$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9794.roa File: AS9794.roa (raw, json) Hash identifier: IL8xP0x0P8PwzWiymKcxZM/hKzkjt83A9QwXpO+pogg= Subject key identifier: 9A:2E:8A:F1:54:6C:6B:05:D2:CF:92:DC:64:A2:F6:85:E3:71:2E:B0 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 530D0B84AF851417019B75E0D4008CD4A0A02F2C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9794.roa Signing time: Tue 09 Jan 2024 04:00:04 +0000 ROA not before: Tue 09 Jan 2024 03:55:04 +0000 ROA not after: Tue 07 Jan 2025 04:00:04 +0000 asID: 9794 IP address blocks: 103.252.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0d:0b:84:af:85:14:17:01:9b:75:e0:d4:00:8c:d4:a0:a0:2f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:04 2024 GMT Not After : Jan 7 04:00:04 2025 GMT Subject: CN=9A2E8AF1546C6B05D2CF92DC64A2F685E3712EB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:6a:8e:e2:2b:4e:ca:d9:3e:2d:08:71:b5: 18:45:2b:4a:30:97:1b:b6:d0:b2:13:00:3a:4b:69: 08:ec:b5:72:f2:89:f7:50:4a:34:18:ef:d2:04:95: 0d:c6:b1:72:12:9d:7b:9e:63:9f:8b:99:d2:84:34: c3:15:90:53:25:6a:5c:7c:b4:da:09:0a:ce:d8:9d: b8:19:a8:6e:bc:34:2f:08:fa:8f:5b:b6:1f:0b:22: 9d:46:b6:06:68:f1:9e:2c:0c:24:56:2c:e6:70:35: 3e:fe:90:ce:69:c3:80:e2:7b:75:f1:19:83:61:59: 91:54:58:b8:63:7b:75:6b:fe:48:c4:d3:a4:cf:32: 6c:56:f0:a7:c4:46:d2:0b:cc:67:d7:05:77:e6:6f: 69:62:3f:b3:02:fc:2a:3d:61:20:e4:e8:cd:bc:25: 68:3b:e7:55:11:cd:b1:5a:b2:95:c3:99:74:01:12: 0e:e6:a9:3e:8e:78:60:24:23:47:1b:78:6d:0e:2d: 12:4f:25:ab:6f:48:07:e4:d4:34:c1:7d:5a:1b:54: 98:1b:25:b7:b7:36:62:40:64:de:41:40:1c:7a:20: d0:7c:50:c2:10:6b:4b:27:c0:55:f0:92:6c:13:f3: 95:61:b2:98:43:83:d8:69:80:c5:42:55:72:03:bf: e6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2E:8A:F1:54:6C:6B:05:D2:CF:92:DC:64:A2:F6:85:E3:71:2E:B0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9794.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.252.22.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:dd:86:49:63:a8:4d:f2:a4:49:46:bb:32:6b:0a:cb:a4:c0: d6:d5:a2:d2:58:c2:db:4b:1b:1d:93:30:e8:e9:fe:8f:ab:f8: e2:bb:e3:68:00:07:a4:ac:b7:84:af:0e:76:28:11:b6:e4:b4: 12:2c:18:30:07:49:02:65:3c:3c:33:6b:00:24:ce:6a:93:b7: 9c:20:26:08:a8:b7:72:cf:2b:5c:78:2e:3f:3f:dc:a2:0b:68: 28:21:68:b4:67:c2:03:51:7b:b3:d2:37:b9:a1:20:77:22:83: 73:db:e7:44:8a:36:18:7a:09:4c:94:41:f2:2c:77:52:4a:f8: 95:b9:eb:59:ea:a8:79:cc:45:39:d3:af:08:04:a9:fa:76:52: 61:1b:51:eb:9f:4f:aa:28:ee:70:f2:3b:10:ff:11:28:7b:d4: bd:97:07:14:c2:a3:70:0d:8e:47:09:26:5d:34:6f:a7:1d:7c: be:88:b2:96:cc:c6:72:4f:7b:b8:3b:cb:1c:c9:3f:c9:0b:ce: 4f:8d:65:42:34:f9:ae:3d:ba:4a:67:1d:8f:af:01:ee:9c:36: 27:e5:45:f0:cc:9a:e2:47:03:9c:30:df:6f:cc:02:7d:3a:43: 44:32:24:10:9d:0c:d3:9b:34:88:99:7f:fd:e0:bd:88:cc:bc: 35:cf:29:b4 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUUw0LhK+FFBcBm3Xg1ACM1KCgLywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwNFoX DTI1MDEwNzA0MDAwNFowMzExMC8GA1UEAxMoOUEyRThBRjE1NDZDNkIwNUQyQ0Y5 MkRDNjRBMkY2ODVFMzcxMkVCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANS6ao7iK07K2T4tCHG1GEUrSjCXG7bQshMAOktpCOy1cvKJ91BKNBjv0gSV DcaxchKde55jn4uZ0oQ0wxWQUyVqXHy02gkKztiduBmobrw0Lwj6j1u2HwsinUa2 BmjxniwMJFYs5nA1Pv6QzmnDgOJ7dfEZg2FZkVRYuGN7dWv+SMTTpM8ybFbwp8RG 0gvMZ9cFd+ZvaWI/swL8Kj1hIOTozbwlaDvnVRHNsVqylcOZdAESDuapPo54YCQj Rxt4bQ4tEk8lq29IB+TUNMF9WhtUmBslt7c2YkBk3kFAHHog0HxQwhBrSyfAVfCS bBPzlWGymEOD2GmAxUJVcgO/5o0CAwEAAaOCAc4wggHKMB0GA1UdDgQWBBSaLorx VGxrBdLPktxkovaF43EusDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFIGCCsGAQUFBwELBEYwRDBCBggrBgEFBQcwC4Y2cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzk3OTQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABn/BYwDQYJKoZIhvcNAQELBQADggEBAB3dhkljqE3ypElGuzJrCsuk wNbVotJYwttLGx2TMOjp/o+r+OK742gAB6Sst4SvDnYoEbbktBIsGDAHSQJlPDwz awAkzmqTt5wgJgiot3LPK1x4Lj8/3KILaCghaLRnwgNRe7PSN7mhIHcig3Pb50SK Nhh6CUyUQfIsd1JK+JW561nqqHnMRTnTrwgEqfp2UmEbUeufT6oo7nDyOxD/ESh7 1L2XBxTCo3ANjkcJJl00b6cdfL6IspbMxnJPe7g7yxzJP8kLzk+NZUI0+a49ukpn HY+vAe6cNiflRfDMmuJHA5ww32/MAn06Q0QyJBCdDNObNIiZf/3gvYjMvDXPKbQ= -----END CERTIFICATE-----Generated at Thu May 9 00:29:17 2024 by rpki-client on console-ams.rpki-client.org