$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63882.roa File: AS63882.roa (raw, json) Hash identifier: kovPtxUoX91/HKpdlvebq+OpUKdcJPHtjBEGe4Xk9a0= Subject key identifier: 3F:18:79:42:DF:B9:78:D9:30:9D:3F:FF:49:29:E8:3A:CB:DA:D3:D8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7B532C7587648A2A3EA2E914991968578194243B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63882.roa Signing time: Mon 29 Jul 2024 05:02:14 +0000 ROA not before: Mon 29 Jul 2024 04:57:14 +0000 ROA not after: Mon 28 Jul 2025 05:02:14 +0000 asID: 63882 IP address blocks: 103.57.192.0/22 maxlen: 24 2401:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:53:2c:75:87:64:8a:2a:3e:a2:e9:14:99:19:68:57:81:94:24:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 29 04:57:14 2024 GMT Not After : Jul 28 05:02:14 2025 GMT Subject: CN=3F187942DFB978D9309D3FFF4929E83ACBDAD3D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:cd:8f:8e:7d:ef:6d:95:94:b2:a5:22:9e: 8f:2b:72:49:56:75:38:d3:6e:b0:70:c6:ee:c5:52: c8:4e:96:61:42:f5:7f:5e:07:bf:7a:ef:87:ce:8d: 5f:18:d2:e1:97:9b:1e:ae:f9:77:b0:34:55:e5:18: 3a:11:1a:83:62:e7:fb:2c:64:ca:5d:57:4d:46:b8: d1:53:aa:03:9e:6d:df:e2:a2:33:60:c4:cf:48:85: 73:fb:76:24:49:33:cc:1b:c3:4c:ce:43:d2:4e:c0: e3:53:80:bd:87:50:34:17:38:12:30:32:0d:13:fe: 67:b2:95:1a:36:08:4c:8c:b2:b8:0a:8a:09:44:cc: 85:8e:9c:23:2a:0f:aa:0a:6f:53:f1:3b:02:e1:13: f8:83:56:69:35:4e:69:5b:43:4e:85:37:19:0a:09: 26:8b:81:58:b3:6b:14:2d:9f:5c:36:25:04:c8:f7: 9c:9b:58:76:11:c7:fb:32:e8:4a:b3:f7:17:27:bb: 6e:9f:fd:a9:d8:22:60:c3:99:b3:03:97:30:7a:7e: 99:44:7e:24:13:46:87:ca:f6:07:ce:e0:3f:93:0e: 78:f0:21:fc:e0:86:96:a2:06:a3:77:57:ad:b9:d1: 62:b6:83:bd:32:b0:c4:d2:8e:0b:93:9a:32:79:50: 0d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:18:79:42:DF:B9:78:D9:30:9D:3F:FF:49:29:E8:3A:CB:DA:D3:D8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63882.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.57.192.0/22 IPv6: 2401:9540::/32 Signature Algorithm: sha256WithRSAEncryption 08:a3:37:34:c3:54:10:09:a7:94:fe:78:fc:a8:8d:e2:00:a4: fc:1e:f3:9e:c5:cf:19:5b:a4:92:7f:d8:1a:c8:1c:a9:22:e6: dc:45:24:94:49:65:44:48:69:9c:dd:3c:e7:ca:55:5b:0e:c1: b6:85:3b:81:70:e4:9f:d9:3e:54:df:d2:94:17:e3:59:fa:4a: f1:38:23:fb:44:fd:81:5b:3e:89:f1:c5:87:85:a7:c3:23:a4: 56:6e:86:a2:3d:e4:4b:a3:d1:61:b5:b8:7f:b2:8b:62:99:be: 55:f5:0e:04:1d:16:09:63:09:1f:dd:92:4b:3b:88:c6:7d:29: ca:32:5f:f4:cc:b6:ea:eb:ba:74:d0:1f:0c:e1:f8:d9:7c:b9: 85:cf:c8:1f:31:2a:6f:95:3c:33:5a:f3:98:c7:73:77:6c:1d: fa:2a:2a:14:75:81:1f:a6:c7:da:0a:c7:8b:c2:33:30:e6:37: cf:6c:49:0d:68:a7:34:db:d3:df:dc:75:57:0d:de:f1:59:d0: 38:59:6d:28:32:28:d8:cd:05:5a:e4:d0:f7:49:27:74:20:1e: 44:11:5e:1a:c1:ef:68:70:c1:5a:98:f1:c7:cb:26:ab:52:7d: e4:fa:75:20:e8:91:54:79:c5:d2:e1:d6:ed:fc:c7:8c:db:73: b8:54:3b:0d -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUe1MsdYdkiio+oukUmRloV4GUJDswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyOTA0NTcxNFoX DTI1MDcyODA1MDIxNFowMzExMC8GA1UEAxMoM0YxODc5NDJERkI5NzhEOTMwOUQz RkZGNDkyOUU4M0FDQkRBRDNEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3EzY+Ofe9tlZSypSKejytySVZ1ONNusHDG7sVSyE6WYUL1f14Hv3rvh86N XxjS4ZebHq75d7A0VeUYOhEag2Ln+yxkyl1XTUa40VOqA55t3+KiM2DEz0iFc/t2 JEkzzBvDTM5D0k7A41OAvYdQNBc4EjAyDRP+Z7KVGjYITIyyuAqKCUTMhY6cIyoP qgpvU/E7AuET+INWaTVOaVtDToU3GQoJJouBWLNrFC2fXDYlBMj3nJtYdhHH+zLo SrP3Fye7bp/9qdgiYMOZswOXMHp+mUR+JBNGh8r2B87gP5MOePAh/OCGlqIGo3dX rbnRYraDvTKwxNKOC5OaMnlQDakCAwEAAaOCAd4wggHaMB0GA1UdDgQWBBQ/GHlC 37l42TCdP/9JKeg6y9rT2DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzYzODgyLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZznAMA0EAgACMAcDBQAkAZVAMA0GCSqGSIb3DQEBCwUAA4IBAQAI ozc0w1QQCaeU/nj8qI3iAKT8HvOexc8ZW6SSf9gayBypIubcRSSUSWVESGmc3Tzn ylVbDsG2hTuBcOSf2T5U39KUF+NZ+krxOCP7RP2BWz6J8cWHhafDI6RWboaiPeRL o9Fhtbh/sotimb5V9Q4EHRYJYwkf3ZJLO4jGfSnKMl/0zLbq67p00B8M4fjZfLmF z8gfMSpvlTwzWvOYx3N3bB36KioUdYEfpsfaCseLwjMw5jfPbEkNaKc029Pf3HVX Dd7xWdA4WW0oMijYzQVa5ND3SSd0IB5EEV4awe9ocMFamPHHyyarUn3k+nUg6JFU ecXS4dbt/MeM23O4VDsN -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:50 2024 by rpki-client on console-ams.rpki-client.org