$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141893.roa File: AS141893.roa (raw, json) Hash identifier: jLDQhPMkItL1VI93oVcrSOdmvCJn93lfC6apPMDnJIc= Subject key identifier: 6A:A6:36:87:11:7C:63:62:44:CF:74:C0:74:68:70:16:98:D6:43:59 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6BBE22385E374B98BA0ABF2A136BF7AA961F8ABE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141893.roa Signing time: Tue 09 Jan 2024 04:00:28 +0000 ROA not before: Tue 09 Jan 2024 03:55:28 +0000 ROA not after: Tue 07 Jan 2025 04:00:28 +0000 asID: 141893 IP address blocks: 103.162.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:be:22:38:5e:37:4b:98:ba:0a:bf:2a:13:6b:f7:aa:96:1f:8a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:28 2024 GMT Not After : Jan 7 04:00:28 2025 GMT Subject: CN=6AA63687117C636244CF74C07468701698D64359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:93:6b:be:87:06:19:e6:39:4b:a0:9d:20: 78:e2:55:f0:18:51:eb:75:c0:64:76:3f:9d:30:9a: 56:bf:25:a4:3e:4a:3d:d6:af:44:ea:8b:45:c9:0a: ad:ea:53:d8:7d:44:f1:80:06:50:5a:1f:df:82:a5: f5:1a:bb:a3:7c:e9:66:cc:9f:f1:72:db:c4:2d:d0: 65:43:80:d9:6b:b1:b9:4f:a2:3a:f8:6d:a0:c6:a1: c6:68:05:74:40:67:48:fa:59:f6:7b:94:ee:67:22: 94:d0:c3:bf:eb:50:3c:0d:7b:08:ef:d7:15:8d:8d: b8:cb:79:d1:5e:fd:ff:9f:a1:70:d4:8b:50:55:7b: d3:64:38:26:42:3f:c7:01:ee:46:bb:6b:5c:5e:c1: 9c:c2:e7:51:ed:39:50:68:d8:7e:2a:29:8a:c3:f5: 34:48:52:86:16:5e:93:80:b3:0e:fd:54:35:34:50: 1e:93:31:41:90:be:1c:0a:f3:fd:03:a9:19:c2:74: 0b:62:87:9b:1e:9b:d3:00:61:3e:3e:7d:d5:d3:16: 75:99:9b:0b:0d:16:2b:71:47:e3:55:59:ec:72:68: b6:1e:24:f7:73:d3:b9:69:a3:04:be:ae:48:68:03: 17:c9:b6:93:65:91:67:97:b3:d9:94:4a:80:b2:a1: 4f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A6:36:87:11:7C:63:62:44:CF:74:C0:74:68:70:16:98:D6:43:59 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141893.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.114.0/23 Signature Algorithm: sha256WithRSAEncryption 31:67:19:40:35:8a:b7:67:f7:7f:6d:01:60:6b:4c:1f:0b:c3: f2:cb:d9:90:6e:07:64:28:99:3f:89:c4:f8:26:5a:47:90:f8: 37:d4:61:f1:e2:85:3c:75:a4:37:72:6d:2c:b9:b9:e4:86:a0: b8:8b:f2:d9:81:9a:fa:34:56:bb:cc:6f:48:40:ab:08:fa:bd: 46:7c:f3:d2:93:7e:e2:c1:0e:e7:a3:e6:1c:ed:3b:66:39:12: 4e:24:49:1f:47:33:6d:b4:8f:3b:b5:e5:d7:a6:c3:bd:ed:9d: 4a:3e:d2:d0:44:1d:98:74:8a:2c:74:71:11:5e:d7:e1:bf:39: 65:8d:cb:fe:fc:64:86:68:9b:6a:30:fa:f3:5b:16:cb:a1:c9: 34:86:d2:15:57:18:15:75:c9:b5:1d:f0:fe:1f:2c:cf:d3:1f: e3:9f:f2:c6:fb:20:16:be:94:a3:f6:2d:b8:dc:3f:3f:1c:28: ca:22:8d:77:19:aa:8c:e1:c3:e4:65:b6:1e:3e:fb:43:cd:f0: 6a:91:73:c0:60:38:c6:f6:78:66:b4:be:fb:9e:1e:4c:26:45: 11:33:29:e0:2a:3d:5f:7d:a3:60:e4:7f:89:e4:91:46:ea:b9: f4:cd:c9:c1:65:68:1f:37:e7:3f:f7:05:c4:35:89:2a:64:50: 14:0b:0e:12 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUa74iOF43S5i6Cr8qE2v3qpYfir4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyOFoX DTI1MDEwNzA0MDAyOFowMzExMC8GA1UEAxMoNkFBNjM2ODcxMTdDNjM2MjQ0Q0Y3 NEMwNzQ2ODcwMTY5OEQ2NDM1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8Ak2u+hwYZ5jlLoJ0geOJV8BhR63XAZHY/nTCaVr8lpD5KPdavROqLRckK repT2H1E8YAGUFof34Kl9Rq7o3zpZsyf8XLbxC3QZUOA2WuxuU+iOvhtoMahxmgF dEBnSPpZ9nuU7mcilNDDv+tQPA17CO/XFY2NuMt50V79/5+hcNSLUFV702Q4JkI/ xwHuRrtrXF7BnMLnUe05UGjYfiopisP1NEhShhZek4CzDv1UNTRQHpMxQZC+HArz /QOpGcJ0C2KHmx6b0wBhPj591dMWdZmbCw0WK3FH41VZ7HJoth4k93PTuWmjBL6u SGgDF8m2k2WRZ5ez2ZRKgLKhTxMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRqpjaH EXxjYkTPdMB0aHAWmNZDWTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTg5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeicjANBgkqhkiG9w0BAQsFAAOCAQEAMWcZQDWKt2f3f20BYGtM HwvD8svZkG4HZCiZP4nE+CZaR5D4N9Rh8eKFPHWkN3JtLLm55IaguIvy2YGa+jRW u8xvSECrCPq9Rnzz0pN+4sEO56PmHO07ZjkSTiRJH0czbbSPO7Xl16bDve2dSj7S 0EQdmHSKLHRxEV7X4b85ZY3L/vxkhmibajD681sWy6HJNIbSFVcYFXXJtR3w/h8s z9Mf45/yxvsgFr6Uo/YtuNw/PxwoyiKNdxmqjOHD5GW2Hj77Q83wapFzwGA4xvZ4 ZrS++54eTCZFETMp4Co9X32jYOR/ieSRRuq59M3JwWVoHzfnP/cFxDWJKmRQFAsO Eg== -----END CERTIFICATE-----Generated at Thu May 2 20:02:14 2024 by rpki-client on console-ams.rpki-client.org