$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141120.roa File: AS141120.roa (raw, json) Hash identifier: l87W/lZ3DUXjd6oTn+0Gr1TyS/LH7LBqIJpd3xhcQx4= Subject key identifier: A3:76:C4:FD:88:A9:9E:42:61:8C:22:70:DF:A4:A2:08:AC:A5:E4:63 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 013D68A7A138F9EFAB68201715CD2AE59AA67BF8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141120.roa Signing time: Wed 24 Apr 2024 04:00:00 +0000 ROA not before: Wed 24 Apr 2024 03:55:00 +0000 ROA not after: Wed 23 Apr 2025 04:00:00 +0000 asID: 141120 IP address blocks: 103.157.146.0/24 maxlen: 24 103.189.164.0/24 maxlen: 24 2406:a4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3d:68:a7:a1:38:f9:ef:ab:68:20:17:15:cd:2a:e5:9a:a6:7b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 24 03:55:00 2024 GMT Not After : Apr 23 04:00:00 2025 GMT Subject: CN=A376C4FD88A99E42618C2270DFA4A208ACA5E463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:84:67:6e:48:e8:a4:6d:72:20:10:1c:36: eb:25:a0:bf:fd:fe:26:8e:fd:df:0d:92:0f:cc:94: db:96:3b:4a:a7:32:86:a3:02:4e:e3:c0:d7:c4:62: bf:f6:c6:81:59:bf:17:79:8b:b7:9e:11:21:4d:24: 19:b7:34:5c:76:0b:c4:f8:b8:84:33:1d:1e:f2:89: 97:3e:89:e8:f7:f7:a9:4f:d4:83:ce:e1:69:72:ff: 51:14:42:c0:72:80:1b:4b:bc:bc:8c:93:2f:2e:0c: 7a:37:be:71:26:ad:56:d5:3f:ff:85:55:75:48:7b: a3:48:63:b4:3d:13:78:3e:9d:e3:82:bf:91:fb:a4: 04:6d:32:5e:10:5b:ae:6b:a4:95:1b:5c:6b:fc:68: ea:9b:7a:c5:91:5d:73:6e:47:a8:07:ff:23:13:c3: da:f8:67:31:21:8f:92:5e:7e:1c:0c:40:63:3d:db: c3:ec:a9:fe:83:b3:11:ca:6d:3f:ed:01:51:3d:34: c3:fb:56:10:ed:ba:93:5a:52:94:28:b4:fb:4c:74: c2:24:93:93:86:79:d2:6c:3f:f6:eb:46:dc:0c:ff: 9b:32:12:13:aa:ca:6d:76:fd:77:18:ae:13:64:bb: 78:6b:63:11:10:ec:59:0d:42:aa:6b:97:f6:da:43: bb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:76:C4:FD:88:A9:9E:42:61:8C:22:70:DF:A4:A2:08:AC:A5:E4:63 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141120.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.146.0/24 103.189.164.0/24 IPv6: 2406:a4c0::/32 Signature Algorithm: sha256WithRSAEncryption 5f:35:bc:97:c8:71:b5:c3:0e:93:5e:43:6f:9b:11:de:66:b3: 99:07:f9:6c:66:03:aa:f0:5a:b6:3c:e1:c9:94:4d:90:08:50: 9d:cb:c3:b6:ec:61:e5:8d:32:30:36:6c:dd:26:11:b9:1b:9d: a9:df:fa:58:10:2d:54:a3:06:19:05:25:87:ff:d3:01:e8:ce: e2:24:be:fa:53:e0:7b:c8:f9:9a:6f:35:67:3e:2c:ff:f6:e1: ea:a9:18:e4:da:bb:c6:66:2c:a5:a6:d5:ee:ff:66:85:da:91: a1:40:dd:24:9d:b3:ed:b8:15:e1:58:8c:0b:80:c7:06:35:22: 0f:f7:54:5a:7a:ab:d4:f2:43:48:6e:68:c4:b5:ee:cc:2e:c8: 31:4b:5d:64:4d:9a:9a:8f:3e:65:74:ff:25:77:c7:bd:71:76: c3:25:68:70:19:91:6d:45:d8:c9:ff:52:a4:9d:a4:e9:f6:e9: 53:bd:64:e9:64:6b:02:a0:07:42:c4:d6:b6:7c:df:0f:3b:fe: d2:32:a1:6e:92:10:55:d1:f4:3e:3d:1c:3f:a6:de:f1:9a:4e: 13:a1:d8:37:42:a4:4c:73:1e:c4:0a:d9:ca:8c:64:2a:0e:f6: d0:1f:95:48:8c:c5:20:62:63:f3:ee:e6:ce:2e:14:72:cb:e4: 13:bc:0c:68 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUAT1op6E4+e+raCAXFc0q5Zqme/gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQyNDAzNTUwMFoX DTI1MDQyMzA0MDAwMFowMzExMC8GA1UEAxMoQTM3NkM0RkQ4OEE5OUU0MjYxOEMy MjcwREZBNEEyMDhBQ0E1RTQ2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2PhGduSOikbXIgEBw26yWgv/3+Jo793w2SD8yU25Y7SqcyhqMCTuPA18Ri v/bGgVm/F3mLt54RIU0kGbc0XHYLxPi4hDMdHvKJlz6J6Pf3qU/Ug87haXL/URRC wHKAG0u8vIyTLy4Meje+cSatVtU//4VVdUh7o0hjtD0TeD6d44K/kfukBG0yXhBb rmuklRtca/xo6pt6xZFdc25HqAf/IxPD2vhnMSGPkl5+HAxAYz3bw+yp/oOzEcpt P+0BUT00w/tWEO26k1pSlCi0+0x0wiSTk4Z50mw/9utG3Az/mzISE6rKbXb9dxiu E2S7eGtjERDsWQ1CqmuX9tpDu30CAwEAAaOCAeUwggHhMB0GA1UdDgQWBBSjdsT9 iKmeQmGMInDfpKIIrKXkYzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTEyMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAGedkgMEAGe9pDANBAIAAjAHAwUAJAakwDANBgkqhkiG9w0BAQsF AAOCAQEAXzW8l8hxtcMOk15Db5sR3mazmQf5bGYDqvBatjzhyZRNkAhQncvDtuxh 5Y0yMDZs3SYRuRudqd/6WBAtVKMGGQUlh//TAejO4iS++lPge8j5mm81Zz4s//bh 6qkY5Nq7xmYspabV7v9mhdqRoUDdJJ2z7bgV4ViMC4DHBjUiD/dUWnqr1PJDSG5o xLXuzC7IMUtdZE2amo8+ZXT/JXfHvXF2wyVocBmRbUXYyf9SpJ2k6fbpU71k6WRr AqAHQsTWtnzfDzv+0jKhbpIQVdH0Pj0cP6be8ZpOE6HYN0KkTHMexArZyoxkKg72 0B+VSIzFIGJj8+7mzi4UcsvkE7wMaA== -----END CERTIFICATE-----Generated at Mon May 6 01:47:00 2024 by rpki-client on console-fra.rpki-client.org