$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140001.roa File: AS140001.roa (raw, json) Hash identifier: 5AstWlpCxoFx1ZgmNBmaSLk0e/I5xvsKwcUeBVpQ5kE= Subject key identifier: 25:5B:72:53:F8:9D:11:F1:B8:36:7F:04:94:7E:BD:C1:B8:50:9C:43 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2F6127A4F90BB895E5E6FDC812C1BBF3F4351978 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140001.roa Signing time: Mon 29 Jul 2024 08:22:44 +0000 ROA not before: Mon 29 Jul 2024 08:17:44 +0000 ROA not after: Mon 28 Jul 2025 08:22:44 +0000 asID: 140001 IP address blocks: 103.148.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:61:27:a4:f9:0b:b8:95:e5:e6:fd:c8:12:c1:bb:f3:f4:35:19:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 29 08:17:44 2024 GMT Not After : Jul 28 08:22:44 2025 GMT Subject: CN=255B7253F89D11F1B8367F04947EBDC1B8509C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:57:9c:30:6a:d5:04:51:c8:36:9e:d7:b7:f9: 55:bd:d8:f3:68:b4:7d:6f:d3:20:bf:35:ad:b2:c5: e2:13:32:53:3c:ad:52:ea:c3:bd:72:f2:0c:dc:bb: 29:e1:c0:6d:d2:2b:2c:a9:5c:0f:1e:70:ee:e3:11: 48:1d:de:5b:fc:36:78:fd:8d:f3:0f:99:25:9f:dc: 4d:73:8e:a4:fd:09:ad:62:f8:9b:a3:81:6a:7c:4b: 48:73:b8:65:47:32:62:f6:e1:a7:f7:1b:b8:2d:cb: af:f9:e5:15:c3:a5:7f:5d:ea:17:cf:8c:33:69:99: 49:54:7b:55:23:df:21:65:ef:60:af:d8:65:f1:a7: e3:4b:63:c8:ad:79:41:aa:78:aa:80:59:8d:11:dd: 97:2f:f0:17:92:ba:3a:09:d9:45:10:33:e7:45:fa: ab:70:a3:09:b1:78:a2:01:b8:ea:3c:c3:b3:80:7c: 4e:0b:bc:cd:58:7b:4f:22:48:f5:a5:ca:ed:1c:f3: 4b:45:00:8d:ba:93:5b:f3:55:91:a8:9d:c2:5b:02: b4:32:d3:53:60:cc:f3:4d:1f:e8:54:6f:d9:82:64: e5:09:ea:19:55:35:e0:f7:b3:c2:d0:8e:66:be:6e: eb:54:4f:ad:40:d2:fc:a8:7e:90:0f:22:1c:7a:d7: f2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5B:72:53:F8:9D:11:F1:B8:36:7F:04:94:7E:BD:C1:B8:50:9C:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.80.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:37:35:9f:50:dd:cb:80:bb:0d:0d:22:11:a6:04:cf:ad:17: 6e:7a:ee:ca:9d:ea:61:3e:91:cc:33:b3:07:64:f7:d6:35:bd: 2e:dd:3f:22:da:84:33:f3:f8:df:94:2e:a6:2e:62:a0:c2:bb: d2:d7:25:fc:45:f2:cc:7a:46:2d:1b:d8:1c:cd:12:2d:25:da: f1:ed:ce:a2:df:0b:e9:73:c0:d1:cb:43:02:1a:aa:8f:e5:b4: 81:4e:4e:55:70:96:d7:e4:dc:45:76:aa:8b:3a:06:70:71:76: 72:4a:bb:94:1a:21:74:96:d0:1f:f0:7e:97:a9:78:a4:52:03: bd:58:1f:ca:a3:02:4d:a2:7c:91:78:4e:0a:4d:a9:1f:9e:ad: 89:b9:dd:29:38:85:38:bc:7d:1b:fb:9d:d2:5a:68:b5:54:e4: 5c:7e:5d:55:f2:f9:0c:fc:83:51:e5:d1:91:b8:8b:ac:12:b5: 16:31:79:43:4e:a6:84:82:dc:f5:5f:e3:43:a8:e7:18:50:89: 39:53:fd:ab:a2:9e:54:f2:25:7e:84:90:d9:e6:06:3c:34:da: c5:18:da:9b:4a:bf:0c:ce:3c:2f:7a:0c:cd:00:98:28:d3:e7: bf:29:47:c2:c4:4f:2a:b2:2a:fd:1c:de:e7:1d:ee:d6:1b:94: 31:d2:be:e1 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUL2EnpPkLuJXl5v3IEsG78/Q1GXgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyOTA4MTc0NFoX DTI1MDcyODA4MjI0NFowMzExMC8GA1UEAxMoMjU1QjcyNTNGODlEMTFGMUI4MzY3 RjA0OTQ3RUJEQzFCODUwOUM0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNXnDBq1QRRyDae17f5Vb3Y82i0fW/TIL81rbLF4hMyUzytUurDvXLyDNy7 KeHAbdIrLKlcDx5w7uMRSB3eW/w2eP2N8w+ZJZ/cTXOOpP0JrWL4m6OBanxLSHO4 ZUcyYvbhp/cbuC3Lr/nlFcOlf13qF8+MM2mZSVR7VSPfIWXvYK/YZfGn40tjyK15 Qap4qoBZjRHdly/wF5K6OgnZRRAz50X6q3CjCbF4ogG46jzDs4B8Tgu8zVh7TyJI 9aXK7RzzS0UAjbqTW/NVkaidwlsCtDLTU2DM800f6FRv2YJk5QnqGVU14PezwtCO Zr5u61RPrUDS/Kh+kA8iHHrX8mcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQlW3JT +J0R8bg2fwSUfr3BuFCcQzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDAwMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeUUDANBgkqhkiG9w0BAQsFAAOCAQEATTc1n1Ddy4C7DQ0iEaYE z60Xbnruyp3qYT6RzDOzB2T31jW9Lt0/ItqEM/P435Qupi5ioMK70tcl/EXyzHpG LRvYHM0SLSXa8e3Oot8L6XPA0ctDAhqqj+W0gU5OVXCW1+TcRXaqizoGcHF2ckq7 lBohdJbQH/B+l6l4pFIDvVgfyqMCTaJ8kXhOCk2pH56tibndKTiFOLx9G/ud0lpo tVTkXH5dVfL5DPyDUeXRkbiLrBK1FjF5Q06mhILc9V/jQ6jnGFCJOVP9q6KeVPIl foSQ2eYGPDTaxRjam0q/DM48L3oMzQCYKNPnvylHwsRPKrIq/Rze5x3u1huUMdK+ 4Q== -----END CERTIFICATE-----Generated at Sun Feb 16 21:07:54 2025 by rpki-client