$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140001.roa File: AS140001.roa (raw, json) Hash identifier: W1GDViHnotZosaBSeJMEhDUtHMlBlJiT+L0JLz1TQlM= Subject key identifier: BC:6F:42:FE:C8:1A:28:32:71:D3:4F:3C:70:3F:04:D3:A4:31:4C:EF Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 310C6C0E06E64F1939B951E4EAB84C8A6A53E71C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140001.roa Signing time: Tue 01 Aug 2023 19:46:45 +0000 ROA not before: Tue 01 Aug 2023 19:41:45 +0000 ROA not after: Tue 30 Jul 2024 19:46:45 +0000 asID: 140001 IP address blocks: 103.101.154.0/23 maxlen: 24 103.148.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0c:6c:0e:06:e6:4f:19:39:b9:51:e4:ea:b8:4c:8a:6a:53:e7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 1 19:41:45 2023 GMT Not After : Jul 30 19:46:45 2024 GMT Subject: CN=BC6F42FEC81A283271D34F3C703F04D3A4314CEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b6:6b:4c:49:f0:93:b1:bc:c4:ad:e0:df:4f: 92:1a:7c:eb:ed:34:5a:ae:22:93:54:26:73:9a:88: 83:f9:14:dd:6a:eb:f3:db:51:d3:6b:eb:3c:d4:0c: fd:d1:fd:d9:03:4a:8c:4c:0f:de:b6:dd:d6:a4:02: 20:a0:46:c1:28:70:75:e5:0d:15:27:ab:ee:a7:ea: f2:d6:0a:f0:00:c1:e8:db:96:b7:34:7f:a8:cc:11: b3:f5:f8:db:30:16:c8:1f:c3:54:23:69:0a:44:24: 1d:78:01:a1:66:04:61:bf:c0:78:ad:69:c0:ae:24: a5:48:70:39:fa:b5:3f:90:e9:54:51:78:c4:5e:3a: 50:6f:4d:cb:a3:b6:5b:2a:6b:75:24:1a:47:db:ee: ec:83:06:99:dc:ee:57:cc:8f:1e:f1:69:8a:6b:37: b8:5c:58:cc:2b:66:3b:38:db:ee:c4:fc:9e:73:ae: cb:54:11:4e:fe:b8:4e:60:1a:fb:28:e6:f7:f6:56: 2f:40:1d:9a:fd:25:a3:4b:7c:4a:5b:9a:05:99:ef: b5:34:ee:ef:c0:72:22:5c:ed:52:91:d5:0e:93:94: 27:41:15:ce:e0:cc:72:10:30:33:74:12:b2:7e:a6: a1:fc:9b:74:31:4c:94:9f:ec:88:a5:9b:5d:43:ba: 3e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6F:42:FE:C8:1A:28:32:71:D3:4F:3C:70:3F:04:D3:A4:31:4C:EF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.154.0/23 103.148.80.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:59:54:40:e8:47:83:8e:3e:41:78:40:24:9a:66:11:6a:eb: 6b:83:b1:ef:2d:f8:05:5d:41:3e:a8:60:ed:11:62:a9:e5:1f: 34:f3:75:85:ed:1d:a6:ea:c0:a5:b3:da:dc:20:6b:0e:0a:2c: 44:3d:32:bf:70:5f:5f:ff:ec:7c:0a:46:0c:78:25:af:05:81: 82:f3:73:6e:ec:bf:e0:f4:b0:b3:52:d3:c0:88:37:05:0d:f4: c6:38:33:11:e7:30:0d:6b:52:d5:d4:97:a9:0c:ca:28:eb:70: cf:01:0c:59:a6:15:e2:33:cb:ee:bc:58:bd:82:8e:d6:57:7d: 5e:33:30:bb:75:93:0f:f8:87:2c:5d:49:35:2c:53:72:31:26: af:a8:ca:91:d8:55:cf:44:ca:eb:51:e2:4b:20:75:16:35:1b: 12:8b:32:21:76:44:2f:a2:80:d6:01:bb:14:5b:26:96:b0:e7: dd:79:e9:f7:cb:a5:dc:ad:82:c8:5a:bc:9f:5f:70:29:df:ee: 6d:8c:d6:b8:30:c0:7a:5f:4b:78:d5:9b:fc:ea:fb:30:16:eb: 7d:89:40:f6:3f:5f:12:5c:51:70:97:4a:a6:3b:11:c9:b7:7e: 54:4b:51:b3:3e:60:27:3f:85:08:b7:67:c3:b4:90:1b:64:77: c6:6f:90:e3 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUMQxsDgbmTxk5uVHk6rhMimpT5xwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgwMTE5NDE0NVoX DTI0MDczMDE5NDY0NVowMzExMC8GA1UEAxMoQkM2RjQyRkVDODFBMjgzMjcxRDM0 RjNDNzAzRjA0RDNBNDMxNENFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANO2a0xJ8JOxvMSt4N9Pkhp86+00Wq4ik1Qmc5qIg/kU3Wrr89tR02vrPNQM /dH92QNKjEwP3rbd1qQCIKBGwShwdeUNFSer7qfq8tYK8ADB6NuWtzR/qMwRs/X4 2zAWyB/DVCNpCkQkHXgBoWYEYb/AeK1pwK4kpUhwOfq1P5DpVFF4xF46UG9Ny6O2 WyprdSQaR9vu7IMGmdzuV8yPHvFpims3uFxYzCtmOzjb7sT8nnOuy1QRTv64TmAa +yjm9/ZWL0Admv0lo0t8SluaBZnvtTTu78ByIlztUpHVDpOUJ0EVzuDMchAwM3QS sn6mofybdDFMlJ/siKWbXUO6PiUCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBS8b0L+ yBooMnHTTzxwPwTTpDFM7zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDAwMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWdlmgMEAWeUUDANBgkqhkiG9w0BAQsFAAOCAQEAnFlUQOhHg44+ QXhAJJpmEWrra4Ox7y34BV1BPqhg7RFiqeUfNPN1he0dpurApbPa3CBrDgosRD0y v3BfX//sfApGDHglrwWBgvNzbuy/4PSws1LTwIg3BQ30xjgzEecwDWtS1dSXqQzK KOtwzwEMWaYV4jPL7rxYvYKO1ld9XjMwu3WTD/iHLF1JNSxTcjEmr6jKkdhVz0TK 61HiSyB1FjUbEosyIXZEL6KA1gG7FFsmlrDn3Xnp98ul3K2CyFq8n19wKd/ubYzW uDDAel9LeNWb/Or7MBbrfYlA9j9fElxRcJdKpjsRybd+VEtRsz5gJz+FCLdnw7SQ G2R3xm+Q4w== -----END CERTIFICATE-----Generated at Wed May 8 17:45:22 2024 by rpki-client on console-ams.rpki-client.org