$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141596.roa File: AS141596.roa (raw, json) Hash identifier: bG1gtmedxivuoRdXafZXuJBSrmxLq5huhAq1FF+dK1U= Subject key identifier: 92:E9:16:3E:0E:58:F4:80:F2:5A:59:FF:F2:CA:22:B6:B8:58:A7:B7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 614AB7D0130A5A0FD25E81CCB274CC6D7E699CE1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141596.roa Signing time: Tue 10 Dec 2024 05:00:14 +0000 ROA not before: Tue 10 Dec 2024 04:55:14 +0000 ROA not after: Tue 09 Dec 2025 05:00:14 +0000 asID: 141596 IP address blocks: 2406:f940::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4a:b7:d0:13:0a:5a:0f:d2:5e:81:cc:b2:74:cc:6d:7e:69:9c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:14 2024 GMT Not After : Dec 9 05:00:14 2025 GMT Subject: CN=92E9163E0E58F480F25A59FFF2CA22B6B858A7B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:ce:b4:6d:fd:29:39:8d:55:7b:02:fa:4a: c5:1a:35:69:02:b5:b8:65:ad:23:f1:da:3e:29:b9: 80:30:6c:e3:f1:59:07:a8:a4:66:18:40:01:94:bd: 11:95:a2:4a:4e:cd:3a:e1:8e:3c:63:b2:6b:1c:33: 66:93:20:a7:ad:d1:c2:5d:01:39:c7:f8:1b:25:c9: e4:83:4e:92:09:62:15:98:9a:15:90:3e:e0:ed:29: f6:ae:53:cb:54:78:d3:16:dc:8a:04:1d:37:95:d2: 71:bf:40:1c:e7:a8:79:b0:63:92:42:e1:7b:fb:f2: 44:f2:3e:43:41:d6:9d:f4:27:2a:5f:c8:46:c0:f3: bc:75:6b:07:dd:57:1f:09:a5:6c:86:32:33:bd:99: 9a:80:dc:4c:10:d2:5b:71:66:be:cf:78:04:65:70: 6f:84:a3:58:09:7b:4f:f5:5d:1c:47:f1:b9:65:d1: 38:fd:8f:cb:a9:c1:a7:ea:59:52:83:14:50:1a:4c: 70:63:a6:61:22:3b:4e:35:cf:cc:8e:33:22:7b:19: 6c:5c:45:7a:de:28:d8:f3:7b:db:2e:fd:b3:b7:5c: 9d:a9:f1:2f:90:d0:65:9a:35:26:8f:81:97:36:d2: 6c:a8:e0:64:06:62:ab:9c:d9:61:c5:ed:0c:df:1c: 51:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E9:16:3E:0E:58:F4:80:F2:5A:59:FF:F2:CA:22:B6:B8:58:A7:B7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141596.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:f940::/32 Signature Algorithm: sha256WithRSAEncryption 34:02:f3:cc:87:36:ab:ca:e8:71:d6:d5:3e:61:8f:72:52:06: 59:15:f0:6d:95:a6:60:94:53:12:5a:e7:8c:99:44:2c:9d:12: ed:15:09:7f:87:d2:bc:db:61:af:17:4e:49:91:2c:f8:35:1e: e3:52:a7:5d:e0:0a:27:62:f7:fd:a0:88:b5:b3:59:74:23:0f: 0e:9c:86:89:cb:6c:95:1b:7d:f3:7e:e5:3e:6b:3c:54:98:98: 29:85:d4:85:42:41:7a:ae:0e:5b:a1:b5:e7:ce:f1:61:d4:7f: 4e:bb:0c:a8:85:de:5a:02:59:c7:71:63:33:73:4a:95:9d:57: 86:11:c4:73:2d:c4:fd:21:f6:4d:eb:8d:10:21:b7:88:5b:35: ed:73:eb:03:94:77:af:0f:9e:ba:07:cb:6b:6d:7b:61:a3:89: f9:e1:d0:66:4a:f8:74:71:f5:44:2f:ce:ad:87:98:20:91:39: 76:f7:b0:56:8f:ec:dc:79:c2:60:78:95:96:bd:38:ac:ee:76: 73:17:43:67:fe:a5:40:27:23:38:f7:93:e3:13:dc:dc:c8:c1: c1:e8:ef:1b:2d:65:a7:e7:64:df:00:4e:ef:46:84:52:b3:07: 53:03:74:1c:53:7f:4f:5c:3b:92:f3:aa:f8:6e:f7:ec:54:66: dd:b8:a7:44 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUYUq30BMKWg/SXoHMsnTMbX5pnOEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxNFoX DTI1MTIwOTA1MDAxNFowMzExMC8GA1UEAxMoOTJFOTE2M0UwRTU4RjQ4MEYyNUE1 OUZGRjJDQTIyQjZCODU4QTdCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMR0zrRt/Sk5jVV7AvpKxRo1aQK1uGWtI/HaPim5gDBs4/FZB6ikZhhAAZS9 EZWiSk7NOuGOPGOyaxwzZpMgp63Rwl0BOcf4GyXJ5INOkgliFZiaFZA+4O0p9q5T y1R40xbcigQdN5XScb9AHOeoebBjkkLhe/vyRPI+Q0HWnfQnKl/IRsDzvHVrB91X HwmlbIYyM72ZmoDcTBDSW3Fmvs94BGVwb4SjWAl7T/VdHEfxuWXROP2Py6nBp+pZ UoMUUBpMcGOmYSI7TjXPzI4zInsZbFxFet4o2PN72y79s7dcnanxL5DQZZo1Jo+B lzbSbKjgZAZiq5zZYcXtDN8cUTsCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBSS6RY+ Dlj0gPJaWf/yyiK2uFintzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTU5Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQG+UAwDQYJKoZIhvcNAQELBQADggEBADQC88yHNqvK6HHW1T5h j3JSBlkV8G2VpmCUUxJa54yZRCydEu0VCX+H0rzbYa8XTkmRLPg1HuNSp13gCidi 9/2giLWzWXQjDw6chonLbJUbffN+5T5rPFSYmCmF1IVCQXquDluhtefO8WHUf067 DKiF3loCWcdxYzNzSpWdV4YRxHMtxP0h9k3rjRAht4hbNe1z6wOUd68PnroHy2tt e2Gjifnh0GZK+HRx9UQvzq2HmCCROXb3sFaP7Nx5wmB4lZa9OKzudnMXQ2f+pUAn Izj3k+MT3NzIwcHo7xstZafnZN8ATu9GhFKzB1MDdBxTf09cO5Lzqvhu9+xUZt24 p0Q= -----END CERTIFICATE-----Generated at Sun Feb 16 20:42:11 2025 by rpki-client