$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141082.roa File: AS141082.roa (raw, json) Hash identifier: Ue7VMS9XkmARXetOewQGw8J1z84T0YJVt/DOwj05ifA= Subject key identifier: 3B:D4:1B:83:DC:E2:57:AA:DD:90:77:6C:D3:2C:9E:21:0E:52:CD:27 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7F618F31139CFE59C45E212FFECEC0BC4A7F6EE9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141082.roa Signing time: Tue 03 Sep 2024 07:00:00 +0000 ROA not before: Tue 03 Sep 2024 06:55:00 +0000 ROA not after: Tue 02 Sep 2025 07:00:00 +0000 asID: 141082 IP address blocks: 103.251.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:61:8f:31:13:9c:fe:59:c4:5e:21:2f:fe:ce:c0:bc:4a:7f:6e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 3 06:55:00 2024 GMT Not After : Sep 2 07:00:00 2025 GMT Subject: CN=3BD41B83DCE257AADD90776CD32C9E210E52CD27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1b:5d:6d:c7:dd:73:75:33:62:39:16:4e:6a: 0d:4e:f8:87:ca:40:06:dc:f4:84:9e:3f:35:29:be: 22:5d:df:51:cf:3e:45:d7:b3:5b:15:00:0d:c5:ec: 34:3f:5c:17:ea:f2:4a:bd:9a:fb:c3:5a:32:ad:11: c2:b9:ec:0b:3f:ba:39:3f:1a:10:f1:24:c1:d4:22: 8a:cd:94:0c:eb:5c:78:89:de:4b:da:48:2b:81:4f: 81:9f:86:4c:b3:67:0f:8b:d5:84:1e:cf:66:a3:bd: 9f:a5:e2:7d:42:23:45:1a:40:fe:0d:3a:cb:d5:35: 2c:65:76:f5:0b:d5:d6:e4:da:8a:54:32:69:3c:dc: 38:81:6e:89:74:6d:ef:17:1b:f1:a3:bf:61:5d:f8: a5:10:7d:58:3e:e4:b9:60:8c:8d:c1:d1:61:00:8c: 03:6d:e3:b5:39:d9:2c:60:7a:62:a6:fc:1c:11:5f: d0:33:84:49:0b:5a:e9:74:bb:63:7b:e4:ba:a2:56: 12:b7:43:65:e8:ee:e8:dc:72:2a:ff:da:42:00:ec: a6:ad:66:76:e1:6c:fa:9f:10:e9:3c:2f:07:8b:f9: 31:07:63:ba:18:bf:41:cc:64:0e:54:52:78:2a:4c: bf:57:84:36:cc:4a:76:28:8f:f7:a2:c6:69:09:06: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D4:1B:83:DC:E2:57:AA:DD:90:77:6C:D3:2C:9E:21:0E:52:CD:27 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141082.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.251.8.0/23 Signature Algorithm: sha256WithRSAEncryption 40:f5:2c:de:82:54:2f:67:76:44:ff:12:7e:11:21:9c:22:5a: 1d:59:d3:a9:47:34:55:12:85:4b:5a:a1:ad:57:cb:65:32:e8: 67:15:30:c6:82:53:60:39:a4:03:6e:37:72:37:34:7a:a8:30: 12:0a:1d:d6:80:e2:36:d8:25:4b:f7:15:43:95:c4:5b:c8:a3: 7c:6c:32:dc:aa:48:83:f7:9a:4d:af:f5:62:ca:29:5f:05:ba: 37:31:fe:d2:48:73:09:09:ae:d3:92:7e:b6:2c:d4:05:c1:b1: d1:dd:7f:e2:94:de:c2:b9:c6:c5:86:01:a5:a3:0f:14:74:bb: 5e:9e:e5:e1:da:e5:f2:b2:53:90:8f:c8:03:9e:de:a5:57:16: 75:68:4a:29:04:9e:e9:48:31:c0:18:22:af:d1:fa:27:c3:58: 3c:6a:62:ce:24:2b:b8:db:09:41:1c:0f:9a:13:95:bf:91:65: 6e:50:e9:7e:59:22:c9:91:29:8b:c8:c3:78:cf:83:37:af:0d: 77:a0:c8:0e:00:98:2c:f1:83:e1:76:4e:ef:49:a7:f7:c9:24: 62:c3:ea:05:3b:bb:ad:2c:47:09:ee:ee:df:db:d4:c9:a9:38: e1:29:ef:83:f9:7f:a6:8b:cc:46:59:1c:fb:f5:57:16:f8:be: 82:95:e1:08 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUf2GPMROc/lnEXiEv/s7AvEp/bukwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkwMzA2NTUwMFoX DTI1MDkwMjA3MDAwMFowMzExMC8GA1UEAxMoM0JENDFCODNEQ0UyNTdBQUREOTA3 NzZDRDMyQzlFMjEwRTUyQ0QyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOYbXW3H3XN1M2I5Fk5qDU74h8pABtz0hJ4/NSm+Il3fUc8+RdezWxUADcXs ND9cF+rySr2a+8NaMq0RwrnsCz+6OT8aEPEkwdQiis2UDOtceIneS9pIK4FPgZ+G TLNnD4vVhB7PZqO9n6XifUIjRRpA/g06y9U1LGV29QvV1uTailQyaTzcOIFuiXRt 7xcb8aO/YV34pRB9WD7kuWCMjcHRYQCMA23jtTnZLGB6Yqb8HBFf0DOESQta6XS7 Y3vkuqJWErdDZeju6NxyKv/aQgDspq1mduFs+p8Q6TwvB4v5MQdjuhi/QcxkDlRS eCpMv1eENsxKdiiP96LGaQkG2cECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ71BuD 3OJXqt2Qd2zTLJ4hDlLNJzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTA4Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWf7CDANBgkqhkiG9w0BAQsFAAOCAQEAQPUs3oJUL2d2RP8SfhEh nCJaHVnTqUc0VRKFS1qhrVfLZTLoZxUwxoJTYDmkA243cjc0eqgwEgod1oDiNtgl S/cVQ5XEW8ijfGwy3KpIg/eaTa/1YsopXwW6NzH+0khzCQmu05J+tizUBcGx0d1/ 4pTewrnGxYYBpaMPFHS7Xp7l4drl8rJTkI/IA57epVcWdWhKKQSe6UgxwBgir9H6 J8NYPGpiziQruNsJQRwPmhOVv5FlblDpflkiyZEpi8jDeM+DN68Nd6DIDgCYLPGD 4XZO70mn98kkYsPqBTu7rSxHCe7u39vUyak44Snvg/l/povMRlkc+/VXFvi+gpXh CA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:47 2024 by rpki-client on console-ams.rpki-client.org