$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56253.roa File: AS56253.roa (raw, json) Hash identifier: WCpuNTzqMFxdGtRnf99tvT05VNH0TEhqMysw+iJJ0dM= Subject key identifier: A6:16:FE:2E:BA:2D:12:D6:E2:2B:CC:43:40:4D:B8:8B:AF:D4:E4:54 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 522F3246B88F9D83B11D50387769DF3AEE170C89 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56253.roa Signing time: Tue 10 Dec 2024 05:00:11 +0000 ROA not before: Tue 10 Dec 2024 04:55:11 +0000 ROA not after: Tue 09 Dec 2025 05:00:11 +0000 asID: 56253 IP address blocks: 103.10.146.0/23 maxlen: 24 103.75.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:2f:32:46:b8:8f:9d:83:b1:1d:50:38:77:69:df:3a:ee:17:0c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:11 2024 GMT Not After : Dec 9 05:00:11 2025 GMT Subject: CN=A616FE2EBA2D12D6E22BCC43404DB88BAFD4E454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bc:44:ab:98:3e:e7:66:9b:3c:bc:00:7a:68: 1e:13:fa:91:db:04:01:6c:da:6d:f7:07:95:c0:60: f8:0a:44:dc:58:de:72:05:97:14:03:2c:42:24:ae: 66:79:b0:2f:c3:fd:2a:83:dc:02:b7:52:0e:39:75: e4:f3:02:57:b5:15:0b:3a:7a:d4:79:2a:d5:fd:19: 32:54:c8:b5:27:9c:a9:b1:18:7f:90:8a:5b:28:ca: e0:c1:bd:ef:87:ce:ae:0d:1e:05:ea:70:f5:fc:a9: a8:78:35:fa:0d:ae:94:89:8b:71:cd:00:27:57:af: f0:93:c8:bf:4b:e0:27:3a:89:97:da:17:f8:1d:86: 63:71:af:97:90:ae:66:cd:ba:dc:86:98:59:56:5c: ec:b2:ea:87:64:2e:2c:12:81:0c:ec:67:db:ed:2c: 25:f9:6b:50:4f:05:d4:3e:5a:70:ca:78:0e:8b:7c: 2c:c1:b9:c6:32:fb:40:e5:cc:a7:fc:b3:65:d6:aa: d4:cc:0e:ea:33:cd:10:51:47:0e:8d:50:63:17:57: 92:51:33:9b:b3:a6:7e:76:88:39:33:2b:0b:79:77: 22:f0:d8:2d:48:57:bd:be:ed:c7:37:46:bb:d8:bc: 11:3a:28:99:26:89:1a:b3:e7:1b:12:d8:42:9d:a6: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:16:FE:2E:BA:2D:12:D6:E2:2B:CC:43:40:4D:B8:8B:AF:D4:E4:54 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56253.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.146.0/23 103.75.51.0/24 Signature Algorithm: sha256WithRSAEncryption 42:aa:4a:b3:b0:a9:96:5e:71:31:00:7b:b9:26:53:91:1e:53: f5:c2:4f:0a:0b:0a:bc:23:93:af:91:b7:d8:50:1e:f1:29:9d: fd:da:1a:3f:66:81:57:48:4c:65:42:b2:2c:b1:fc:c4:2a:c2: 84:c4:19:5c:69:7d:b1:8d:73:56:04:fb:c8:7b:d8:4c:44:b2: 1a:03:e8:b9:79:17:a1:ae:65:8b:53:8a:3d:57:75:18:d8:d8: 02:88:06:87:88:de:0e:df:dd:6e:72:7f:42:d6:c0:29:ea:88: 58:dc:31:f2:0e:49:18:b2:74:38:aa:0b:3e:48:44:a7:ab:94: 4c:cd:e5:85:12:d0:71:c5:8b:bd:3a:4a:fe:97:d5:2e:fb:d1: 00:45:66:13:07:95:6c:b6:83:10:02:9b:de:36:61:9a:ad:f7: 32:a9:2b:a2:e6:5c:5e:f5:3d:2e:5c:00:eb:de:6f:13:73:d4: 2d:b9:02:c7:fd:fb:75:af:4c:a6:fb:04:d9:21:e2:c5:a1:c4: ef:53:c9:e0:67:22:a3:b0:4a:96:8e:95:6f:e2:3f:45:c5:c4: 96:a0:e3:3d:ba:a4:e6:9f:b6:d1:3e:47:1d:96:1a:a0:28:dd: 0d:6a:bc:5d:47:52:b1:53:1f:cc:87:35:96:aa:26:82:ad:91: 5a:0e:19:4b -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUUi8yRriPnYOxHVA4d2nfOu4XDIkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxMVoX DTI1MTIwOTA1MDAxMVowMzExMC8GA1UEAxMoQTYxNkZFMkVCQTJEMTJENkUyMkJD QzQzNDA0REI4OEJBRkQ0RTQ1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMS8RKuYPudmmzy8AHpoHhP6kdsEAWzabfcHlcBg+ApE3FjecgWXFAMsQiSu ZnmwL8P9KoPcArdSDjl15PMCV7UVCzp61Hkq1f0ZMlTItSecqbEYf5CKWyjK4MG9 74fOrg0eBepw9fypqHg1+g2ulImLcc0AJ1ev8JPIv0vgJzqJl9oX+B2GY3Gvl5Cu Zs263IaYWVZc7LLqh2QuLBKBDOxn2+0sJflrUE8F1D5acMp4Dot8LMG5xjL7QOXM p/yzZdaq1MwO6jPNEFFHDo1QYxdXklEzm7OmfnaIOTMrC3l3IvDYLUhXvb7txzdG u9i8EToomSaJGrPnGxLYQp2mD50CAwEAAaOCAdUwggHRMB0GA1UdDgQWBBSmFv4u ui0S1uIrzENATbiLr9TkVDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU2MjUzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZwqSAwQAZ0szMA0GCSqGSIb3DQEBCwUAA4IBAQBCqkqzsKmWXnEx AHu5JlORHlP1wk8KCwq8I5OvkbfYUB7xKZ392ho/ZoFXSExlQrIssfzEKsKExBlc aX2xjXNWBPvIe9hMRLIaA+i5eRehrmWLU4o9V3UY2NgCiAaHiN4O391ucn9C1sAp 6ohY3DHyDkkYsnQ4qgs+SESnq5RMzeWFEtBxxYu9Okr+l9Uu+9EARWYTB5VstoMQ ApveNmGarfcyqSui5lxe9T0uXADr3m8Tc9QtuQLH/ft1r0ym+wTZIeLFocTvU8ng ZyKjsEqWjpVv4j9FxcSWoOM9uqTmn7bRPkcdlhqgKN0NarxdR1KxUx/MhzWWqiaC rZFaDhlL -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net