$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140401.roa File: AS140401.roa (raw, json) Hash identifier: MrDyRMFESMpKNHJZd0qmQvWVCrUALkXJiBhdYUBZgmE= Subject key identifier: C0:E3:7C:46:8D:DE:52:73:63:52:03:D9:CB:3D:8D:91:C5:77:9C:E1 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 24DED4AAC49D321CCEF0C40DC8C61D8073DC080D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140401.roa Signing time: Fri 11 Aug 2023 07:00:00 +0000 ROA not before: Fri 11 Aug 2023 06:55:00 +0000 ROA not after: Fri 09 Aug 2024 07:00:00 +0000 asID: 140401 IP address blocks: 103.184.54.0/23 maxlen: 24 103.187.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:de:d4:aa:c4:9d:32:1c:ce:f0:c4:0d:c8:c6:1d:80:73:dc:08:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 11 06:55:00 2023 GMT Not After : Aug 9 07:00:00 2024 GMT Subject: CN=C0E37C468DDE5273635203D9CB3D8D91C5779CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:bd:32:57:ab:95:91:f7:cd:0e:c4:dc:d0: f0:91:3d:e1:d1:9c:5b:a4:78:c3:cc:d5:1a:65:60: 03:30:30:99:8b:e4:c3:d4:6d:3c:b1:48:c4:d7:94: 0b:6d:b0:fb:26:6e:ae:fd:83:a4:67:66:12:e1:4f: f6:c5:e4:79:aa:6c:07:44:75:b6:c0:28:16:c5:2d: 36:66:9a:c4:6d:7b:cd:16:d2:a9:a8:66:4b:2f:d3: c4:57:fe:a6:90:0e:3a:c3:88:ae:d2:e4:93:49:2e: de:62:d8:02:45:97:c6:69:e7:bd:2e:3f:ae:d3:08: 78:e2:4f:65:2b:c4:64:6f:94:e9:82:79:07:43:fd: 93:f3:a2:9f:b8:a8:6f:d6:69:40:2a:cc:ae:3f:fe: b3:d2:3b:55:9e:3d:ea:45:09:57:9f:7a:25:9a:e6: 64:b8:0d:d9:32:43:fd:b8:68:a3:75:6b:15:60:62: 9f:d6:75:f1:4a:1f:8e:c7:03:0c:b5:9a:b3:14:7e: ae:91:21:6b:90:56:ab:5e:26:74:f5:70:7b:d4:ec: 28:91:53:d7:6f:cf:45:f7:80:ee:fc:b7:84:4d:a7: 58:b5:f3:2b:bc:83:a1:0c:b0:d4:49:88:3f:36:84: 1f:6e:89:36:f0:90:67:d7:c5:2b:ba:8e:ce:76:fa: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E3:7C:46:8D:DE:52:73:63:52:03:D9:CB:3D:8D:91:C5:77:9C:E1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.54.0/23 103.187.116.0/23 Signature Algorithm: sha256WithRSAEncryption 81:61:85:68:d7:7d:84:20:39:b6:95:80:6b:01:7d:b4:68:f9: cf:3f:45:f4:0b:df:49:74:1b:34:14:48:20:72:4f:10:3d:26: 2d:e1:85:b8:92:a7:eb:d4:dd:34:65:4e:6a:4e:ea:72:5e:44: 8b:12:3e:50:83:a3:54:53:5d:da:c6:72:e9:b8:8b:24:9e:b9: d5:eb:af:3b:83:28:8b:38:9a:02:1f:37:3f:22:70:a1:cd:72: 0d:6b:4a:e2:2a:80:f8:e5:82:83:b9:9c:1b:21:1b:88:a9:33: 9b:c2:8e:4e:d5:dc:48:b0:2f:25:10:f8:97:ae:51:6a:b7:9f: 6a:a5:69:bc:5a:2d:89:54:c5:fb:d1:00:ac:2b:df:20:58:a7: 7b:34:78:c8:47:6d:fd:10:7e:25:29:00:c9:e9:80:62:ce:37: cd:8f:4a:ff:43:a1:14:35:2c:b7:e3:61:9f:5c:64:c4:14:7c: 6c:56:45:db:8a:5b:3d:7d:7a:6b:57:13:a3:d8:0c:d3:f0:67: 81:2d:ec:f7:65:a4:b7:cf:eb:37:80:31:9c:89:8a:52:83:0e: e8:27:ab:9f:d2:b4:23:1f:f2:8a:a3:71:8e:24:ec:75:76:41: 8d:97:84:50:20:b3:30:0b:0b:16:ca:1c:ab:99:22:2e:98:11: e7:26:7d:c9 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUJN7UqsSdMhzO8MQNyMYdgHPcCA0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgxMTA2NTUwMFoX DTI0MDgwOTA3MDAwMFowMzExMC8GA1UEAxMoQzBFMzdDNDY4RERFNTI3MzYzNTIw M0Q5Q0IzRDhEOTFDNTc3OUNFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPavTJXq5WR980OxNzQ8JE94dGcW6R4w8zVGmVgAzAwmYvkw9RtPLFIxNeU C22w+yZurv2DpGdmEuFP9sXkeapsB0R1tsAoFsUtNmaaxG17zRbSqahmSy/TxFf+ ppAOOsOIrtLkk0ku3mLYAkWXxmnnvS4/rtMIeOJPZSvEZG+U6YJ5B0P9k/Oin7io b9ZpQCrMrj/+s9I7VZ496kUJV596JZrmZLgN2TJD/bhoo3VrFWBin9Z18UofjscD DLWasxR+rpEha5BWq14mdPVwe9TsKJFT12/PRfeA7vy3hE2nWLXzK7yDoQyw1EmI PzaEH26JNvCQZ9fFK7qOznb6Ok0CAwEAAaOCAdYwggHSMB0GA1UdDgQWBBTA43xG jd5Sc2NSA9nLPY2RxXec4TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDQwMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWe4NgMEAWe7dDANBgkqhkiG9w0BAQsFAAOCAQEAgWGFaNd9hCA5 tpWAawF9tGj5zz9F9AvfSXQbNBRIIHJPED0mLeGFuJKn69TdNGVOak7qcl5EixI+ UIOjVFNd2sZy6biLJJ651euvO4MoiziaAh83PyJwoc1yDWtK4iqA+OWCg7mcGyEb iKkzm8KOTtXcSLAvJRD4l65RarefaqVpvFotiVTF+9EArCvfIFinezR4yEdt/RB+ JSkAyemAYs43zY9K/0OhFDUst+Nhn1xkxBR8bFZF24pbPX16a1cTo9gM0/BngS3s 92Wkt8/rN4AxnImKUoMO6Cern9K0Ix/yiqNxjiTsdXZBjZeEUCCzMAsLFsocq5ki LpgR5yZ9yQ== -----END CERTIFICATE-----Generated at Sat May 4 16:47:42 2024 by rpki-client on console-ams.rpki-client.org