$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147135.roa File: AS147135.roa (raw, json) Hash identifier: 8/w/s/XbIhte8ni6VY56ZXHFOQh59UEUqsQWbTotPj0= Subject key identifier: E5:91:9A:B0:3C:A6:17:60:4B:11:1F:13:71:E9:A1:E9:B5:BC:0D:A0 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3364912B17568D64662ADC11DA476A72374FD0F5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147135.roa Signing time: Tue 10 Dec 2024 05:00:23 +0000 ROA not before: Tue 10 Dec 2024 04:55:23 +0000 ROA not after: Tue 09 Dec 2025 05:00:23 +0000 asID: 147135 IP address blocks: 103.176.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:64:91:2b:17:56:8d:64:66:2a:dc:11:da:47:6a:72:37:4f:d0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:23 2024 GMT Not After : Dec 9 05:00:23 2025 GMT Subject: CN=E5919AB03CA617604B111F1371E9A1E9B5BC0DA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:ab:c7:96:66:45:1d:0b:00:c3:71:80:16: 3c:83:77:b7:6d:3c:1a:02:b2:5b:cd:05:59:be:09: a6:3e:89:c4:02:79:c1:f1:29:d4:96:8d:50:40:bf: 7b:dd:d0:de:af:67:94:ab:a3:85:01:4b:ed:36:cc: c8:95:4b:fd:10:39:3a:dd:a8:06:7b:d8:0c:cf:d1: eb:62:d6:4b:c8:3a:af:b2:d3:b7:2b:b2:39:70:27: ac:e7:7f:3d:f3:16:56:b2:3b:03:2c:9a:9a:e9:3e: 6d:67:d7:6d:19:a7:f9:3e:78:37:4e:2b:48:c5:b1: ce:fc:9d:d9:e8:7b:4d:21:33:52:78:b3:03:f5:da: ec:6b:ed:b2:08:fb:be:7c:56:74:71:14:97:6d:3e: 92:18:42:ec:a7:27:07:7b:a9:4e:d9:68:fc:12:1a: 1f:ba:eb:6c:9d:ad:5a:fc:a1:cc:3e:70:fe:75:35: 48:82:bc:58:00:80:c5:c1:45:9e:6a:cb:98:63:00: 20:ce:ec:68:66:a9:a0:a1:25:4e:e4:33:84:6c:47: d0:de:5c:05:11:7c:67:fc:9d:1e:9c:52:f5:69:66: e9:8f:7b:ef:5c:61:96:5b:09:13:ae:bf:f8:9c:b0: 0a:c1:4d:79:12:67:cd:e9:97:2f:ef:3e:c0:5d:aa: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:91:9A:B0:3C:A6:17:60:4B:11:1F:13:71:E9:A1:E9:B5:BC:0D:A0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.177.0/24 Signature Algorithm: sha256WithRSAEncryption 68:03:cc:c9:e5:71:c7:74:7d:93:84:29:94:ba:fc:b0:7e:3c: f5:b7:ee:d5:15:f4:99:b9:74:d9:11:8e:ac:5b:24:f8:39:a0: 44:62:10:5c:c7:ac:0c:0b:27:48:c7:8e:a2:51:ff:33:e9:6b: 64:93:3c:68:1f:4e:3c:b2:c1:6c:04:d4:9e:44:58:f3:ed:c9: 50:a9:e2:07:c9:37:80:6f:40:5e:28:54:d9:ba:eb:50:fa:fe: 27:09:df:87:a8:15:b2:b0:e4:89:d4:a2:ad:4a:5c:17:aa:c5: a2:cf:f4:92:9d:2f:4f:f6:d7:96:36:f9:7d:5a:de:0a:6a:87: b8:12:6a:70:cc:c4:71:63:73:d2:7a:db:05:d1:97:f3:c9:03: 12:b3:6a:8c:d3:79:d7:d4:75:c5:d5:4a:1d:00:c8:f6:ee:aa: 5b:28:08:d9:1e:9f:33:5e:e4:95:b1:31:ff:bf:62:12:57:b5: e4:b9:3b:4d:9d:43:74:52:c0:e7:97:4a:ef:75:cd:7c:b9:ab: 7a:2c:b8:a9:21:df:aa:ed:6f:ee:07:fa:a2:a7:89:a7:35:f7: 76:81:fe:67:85:6b:2d:b7:46:94:4b:ae:c5:a7:13:4e:27:94: b9:54:07:08:ae:d6:6b:9b:c0:88:d3:00:56:c9:7d:b2:89:5b: 51:d2:53:ae -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUM2SRKxdWjWRmKtwR2kdqcjdP0PUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUyM1oX DTI1MTIwOTA1MDAyM1owMzExMC8GA1UEAxMoRTU5MTlBQjAzQ0E2MTc2MDRCMTEx RjEzNzFFOUExRTlCNUJDMERBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALO9q8eWZkUdCwDDcYAWPIN3t208GgKyW80FWb4Jpj6JxAJ5wfEp1JaNUEC/ e93Q3q9nlKujhQFL7TbMyJVL/RA5Ot2oBnvYDM/R62LWS8g6r7LTtyuyOXAnrOd/ PfMWVrI7Ayyamuk+bWfXbRmn+T54N04rSMWxzvyd2eh7TSEzUnizA/Xa7Gvtsgj7 vnxWdHEUl20+khhC7KcnB3upTtlo/BIaH7rrbJ2tWvyhzD5w/nU1SIK8WACAxcFF nmrLmGMAIM7saGapoKElTuQzhGxH0N5cBRF8Z/ydHpxS9Wlm6Y9771xhllsJE66/ +JywCsFNeRJnzemXL+8+wF2qSycCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTlkZqw PKYXYEsRHxNx6aHptbwNoDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzEzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGewsTANBgkqhkiG9w0BAQsFAAOCAQEAaAPMyeVxx3R9k4QplLr8 sH489bfu1RX0mbl02RGOrFsk+DmgRGIQXMesDAsnSMeOolH/M+lrZJM8aB9OPLLB bATUnkRY8+3JUKniB8k3gG9AXihU2brrUPr+Jwnfh6gVsrDkidSirUpcF6rFos/0 kp0vT/bXljb5fVreCmqHuBJqcMzEcWNz0nrbBdGX88kDErNqjNN519R1xdVKHQDI 9u6qWygI2R6fM17klbEx/79iEle15Lk7TZ1DdFLA55dK73XNfLmreiy4qSHfqu1v 7gf6oqeJpzX3doH+Z4VrLbdGlEuuxacTTieUuVQHCK7Wa5vAiNMAVsl9solbUdJT rg== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net