$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141087.roa File: AS141087.roa (raw, json) Hash identifier: CAIHPywqPiiw4OCUGc/Syf/yOfqcGRWBwNcRJuvboIM= Subject key identifier: 61:B0:FF:20:3E:40:F3:39:7A:BA:44:55:12:EA:DF:1E:EB:6E:10:17 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E0AED2E8295372B04E4F1DF5BE35649486D9C1A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141087.roa Signing time: Mon 26 Aug 2024 03:00:00 +0000 ROA not before: Mon 26 Aug 2024 02:55:00 +0000 ROA not after: Mon 25 Aug 2025 03:00:00 +0000 asID: 141087 IP address blocks: 103.127.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0a:ed:2e:82:95:37:2b:04:e4:f1:df:5b:e3:56:49:48:6d:9c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 26 02:55:00 2024 GMT Not After : Aug 25 03:00:00 2025 GMT Subject: CN=61B0FF203E40F3397ABA445512EADF1EEB6E1017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e1:76:f9:0e:0f:24:fd:1d:d0:09:86:02:08: 12:cc:08:e0:7f:0d:a0:b7:93:aa:8d:46:fb:5a:c1: 34:55:13:d6:56:4c:df:a8:52:85:2a:92:f8:ba:94: 42:5a:1e:d3:ad:f6:71:0e:0a:4b:cb:f8:d8:e6:00: 58:2a:f6:43:5f:76:d7:a2:b3:85:c7:5e:9a:f9:dd: 82:e9:ca:e3:11:a3:c8:29:20:b1:4f:e1:c1:af:ed: 1b:1c:3f:60:85:f2:10:68:f6:a5:dd:44:f6:d9:69: cf:11:78:a4:58:16:e8:9a:b5:05:2b:5c:dd:f3:22: 71:ad:7e:b2:97:82:6b:fa:89:88:38:1f:80:19:a3: c0:d7:28:3d:90:24:cc:c3:48:56:45:3e:d5:b5:1b: c2:36:05:bf:52:9e:2a:26:2f:72:6f:6c:80:c6:81: fb:39:8a:57:b1:a3:ea:68:32:9b:b9:88:50:27:9f: 1e:98:7c:37:3a:c9:84:57:25:82:9b:66:69:90:f8: c1:5b:18:ab:5e:8f:e4:08:82:5b:fd:bb:05:e2:44: 6d:de:96:9d:ee:52:9e:31:86:f2:21:f2:86:6b:21: 93:73:43:34:22:62:bc:78:82:8c:fb:31:14:11:c8: a2:d6:15:4e:9e:c8:33:06:01:3f:8c:f0:03:db:6e: 05:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B0:FF:20:3E:40:F3:39:7A:BA:44:55:12:EA:DF:1E:EB:6E:10:17 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141087.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.221.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:f6:01:9b:03:6d:c0:27:be:8e:a2:77:56:fe:41:c6:2b:7c: 59:98:ba:f4:ff:11:35:24:03:c5:d7:cf:77:81:30:c3:8c:a4: 86:bf:ec:a0:6c:c5:77:e3:d8:0c:57:b2:d8:23:c8:98:80:58: d7:ea:eb:35:bf:3c:90:e2:ec:48:9b:ca:18:c6:27:75:fd:43: 43:5b:af:dd:81:5c:11:e1:fb:7f:ce:3d:8e:1f:c9:e2:33:98: 14:7b:c0:46:82:85:9d:a0:4b:d4:b8:e7:ac:0b:61:ed:7c:a6: 10:a5:dc:e1:34:8c:d0:be:45:ac:ae:75:ee:37:3f:f7:af:10: b0:ff:57:f0:75:dd:38:29:2a:a0:ca:8a:ef:a5:87:64:03:79: f0:9d:ac:4d:8a:4a:19:64:e9:d3:4f:56:29:9f:ab:ad:2e:ac: 02:0b:72:e1:07:0b:6a:32:9b:72:fb:79:3f:75:4a:97:bd:0b: 46:44:ee:e1:c6:c9:a1:15:a5:a5:53:45:05:12:b3:0a:d6:53: 18:e9:40:ab:e5:39:29:68:d7:68:a9:31:d1:e6:b3:01:5e:82: ce:aa:f9:ca:5c:8b:85:24:a4:2b:9a:20:6b:57:4e:7c:ad:a2: e7:1b:52:2e:0f:2a:73:fe:58:ed:f2:0c:95:3f:18:50:72:2b: f3:59:19:c7 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIULgrtLoKVNysE5PHfW+NWSUhtnBowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyNjAyNTUwMFoX DTI1MDgyNTAzMDAwMFowMzExMC8GA1UEAxMoNjFCMEZGMjAzRTQwRjMzOTdBQkE0 NDU1MTJFQURGMUVFQjZFMTAxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzhdvkODyT9HdAJhgIIEswI4H8NoLeTqo1G+1rBNFUT1lZM36hShSqS+LqU Qloe0632cQ4KS8v42OYAWCr2Q19216KzhcdemvndgunK4xGjyCkgsU/hwa/tGxw/ YIXyEGj2pd1E9tlpzxF4pFgW6Jq1BStc3fMica1+speCa/qJiDgfgBmjwNcoPZAk zMNIVkU+1bUbwjYFv1KeKiYvcm9sgMaB+zmKV7Gj6mgym7mIUCefHph8NzrJhFcl gptmaZD4wVsYq16P5AiCW/27BeJEbd6Wne5SnjGG8iHyhmshk3NDNCJivHiCjPsx FBHIotYVTp7IMwYBP4zwA9tuBcECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRhsP8g PkDzOXq6RFUS6t8e624QFzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTA4Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGd/3TANBgkqhkiG9w0BAQsFAAOCAQEAC/YBmwNtwCe+jqJ3Vv5B xit8WZi69P8RNSQDxdfPd4Eww4ykhr/soGzFd+PYDFey2CPImIBY1+rrNb88kOLs SJvKGMYndf1DQ1uv3YFcEeH7f849jh/J4jOYFHvARoKFnaBL1LjnrAth7XymEKXc 4TSM0L5FrK517jc/968QsP9X8HXdOCkqoMqK76WHZAN58J2sTYpKGWTp009WKZ+r rS6sAgty4QcLajKbcvt5P3VKl70LRkTu4cbJoRWlpVNFBRKzCtZTGOlAq+U5KWjX aKkx0eazAV6Czqr5ylyLhSSkK5oga1dOfK2i5xtSLg8qc/5Y7fIMlT8YUHIr81kZ xw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:25 2024 by rpki-client on console-fra.rpki-client.org