$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141596.roa File: AS141596.roa (raw, json) Hash identifier: aJ879vzCoT+Ksj7ptg31JhM//KtZolipHf8+HEa6yj8= Subject key identifier: C7:AB:43:A3:98:4D:93:A8:E1:A4:20:66:D8:7E:4B:D2:4C:57:71:A0 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5568CBDFBB957A1EE6F80A7932C71ABC7571BFFE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141596.roa Signing time: Tue 09 Jan 2024 04:00:18 +0000 ROA not before: Tue 09 Jan 2024 03:55:18 +0000 ROA not after: Tue 07 Jan 2025 04:00:18 +0000 asID: 141596 IP address blocks: 2406:f940::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:68:cb:df:bb:95:7a:1e:e6:f8:0a:79:32:c7:1a:bc:75:71:bf:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:18 2024 GMT Not After : Jan 7 04:00:18 2025 GMT Subject: CN=C7AB43A3984D93A8E1A42066D87E4BD24C5771A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:b9:fd:d9:59:44:ca:3e:73:58:09:55:a7: 5d:69:95:ef:f3:15:8a:ec:80:22:6e:49:d6:01:dc: 0c:67:3a:eb:21:25:6a:75:67:d7:3b:4c:76:f4:78: 1e:03:4a:e6:bb:3b:5a:08:12:90:da:75:48:bf:e8: 2c:1c:42:3b:35:13:da:f9:4a:b8:25:e9:11:79:97: 8b:2a:43:21:74:fd:bf:e2:ac:6d:e1:01:60:44:89: d3:ba:df:f6:76:bc:1d:6a:8a:6a:fa:6b:e4:93:5a: 53:49:2e:af:4a:cf:33:e5:51:ef:71:8f:c2:c5:be: 7c:fe:6a:d6:3b:28:91:a0:b6:25:69:bc:a5:61:45: 8c:e8:1d:2f:67:d7:da:87:1a:f3:ef:12:13:18:15: b2:2b:97:db:99:1d:23:85:97:d0:26:b4:fe:5c:41: ab:e9:0e:57:79:71:e3:c5:92:4f:3d:d6:8a:c2:1f: f4:76:26:3b:44:e9:93:ca:79:d6:21:7d:a1:b9:2c: 49:79:92:4f:db:c8:04:6e:76:a7:f6:ab:2d:e0:93: 8c:60:a7:df:bc:44:96:76:99:3b:3a:a2:7f:4d:c8: bf:81:4d:80:ce:0f:6f:89:43:c8:e4:7d:6e:af:2e: 22:36:d9:e3:f9:c2:59:f3:68:93:10:6f:74:dd:9c: f9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AB:43:A3:98:4D:93:A8:E1:A4:20:66:D8:7E:4B:D2:4C:57:71:A0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141596.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:f940::/32 Signature Algorithm: sha256WithRSAEncryption 10:db:f6:b0:3f:1e:38:9d:45:e7:9d:4f:4b:04:ef:9c:f0:52: 8c:7d:1c:f7:83:87:a0:b4:a8:0d:b0:a4:78:08:84:fd:c5:e0: 28:9a:9c:30:1e:e1:b1:11:57:f2:ff:14:68:49:a9:71:93:ad: 15:41:bc:be:ae:b6:62:4b:bc:78:94:75:c0:4e:0c:c9:13:99: 76:5b:27:54:76:5f:f0:a9:5c:0e:6e:dd:79:cc:56:06:bb:55: 7e:c1:5a:13:c1:63:34:5c:f5:5f:cc:7e:32:18:cc:0d:66:d7: 5e:fc:e1:79:a5:bd:18:e1:cc:fc:42:fe:b6:a6:75:60:6a:54: 22:10:dd:76:fa:d8:b6:5f:e4:21:40:77:11:64:a4:91:d0:1d: b5:2b:2c:ef:9f:1f:98:b9:f4:b3:57:d6:93:dd:7e:df:cf:2e: 33:49:f2:38:72:46:de:51:72:ba:1e:d2:3e:77:66:ee:dc:6a: 4f:1f:09:1c:63:82:cc:bd:ec:ae:7b:10:d3:06:d1:19:44:f5: 53:e4:b1:82:36:3d:f8:ea:eb:63:f0:3b:3a:b0:8e:f6:96:55: 46:fc:54:61:97:29:e9:ff:f5:4c:12:f3:fd:50:0e:d3:68:5c: 2f:c5:91:64:32:11:1c:e3:f6:4d:f6:b8:cd:51:a0:fa:65:cf: 5c:dd:33:5f -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUVWjL37uVeh7m+Ap5MscavHVxv/4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxOFoX DTI1MDEwNzA0MDAxOFowMzExMC8GA1UEAxMoQzdBQjQzQTM5ODREOTNBOEUxQTQy MDY2RDg3RTRCRDI0QzU3NzFBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlNuf3ZWUTKPnNYCVWnXWmV7/MViuyAIm5J1gHcDGc66yElanVn1ztMdvR4 HgNK5rs7WggSkNp1SL/oLBxCOzUT2vlKuCXpEXmXiypDIXT9v+KsbeEBYESJ07rf 9na8HWqKavpr5JNaU0kur0rPM+VR73GPwsW+fP5q1jsokaC2JWm8pWFFjOgdL2fX 2oca8+8SExgVsiuX25kdI4WX0Ca0/lxBq+kOV3lx48WSTz3WisIf9HYmO0Tpk8p5 1iF9obksSXmST9vIBG52p/arLeCTjGCn37xElnaZOzqif03Iv4FNgM4Pb4lDyOR9 bq8uIjbZ4/nCWfNokxBvdN2c+aECAwEAAaOCAdEwggHNMB0GA1UdDgQWBBTHq0Oj mE2TqOGkIGbYfkvSTFdxoDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTU5Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQG+UAwDQYJKoZIhvcNAQELBQADggEBABDb9rA/HjidReedT0sE 75zwUox9HPeDh6C0qA2wpHgIhP3F4CianDAe4bERV/L/FGhJqXGTrRVBvL6utmJL vHiUdcBODMkTmXZbJ1R2X/CpXA5u3XnMVga7VX7BWhPBYzRc9V/MfjIYzA1m1178 4XmlvRjhzPxC/ramdWBqVCIQ3Xb62LZf5CFAdxFkpJHQHbUrLO+fH5i59LNX1pPd ft/PLjNJ8jhyRt5Rcroe0j53Zu7cak8fCRxjgsy97K57ENMG0RlE9VPksYI2Pfjq 62PwOzqwjvaWVUb8VGGXKen/9UwS8/1QDtNoXC/FkWQyERzj9k32uM1RoPplz1zd M18= -----END CERTIFICATE-----Generated at Wed May 8 17:45:22 2024 by rpki-client on console-ams.rpki-client.org