$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141592.roa File: AS141592.roa (raw, json) Hash identifier: IhLVoScfggHd/wjGisiX/MT0SKDEWpHG2jy9cXYGCPI= Subject key identifier: EF:EA:44:32:87:4E:4A:E6:EA:FE:B6:64:C1:51:68:AF:62:55:AF:94 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5564A011B73D9108F08C80CD578D4796D012794E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141592.roa Signing time: Tue 09 Jan 2024 04:00:16 +0000 ROA not before: Tue 09 Jan 2024 03:55:16 +0000 ROA not after: Tue 07 Jan 2025 04:00:16 +0000 asID: 141592 IP address blocks: 103.160.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 09:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:64:a0:11:b7:3d:91:08:f0:8c:80:cd:57:8d:47:96:d0:12:79:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:16 2024 GMT Not After : Jan 7 04:00:16 2025 GMT Subject: CN=EFEA4432874E4AE6EAFEB664C15168AF6255AF94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2d:19:49:d7:a1:20:3c:a6:33:f8:fc:4b:0f: 02:72:cc:89:ae:40:19:fb:d9:ce:cd:82:a4:a1:2c: 64:ee:61:b9:6a:58:45:c9:15:63:b6:e0:73:c0:f8: eb:0f:e6:d7:69:a6:de:87:6e:70:04:bd:75:98:3d: 73:ec:e0:53:8d:bd:80:ce:86:e5:61:b8:83:62:c3: cb:68:b7:05:f8:82:81:a8:5d:9e:7d:df:19:6b:53: 7d:4b:8c:c8:df:37:46:8d:60:4c:6e:23:74:30:13: 19:0b:9a:2e:a1:a3:de:0a:d4:1c:64:54:f7:c5:af: ce:95:2b:40:dd:29:47:9f:36:cf:30:fd:d6:df:71: f2:2f:fb:43:eb:1e:d1:51:88:84:b4:98:ab:66:47: b5:ef:79:48:51:b1:55:00:0f:e5:38:7e:05:bf:b9: d9:30:15:1a:21:d4:ab:55:8e:3e:33:96:c3:78:15: d0:77:7c:9a:db:92:ba:c7:3b:38:c7:15:41:58:1f: e0:74:d6:60:25:65:ea:82:23:37:08:7d:59:22:6b: 38:3d:b2:8b:af:96:cc:e0:f9:7a:dc:53:ab:8e:23: be:b4:95:51:46:33:db:9c:10:8d:aa:0b:45:7f:2a: 6c:b8:9a:f3:bb:9d:1d:04:e1:34:1c:d1:e8:c0:40: 96:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EA:44:32:87:4E:4A:E6:EA:FE:B6:64:C1:51:68:AF:62:55:AF:94 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141592.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.178.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:b3:51:ec:40:8e:f2:df:43:5a:03:d8:a6:a2:5d:55:f6:1a: e2:36:27:23:e4:8b:3f:ad:a9:e8:41:6a:0d:75:1c:6e:1e:5a: 20:22:c3:e4:74:d3:0c:ae:4a:55:70:70:a0:c5:3c:c8:e9:f8: ba:54:cc:4b:57:98:39:9f:6a:45:35:3f:42:d7:68:71:6b:89: 77:c5:3e:3f:00:a7:ee:33:75:c1:3d:f6:b1:de:6f:b3:cf:10: e0:a5:08:a7:f8:f3:ed:7b:d4:eb:35:3b:f5:ef:36:cb:e4:4f: 2a:d6:06:5e:a1:6b:87:d2:47:ac:40:cb:3e:94:52:6b:1a:ac: 3e:58:3c:48:f7:48:95:d7:cb:2d:95:4b:af:df:7e:ff:80:e7: 17:4d:82:c3:ed:50:76:28:bf:ac:44:f1:df:b8:c8:93:a1:00: e0:3a:97:3e:30:65:3f:99:34:75:bf:aa:b6:29:5d:0f:b0:7d: 2a:70:74:5a:70:4c:0f:4c:3a:8a:f3:06:6c:52:6b:5a:7c:e6: 48:8a:8c:ad:d1:ee:1f:36:b4:75:8a:bd:d4:46:73:5a:39:3a: a5:b6:e8:10:e9:b0:ef:53:59:43:67:94:6a:86:8b:c2:af:83: db:bd:28:f7:75:d4:ef:ae:36:2a:94:b6:03:96:c1:37:c8:4e: c3:97:6d:97 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUVWSgEbc9kQjwjIDNV41HltASeU4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxNloX DTI1MDEwNzA0MDAxNlowMzExMC8GA1UEAxMoRUZFQTQ0MzI4NzRFNEFFNkVBRkVC NjY0QzE1MTY4QUY2MjU1QUY5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMctGUnXoSA8pjP4/EsPAnLMia5AGfvZzs2CpKEsZO5huWpYRckVY7bgc8D4 6w/m12mm3oducAS9dZg9c+zgU429gM6G5WG4g2LDy2i3BfiCgahdnn3fGWtTfUuM yN83Ro1gTG4jdDATGQuaLqGj3grUHGRU98WvzpUrQN0pR582zzD91t9x8i/7Q+se 0VGIhLSYq2ZHte95SFGxVQAP5Th+Bb+52TAVGiHUq1WOPjOWw3gV0Hd8mtuSusc7 OMcVQVgf4HTWYCVl6oIjNwh9WSJrOD2yi6+WzOD5etxTq44jvrSVUUYz25wQjaoL RX8qbLia87udHQThNBzR6MBAlssCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTv6kQy h05K5ur+tmTBUWivYlWvlDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTU5Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWegsjANBgkqhkiG9w0BAQsFAAOCAQEASrNR7ECO8t9DWgPYpqJd VfYa4jYnI+SLP62p6EFqDXUcbh5aICLD5HTTDK5KVXBwoMU8yOn4ulTMS1eYOZ9q RTU/QtdocWuJd8U+PwCn7jN1wT32sd5vs88Q4KUIp/jz7XvU6zU79e82y+RPKtYG XqFrh9JHrEDLPpRSaxqsPlg8SPdIldfLLZVLr99+/4DnF02Cw+1Qdii/rETx37jI k6EA4DqXPjBlP5k0db+qtildD7B9KnB0WnBMD0w6ivMGbFJrWnzmSIqMrdHuHza0 dYq91EZzWjk6pbboEOmw71NZQ2eUaoaLwq+D270o93XU7642KpS2A5bBN8hOw5dt lw== -----END CERTIFICATE-----Generated at Thu May 2 05:25:40 2024 by rpki-client on console-fra.rpki-client.org