$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141127.roa File: AS141127.roa (raw, json) Hash identifier: uhuYYOUqnoIxbmV7VW13wTjPhWXNJk+V/zDL96c5Zb4= Subject key identifier: F4:9F:23:B7:9A:17:B7:01:98:35:1C:E4:E7:7B:AB:6B:F4:87:5B:64 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 41C87352A5FB9452EA82035DEDB3D039ABA7C860 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141127.roa Signing time: Tue 09 Jan 2024 04:00:22 +0000 ROA not before: Tue 09 Jan 2024 03:55:22 +0000 ROA not after: Tue 07 Jan 2025 04:00:22 +0000 asID: 141127 IP address blocks: 103.174.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c8:73:52:a5:fb:94:52:ea:82:03:5d:ed:b3:d0:39:ab:a7:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:22 2024 GMT Not After : Jan 7 04:00:22 2025 GMT Subject: CN=F49F23B79A17B70198351CE4E77BAB6BF4875B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:3e:27:3f:c3:50:0a:b2:e3:86:5a:aa:1d: a2:ca:eb:50:69:a5:fd:c2:43:38:98:e4:53:34:c9: d9:f9:3c:65:d7:ae:02:17:b3:03:33:70:ad:8b:6c: 44:58:23:8d:22:2d:0e:83:fc:e5:11:ba:6b:5e:a5: 57:86:1c:57:b8:d9:0e:19:93:59:1c:f1:b7:47:fc: 23:27:ca:49:2c:81:01:3f:7b:fe:b0:ec:07:5a:51: 30:68:0f:37:65:1a:1b:1b:ff:f0:97:b0:16:c6:7c: 28:45:02:80:81:03:28:b5:2a:31:d7:45:99:88:5e: 42:b1:21:de:59:03:2e:17:0a:ee:61:fa:c3:49:af: 53:0b:ba:71:ca:8c:92:ff:27:4f:b8:e8:57:b5:3e: 13:4d:12:03:20:d6:d7:c0:13:57:82:79:53:0f:1f: 1c:c2:d0:20:61:17:57:db:79:62:c7:e8:97:40:67: 75:5a:e4:3b:07:3e:05:4b:78:f6:57:71:02:75:91: 96:8d:4b:9a:30:46:5a:69:91:37:97:87:48:1b:3f: bb:4c:4c:6c:63:66:72:78:3a:3b:3f:cc:e8:f6:4e: c2:03:f1:f0:71:ff:0e:a5:97:6e:9d:8b:6e:96:43: cd:12:a0:ae:a2:a6:18:8a:e2:5e:9a:5d:bd:e1:0e: 0b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9F:23:B7:9A:17:B7:01:98:35:1C:E4:E7:7B:AB:6B:F4:87:5B:64 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141127.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.238.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:4e:32:f7:43:53:6a:97:97:2a:d2:03:d2:40:61:93:e2:91: 50:7f:ba:0e:ab:13:72:fa:b9:8e:a8:36:bf:0e:17:4a:64:43: 5b:9d:05:40:ee:a5:6f:79:ac:e0:e0:80:d7:80:8e:d6:72:8d: e6:63:5e:a1:aa:5b:82:76:52:28:5a:c4:e0:75:87:90:27:7b: eb:0d:74:2c:24:57:28:19:8d:b9:12:53:34:fa:91:d5:f9:37: 4c:60:1d:ca:c7:d5:c8:1f:26:e1:6b:19:50:e7:94:d3:3e:4b: 3b:9a:b4:a3:8c:bd:78:cc:2a:c2:8a:99:bb:0c:38:8c:ba:30: 6c:cf:70:0e:2c:66:5c:08:bb:d2:a2:43:43:b4:a2:0a:11:cc: 34:fc:fe:ee:da:e2:db:02:0a:dd:18:f1:b2:a0:62:88:33:cf: 12:35:6c:5b:59:01:c6:cc:56:d4:cb:ae:03:a3:1d:c9:3e:c3: 41:d5:84:dd:da:47:66:52:85:8a:dd:67:b3:cf:70:3f:f4:50: 8d:97:60:7c:fa:d4:b7:ae:29:21:7f:97:e5:6f:81:ce:f9:75: d8:9c:e7:db:0c:05:04:56:82:7a:63:e4:84:16:bc:22:b6:ee: 77:42:a7:c5:3e:a3:ff:72:43:b0:3f:9f:58:97:d3:4f:3f:5d: 89:ee:aa:bc -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQchzUqX7lFLqggNd7bPQOaunyGAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyMloX DTI1MDEwNzA0MDAyMlowMzExMC8GA1UEAxMoRjQ5RjIzQjc5QTE3QjcwMTk4MzUx Q0U0RTc3QkFCNkJGNDg3NUI2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMN5Pic/w1AKsuOGWqodosrrUGml/cJDOJjkUzTJ2fk8ZdeuAhezAzNwrYts RFgjjSItDoP85RG6a16lV4YcV7jZDhmTWRzxt0f8IyfKSSyBAT97/rDsB1pRMGgP N2UaGxv/8JewFsZ8KEUCgIEDKLUqMddFmYheQrEh3lkDLhcK7mH6w0mvUwu6ccqM kv8nT7joV7U+E00SAyDW18ATV4J5Uw8fHMLQIGEXV9t5Ysfol0BndVrkOwc+BUt4 9ldxAnWRlo1LmjBGWmmRN5eHSBs/u0xMbGNmcng6Oz/M6PZOwgPx8HH/DqWXbp2L bpZDzRKgrqKmGIriXppdveEOC48CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT0nyO3 mhe3AZg1HOTne6tr9IdbZDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTEyNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeu7jANBgkqhkiG9w0BAQsFAAOCAQEAXE4y90NTapeXKtID0kBh k+KRUH+6DqsTcvq5jqg2vw4XSmRDW50FQO6lb3ms4OCA14CO1nKN5mNeoapbgnZS KFrE4HWHkCd76w10LCRXKBmNuRJTNPqR1fk3TGAdysfVyB8m4WsZUOeU0z5LO5q0 o4y9eMwqwoqZuww4jLowbM9wDixmXAi70qJDQ7SiChHMNPz+7tri2wIK3RjxsqBi iDPPEjVsW1kBxsxW1MuuA6MdyT7DQdWE3dpHZlKFit1ns89wP/RQjZdgfPrUt64p IX+X5W+Bzvl12Jzn2wwFBFaCemPkhBa8Irbud0KnxT6j/3JDsD+fWJfTTz9die6q vA== -----END CERTIFICATE-----Generated at Mon May 6 17:32:46 2024 by rpki-client on console-fra.rpki-client.org