$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140480.roa File: AS140480.roa (raw, json) Hash identifier: 9hPuTP+lZngTcMw2v1IjoC6YTHSXGJsHBolxhpH2DxM= Subject key identifier: B2:30:67:46:E0:EB:09:BB:63:38:2E:74:9F:6B:ED:56:B6:32:B3:1B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6DC0EE99C2A30D8427C62471ED78A7FBD555E6D5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140480.roa Signing time: Wed 06 Mar 2024 07:00:00 +0000 ROA not before: Wed 06 Mar 2024 06:55:00 +0000 ROA not after: Wed 05 Mar 2025 07:00:00 +0000 asID: 140480 IP address blocks: 103.198.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c0:ee:99:c2:a3:0d:84:27:c6:24:71:ed:78:a7:fb:d5:55:e6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 6 06:55:00 2024 GMT Not After : Mar 5 07:00:00 2025 GMT Subject: CN=B2306746E0EB09BB63382E749F6BED56B632B31B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a1:5b:f1:1e:58:b1:32:11:6e:e7:e7:e8:34: a0:c4:17:d3:ad:0f:0a:4f:42:51:f0:5a:fa:bf:f0: 5b:5b:8c:f4:3b:53:4b:ae:e1:9c:98:48:a0:cd:cd: ac:5f:6f:b6:12:d4:7e:18:23:24:02:40:a2:03:a7: 70:dd:c1:a1:a3:74:f1:81:cf:94:2b:8f:39:02:38: b8:e7:5c:4b:8e:4b:01:fe:2c:ec:09:e8:d6:9e:d2: b6:6b:df:91:b3:eb:69:da:b8:6b:d3:59:e4:4c:14: 6a:85:4c:95:c9:00:7d:d6:08:98:6b:c5:8e:e2:00: 4b:c5:b9:91:8b:25:8e:af:59:72:31:4e:12:85:a2: 7b:aa:2d:1f:90:24:28:53:84:2e:12:71:a4:b0:27: d6:ca:0a:b7:58:26:f3:5c:b9:16:bb:58:da:be:e9: ae:9e:78:98:15:f4:8d:a1:f4:97:86:4c:dc:02:f9: 68:16:c9:52:53:de:e6:62:15:67:23:4e:3a:29:d9: 36:9c:8b:fc:86:d0:87:b0:41:57:38:69:95:29:4e: 21:d6:d9:92:c4:97:10:c0:89:d9:26:dd:95:23:dc: 83:01:69:7a:ac:88:d9:5f:55:52:99:1d:42:fc:80: ec:1a:e1:fb:52:00:78:43:e7:8c:0c:cf:54:16:a8: f1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:30:67:46:E0:EB:09:BB:63:38:2E:74:9F:6B:ED:56:B6:32:B3:1B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140480.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.198.129.0/24 Signature Algorithm: sha256WithRSAEncryption 66:a1:db:36:f1:bc:f5:a2:78:37:6e:1d:89:d1:76:76:cf:f7: b7:67:8c:ea:be:e0:00:f7:00:77:d4:bf:85:93:69:03:0f:b5: d6:07:35:b8:9f:ea:a8:35:c6:5e:b1:28:91:f1:40:b0:19:12: 1b:fc:83:ed:57:97:c9:9d:45:97:90:b3:f3:cc:9a:08:17:cf: 50:78:e9:b4:aa:43:65:e5:0b:3a:51:4e:a8:0c:a0:28:50:1f: 84:7a:c1:79:9b:22:cb:1a:c5:91:90:fe:45:88:b2:b7:95:ed: b5:27:24:a5:d1:bb:8e:9c:df:fe:b0:af:18:dd:e5:43:1b:45: 5e:a6:a8:cd:71:24:98:8a:5d:a1:14:1b:2e:6d:5a:4b:b6:88: e4:25:be:e2:65:2d:c7:c3:2a:86:53:09:26:8e:85:96:c3:5d: 22:a3:a0:28:e1:26:d9:3a:45:f8:67:a3:65:bb:c6:3d:5f:85: 34:65:ae:54:78:68:0c:13:52:51:47:2c:fa:00:bc:b1:dd:de: 46:90:e9:ea:ba:ce:9f:92:4c:c0:cf:68:56:83:3a:a0:6e:c9: 80:bd:6c:8a:21:d2:64:c7:f8:a5:53:18:27:f3:39:0f:f5:12: 6b:40:ea:a9:5c:fb:b9:e7:d5:8e:f3:82:59:8a:be:e4:2a:61: ab:cf:31:49 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUbcDumcKjDYQnxiRx7Xin+9VV5tUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMwNjA2NTUwMFoX DTI1MDMwNTA3MDAwMFowMzExMC8GA1UEAxMoQjIzMDY3NDZFMEVCMDlCQjYzMzgy RTc0OUY2QkVENTZCNjMyQjMxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6hW/EeWLEyEW7n5+g0oMQX060PCk9CUfBa+r/wW1uM9DtTS67hnJhIoM3N rF9vthLUfhgjJAJAogOncN3BoaN08YHPlCuPOQI4uOdcS45LAf4s7Ano1p7Stmvf kbPradq4a9NZ5EwUaoVMlckAfdYImGvFjuIAS8W5kYsljq9ZcjFOEoWie6otH5Ak KFOELhJxpLAn1soKt1gm81y5FrtY2r7prp54mBX0jaH0l4ZM3AL5aBbJUlPe5mIV ZyNOOinZNpyL/IbQh7BBVzhplSlOIdbZksSXEMCJ2SbdlSPcgwFpeqyI2V9VUpkd QvyA7Brh+1IAeEPnjAzPVBao8VUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSyMGdG 4OsJu2M4LnSfa+1WtjKzGzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDQ4MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfGgTANBgkqhkiG9w0BAQsFAAOCAQEAZqHbNvG89aJ4N24didF2 ds/3t2eM6r7gAPcAd9S/hZNpAw+11gc1uJ/qqDXGXrEokfFAsBkSG/yD7VeXyZ1F l5Cz88yaCBfPUHjptKpDZeULOlFOqAygKFAfhHrBeZsiyxrFkZD+RYiyt5XttSck pdG7jpzf/rCvGN3lQxtFXqaozXEkmIpdoRQbLm1aS7aI5CW+4mUtx8MqhlMJJo6F lsNdIqOgKOEm2TpF+GejZbvGPV+FNGWuVHhoDBNSUUcs+gC8sd3eRpDp6rrOn5JM wM9oVoM6oG7JgL1siiHSZMf4pVMYJ/M5D/USa0DqqVz7uefVjvOCWYq+5Cphq88x SQ== -----END CERTIFICATE-----Generated at Wed May 8 09:50:37 2024 by rpki-client on console-fra.rpki-client.org