$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55688.roa File: AS55688.roa (raw, json) Hash identifier: raqRIGybKQOHUB2JA7br0T4OK3kcMcON6RzugiYl6vA= Subject key identifier: E0:46:30:FF:94:AA:32:C4:61:3F:6D:C3:17:55:56:60:EB:A0:B6:3E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2A5F7389A71FDB2BA79358D68EE77B8E78156F83 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55688.roa Signing time: Tue 10 Dec 2024 05:00:08 +0000 ROA not before: Tue 10 Dec 2024 04:55:08 +0000 ROA not after: Tue 09 Dec 2025 05:00:08 +0000 asID: 55688 IP address blocks: 103.157.96.0/23 maxlen: 24 103.166.156.0/23 maxlen: 24 2406:a040:ff01::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5f:73:89:a7:1f:db:2b:a7:93:58:d6:8e:e7:7b:8e:78:15:6f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:08 2024 GMT Not After : Dec 9 05:00:08 2025 GMT Subject: CN=E04630FF94AA32C4613F6DC317555660EBA0B63E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:bd:ec:96:7d:de:16:c6:87:8b:94:59:5b: 6b:b5:82:7a:42:85:17:e4:80:ac:b1:34:cd:a0:15: 5a:d8:8f:fe:11:95:b7:ac:25:fa:c3:97:6b:35:eb: 0d:d9:94:ab:05:12:69:79:6d:e9:76:a3:7f:46:74: 8d:cf:5e:8c:ca:9c:12:a9:ce:af:7f:b9:d5:6c:b1: 8f:7c:08:27:09:61:94:d7:1f:32:c2:2c:29:aa:e4: b8:13:7e:d0:0e:55:9f:18:95:b9:5a:95:f8:b8:6d: 77:c3:af:fa:ec:e9:31:fa:72:71:13:37:d1:44:af: 1b:08:6a:90:c3:3d:f7:aa:9a:62:d5:8a:97:10:0c: b7:f4:42:4a:13:9b:01:99:c9:f0:d3:a3:6b:05:4a: 41:50:d7:29:5b:70:8a:9a:46:1e:40:93:f8:0e:67: c2:10:6c:1d:31:4c:dc:cd:a7:9d:3d:22:e4:ce:cf: d9:e9:0b:2e:2d:68:83:dc:7f:56:df:3c:97:0d:6e: 6c:29:db:68:91:dd:70:7e:0f:74:2d:73:a3:6e:f6: 33:69:8c:92:b5:a3:bf:9e:d5:cc:6b:f6:b8:a2:bc: 4d:ef:3e:c8:8f:9a:91:e3:4b:a4:a5:e1:4d:a6:20: b2:8b:78:1c:a0:59:00:1d:37:d6:7b:e8:94:50:82: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:46:30:FF:94:AA:32:C4:61:3F:6D:C3:17:55:56:60:EB:A0:B6:3E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55688.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.96.0/23 103.166.156.0/23 IPv6: 2406:a040:ff01::/48 Signature Algorithm: sha256WithRSAEncryption 22:44:f6:f9:8e:f3:ea:a4:23:16:8b:0b:58:f5:cd:12:5e:98: 96:41:28:40:08:79:4e:84:43:57:99:b9:e2:61:eb:b9:72:d1: b4:b2:58:92:d3:10:2e:04:d4:9f:9d:65:0b:c2:db:48:0c:35: 2c:97:47:a7:11:78:5b:40:a3:17:62:41:f2:e6:b6:ba:2a:33: 4c:f3:dd:e8:3a:19:0c:97:16:6a:12:52:a0:b3:cb:fb:44:03: 76:5e:fb:71:aa:68:b7:71:e9:d6:82:89:6f:a3:16:58:36:5b: a3:40:70:6f:be:ab:e3:d2:36:20:f6:5b:dd:ea:e9:19:9f:f9: c6:94:f1:85:5c:26:82:b2:27:d2:ac:bc:a8:3e:da:a4:32:96: 94:86:7f:d1:ad:3f:af:2c:b9:21:80:1c:0c:9c:29:2d:5d:07: 2f:b9:5e:7b:b1:4f:ab:46:3b:a2:82:5e:f5:0e:10:69:3b:54: 69:a7:f5:69:c4:57:a7:6f:f2:69:14:86:25:76:e1:51:b3:e1: 4e:3a:77:0b:03:74:39:5c:38:ef:80:b2:fb:79:60:d1:cf:d3: 5e:21:66:99:ca:00:ca:28:27:3e:f4:6c:0a:58:4b:3b:83:e4: 75:70:a7:ba:3b:e4:95:e2:71:ee:5f:98:fd:52:89:43:da:da: 42:da:77:6c -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUKl9ziacf2yunk1jWjud7jngVb4MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwOFoX DTI1MTIwOTA1MDAwOFowMzExMC8GA1UEAxMoRTA0NjMwRkY5NEFBMzJDNDYxM0Y2 REMzMTc1NTU2NjBFQkEwQjYzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMh3veyWfd4WxoeLlFlba7WCekKFF+SArLE0zaAVWtiP/hGVt6wl+sOXazXr DdmUqwUSaXlt6Xajf0Z0jc9ejMqcEqnOr3+51Wyxj3wIJwlhlNcfMsIsKarkuBN+ 0A5VnxiVuVqV+Lhtd8Ov+uzpMfpycRM30USvGwhqkMM996qaYtWKlxAMt/RCShOb AZnJ8NOjawVKQVDXKVtwippGHkCT+A5nwhBsHTFM3M2nnT0i5M7P2ekLLi1og9x/ Vt88lw1ubCnbaJHdcH4PdC1zo272M2mMkrWjv57VzGv2uKK8Te8+yI+akeNLpKXh TaYgsot4HKBZAB031nvolFCCtjMCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBTgRjD/ lKoyxGE/bcMXVVZg66C2PjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1Njg4LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQBZ51gAwQBZ6acMA8EAgACMAkDBwAkBqBA/wEwDQYJKoZIhvcNAQEL BQADggEBACJE9vmO8+qkIxaLC1j1zRJemJZBKEAIeU6EQ1eZueJh67ly0bSyWJLT EC4E1J+dZQvC20gMNSyXR6cReFtAoxdiQfLmtroqM0zz3eg6GQyXFmoSUqCzy/tE A3Ze+3GqaLdx6daCiW+jFlg2W6NAcG++q+PSNiD2W93q6Rmf+caU8YVcJoKyJ9Ks vKg+2qQylpSGf9GtP68suSGAHAycKS1dBy+5XnuxT6tGO6KCXvUOEGk7VGmn9WnE V6dv8mkUhiV24VGz4U46dwsDdDlcOO+Asvt5YNHP014hZpnKAMooJz70bApYSzuD 5HVwp7o75JXice5fmP1SiUPa2kLad2w= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net