6E0v4eabN69o7Nb4gNYMBnHA= Subject key identifier: 11:4D:D7:5F:9A:43:48:18:98:B0:82:C0:40:78:EE:71:36:BF:35:B8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C0D1174DDF09CEE723BB5E0710C9BA8F9515E7B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59282.roa Signing time: Wed 24 Jul 2024 05:00:00 +0000 ROA not before: Wed 24 Jul 2024 04:55:00 +0000 ROA not after: Wed 23 Jul 2025 05:00:00 +0000 asID: 59282 IP address blocks: 103.254.104.0/22 maxlen: 24 202.74.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0d:11:74:dd:f0:9c:ee:72:3b:b5:e0:71:0c:9b:a8:f9:51:5e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 24 04:55:00 2024 GMT Not After : Jul 23 05:00:00 2025 GMT Subject: CN=114DD75F9A43481898B082C04078EE7136BF35B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:9d:ce:a0:40:8b:30:70:00:e7:67:5a:ff: 45:2d:be:b7:66:cf:09:ad:7c:5e:f7:73:f6:1f:d4: 05:6b:1e:9a:72:5d:ab:ab:52:98:c8:50:11:e4:2c: 53:9d:0e:c8:04:db:f9:8c:f9:d5:f7:0e:f9:7d:55: 75:6e:ed:89:65:76:6f:dd:bc:6d:aa:2d:0f:0e:74: 9f:45:59:13:78:74:b4:6e:f6:37:b3:40:00:b8:ff: 07:1a:1e:7a:8b:56:96:51:43:46:1a:d5:82:85:ed: 54:ef:c3:65:8d:b7:0b:49:5b:5d:78:db:e5:cb:33: 6d:be:e0:db:c8:45:74:6a:79:14:0b:17:94:7a:71: fd:39:47:df:5b:3a:4d:de:05:a4:ba:a4:f7:d3:61: 8f:f5:64:1c:e4:99:63:cd:e6:fe:ab:67:34:aa:0f: c3:5c:9c:04:c9:ea:a0:4e:ce:8b:18:f3:0a:91:4b: 3d:54:93:46:22:7a:5a:51:e0:43:70:5b:89:df:18: 3c:06:9b:19:50:f3:b3:7c:cb:bb:a7:1e:75:6c:2b: 0c:ca:d8:cf:20:53:b1:3c:c4:5e:2d:9a:36:5a:7e: 25:f2:91:68:00:a8:4b:eb:9c:11:c2:01:9c:80:7d: 2e:95:e6:f4:7d:e6:cc:b4:36:b7:68:e6:54:ee:0d: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4D:D7:5F:9A:43:48:18:98:B0:82:C0:40:78:EE:71:36:BF:35:B8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59282.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.254.104.0/22 202.74.76.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:48:ce:22:34:92:9c:ae:36:24:e2:ad:60:4d:8d:91:cb:f2: 60:90:c1:a5:55:28:ef:a4:3d:6a:3b:c2:21:30:38:42:34:29: 8a:e2:84:d9:a2:a2:4e:ff:45:86:5e:54:90:ae:cb:d2:85:e9: 75:97:df:c2:c6:d2:7c:f2:93:95:7f:d3:48:96:64:b5:93:8d: 70:55:e6:08:ae:41:24:f2:56:7a:60:2b:99:e4:59:16:85:2f: 95:42:fd:c1:0f:d4:9e:dc:c7:df:06:97:e9:12:7a:65:0e:fc: 99:ca:27:26:b6:6f:ce:6b:74:76:32:8f:52:63:f5:d4:66:c0: 2d:70:c4:e1:15:ca:07:7b:10:99:98:71:dc:b8:ae:06:55:71: eb:8a:11:57:2d:fc:9f:69:c1:3f:8c:98:f6:64:e5:95:22:14: b4:12:32:9a:a2:12:e0:24:f7:e1:d0:ec:38:de:12:59:a8:34: 2e:47:00:3b:12:fc:1c:4e:89:84:f8:2a:63:16:95:08:54:ce: c7:58:ef:96:26:f0:07:c1:cb:08:a5:46:aa:90:73:9e:22:f5: c1:89:db:32:2a:07:16:c6:45:4c:33:ae:5a:1f:d6:48:be:cf: a6:01:82:46:16:aa:03:ad:fc:86:de:55:74:af:33:c5:59:c7: ee:fe:0d:c3 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUTA0RdN3wnO5yO7XgcQybqPlRXnswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyNDA0NTUwMFoX DTI1MDcyMzA1MDAwMFowMzExMC8GA1UEAxMoMTE0REQ3NUY5QTQzNDgxODk4QjA4 MkMwNDA3OEVFNzEzNkJGMzVCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2cnc6gQIswcADnZ1r/RS2+t2bPCa18Xvdz9h/UBWsemnJdq6tSmMhQEeQs U50OyATb+Yz51fcO+X1VdW7tiWV2b928baotDw50n0VZE3h0tG72N7NAALj/Bxoe eotWllFDRhrVgoXtVO/DZY23C0lbXXjb5cszbb7g28hFdGp5FAsXlHpx/TlH31s6 Td4FpLqk99Nhj/VkHOSZY83m/qtnNKoPw1ycBMnqoE7OixjzCpFLPVSTRiJ6WlHg Q3Bbid8YPAabGVDzs3zLu6cedWwrDMrYzyBTsTzEXi2aNlp+JfKRaACoS+ucEcIB nIB9LpXm9H3mzLQ2t2jmVO4NQtkCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBQRTddf mkNIGJiwgsBAeO5xNr81uDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU5MjgyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ/5oAwQCykpMMA0GCSqGSIb3DQEBCwUAA4IBAQAqSM4iNJKcrjYk 4q1gTY2Ry/JgkMGlVSjvpD1qO8IhMDhCNCmK4oTZoqJO/0WGXlSQrsvShel1l9/C xtJ88pOVf9NIlmS1k41wVeYIrkEk8lZ6YCuZ5FkWhS+VQv3BD9Se3MffBpfpEnpl DvyZyicmtm/Oa3R2Mo9SY/XUZsAtcMThFcoHexCZmHHcuK4GVXHrihFXLfyfacE/ jJj2ZOWVIhS0EjKaohLgJPfh0Ow43hJZqDQuRwA7EvwcTomE+CpjFpUIVM7HWO+W JvAHwcsIpUaqkHOeIvXBidsyKgcWxkVMM65aH9ZIvs+mAYJGFqoDrfyG3lV0rzPF Wcfu/g3D -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:50 2024 by rpki-client on console-ams.rpki-client.org