$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141618.roa File: AS141618.roa (raw, json) Hash identifier: 5Kgcb8kvv4Yc4Ur1L7PP39BhM5JYzzmeSdkLXNV2snE= Subject key identifier: 8C:57:B0:8D:A1:CF:19:A7:55:C8:F4:0D:54:C0:A2:46:EE:D1:21:11 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 210473E59AD5C828431CB3FD131DF0E84D90663B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141618.roa Signing time: Wed 10 Apr 2024 08:00:00 +0000 ROA not before: Wed 10 Apr 2024 07:55:00 +0000 ROA not after: Wed 09 Apr 2025 08:00:00 +0000 asID: 141618 IP address blocks: 2400:c260::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:04:73:e5:9a:d5:c8:28:43:1c:b3:fd:13:1d:f0:e8:4d:90:66:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 10 07:55:00 2024 GMT Not After : Apr 9 08:00:00 2025 GMT Subject: CN=8C57B08DA1CF19A755C8F40D54C0A246EED12111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:78:38:8e:6c:74:ae:76:f0:db:e7:c6:65:ee: 88:a2:e4:df:b8:fa:50:77:5d:d2:17:30:42:d7:e0: e0:4a:5d:d1:44:a3:1c:8a:da:d7:dc:79:0e:73:b9: 1d:60:4e:1d:0e:88:1d:80:2a:a6:73:f1:f1:4d:a2: 92:72:01:a5:34:f7:31:66:99:31:6a:2f:4c:52:48: b3:a1:91:cc:fc:91:76:89:fd:4b:cd:95:76:81:b3: 65:f8:aa:6a:c6:f5:ee:9c:af:43:95:3f:93:1f:02: 47:37:ec:53:1a:51:56:75:50:14:9c:3e:a5:78:c6: c5:e8:fc:11:1b:7e:89:03:c3:32:34:6d:c5:40:21: 3b:2d:d5:bb:97:6b:a8:26:65:51:f9:6c:7c:48:ae: ff:b3:6e:23:96:b5:8f:41:03:81:66:a3:59:a5:89: 51:16:10:00:cd:7e:70:d4:f8:93:54:e7:2b:af:76: f8:a3:73:85:d1:ca:ec:7b:3b:df:4d:b8:0f:ed:2e: 1e:22:c2:2f:ed:ea:bb:ef:6f:2c:1e:a2:81:51:87: 7f:d1:b4:50:49:55:33:bf:a2:ba:7b:4b:8e:7a:ed: 85:5e:6f:bc:31:c4:e8:e1:c1:69:c4:ed:52:bb:08: 84:d4:a4:2f:90:1f:41:fc:8b:2c:2f:a1:71:78:92: 9b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:57:B0:8D:A1:CF:19:A7:55:C8:F4:0D:54:C0:A2:46:EE:D1:21:11 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:c260::/32 Signature Algorithm: sha256WithRSAEncryption 62:d2:c5:eb:40:db:e7:46:6f:f1:83:bf:4a:7d:2e:9c:71:0b: 3a:71:f3:7f:1c:ce:c3:d1:7d:57:74:7d:1d:e6:89:32:ae:0b: 01:55:d6:bd:7d:8d:03:24:b7:58:99:7b:ac:0c:2a:7c:ea:4a: e8:11:57:c6:db:8d:5e:1b:f3:dd:26:ee:bd:1a:43:98:df:31: 02:48:1d:5a:5e:57:b5:8d:0d:6e:a6:05:8c:32:4c:90:f8:34: 23:77:86:c3:13:7b:b2:df:ff:79:c8:d9:fe:ad:8e:7d:a4:97: 80:35:62:f6:59:bc:fe:60:1a:f0:2f:06:d4:ff:cb:fd:05:08: 75:73:b6:4a:d7:4f:00:a1:0c:ac:b5:d5:0b:44:60:7d:d7:b0: 7d:e9:be:a9:bb:3e:65:d8:9d:dc:93:ca:94:1a:47:18:d6:64: 9e:30:e0:01:34:e4:41:7c:06:2f:c0:c5:5b:14:c3:f8:0a:13: 64:73:7d:35:4c:1f:54:bf:92:7c:ae:69:18:a2:84:18:da:c8: 03:76:d3:28:98:cb:37:8b:a1:f5:e5:cd:65:7a:bb:47:94:d4: 32:fe:14:65:d8:d1:dd:58:d8:d2:79:4a:a7:ed:be:4c:f9:29: e2:36:ae:57:4b:13:9e:81:d5:a7:3c:cc:cc:40:78:30:5d:26: 86:c2:6b:dc -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUIQRz5ZrVyChDHLP9Ex3w6E2QZjswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxMDA3NTUwMFoX DTI1MDQwOTA4MDAwMFowMzExMC8GA1UEAxMoOEM1N0IwOERBMUNGMTlBNzU1QzhG NDBENTRDMEEyNDZFRUQxMjExMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANt4OI5sdK528NvnxmXuiKLk37j6UHdd0hcwQtfg4Epd0USjHIra19x5DnO5 HWBOHQ6IHYAqpnPx8U2iknIBpTT3MWaZMWovTFJIs6GRzPyRdon9S82VdoGzZfiq asb17pyvQ5U/kx8CRzfsUxpRVnVQFJw+pXjGxej8ERt+iQPDMjRtxUAhOy3Vu5dr qCZlUflsfEiu/7NuI5a1j0EDgWajWaWJURYQAM1+cNT4k1TnK692+KNzhdHK7Hs7 3024D+0uHiLCL+3qu+9vLB6igVGHf9G0UElVM7+iuntLjnrthV5vvDHE6OHBacTt UrsIhNSkL5AfQfyLLC+hcXiSm2cCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBSMV7CN oc8Zp1XI9A1UwKJG7tEhETAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTYxOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQAwmAwDQYJKoZIhvcNAQELBQADggEBAGLSxetA2+dGb/GDv0p9 LpxxCzpx838czsPRfVd0fR3miTKuCwFV1r19jQMkt1iZe6wMKnzqSugRV8bbjV4b 890m7r0aQ5jfMQJIHVpeV7WNDW6mBYwyTJD4NCN3hsMTe7Lf/3nI2f6tjn2kl4A1 YvZZvP5gGvAvBtT/y/0FCHVztkrXTwChDKy11QtEYH3XsH3pvqm7PmXYndyTypQa RxjWZJ4w4AE05EF8Bi/AxVsUw/gKE2RzfTVMH1S/knyuaRiihBjayAN20yiYyzeL ofXlzWV6u0eU1DL+FGXY0d1Y2NJ5Sqftvkz5KeI2rldLE56B1ac8zMxAeDBdJobC a9w= -----END CERTIFICATE-----Generated at Wed May 8 18:12:15 2024 by rpki-client on console-fra.rpki-client.org