$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141076.roa File: AS141076.roa (raw, json) Hash identifier: +YyMg8N/b05NVTA9AGVaxK/nAW/LuGA8vjabdUbay/0= Subject key identifier: 57:C8:E3:21:2D:48:A9:21:C2:A4:7B:9B:53:0C:60:2D:03:CD:D8:7A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 24CF7DE8D420751E27E78B97DA968E107D5FD261 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141076.roa Signing time: Tue 10 Dec 2024 05:00:20 +0000 ROA not before: Tue 10 Dec 2024 04:55:20 +0000 ROA not after: Tue 09 Dec 2025 05:00:20 +0000 asID: 141076 IP address blocks: 103.155.221.0/24 maxlen: 24 103.165.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:cf:7d:e8:d4:20:75:1e:27:e7:8b:97:da:96:8e:10:7d:5f:d2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:20 2024 GMT Not After : Dec 9 05:00:20 2025 GMT Subject: CN=57C8E3212D48A921C2A47B9B530C602D03CDD87A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:c2:b3:f8:68:f8:7a:cd:ce:81:8f:de:bb: 37:c3:f7:4c:fd:6a:0b:5f:3e:41:ef:11:ee:14:23: c7:5d:55:04:a3:84:bc:ab:3f:45:29:5d:21:12:04: d0:f9:a2:c6:cc:bb:68:a7:82:97:a2:63:3c:e0:bf: 4c:12:42:60:4c:51:f3:de:ed:a8:de:86:ef:69:99: b9:dd:4c:89:ff:31:26:f9:44:17:64:49:9b:40:75: 70:ed:25:79:84:37:ae:9f:89:2e:cd:32:5d:83:41: 92:0c:20:65:95:42:da:26:76:eb:8e:a2:41:8c:b4: 2e:b4:0d:b4:68:7f:dd:54:82:bb:91:02:d5:44:3d: e7:5d:a1:ce:90:21:38:8b:35:96:b9:a4:ae:cd:2b: 20:95:64:53:72:9f:42:32:0e:03:0b:28:b0:4e:cd: 56:ab:56:ef:1f:d2:0c:ae:3e:fb:56:4b:7a:84:91: 0d:01:a6:a5:3a:34:37:1f:22:dd:5e:19:da:16:ba: c1:46:5c:9d:b6:6e:46:ed:12:74:7c:61:6a:36:3b: 5b:ea:cd:a0:f1:bf:a0:bb:b0:ad:85:05:3f:c9:c9: 22:02:27:17:9e:a3:89:4a:c1:34:a3:8f:82:03:f7: da:0f:60:4d:90:18:ec:5b:de:d3:af:0e:15:b8:a7: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C8:E3:21:2D:48:A9:21:C2:A4:7B:9B:53:0C:60:2D:03:CD:D8:7A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141076.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.221.0/24 103.165.86.0/24 Signature Algorithm: sha256WithRSAEncryption 17:57:e0:c5:df:a5:b1:66:76:ee:6d:ed:ca:88:0a:c6:c3:14: 3e:5e:1c:2a:1a:26:bd:d7:ee:85:79:55:8b:42:ab:b4:3c:19: d0:71:91:66:5b:cf:d3:89:5d:5f:1c:86:82:2e:ea:e7:9b:b5: 73:ef:55:69:20:ad:4a:7f:1d:df:4a:58:dd:33:09:8b:80:bc: b2:a4:b3:35:a0:57:83:64:63:af:fd:41:6e:29:22:7e:ad:60: 99:2c:ff:66:67:38:c0:31:03:2a:e7:6b:0b:b5:ea:13:eb:fb: 29:db:42:a4:30:5f:c7:4e:ad:fb:f8:7b:5c:c1:e3:23:75:83: a9:f4:75:be:f4:64:e9:de:08:e5:4c:ee:73:96:00:47:5d:17: ab:3f:fc:e4:fc:91:fc:7d:c6:3a:e0:a9:48:33:fd:3d:8b:bd: 96:11:f2:ca:39:07:e7:97:04:a7:80:6c:6d:d3:9c:5a:08:21: 5c:10:ea:56:4e:09:6b:22:60:7f:c3:2d:cc:3a:79:a6:7b:e8: 88:28:b1:02:2e:3a:92:ec:e6:3b:28:b1:53:13:5f:a3:18:ff: 36:42:9b:5c:5a:12:b8:00:fb:10:14:5f:78:60:bf:27:ab:23: ba:93:e1:95:3b:47:66:95:04:1b:75:77:8f:5e:dd:3f:bb:79: 7f:69:60:fe -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUJM996NQgdR4n54uX2paOEH1f0mEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUyMFoX DTI1MTIwOTA1MDAyMFowMzExMC8GA1UEAxMoNTdDOEUzMjEyRDQ4QTkyMUMyQTQ3 QjlCNTMwQzYwMkQwM0NERDg3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5iwrP4aPh6zc6Bj967N8P3TP1qC18+Qe8R7hQjx11VBKOEvKs/RSldIRIE 0Pmixsy7aKeCl6JjPOC/TBJCYExR897tqN6G72mZud1Mif8xJvlEF2RJm0B1cO0l eYQ3rp+JLs0yXYNBkgwgZZVC2iZ2646iQYy0LrQNtGh/3VSCu5EC1UQ9512hzpAh OIs1lrmkrs0rIJVkU3KfQjIOAwsosE7NVqtW7x/SDK4++1ZLeoSRDQGmpTo0Nx8i 3V4Z2ha6wUZcnbZuRu0SdHxhajY7W+rNoPG/oLuwrYUFP8nJIgInF56jiUrBNKOP ggP32g9gTZAY7Fve068OFbinHvMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBRXyOMh LUipIcKke5tTDGAtA83YejAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTA3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGeb3QMEAGelVjANBgkqhkiG9w0BAQsFAAOCAQEAF1fgxd+lsWZ2 7m3tyogKxsMUPl4cKhomvdfuhXlVi0KrtDwZ0HGRZlvP04ldXxyGgi7q55u1c+9V aSCtSn8d30pY3TMJi4C8sqSzNaBXg2Rjr/1Bbikifq1gmSz/Zmc4wDEDKudrC7Xq E+v7KdtCpDBfx06t+/h7XMHjI3WDqfR1vvRk6d4I5Uzuc5YAR10Xqz/85PyR/H3G OuCpSDP9PYu9lhHyyjkH55cEp4BsbdOcWgghXBDqVk4JayJgf8MtzDp5pnvoiCix Ai46kuzmOyixUxNfoxj/NkKbXFoSuAD7EBRfeGC/J6sjupPhlTtHZpUEG3V3j17d P7t5f2lg/g== -----END CERTIFICATE-----Generated at Sat Apr 5 06:26:35 2025 by rpki-client