$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63883.roa File: AS63883.roa (raw, json) Hash identifier: gb+O75aY2QVUQuHUs53AfjhFv+S3jkff0g4qWNqzNpA= Subject key identifier: 53:E1:77:D7:CC:B8:A8:F9:9C:17:D6:E8:65:09:FC:7C:04:CA:D3:04 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1406A08B5BD6C9DE243F2A2472D7B7A998C17459 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63883.roa Signing time: Tue 28 May 2024 03:18:54 +0000 ROA not before: Tue 28 May 2024 03:13:54 +0000 ROA not after: Tue 27 May 2025 03:18:54 +0000 asID: 63883 IP address blocks: 103.62.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:06:a0:8b:5b:d6:c9:de:24:3f:2a:24:72:d7:b7:a9:98:c1:74:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 28 03:13:54 2024 GMT Not After : May 27 03:18:54 2025 GMT Subject: CN=53E177D7CCB8A8F99C17D6E86509FC7C04CAD304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:c3:40:ef:b6:2e:a2:1b:c8:c1:9c:6b:b2: 5e:e2:61:e4:9b:3f:38:f1:e2:43:a9:c2:72:ef:c1: 2f:4a:34:eb:b6:26:a4:da:61:e1:41:65:33:c3:cd: e2:a6:b2:30:35:6d:8f:67:68:fd:5f:97:5e:20:de: 84:26:8d:4f:36:ce:52:21:4f:5f:41:69:8b:12:1c: 36:37:8f:1e:ef:91:e3:8b:43:50:d0:bf:16:fb:0a: 0d:eb:2a:28:fe:9d:c7:3f:aa:b8:ca:57:83:c9:89: 41:a1:be:22:d9:7b:1b:a8:f1:0e:6a:38:e0:1c:50: 16:88:fb:2b:7f:a4:fd:49:66:6e:0b:80:8f:2b:32: 50:09:a7:ac:42:d6:f7:49:c2:cc:f8:72:9a:83:4f: 44:55:08:29:c8:62:ee:b7:a1:93:2c:64:db:63:21: 67:35:6b:c2:11:be:9b:1f:d8:e8:51:6e:97:e6:e4: 8b:f8:4f:74:49:80:37:d7:1f:de:b6:08:4d:5f:9a: 27:52:34:63:71:a1:40:b9:11:6a:ae:90:e5:e4:22: 2f:f2:26:dc:1a:78:b1:82:ea:4e:a0:71:74:8b:4c: 9c:79:20:9a:dc:b6:36:8e:2a:cd:8d:1d:09:6b:3b: 77:8e:90:08:13:53:eb:4c:00:69:0b:f7:20:e8:53: 86:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E1:77:D7:CC:B8:A8:F9:9C:17:D6:E8:65:09:FC:7C:04:CA:D3:04 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63883.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.62.202.0/23 Signature Algorithm: sha256WithRSAEncryption 49:0f:02:fb:ef:da:ef:c6:89:9e:3a:e5:65:7f:1f:59:5f:04: 3f:39:2c:ea:75:0f:0d:2e:b0:81:fb:5f:ef:b7:14:d2:e1:35: 66:65:e2:d8:23:89:a7:e0:5f:ae:57:87:10:5e:65:fa:5d:97: c7:2d:a8:2e:28:bb:bf:8b:72:ef:bf:6a:6d:32:cf:e7:8b:46: 29:4c:6f:4f:37:8e:d9:93:cb:e9:9a:56:a9:5a:ef:50:c2:70: 5d:6b:92:ac:9b:86:6e:73:f3:92:bc:b9:3f:eb:b8:5c:63:18: 70:37:90:34:05:09:30:cc:9f:c7:85:80:48:b6:ac:79:f3:41: 87:de:07:59:cb:a0:be:36:45:cf:d7:da:39:f5:26:c5:9c:e7: 2b:db:d7:57:dc:16:ff:ed:dc:6f:ee:2f:2d:35:e5:68:24:43: 4a:ce:27:80:23:74:d0:b6:9b:b2:2c:bb:5a:ba:54:68:f2:df: b1:4f:04:a4:1c:58:c8:4d:64:66:51:48:d9:c6:8a:67:53:d3: c1:aa:72:3a:e5:b2:d7:cd:4f:f7:66:63:58:da:fb:bd:3f:db: e1:c1:7f:0f:1f:35:11:9b:a3:e9:59:17:19:51:7c:8e:d2:27: f6:8a:ae:20:f0:f5:d2:e5:8b:ad:ba:1d:24:d2:df:71:0e:d6: db:b1:f7:42 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUFAagi1vWyd4kPyokcte3qZjBdFkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyODAzMTM1NFoX DTI1MDUyNzAzMTg1NFowMzExMC8GA1UEAxMoNTNFMTc3RDdDQ0I4QThGOTlDMTdE NkU4NjUwOUZDN0MwNENBRDMwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKy+w0Dvti6iG8jBnGuyXuJh5Js/OPHiQ6nCcu/BL0o067YmpNph4UFlM8PN 4qayMDVtj2do/V+XXiDehCaNTzbOUiFPX0FpixIcNjePHu+R44tDUNC/FvsKDesq KP6dxz+quMpXg8mJQaG+Itl7G6jxDmo44BxQFoj7K3+k/UlmbguAjysyUAmnrELW 90nCzPhymoNPRFUIKchi7rehkyxk22MhZzVrwhG+mx/Y6FFul+bki/hPdEmAN9cf 3rYITV+aJ1I0Y3GhQLkRaq6Q5eQiL/Im3Bp4sYLqTqBxdItMnHkgmty2No4qzY0d CWs7d46QCBNT60wAaQv3IOhThn8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRT4XfX zLio+ZwX1uhlCfx8BMrTBDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzYzODgzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZz7KMA0GCSqGSIb3DQEBCwUAA4IBAQBJDwL779rvxomeOuVlfx9Z XwQ/OSzqdQ8NLrCB+1/vtxTS4TVmZeLYI4mn4F+uV4cQXmX6XZfHLaguKLu/i3Lv v2ptMs/ni0YpTG9PN47Zk8vpmlapWu9QwnBda5Ksm4Zuc/OSvLk/67hcYxhwN5A0 BQkwzJ/HhYBItqx580GH3gdZy6C+NkXP19o59SbFnOcr29dX3Bb/7dxv7i8tNeVo JENKzieAI3TQtpuyLLtaulRo8t+xTwSkHFjITWRmUUjZxopnU9PBqnI65bLXzU/3 ZmNY2vu9P9vhwX8PHzURm6PpWRcZUXyO0if2iq4g8PXS5Yutuh0k0t9xDtbbsfdC -----END CERTIFICATE-----Generated at Sun Jun 23 00:04:05 2024 by rpki-client on console-ams.rpki-client.org