$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141087.roa File: AS141087.roa (raw, json) Hash identifier: wtOwgrpYvLxGn/9Dfy/27MDzv2PhZNtSCcDkCwjjpqg= Subject key identifier: D3:99:4A:F8:89:93:34:D5:4D:B7:D4:46:85:A8:93:A3:65:DF:74:9C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3980454D533469B9734C66540851139D6AED75A2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141087.roa Signing time: Mon 25 Sep 2023 02:45:02 +0000 ROA not before: Mon 25 Sep 2023 02:40:02 +0000 ROA not after: Mon 23 Sep 2024 02:45:02 +0000 asID: 141087 IP address blocks: 103.127.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:80:45:4d:53:34:69:b9:73:4c:66:54:08:51:13:9d:6a:ed:75:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 25 02:40:02 2023 GMT Not After : Sep 23 02:45:02 2024 GMT Subject: CN=D3994AF8899334D54DB7D44685A893A365DF749C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:70:f2:8c:f5:cf:0a:bf:78:b2:c1:30:c0: b9:d0:bd:d8:2d:f3:b4:2d:50:90:ad:89:99:01:11: 2e:75:f3:aa:2a:2f:03:2b:b1:4e:2a:2c:10:84:d3: 9c:e6:ef:4a:03:a6:46:9b:ce:b1:f7:5b:bb:26:c3: b1:43:ad:6b:10:b3:d1:2c:81:ef:d9:d5:62:16:0f: 53:bf:47:a8:7d:bb:06:ae:52:73:a5:25:25:4d:52: fa:b2:40:d7:ce:5d:5e:78:63:76:d8:9b:fc:19:a8: a7:02:7f:0e:37:eb:c5:9f:20:c3:93:97:04:e4:70: 43:44:a1:ef:41:c1:0f:c1:e5:66:e2:4b:87:ce:1e: 77:66:c0:d2:cf:6d:26:1f:27:e9:de:ca:85:d8:7a: 5c:d0:fe:f9:2d:e1:34:6e:c0:12:d6:ca:a2:ce:43: 6f:2c:94:df:24:32:46:7c:11:79:55:46:2e:da:bc: 31:14:fd:db:55:9e:ac:4c:12:3e:a4:e7:34:91:33: 9d:a0:c6:5a:b9:7d:c7:e7:34:c6:57:1d:1a:5b:60: 38:1f:dc:75:ff:b9:7f:af:c5:e4:f2:e1:05:7f:52: a7:c3:a9:54:32:d1:c2:d8:5f:df:7e:e5:63:ce:29: 55:18:42:be:a9:82:ea:16:e3:4c:f8:ec:4f:03:6e: ef:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:99:4A:F8:89:93:34:D5:4D:B7:D4:46:85:A8:93:A3:65:DF:74:9C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141087.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.221.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:f0:71:8a:f3:08:67:e4:56:69:a4:fd:33:80:4e:41:e3:0c: 54:c8:9e:a0:da:a2:c3:e9:ae:2d:14:e8:ac:be:35:12:a7:99: 2d:88:81:8b:bc:1e:6a:db:f4:9d:57:b6:b1:ff:c2:6c:8d:3e: 1c:60:a9:e1:bc:80:69:59:1e:89:23:08:6c:d5:d7:8b:ee:da: 13:9c:7d:a7:c1:65:7d:21:73:97:e8:64:02:00:b2:a9:ea:e5: 87:e8:4c:6b:03:04:a1:d2:5d:88:27:04:c5:3d:aa:d3:83:cb: e9:83:85:55:cf:54:25:7c:77:49:45:28:92:be:e4:7c:3b:87: 17:a7:3c:fa:17:07:4a:e9:6c:e8:0b:b3:1d:90:55:f6:6e:7c: d5:5b:f7:04:d7:fc:c9:92:f2:0c:2a:44:f5:fd:f9:c8:1e:5f: 82:72:9a:4d:47:3f:de:36:75:84:04:7d:6f:74:62:df:0a:0b: 7a:ea:f0:f3:4d:31:2b:6a:ca:fe:34:83:ee:f2:3b:9e:4a:87: a9:4a:c5:b8:43:b4:f2:2e:e7:c1:7c:0f:13:e4:3f:4a:22:ac: 8e:c8:46:65:65:88:e6:97:ff:c1:2b:79:59:5b:03:01:3d:0c: 21:4c:3b:e1:93:95:5e:d4:57:14:50:04:0d:ec:a2:9b:56:9b: 04:8b:8c:35 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUOYBFTVM0ablzTGZUCFETnWrtdaIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkyNTAyNDAwMloX DTI0MDkyMzAyNDUwMlowMzExMC8GA1UEAxMoRDM5OTRBRjg4OTkzMzRENTREQjdE NDQ2ODVBODkzQTM2NURGNzQ5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmacPKM9c8Kv3iywTDAudC92C3ztC1QkK2JmQERLnXzqiovAyuxTiosEITT nObvSgOmRpvOsfdbuybDsUOtaxCz0SyB79nVYhYPU79HqH27Bq5Sc6UlJU1S+rJA 185dXnhjdtib/BmopwJ/DjfrxZ8gw5OXBORwQ0Sh70HBD8HlZuJLh84ed2bA0s9t Jh8n6d7Khdh6XND++S3hNG7AEtbKos5DbyyU3yQyRnwReVVGLtq8MRT921WerEwS PqTnNJEznaDGWrl9x+c0xlcdGltgOB/cdf+5f6/F5PLhBX9Sp8OpVDLRwthf337l Y84pVRhCvqmC6hbjTPjsTwNu78kCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTTmUr4 iZM01U231EaFqJOjZd90nDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTA4Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGd/3TANBgkqhkiG9w0BAQsFAAOCAQEAm/BxivMIZ+RWaaT9M4BO QeMMVMieoNqiw+muLRTorL41EqeZLYiBi7weatv0nVe2sf/CbI0+HGCp4byAaVke iSMIbNXXi+7aE5x9p8FlfSFzl+hkAgCyqerlh+hMawMEodJdiCcExT2q04PL6YOF Vc9UJXx3SUUokr7kfDuHF6c8+hcHSuls6AuzHZBV9m581Vv3BNf8yZLyDCpE9f35 yB5fgnKaTUc/3jZ1hAR9b3Ri3woLeurw800xK2rK/jSD7vI7nkqHqUrFuEO08i7n wXwPE+Q/SiKsjshGZWWI5pf/wSt5WVsDAT0MIUw74ZOVXtRXFFAEDeyim1abBIuM NQ== -----END CERTIFICATE-----Generated at Wed May 8 21:02:22 2024 by rpki-client on console-fra.rpki-client.org