$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141120.roa File: AS141120.roa (raw, json) Hash identifier: Y1mOkxRvD52rXtswJbornq+rYhMrz3KEfhWOOYArZcQ= Subject key identifier: 0E:37:8A:B8:FD:8D:75:71:5F:64:69:3D:4D:CF:C7:02:C8:6F:3F:77 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 557E59AD9AE7756BE1AB8CBE143AFB966EEFC099 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141120.roa Signing time: Wed 26 Mar 2025 04:00:00 +0000 ROA not before: Wed 26 Mar 2025 03:55:00 +0000 ROA not after: Wed 25 Mar 2026 04:00:00 +0000 asID: 141120 IP address blocks: 103.157.146.0/24 maxlen: 24 103.189.164.0/24 maxlen: 24 2406:a4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7e:59:ad:9a:e7:75:6b:e1:ab:8c:be:14:3a:fb:96:6e:ef:c0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 26 03:55:00 2025 GMT Not After : Mar 25 04:00:00 2026 GMT Subject: CN=0E378AB8FD8D75715F64693D4DCFC702C86F3F77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:c5:e2:c7:6a:a0:11:ea:73:45:bf:a3:17: 50:9c:aa:99:ae:e4:ce:a7:76:b2:f5:94:31:1d:7c: 8a:53:ea:7f:6f:b9:c1:27:d9:c2:d0:c3:3f:cf:6f: 65:33:bb:c6:b0:0a:a5:05:77:dc:a2:06:71:28:94: 12:f5:cc:4d:b4:d7:79:b6:57:88:0f:6c:9f:72:3d: 87:67:30:ca:ba:32:54:ac:2e:ce:d7:1c:f1:1b:02: e5:8a:a8:09:2a:9b:c8:1b:85:0a:8c:c5:02:f4:41: 54:be:44:7c:34:c1:01:c4:b0:2d:09:64:02:01:9c: e3:52:ae:34:e7:a6:94:34:a4:34:64:23:26:2b:ff: cf:90:99:2b:a3:c1:9c:5f:f7:4e:09:73:86:2d:4f: e4:34:b1:c2:e1:e0:76:1d:5d:b7:2d:a1:ca:b9:db: 66:ee:74:76:c3:b7:01:15:55:71:ed:a2:87:55:25: 01:eb:b1:b1:9e:9d:bb:79:24:b7:d5:9d:0a:b9:c4: 8a:5b:6c:9d:ee:a1:eb:86:be:8d:24:c2:bc:a7:22: db:c1:f7:da:ae:e5:ac:5d:9a:56:d4:b1:9a:e7:24: 64:db:0f:39:3c:85:eb:ef:c4:ca:95:ad:a2:f1:7c: ec:91:a7:c1:f9:94:47:ca:37:eb:21:45:1a:b9:82: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:37:8A:B8:FD:8D:75:71:5F:64:69:3D:4D:CF:C7:02:C8:6F:3F:77 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141120.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.146.0/24 103.189.164.0/24 IPv6: 2406:a4c0::/32 Signature Algorithm: sha256WithRSAEncryption 7b:55:98:83:14:8d:40:72:bd:1f:7d:0b:93:7d:19:65:3e:a8: d9:50:a9:0f:fb:b7:1d:6d:8c:11:62:ae:f8:80:6b:80:31:7f: 3a:e8:e1:65:20:a1:31:ff:96:98:a0:d8:8a:68:f9:6f:ac:5d: c0:60:66:f4:3b:41:33:53:95:0c:01:0e:39:c3:fe:66:86:fb: 7d:59:2a:66:90:fe:11:bd:ba:43:93:97:de:c0:a4:4b:1b:6c: 2b:e9:b3:5c:90:75:6c:ed:dd:dd:fb:9e:2d:fb:f1:8f:f1:22: 42:94:fd:ce:8f:48:a9:19:3b:52:69:8e:77:e5:1a:58:cf:19: 35:b7:5e:22:4d:75:58:da:e4:57:a7:91:f9:93:2a:19:56:9e: 60:7c:b8:fe:dd:48:fa:f1:b6:50:1a:dc:18:03:06:8b:29:2f: 0e:b2:b6:4f:a5:dc:7e:9d:7e:46:cd:a9:4a:f8:4e:68:46:52: 36:fa:36:82:58:18:86:ee:f4:84:4a:7d:20:bb:12:cb:33:cd: 77:37:67:31:1e:49:19:2d:1a:20:2f:3e:02:4a:e0:89:63:b6: c9:0a:76:00:25:c7:64:44:30:94:17:0d:49:5c:6a:e9:b4:4c: b1:17:cf:18:21:8b:f8:6b:d7:63:01:70:ab:09:b4:f3:91:71: 18:b5:21:8e -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUVX5ZrZrndWvhq4y+FDr7lm7vwJkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyNjAzNTUwMFoX DTI2MDMyNTA0MDAwMFowMzExMC8GA1UEAxMoMEUzNzhBQjhGRDhENzU3MTVGNjQ2 OTNENERDRkM3MDJDODZGM0Y3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGyxeLHaqAR6nNFv6MXUJyqma7kzqd2svWUMR18ilPqf2+5wSfZwtDDP89v ZTO7xrAKpQV33KIGcSiUEvXMTbTXebZXiA9sn3I9h2cwyroyVKwuztcc8RsC5Yqo CSqbyBuFCozFAvRBVL5EfDTBAcSwLQlkAgGc41KuNOemlDSkNGQjJiv/z5CZK6PB nF/3Tglzhi1P5DSxwuHgdh1dty2hyrnbZu50dsO3ARVVce2ih1UlAeuxsZ6du3kk t9WdCrnEiltsne6h64a+jSTCvKci28H32q7lrF2aVtSxmuckZNsPOTyF6+/EypWt ovF87JGnwfmUR8o36yFFGrmCiUsCAwEAAaOCAeUwggHhMB0GA1UdDgQWBBQON4q4 /Y11cV9kaT1Nz8cCyG8/dzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTEyMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAGedkgMEAGe9pDANBAIAAjAHAwUAJAakwDANBgkqhkiG9w0BAQsF AAOCAQEAe1WYgxSNQHK9H30Lk30ZZT6o2VCpD/u3HW2MEWKu+IBrgDF/OujhZSCh Mf+WmKDYimj5b6xdwGBm9DtBM1OVDAEOOcP+Zob7fVkqZpD+Eb26Q5OX3sCkSxts K+mzXJB1bO3d3fueLfvxj/EiQpT9zo9IqRk7UmmOd+UaWM8ZNbdeIk11WNrkV6eR +ZMqGVaeYHy4/t1I+vG2UBrcGAMGiykvDrK2T6Xcfp1+Rs2pSvhOaEZSNvo2glgY hu70hEp9ILsSyzPNdzdnMR5JGS0aIC8+AkrgiWO2yQp2ACXHZEQwlBcNSVxq6bRM sRfPGCGL+GvXYwFwqwm085FxGLUhjg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:27:11 2025 by rpki-client