$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140476.roa File: AS140476.roa (raw, json) Hash identifier: TGNPdnF90FpnaD/87GU8DLbqWhyd2uq/Yg/ZhAnAnjo= Subject key identifier: DA:5C:C8:83:70:7A:B9:31:26:6A:47:74:CB:BE:F7:1C:8C:74:58:9C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 05CB212697B6F20F7B6DC8DE5E0BF0002ABECF6A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140476.roa Signing time: Tue 09 Jan 2024 04:00:10 +0000 ROA not before: Tue 09 Jan 2024 03:55:10 +0000 ROA not after: Tue 07 Jan 2025 04:00:10 +0000 asID: 140476 IP address blocks: 103.153.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:cb:21:26:97:b6:f2:0f:7b:6d:c8:de:5e:0b:f0:00:2a:be:cf:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:10 2024 GMT Not After : Jan 7 04:00:10 2025 GMT Subject: CN=DA5CC883707AB931266A4774CBBEF71C8C74589C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b3:4e:51:7b:ee:ee:c5:d2:13:6f:11:a6:29: df:78:fc:2b:8f:3a:db:08:af:98:19:00:1c:64:5e: 8e:bc:15:13:fb:40:15:43:e7:3e:54:bf:ba:15:8e: 8a:1c:9d:33:4e:5e:b4:f3:8f:e0:89:fb:e8:26:9f: d4:d0:7c:15:11:43:c1:9c:ab:c4:13:fa:62:5e:fb: 09:e2:98:a4:25:79:41:27:20:1e:9a:e4:d4:d1:0c: 5f:b1:90:75:d8:11:c6:ae:ad:86:7d:15:0c:32:93: 95:be:f0:d1:b9:2c:56:49:2c:cf:40:d9:51:51:95: 97:94:01:06:4f:26:06:b1:52:7c:c7:c2:8a:ce:05: 49:76:40:f0:10:1e:af:c8:f4:02:04:5c:e3:c1:68: aa:88:87:6d:42:ae:e1:54:a7:01:11:1c:f8:0a:fe: 87:64:88:a4:7c:db:dc:3a:bd:99:9b:2f:fd:c0:d0: 33:dd:06:b3:f4:d1:72:ab:a3:4d:40:5a:b8:4a:bb: d4:9c:93:85:9e:19:df:04:31:c6:f3:d5:0f:25:7d: ac:83:f8:da:7b:9f:f9:ea:9f:99:6c:f0:de:c9:8b: 3b:19:65:cb:d3:78:10:b6:ce:02:a7:b0:0c:03:48: 42:ec:9b:ba:8e:31:41:b1:b2:de:3f:3d:44:4e:8d: 6c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5C:C8:83:70:7A:B9:31:26:6A:47:74:CB:BE:F7:1C:8C:74:58:9C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140476.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.248.0/23 Signature Algorithm: sha256WithRSAEncryption 46:d7:0b:82:45:1a:f3:89:23:bb:58:69:75:48:c6:8b:db:ed: 40:02:76:9d:38:27:1b:94:d3:55:fd:09:f7:96:b0:db:1f:68: 49:82:ad:a2:e9:f2:2d:33:df:9e:f1:64:4d:5b:84:83:7c:1e: 82:81:e1:c6:a7:e0:38:8a:28:ee:d5:ca:dc:27:46:02:a8:5e: 62:d6:86:f1:bb:4b:91:b9:dc:da:50:ee:7a:77:46:02:7a:bf: e4:db:54:d4:ae:9a:4c:25:60:d0:12:2f:5a:d6:64:35:55:e3: 25:c5:de:b3:dc:9a:ae:82:06:05:00:11:a7:05:71:22:52:25: e2:e2:20:62:6f:11:9e:6c:cf:9f:b3:fb:19:11:85:c8:e8:cb: bb:09:d3:4b:e9:00:ae:a5:cb:fc:4b:d1:e7:27:ef:b5:3e:00: 8b:41:9f:56:d7:5d:ed:b4:85:2f:3d:50:44:44:6a:e5:76:70: 72:e5:8a:7e:cf:1f:16:bc:d0:e6:8b:8f:d6:b7:a7:14:90:d3: cd:6d:78:1c:55:1f:fb:1c:35:6b:cf:91:19:cf:82:06:97:8a: 00:17:e3:86:14:b1:68:5d:6c:2b:53:34:78:0d:8d:6e:c1:d5: 46:62:89:0a:af:13:03:72:3b:c3:7f:a7:b2:3f:3a:e8:6e:c0: ff:d0:15:1a -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUBcshJpe28g97bcjeXgvwACq+z2owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxMFoX DTI1MDEwNzA0MDAxMFowMzExMC8GA1UEAxMoREE1Q0M4ODM3MDdBQjkzMTI2NkE0 Nzc0Q0JCRUY3MUM4Qzc0NTg5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMyzTlF77u7F0hNvEaYp33j8K4862wivmBkAHGRejrwVE/tAFUPnPlS/uhWO ihydM05etPOP4In76Caf1NB8FRFDwZyrxBP6Yl77CeKYpCV5QScgHprk1NEMX7GQ ddgRxq6thn0VDDKTlb7w0bksVkksz0DZUVGVl5QBBk8mBrFSfMfCis4FSXZA8BAe r8j0AgRc48FoqoiHbUKu4VSnAREc+Ar+h2SIpHzb3Dq9mZsv/cDQM90Gs/TRcquj TUBauEq71JyThZ4Z3wQxxvPVDyV9rIP42nuf+eqfmWzw3smLOxlly9N4ELbOAqew DANIQuybuo4xQbGy3j89RE6NbBECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTaXMiD cHq5MSZqR3TLvvccjHRYnDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDQ3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeZ+DANBgkqhkiG9w0BAQsFAAOCAQEARtcLgkUa84kju1hpdUjG i9vtQAJ2nTgnG5TTVf0J95aw2x9oSYKtounyLTPfnvFkTVuEg3wegoHhxqfgOIoo 7tXK3CdGAqheYtaG8btLkbnc2lDuendGAnq/5NtU1K6aTCVg0BIvWtZkNVXjJcXe s9yaroIGBQARpwVxIlIl4uIgYm8RnmzPn7P7GRGFyOjLuwnTS+kArqXL/EvR5yfv tT4Ai0GfVtdd7bSFLz1QRERq5XZwcuWKfs8fFrzQ5ouP1renFJDTzW14HFUf+xw1 a8+RGc+CBpeKABfjhhSxaF1sK1M0eA2NbsHVRmKJCq8TA3I7w3+nsj866G7A/9AV Gg== -----END CERTIFICATE-----Generated at Sun May 5 09:36:56 2024 by rpki-client on console-ams.rpki-client.org