$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140437.roa File: AS140437.roa (raw, json) Hash identifier: pUmy/t0dz4fvqh4+Td9g5OPl0rUekXEuvDSRzaU2YOc= Subject key identifier: 20:4C:D3:49:76:1F:A3:25:B8:C9:09:2E:B5:CC:F8:3A:6C:2A:BC:61 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5DC09902140527F9E54D3485F6E87838F3C13E38 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140437.roa Signing time: Tue 09 Jan 2024 04:00:07 +0000 ROA not before: Tue 09 Jan 2024 03:55:07 +0000 ROA not after: Tue 07 Jan 2025 04:00:07 +0000 asID: 140437 IP address blocks: 103.151.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 08:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c0:99:02:14:05:27:f9:e5:4d:34:85:f6:e8:78:38:f3:c1:3e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:07 2024 GMT Not After : Jan 7 04:00:07 2025 GMT Subject: CN=204CD349761FA325B8C9092EB5CCF83A6C2ABC61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:90:fc:84:c9:57:d5:05:7b:6f:7d:4e:2f: 49:23:2d:46:39:44:56:a8:85:0d:ee:78:23:5f:80: 18:3b:c5:d9:85:2c:15:13:a1:bc:39:cc:db:0f:55: 38:c1:de:5c:e4:82:6e:99:79:c0:54:b9:5b:c4:29: 53:18:e9:57:37:0b:7a:5e:14:cc:1b:7e:f2:41:6f: 2f:ac:6d:ed:8c:a2:b8:9d:6c:db:e8:0e:ee:89:a6: f5:fd:33:cf:49:be:a1:39:bd:21:84:92:37:57:17: c7:ff:15:a8:d5:10:10:e9:af:c9:98:65:4d:99:7a: d8:bc:e4:64:f5:75:2a:40:e7:a7:0a:8b:c6:a1:61: b7:33:a6:64:05:80:95:2b:18:e0:d3:99:d1:37:10: 63:39:fc:4d:62:67:0c:f5:ca:b1:65:ab:d1:f3:fa: 0d:33:6c:a5:29:62:ae:a4:44:79:0d:2e:45:61:ae: c1:1c:aa:81:e6:10:a6:f4:5e:10:fa:53:ef:97:e6: c9:25:d6:2a:8f:a9:3a:46:fe:b8:54:94:6c:83:06: d1:42:d2:3f:3f:f2:cf:91:5a:bd:bb:ff:77:f0:ba: 49:b5:f0:ab:92:b0:5a:f5:a2:02:00:6b:e2:79:fb: c5:93:ef:34:7f:f4:76:1f:ef:da:63:cf:02:70:2a: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4C:D3:49:76:1F:A3:25:B8:C9:09:2E:B5:CC:F8:3A:6C:2A:BC:61 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.246.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:fe:1d:2f:8a:dd:e2:8c:15:70:84:3e:0f:50:34:83:0b:77: 30:4d:05:08:0e:e5:17:47:cf:78:4f:8a:35:b4:d3:d2:03:57: bb:dc:e2:d7:b2:c9:e6:90:45:12:56:33:bf:c1:c2:13:6a:6e: 31:ec:d8:e8:00:bb:8c:ae:d5:bf:18:b2:88:75:f9:68:b7:07: 9d:e7:b9:83:20:c5:72:a4:fc:81:53:e5:99:55:d1:1d:b8:28: 2e:cb:c4:a3:a7:bc:bd:bf:53:1b:dc:91:19:0d:bf:e0:de:1e: ad:8b:47:54:cc:51:a3:5f:b1:4e:fa:c8:db:f7:29:c3:5c:cd: f2:89:5a:41:19:6d:69:a0:da:85:5d:a6:b4:45:e5:f7:0b:94: 52:af:95:62:42:ce:24:90:00:3d:40:d0:46:11:13:d2:40:6b: 9f:32:36:2f:f0:aa:15:23:62:78:96:63:8e:31:ef:b3:42:80: 9d:fb:d9:cf:c4:3a:d8:ec:24:01:d7:44:75:c7:3a:c5:1f:a7: 1c:f9:16:71:87:52:81:56:bf:92:80:08:9d:b8:83:1b:80:c9: b2:0d:0c:57:4d:5d:35:2f:f6:d2:1f:7e:bc:66:5b:fe:c7:f0: b3:af:00:c8:0f:b9:a2:07:2e:8e:38:04:d2:ed:ff:75:49:b2: 54:35:0b:0e -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUXcCZAhQFJ/nlTTSF9uh4OPPBPjgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwN1oX DTI1MDEwNzA0MDAwN1owMzExMC8GA1UEAxMoMjA0Q0QzNDk3NjFGQTMyNUI4Qzkw OTJFQjVDQ0Y4M0E2QzJBQkM2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAckPyEyVfVBXtvfU4vSSMtRjlEVqiFDe54I1+AGDvF2YUsFROhvDnM2w9V OMHeXOSCbpl5wFS5W8QpUxjpVzcLel4UzBt+8kFvL6xt7YyiuJ1s2+gO7omm9f0z z0m+oTm9IYSSN1cXx/8VqNUQEOmvyZhlTZl62LzkZPV1KkDnpwqLxqFhtzOmZAWA lSsY4NOZ0TcQYzn8TWJnDPXKsWWr0fP6DTNspSlirqREeQ0uRWGuwRyqgeYQpvRe EPpT75fmySXWKo+pOkb+uFSUbIMG0ULSPz/yz5Favbv/d/C6SbXwq5KwWvWiAgBr 4nn7xZPvNH/0dh/v2mPPAnAqTHUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQgTNNJ dh+jJbjJCS61zPg6bCq8YTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeX9jANBgkqhkiG9w0BAQsFAAOCAQEAj/4dL4rd4owVcIQ+D1A0 gwt3ME0FCA7lF0fPeE+KNbTT0gNXu9zi17LJ5pBFElYzv8HCE2puMezY6AC7jK7V vxiyiHX5aLcHnee5gyDFcqT8gVPlmVXRHbgoLsvEo6e8vb9TG9yRGQ2/4N4erYtH VMxRo1+xTvrI2/cpw1zN8olaQRltaaDahV2mtEXl9wuUUq+VYkLOJJAAPUDQRhET 0kBrnzI2L/CqFSNieJZjjjHvs0KAnfvZz8Q62OwkAddEdcc6xR+nHPkWcYdSgVa/ koAInbiDG4DJsg0MV01dNS/20h9+vGZb/sfws68AyA+5ogcujjgE0u3/dUmyVDUL Dg== -----END CERTIFICATE-----Generated at Thu May 2 04:01:16 2024 by rpki-client on console-fra.rpki-client.org