$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140030.roa File: AS140030.roa (raw, json) Hash identifier: Hk/miyXjJ1ISmsmOt7hzyTU72MKxBUZ7hA0pm9ycjR0= Subject key identifier: 01:D1:DF:30:EB:B0:91:61:26:96:2B:87:75:B7:58:47:71:AC:1A:D3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 51F5C0C1E4B168B78E8572042541311CF5E2BF70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140030.roa Signing time: Tue 09 Jan 2024 04:00:07 +0000 ROA not before: Tue 09 Jan 2024 03:55:07 +0000 ROA not after: Tue 07 Jan 2025 04:00:07 +0000 asID: 140030 IP address blocks: 103.149.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f5:c0:c1:e4:b1:68:b7:8e:85:72:04:25:41:31:1c:f5:e2:bf:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:07 2024 GMT Not After : Jan 7 04:00:07 2025 GMT Subject: CN=01D1DF30EBB0916126962B8775B7584771AC1AD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:20:48:1c:17:33:0b:b3:ef:48:b1:a9:f1: 5d:5f:a3:88:1c:03:56:1b:fa:56:94:12:9c:a1:8c: 06:38:b6:d5:a3:63:67:f7:c8:5e:9c:c9:d9:76:d5: d5:36:8c:20:ee:e6:15:1c:40:24:1e:74:ca:d1:8a: 6f:41:09:e4:f1:4c:35:f1:31:be:07:49:3f:8f:d3: 70:dd:18:c9:af:c5:9f:7e:15:fe:49:90:c3:84:c2: b7:2e:8e:ed:d3:ed:58:db:a1:e3:00:a1:30:c3:3c: f1:03:29:bd:1f:0f:bc:77:f3:c0:2d:c9:c2:bb:34: 71:50:c7:68:ab:ab:42:de:d4:8c:25:28:03:88:37: cf:38:74:bd:b8:79:5e:f6:18:79:6f:0b:50:9a:c3: fd:58:d2:f0:b1:3c:0b:b8:bd:b5:3f:ab:73:bd:94: e8:2d:38:7b:a9:cf:b9:5a:c6:32:16:95:4b:90:a7: 01:19:ab:62:2d:6f:97:2a:02:6b:14:b5:0d:94:07: e7:09:82:b1:46:65:56:e2:3c:77:20:cd:35:7b:50: 9a:39:01:13:d9:7e:31:25:f6:0d:5c:c6:f5:1a:79: 10:96:ee:38:30:53:3e:6d:5f:bc:f6:bf:44:59:7e: e9:ac:ed:5b:e3:88:02:0b:b1:42:5d:2f:2e:0c:c3: ce:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D1:DF:30:EB:B0:91:61:26:96:2B:87:75:B7:58:47:71:AC:1A:D3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.203.0/24 Signature Algorithm: sha256WithRSAEncryption 51:32:a3:e9:e9:fe:5c:64:03:34:92:e3:c4:b4:f4:11:0c:51: 19:14:dd:0d:82:7e:57:86:62:91:c9:26:61:33:e2:71:05:0b: 1c:c1:31:47:a7:33:3d:67:9e:2c:2a:72:b7:b8:a7:36:47:4d: 6d:08:19:30:5e:d7:6f:d8:bc:ee:29:63:1e:25:e5:ee:e1:41: 9a:af:85:4f:97:6b:29:61:98:91:b6:4e:df:92:0d:2e:d7:82: 97:a9:6d:e6:f4:64:3d:67:bc:24:5e:6c:2a:77:4b:fe:57:96: 08:11:0e:e3:2a:43:f8:ab:47:80:ac:78:9a:06:79:78:ba:97: 1f:5f:b6:d9:1f:41:92:9c:fc:d6:ae:9e:2c:67:e6:ce:c5:b8: 46:4a:75:48:4f:ec:c4:68:c4:20:31:6a:90:5c:0e:43:27:e7: a4:71:c1:83:81:59:e5:ff:1a:20:4e:e2:33:80:db:54:46:70: c9:e4:d9:ca:02:80:6a:03:aa:e3:cb:b7:d6:f4:29:5b:29:25: 22:bb:2b:9a:f9:9c:2a:fe:e0:af:71:74:97:e6:c3:a3:1e:91: fc:d5:19:b1:61:5e:b1:ec:bd:4f:1c:6a:ab:91:ee:6a:4b:b5: 72:4e:61:bf:6c:cb:30:e6:f1:8c:f1:6f:23:ba:d5:58:18:70: 20:2d:11:74 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUUfXAweSxaLeOhXIEJUExHPXiv3AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwN1oX DTI1MDEwNzA0MDAwN1owMzExMC8GA1UEAxMoMDFEMURGMzBFQkIwOTE2MTI2OTYy Qjg3NzVCNzU4NDc3MUFDMUFEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3MIEgcFzMLs+9IsanxXV+jiBwDVhv6VpQSnKGMBji21aNjZ/fIXpzJ2XbV 1TaMIO7mFRxAJB50ytGKb0EJ5PFMNfExvgdJP4/TcN0Yya/Fn34V/kmQw4TCty6O 7dPtWNuh4wChMMM88QMpvR8PvHfzwC3Jwrs0cVDHaKurQt7UjCUoA4g3zzh0vbh5 XvYYeW8LUJrD/VjS8LE8C7i9tT+rc72U6C04e6nPuVrGMhaVS5CnARmrYi1vlyoC axS1DZQH5wmCsUZlVuI8dyDNNXtQmjkBE9l+MSX2DVzG9Rp5EJbuODBTPm1fvPa/ RFl+6aztW+OIAguxQl0vLgzDzpUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQB0d8w 67CRYSaWK4d1t1hHcawa0zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeVyzANBgkqhkiG9w0BAQsFAAOCAQEAUTKj6en+XGQDNJLjxLT0 EQxRGRTdDYJ+V4ZikckmYTPicQULHMExR6czPWeeLCpyt7inNkdNbQgZMF7Xb9i8 7iljHiXl7uFBmq+FT5drKWGYkbZO35INLteCl6lt5vRkPWe8JF5sKndL/leWCBEO 4ypD+KtHgKx4mgZ5eLqXH1+22R9Bkpz81q6eLGfmzsW4Rkp1SE/sxGjEIDFqkFwO QyfnpHHBg4FZ5f8aIE7iM4DbVEZwyeTZygKAagOq48u31vQpWyklIrsrmvmcKv7g r3F0l+bDox6R/NUZsWFesey9Txxqq5Huaku1ck5hv2zLMObxjPFvI7rVWBhwIC0R dA== -----END CERTIFICATE-----Generated at Wed May 8 04:37:56 2024 by rpki-client on console-fra.rpki-client.org