$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140388.roa File: AS140388.roa (raw, json) Hash identifier: XPdS+pexCgPWPwq+garUPS912/JvPDhB4puQRHVEIEk= Subject key identifier: 42:DA:6D:A9:15:8F:74:4A:C6:97:EF:A8:C9:8B:D3:C0:73:B2:4B:52 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 41794C36FCB9E721FDCF002CFAF3A2DA1C6B5668 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140388.roa Signing time: Tue 27 Jun 2023 06:39:03 +0000 ROA not before: Tue 27 Jun 2023 06:34:03 +0000 ROA not after: Tue 25 Jun 2024 06:39:03 +0000 asID: 140388 IP address blocks: 103.182.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:79:4c:36:fc:b9:e7:21:fd:cf:00:2c:fa:f3:a2:da:1c:6b:56:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 27 06:34:03 2023 GMT Not After : Jun 25 06:39:03 2024 GMT Subject: CN=42DA6DA9158F744AC697EFA8C98BD3C073B24B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:7f:ac:63:60:a6:a4:81:d1:ec:7b:8a:43: d5:7d:de:ae:f6:76:0e:82:7a:82:f7:d8:a3:f5:12: 10:a5:4c:f8:76:fe:02:37:87:73:c3:44:6c:8f:42: 1c:3f:3c:91:82:9f:7e:f3:ed:89:2a:17:67:fc:7c: e6:6d:5f:a0:0f:93:7e:60:78:76:8a:cb:18:c8:5e: d7:c8:ce:0a:be:df:5a:cf:53:11:c7:31:26:9f:48: 9e:b9:0a:ed:23:31:d9:da:67:05:b1:dc:56:3f:e1: 9f:3a:87:b3:0f:9e:fd:39:eb:8a:c9:da:8f:d8:d6: 91:36:f9:f7:bc:1e:d1:b5:dd:53:a7:73:e1:d2:c5: 09:0c:a2:16:ad:33:e0:8b:ea:ad:7f:b8:00:e4:1f: 72:ce:10:7f:7f:cd:e9:c1:29:7a:06:9b:d5:c1:b2: 24:cc:41:01:89:64:fb:20:58:68:b7:f6:eb:ac:1a: 17:59:13:65:54:55:74:aa:a2:6d:df:a0:aa:92:6c: 13:8e:51:ae:32:8a:8c:67:5e:5e:0d:b6:5f:74:a2: 4b:d2:c3:4f:e9:62:60:63:20:70:24:27:87:00:ed: d8:c4:21:5c:87:2f:41:0a:76:35:cf:4b:5f:54:fa: 87:9e:20:58:06:8e:3c:ba:11:62:da:d0:58:03:d8: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DA:6D:A9:15:8F:74:4A:C6:97:EF:A8:C9:8B:D3:C0:73:B2:4B:52 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140388.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.53.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:4d:40:5a:11:52:69:6b:c3:ff:a3:7b:79:5e:13:72:71:e8: 8d:a8:56:53:6c:b9:27:d9:10:4e:da:3c:0b:6e:e5:d0:fb:fc: 24:85:d2:e2:33:88:2f:3e:92:c7:41:44:7e:c3:3b:a4:ff:19: e0:1a:cf:ad:86:d1:13:e8:29:58:93:16:03:71:54:3d:1d:e9: 04:03:99:9a:86:d9:fe:c6:10:91:50:93:9e:96:7f:b3:5a:1f: 7e:8f:a3:e8:87:73:0a:df:5d:72:09:0b:1d:ad:9b:d0:f3:f2: 85:ee:8e:d5:ef:1a:d6:b9:53:d4:06:57:2f:39:22:3d:e5:d2: 35:7a:6b:29:a1:af:be:ff:2c:e4:42:f3:ba:7a:3d:1e:c8:05: f2:bd:fe:59:fc:fa:8b:9b:7e:24:82:a3:e2:87:ac:43:e5:88: d9:69:1a:93:26:cc:39:c8:9c:d8:7c:7a:e4:fd:a4:82:d3:d4: 4c:f0:d3:e6:7c:73:f2:d2:5b:f3:35:24:20:ee:d5:be:a5:59: 1c:29:6f:69:38:e4:31:74:86:4a:9b:dc:fc:02:3d:ca:c6:3f: 09:5f:8b:72:5e:20:66:71:a0:b5:94:32:df:d4:16:16:00:b5: 33:07:ba:e0:94:6d:60:70:46:fd:f4:13:03:59:5f:9f:a2:97: 83:11:45:73 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQXlMNvy55yH9zwAs+vOi2hxrVmgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyNzA2MzQwM1oX DTI0MDYyNTA2MzkwM1owMzExMC8GA1UEAxMoNDJEQTZEQTkxNThGNzQ0QUM2OTdF RkE4Qzk4QkQzQzA3M0IyNEI1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQZf6xjYKakgdHse4pD1X3ervZ2DoJ6gvfYo/USEKVM+Hb+AjeHc8NEbI9C HD88kYKffvPtiSoXZ/x85m1foA+TfmB4dorLGMhe18jOCr7fWs9TEccxJp9InrkK 7SMx2dpnBbHcVj/hnzqHsw+e/Tnrisnaj9jWkTb597we0bXdU6dz4dLFCQyiFq0z 4IvqrX+4AOQfcs4Qf3/N6cEpegab1cGyJMxBAYlk+yBYaLf266waF1kTZVRVdKqi bd+gqpJsE45RrjKKjGdeXg22X3SiS9LDT+liYGMgcCQnhwDt2MQhXIcvQQp2Nc9L X1T6h54gWAaOPLoRYtrQWAPYTpUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRC2m2p FY90SsaX76jJi9PAc7JLUjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDM4OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGe2NTANBgkqhkiG9w0BAQsFAAOCAQEACk1AWhFSaWvD/6N7eV4T cnHojahWU2y5J9kQTto8C27l0Pv8JIXS4jOILz6Sx0FEfsM7pP8Z4BrPrYbRE+gp WJMWA3FUPR3pBAOZmobZ/sYQkVCTnpZ/s1offo+j6IdzCt9dcgkLHa2b0PPyhe6O 1e8a1rlT1AZXLzkiPeXSNXprKaGvvv8s5ELzuno9HsgF8r3+Wfz6i5t+JIKj4oes Q+WI2WkakybMOcic2Hx65P2kgtPUTPDT5nxz8tJb8zUkIO7VvqVZHClvaTjkMXSG Spvc/AI9ysY/CV+Lcl4gZnGgtZQy39QWFgC1Mwe64JRtYHBG/fQTA1lfn6KXgxFF cw== -----END CERTIFICATE-----Generated at Wed May 1 22:05:36 2024 by rpki-client on console-fra.rpki-client.org