$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141082.roa File: AS141082.roa (raw, json) Hash identifier: ajzbehwGSaZla9eUTTjNxqWFPhhfXcln2ZbRm9/IqVA= Subject key identifier: 8B:C3:21:88:52:F3:D6:A3:26:3B:1C:49:14:5B:E8:38:AF:8E:D9:FE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 431FD21D19FABCE66F7DCF4F03AA3AB1D61CE617 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141082.roa Signing time: Tue 03 Oct 2023 06:23:50 +0000 ROA not before: Tue 03 Oct 2023 06:18:50 +0000 ROA not after: Tue 01 Oct 2024 06:23:50 +0000 asID: 141082 IP address blocks: 103.251.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1f:d2:1d:19:fa:bc:e6:6f:7d:cf:4f:03:aa:3a:b1:d6:1c:e6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 3 06:18:50 2023 GMT Not After : Oct 1 06:23:50 2024 GMT Subject: CN=8BC3218852F3D6A3263B1C49145BE838AF8ED9FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:ba:10:4d:85:9b:82:e9:ce:d1:e8:23:d7: f2:b1:e5:c8:61:5f:65:31:6a:4a:b7:e5:a1:97:d6: 40:0e:40:71:72:b4:4c:88:6e:f5:84:39:23:cf:75: ef:66:a9:e8:09:d2:7d:36:2f:de:1d:91:3f:e9:c8: 7c:29:83:3a:7a:83:69:35:31:60:0f:0a:e8:75:00: 3b:d4:7d:a2:30:f9:87:2e:eb:a0:15:33:cb:77:f6: 67:75:35:ef:e0:57:f5:c3:ba:a3:5f:e4:ea:3d:8c: 58:68:5b:09:2e:e7:70:bd:ce:7f:f6:c0:a6:67:d0: 27:57:08:95:2b:a6:52:76:24:53:e3:3a:36:13:50: fc:9d:a8:78:31:6a:26:1f:15:f8:6c:d6:5e:a3:c3: c2:5c:9c:79:a6:2e:80:8a:3d:60:08:58:44:3d:f8: 52:12:84:93:0f:b7:36:64:80:e4:52:c9:66:fd:6f: ea:c5:bc:24:0b:19:2c:94:9e:6a:f2:39:6b:07:2b: 80:48:cd:28:49:d5:28:cb:2c:e5:65:8c:54:ca:95: 96:98:b8:a3:76:4e:0c:00:64:38:ee:09:10:3e:eb: f2:c6:9b:7c:46:be:37:74:3e:94:58:9b:39:67:ac: 0e:19:1d:61:80:38:86:17:fd:55:56:f4:a4:35:d5: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C3:21:88:52:F3:D6:A3:26:3B:1C:49:14:5B:E8:38:AF:8E:D9:FE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141082.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.251.8.0/23 Signature Algorithm: sha256WithRSAEncryption 58:30:44:15:4a:d9:2a:75:83:d1:f5:c2:0c:be:02:c8:c4:b8: b6:b0:3e:02:03:21:81:fc:fa:f0:d1:00:01:31:28:70:52:68: c2:9c:46:92:be:b0:e6:c4:0c:19:2b:90:f7:ab:f6:f3:ee:b3: 74:d6:89:e1:64:a9:ca:28:71:18:c9:b7:40:8e:bf:eb:b1:b1: 7c:33:4a:91:cb:82:5d:aa:63:56:da:9f:5f:a3:23:62:40:03: e3:fc:93:6c:e6:fa:63:f5:c0:c3:b4:eb:db:3e:41:f6:0e:c7: bc:3e:36:ce:b3:a9:6b:90:4a:38:a9:29:b3:11:95:40:eb:c3: e7:53:f6:5f:0c:49:92:6c:eb:55:09:76:7f:d9:4b:94:87:bf: 77:60:93:4c:ad:11:5a:a0:44:7b:66:6d:5c:d7:2c:7b:90:cd: d4:fb:20:d3:01:19:8e:bd:61:ae:5e:ea:94:25:d4:e0:41:de: 19:fe:cc:da:73:e9:a9:14:ea:85:ed:f8:d4:ca:83:74:34:4d: 2f:a6:43:08:92:65:08:c9:19:3f:73:b7:1d:0e:2f:da:74:76: 99:85:92:3b:69:df:00:d1:04:a5:fc:ff:f2:87:e5:fd:3e:a3: b5:a2:8b:c4:96:7f:78:58:ef:b7:2e:c0:09:eb:fc:e5:ce:de: 68:a4:40:b7 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQx/SHRn6vOZvfc9PA6o6sdYc5hcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAwMzA2MTg1MFoX DTI0MTAwMTA2MjM1MFowMzExMC8GA1UEAxMoOEJDMzIxODg1MkYzRDZBMzI2M0Ix QzQ5MTQ1QkU4MzhBRjhFRDlGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMzXuhBNhZuC6c7R6CPX8rHlyGFfZTFqSrfloZfWQA5AcXK0TIhu9YQ5I891 72ap6AnSfTYv3h2RP+nIfCmDOnqDaTUxYA8K6HUAO9R9ojD5hy7roBUzy3f2Z3U1 7+BX9cO6o1/k6j2MWGhbCS7ncL3Of/bApmfQJ1cIlSumUnYkU+M6NhNQ/J2oeDFq Jh8V+GzWXqPDwlyceaYugIo9YAhYRD34UhKEkw+3NmSA5FLJZv1v6sW8JAsZLJSe avI5awcrgEjNKEnVKMss5WWMVMqVlpi4o3ZODABkOO4JED7r8sabfEa+N3Q+lFib OWesDhkdYYA4hhf9VVb0pDXVfE0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSLwyGI UvPWoyY7HEkUW+g4r47Z/jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTA4Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWf7CDANBgkqhkiG9w0BAQsFAAOCAQEAWDBEFUrZKnWD0fXCDL4C yMS4trA+AgMhgfz68NEAATEocFJowpxGkr6w5sQMGSuQ96v28+6zdNaJ4WSpyihx GMm3QI6/67GxfDNKkcuCXapjVtqfX6MjYkAD4/yTbOb6Y/XAw7Tr2z5B9g7HvD42 zrOpa5BKOKkpsxGVQOvD51P2XwxJkmzrVQl2f9lLlIe/d2CTTK0RWqBEe2ZtXNcs e5DN1Psg0wEZjr1hrl7qlCXU4EHeGf7M2nPpqRTqhe341MqDdDRNL6ZDCJJlCMkZ P3O3HQ4v2nR2mYWSO2nfANEEpfz/8ofl/T6jtaKLxJZ/eFjvty7ACev85c7eaKRA tw== -----END CERTIFICATE-----Generated at Wed May 8 09:50:37 2024 by rpki-client on console-fra.rpki-client.org