$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141607.roa File: AS141607.roa (raw, json) Hash identifier: Z2pBwTPqOjmElFC698urcdg/tZn/iFMh0fAZ2oEtDDo= Subject key identifier: 98:79:C0:4D:48:90:31:F9:07:50:F7:29:C0:97:D5:DC:6D:B8:F3:EB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6326E5B578FF81172B38813F22B1D0B8093C6164 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141607.roa Signing time: Tue 29 Aug 2023 07:24:43 +0000 ROA not before: Tue 29 Aug 2023 07:19:43 +0000 ROA not after: Tue 27 Aug 2024 07:24:43 +0000 asID: 141607 IP address blocks: 103.160.68.0/23 maxlen: 24 2400:f060::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 04:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:26:e5:b5:78:ff:81:17:2b:38:81:3f:22:b1:d0:b8:09:3c:61:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 29 07:19:43 2023 GMT Not After : Aug 27 07:24:43 2024 GMT Subject: CN=9879C04D489031F90750F729C097D5DC6DB8F3EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:67:b9:57:17:ad:f5:30:e2:f3:c0:58:01: 1b:d1:77:61:26:56:b8:0f:d6:ea:55:95:5b:84:d6: 79:5f:1f:ce:c2:eb:5e:8f:9c:2d:c3:5a:7b:c5:e6: d3:7a:89:88:29:ea:44:3c:c4:85:0c:13:09:70:98: fb:80:67:35:18:96:3d:d6:df:7e:e0:ed:aa:86:e4: 10:6c:64:5b:d9:f4:dc:01:de:ae:4e:ca:8a:84:de: d0:0c:20:49:8e:41:84:20:96:b3:cc:f7:21:26:47: cb:5c:42:ee:51:b2:5e:8f:21:46:10:68:92:64:34: ff:79:05:19:1c:98:02:52:5e:e9:be:4d:39:c0:86: be:8e:84:48:7e:c1:f4:b3:68:24:1d:f3:ce:f3:17: fb:29:13:8e:0f:9a:07:3c:d8:95:dc:3c:c2:55:e2: d7:31:03:3e:c5:88:ef:f3:8e:e6:e3:6b:cb:9d:45: af:9b:99:ab:89:b0:93:7e:f7:63:98:fa:51:b0:e5: 29:ca:b9:bc:44:9c:10:3f:11:d0:e4:fb:2e:05:ee: 6e:18:06:ed:d1:c2:50:44:bd:40:75:13:5a:18:f3: d0:12:52:aa:62:c2:b6:12:0a:43:59:2b:08:24:54: 9d:f5:30:86:82:be:f8:67:81:33:9c:0d:de:07:cf: ab:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:79:C0:4D:48:90:31:F9:07:50:F7:29:C0:97:D5:DC:6D:B8:F3:EB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141607.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.68.0/23 IPv6: 2400:f060::/32 Signature Algorithm: sha256WithRSAEncryption 3b:7e:9a:3f:56:93:7a:3a:cd:ed:66:cf:59:d3:6b:b4:ac:ce: 16:9e:ad:41:cc:8f:06:70:36:17:63:20:ed:e2:df:ad:e3:15: ec:c2:5a:c9:b9:a9:9c:a6:57:01:9e:03:0f:2f:ab:df:ea:f3: 89:3b:ee:31:53:0e:3c:d6:84:c1:01:af:c4:39:59:9a:fb:c4: a8:2e:e7:67:0a:30:33:cd:5b:1a:2b:45:da:f8:7f:3a:7d:61: 00:5a:d2:68:5b:30:35:44:94:95:72:52:81:99:42:3e:e6:67: ab:fd:09:68:19:43:b1:8d:cb:1f:16:a4:aa:f9:13:6b:1b:3d: 93:7b:04:f6:07:a8:c7:cc:73:d2:b7:be:0f:53:4d:30:81:05: aa:b1:cb:78:ba:86:14:60:21:8c:4a:53:47:72:c7:54:4e:21: 72:35:15:f1:8c:51:d4:9e:67:fe:19:4f:09:10:ed:d4:ff:cf: 81:0c:a1:94:cb:98:f1:ad:d3:9d:46:05:33:df:0e:16:e8:95: 15:e0:85:c9:67:74:90:aa:0d:c6:83:e8:48:0e:b6:c3:8b:6b: ff:52:63:90:77:d7:e4:b7:7c:4c:1d:a1:f4:45:9d:6b:d1:d8: 9e:1c:ef:4a:90:86:59:24:bf:13:01:a1:52:a2:cd:c3:bb:5f: ab:e9:5a:27 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUYybltXj/gRcrOIE/IrHQuAk8YWQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyOTA3MTk0M1oX DTI0MDgyNzA3MjQ0M1owMzExMC8GA1UEAxMoOTg3OUMwNEQ0ODkwMzFGOTA3NTBG NzI5QzA5N0Q1REM2REI4RjNFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeGZ7lXF631MOLzwFgBG9F3YSZWuA/W6lWVW4TWeV8fzsLrXo+cLcNae8Xm 03qJiCnqRDzEhQwTCXCY+4BnNRiWPdbffuDtqobkEGxkW9n03AHerk7KioTe0Awg SY5BhCCWs8z3ISZHy1xC7lGyXo8hRhBokmQ0/3kFGRyYAlJe6b5NOcCGvo6ESH7B 9LNoJB3zzvMX+ykTjg+aBzzYldw8wlXi1zEDPsWI7/OO5uNry51Fr5uZq4mwk373 Y5j6UbDlKcq5vEScED8R0OT7LgXubhgG7dHCUES9QHUTWhjz0BJSqmLCthIKQ1kr CCRUnfUwhoK++GeBM5wN3gfPq6ECAwEAAaOCAd8wggHbMB0GA1UdDgQWBBSYecBN SJAx+QdQ9ynAl9Xcbbjz6zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTYwNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWegRDANBAIAAjAHAwUAJADwYDANBgkqhkiG9w0BAQsFAAOCAQEA O36aP1aTejrN7WbPWdNrtKzOFp6tQcyPBnA2F2Mg7eLfreMV7MJaybmpnKZXAZ4D Dy+r3+rziTvuMVMOPNaEwQGvxDlZmvvEqC7nZwowM81bGitF2vh/On1hAFrSaFsw NUSUlXJSgZlCPuZnq/0JaBlDsY3LHxakqvkTaxs9k3sE9geox8xz0re+D1NNMIEF qrHLeLqGFGAhjEpTR3LHVE4hcjUV8YxR1J5n/hlPCRDt1P/PgQyhlMuY8a3TnUYF M98OFuiVFeCFyWd0kKoNxoPoSA62w4tr/1JjkHfX5Ld8TB2h9EWda9HYnhzvSpCG WSS/EwGhUqLNw7tfq+laJw== -----END CERTIFICATE-----Generated at Sat Apr 27 17:53:08 2024 by rpki-client on console-ams.rpki-client.org