$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140481.roa File: AS140481.roa (raw, json) Hash identifier: +11EW6G3+VnxRPedTHNO9AFqy83MECsKwzeI2cwm9OQ= Subject key identifier: C6:E7:50:8E:A9:A4:01:DA:74:C7:BE:AC:B3:12:4F:4E:E4:C0:F8:9E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 529BD8645E8BCF8C79F1792D23C5C42B2F53372B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140481.roa Signing time: Fri 01 Nov 2024 07:00:00 +0000 ROA not before: Fri 01 Nov 2024 06:55:00 +0000 ROA not after: Fri 31 Oct 2025 07:00:00 +0000 asID: 140481 IP address blocks: 103.154.76.0/23 maxlen: 24 2406:55c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9b:d8:64:5e:8b:cf:8c:79:f1:79:2d:23:c5:c4:2b:2f:53:37:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Nov 1 06:55:00 2024 GMT Not After : Oct 31 07:00:00 2025 GMT Subject: CN=C6E7508EA9A401DA74C7BEACB3124F4EE4C0F89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:a8:4d:a3:86:7f:1b:03:74:8d:90:73:d1: ad:ae:f9:ed:ba:99:a2:9d:8a:66:a8:06:30:cb:8b: 0d:40:88:fb:3b:41:d2:ba:03:11:77:19:a6:be:ec: 0c:a2:43:55:f8:b7:7a:a7:60:5f:cb:a8:cb:0a:66: 9c:b8:3e:a0:d1:91:0e:ed:98:39:6b:f6:1e:6d:35: ae:d1:c9:db:fd:c8:9b:77:98:5b:02:dc:55:29:6c: 7c:40:b0:74:e4:83:f8:a9:1f:cf:8c:78:1c:41:a2: dd:f0:c2:f2:1b:f4:f1:65:66:a4:3f:a5:39:f8:70: 45:37:e6:4a:f1:d3:a8:32:a0:50:dc:e7:4e:25:03: fb:d5:67:79:8f:45:1f:59:be:10:48:11:38:e4:4a: 6a:13:57:53:2d:dc:24:a6:7d:f0:15:9d:24:d7:52: 19:3c:57:b3:2b:fd:da:7f:49:94:f4:e8:f6:0b:91: be:e2:0a:11:a6:f8:27:21:d5:af:cd:20:bd:56:b4: 0a:55:23:91:d2:fd:7f:39:54:38:54:e2:c5:85:68: 2a:d0:c2:2b:65:9b:d9:11:50:f5:19:a0:61:fe:be: bd:df:47:4b:b1:7c:0c:39:8c:16:39:f6:4c:f2:c5: ed:32:3d:34:00:8a:5b:83:94:99:9e:87:e9:e0:81: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E7:50:8E:A9:A4:01:DA:74:C7:BE:AC:B3:12:4F:4E:E4:C0:F8:9E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140481.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.76.0/23 IPv6: 2406:55c0::/32 Signature Algorithm: sha256WithRSAEncryption 96:33:bc:fe:7d:c2:39:0b:7f:27:f9:88:4f:bb:f4:e5:5a:92: 76:31:df:8a:6c:37:22:73:41:62:0c:98:4a:32:ab:ff:c5:60: 86:2b:45:d3:f7:c2:f4:22:28:c4:aa:52:9e:37:97:97:24:b6: ed:57:df:c6:47:7e:c8:0e:ea:5f:7e:59:47:1e:6e:4c:81:c1: de:65:47:72:81:48:a2:f7:0b:a0:45:b8:9f:de:28:eb:23:08: 0a:26:37:0d:42:db:a1:b8:a2:ec:c8:c3:a4:59:7e:fe:f8:06: 96:81:16:ee:15:b2:48:fc:8a:d0:ac:90:31:83:2d:b1:f9:35: bf:ea:f2:76:85:7e:62:fb:d7:10:ee:ee:11:38:5d:00:2d:a8: 15:1c:00:b4:f7:fe:84:17:62:09:fd:a1:f8:a5:1e:bd:8f:67: 8b:6b:16:09:85:dd:8e:22:a1:c3:fb:e7:fe:ff:10:89:96:95: 38:34:4e:df:63:a8:1a:73:07:11:d9:33:65:54:2a:8a:ff:c9: db:b3:65:57:e8:99:6c:16:9a:a2:be:a8:76:76:3f:31:06:a0: de:94:40:25:c2:29:6d:45:f4:6b:59:c2:f9:fe:7b:a0:4f:d9: f5:81:d0:85:e3:b0:2d:e1:09:7b:c6:7a:0b:69:8f:91:48:91: 1f:a3:81:db -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUUpvYZF6Lz4x58XktI8XEKy9TNyswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEwMTA2NTUwMFoX DTI1MTAzMTA3MDAwMFowMzExMC8GA1UEAxMoQzZFNzUwOEVBOUE0MDFEQTc0QzdC RUFDQjMxMjRGNEVFNEMwRjg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5CqE2jhn8bA3SNkHPRra757bqZop2KZqgGMMuLDUCI+ztB0roDEXcZpr7s DKJDVfi3eqdgX8uoywpmnLg+oNGRDu2YOWv2Hm01rtHJ2/3Im3eYWwLcVSlsfECw dOSD+Kkfz4x4HEGi3fDC8hv08WVmpD+lOfhwRTfmSvHTqDKgUNznTiUD+9VneY9F H1m+EEgROORKahNXUy3cJKZ98BWdJNdSGTxXsyv92n9JlPTo9guRvuIKEab4JyHV r80gvVa0ClUjkdL9fzlUOFTixYVoKtDCK2Wb2RFQ9RmgYf6+vd9HS7F8DDmMFjn2 TPLF7TI9NACKW4OUmZ6H6eCByXcCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBTG51CO qaQB2nTHvqyzEk9O5MD4njAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDQ4MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWeaTDANBAIAAjAHAwUAJAZVwDANBgkqhkiG9w0BAQsFAAOCAQEA ljO8/n3COQt/J/mIT7v05VqSdjHfimw3InNBYgyYSjKr/8VghitF0/fC9CIoxKpS njeXlyS27Vffxkd+yA7qX35ZRx5uTIHB3mVHcoFIovcLoEW4n94o6yMICiY3DULb obii7MjDpFl+/vgGloEW7hWySPyK0KyQMYMtsfk1v+rydoV+YvvXEO7uEThdAC2o FRwAtPf+hBdiCf2h+KUevY9ni2sWCYXdjiKhw/vn/v8QiZaVODRO32OoGnMHEdkz ZVQqiv/J27NlV+iZbBaaor6odnY/MQag3pRAJcIpbUX0a1nC+f57oE/Z9YHQheOw LeEJe8Z6C2mPkUiRH6OB2w== -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:09 2025 by rpki-client