$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134621.roa File: AS134621.roa (raw, json) Hash identifier: xEziNpg7/HOFLh6Yd2pdfwe+55mxnHDOa3yamS8c0uE= Subject key identifier: B6:BC:52:ED:CE:25:A0:F3:5A:18:92:7C:F5:E2:6C:04:C4:21:11:A3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 76FF1E49EB019EDCDA8CC86C10C1BB6F14A414AF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134621.roa Signing time: Tue 10 Dec 2024 05:00:04 +0000 ROA not before: Tue 10 Dec 2024 04:55:04 +0000 ROA not after: Tue 09 Dec 2025 05:00:04 +0000 asID: 134621 IP address blocks: 103.197.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ff:1e:49:eb:01:9e:dc:da:8c:c8:6c:10:c1:bb:6f:14:a4:14:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:04 2024 GMT Not After : Dec 9 05:00:04 2025 GMT Subject: CN=B6BC52EDCE25A0F35A18927CF5E26C04C42111A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:8f:05:94:5c:30:24:f7:69:a4:85:ae:ef: 19:79:c8:74:42:ec:47:f7:49:44:b3:cf:f3:c9:d1: ad:1c:6d:51:a6:1e:1d:13:a3:09:1f:b3:53:13:df: 47:00:74:f8:a2:96:b7:c1:ad:ea:22:2d:4c:80:d8: 10:67:d0:ea:da:c8:65:79:46:73:fe:3c:58:68:bc: e0:cf:50:06:d3:25:b9:29:7b:22:b7:cf:a9:31:1d: d7:f2:87:9e:96:66:c6:36:02:df:e2:b6:fd:57:0e: e9:e0:14:72:26:39:30:a9:de:f6:09:9a:aa:5d:d4: 7d:7b:06:df:fc:24:5d:04:1a:03:8c:0b:a6:7d:35: 80:1d:fe:01:37:46:8c:bd:b9:b3:36:ee:cc:cb:09: f9:60:1a:d7:99:0a:97:a3:80:96:44:2c:24:f9:61: e5:02:1e:56:5e:00:10:1e:4d:57:d4:32:32:29:c7: e7:47:a1:ad:5a:a1:93:61:a8:6b:fa:f2:1b:83:84: 33:b4:b9:62:1c:60:a2:7c:98:d0:09:e5:e8:3b:20: cc:d3:67:a8:24:40:d1:7a:b5:12:44:e7:ce:a3:5b: 5c:2c:e5:00:cb:48:1d:bd:da:98:ac:03:bc:28:6e: 8f:93:fb:42:fb:4a:c8:1b:6e:2b:61:bd:a2:4b:31: 7b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BC:52:ED:CE:25:A0:F3:5A:18:92:7C:F5:E2:6C:04:C4:21:11:A3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134621.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.89.0/24 Signature Algorithm: sha256WithRSAEncryption 12:44:c2:e5:39:6a:b4:46:f6:e5:5e:56:4d:8f:ad:85:39:e9: 64:20:60:49:df:b7:4d:d8:9a:7e:43:5b:08:0c:06:08:20:70: 2c:57:f7:03:2b:a4:b9:07:05:30:c8:45:ac:d1:18:d1:c6:f3: bb:46:b9:6d:d5:1b:b9:08:5f:4b:04:11:d9:1f:ce:ac:e9:0b: 02:de:f2:46:53:e7:51:36:2c:d6:75:8f:c3:1e:4b:e2:5d:b0: 9b:4a:62:e8:4d:3d:f0:6e:a1:75:53:69:4c:37:73:4e:18:37: 70:b6:f3:d4:c2:7f:09:45:83:5f:b5:f3:2b:d1:0d:ad:e0:fd: b3:95:1d:b4:83:54:c5:f7:34:3f:a4:c9:2a:47:22:f5:c0:c5: 1a:7f:86:c0:de:a4:39:6d:a5:2b:50:22:aa:25:bd:26:1f:20: da:4a:ad:84:21:6d:24:e4:55:ac:1a:99:96:c8:8f:82:6f:85: 25:28:6a:4c:c5:8a:f3:8f:48:87:48:7a:c8:e4:6e:fc:d1:e7: 00:02:a5:d0:1a:fe:2a:e8:1f:83:8f:bc:cb:73:85:a7:bb:92: 44:3b:bd:6c:0a:1c:91:c1:4d:a3:84:da:90:e2:ad:26:48:0e: ea:ed:b7:32:9c:e8:80:1c:8a:41:8a:3e:99:f6:8d:db:a5:9e: 4c:d5:54:47 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUdv8eSesBntzajMhsEMG7bxSkFK8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwNFoX DTI1MTIwOTA1MDAwNFowMzExMC8GA1UEAxMoQjZCQzUyRURDRTI1QTBGMzVBMTg5 MjdDRjVFMjZDMDRDNDIxMTFBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMyujwWUXDAk92mkha7vGXnIdELsR/dJRLPP88nRrRxtUaYeHROjCR+zUxPf RwB0+KKWt8Gt6iItTIDYEGfQ6trIZXlGc/48WGi84M9QBtMluSl7IrfPqTEd1/KH npZmxjYC3+K2/VcO6eAUciY5MKne9gmaql3UfXsG3/wkXQQaA4wLpn01gB3+ATdG jL25szbuzMsJ+WAa15kKl6OAlkQsJPlh5QIeVl4AEB5NV9QyMinH50ehrVqhk2Go a/ryG4OEM7S5YhxgonyY0Anl6DsgzNNnqCRA0Xq1EkTnzqNbXCzlAMtIHb3amKwD vChuj5P7QvtKyBtuK2G9oksxe98CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS2vFLt ziWg81oYknz14mwExCERozAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNDYyMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfFWTANBgkqhkiG9w0BAQsFAAOCAQEAEkTC5TlqtEb25V5WTY+t hTnpZCBgSd+3TdiafkNbCAwGCCBwLFf3AyukuQcFMMhFrNEY0cbzu0a5bdUbuQhf SwQR2R/OrOkLAt7yRlPnUTYs1nWPwx5L4l2wm0pi6E098G6hdVNpTDdzThg3cLbz 1MJ/CUWDX7XzK9ENreD9s5UdtINUxfc0P6TJKkci9cDFGn+GwN6kOW2lK1AiqiW9 Jh8g2kqthCFtJORVrBqZlsiPgm+FJShqTMWK849Ih0h6yORu/NHnAAKl0Br+Kugf g4+8y3OFp7uSRDu9bAockcFNo4TakOKtJkgO6u23MpzogByKQYo+mfaN26WeTNVU Rw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:17 2025 by rpki-client on console.sobornost.net