$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141627.roa File: AS141627.roa (raw, json) Hash identifier: ZkCJ8iBXKats2t2eLU+L9cc7iNG8K8iPuoe+O8FGMtk= Subject key identifier: 1D:A0:80:F1:A3:D7:02:7F:9D:73:1F:5B:FF:74:C7:EC:40:52:9E:25 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0D8152F3A948557F9BAAE938FEB096DCDD78A35C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141627.roa Signing time: Tue 10 Dec 2024 05:00:09 +0000 ROA not before: Tue 10 Dec 2024 04:55:09 +0000 ROA not after: Tue 09 Dec 2025 05:00:09 +0000 asID: 141627 IP address blocks: 103.161.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:81:52:f3:a9:48:55:7f:9b:aa:e9:38:fe:b0:96:dc:dd:78:a3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:09 2024 GMT Not After : Dec 9 05:00:09 2025 GMT Subject: CN=1DA080F1A3D7027F9D731F5BFF74C7EC40529E25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:87:e3:b0:4a:50:03:27:5b:3c:49:6c:18: 90:19:d0:2a:23:54:a4:86:4c:57:68:e6:35:8e:1b: 9a:ff:3e:d4:ea:ca:01:d9:13:1d:c7:c4:77:f2:df: 80:10:12:96:da:a9:7d:4b:f5:b5:05:a0:2f:0b:50: 0a:58:e2:1f:7a:a7:dd:26:09:97:6e:2d:27:3b:c0: 7a:92:6b:c4:d0:0b:4b:9a:86:27:98:1e:53:b1:88: 22:c6:e5:a9:44:a6:f1:24:c5:b5:11:f7:cc:a1:9f: b5:16:f0:f2:32:de:17:b1:db:6a:ea:b8:8f:e0:be: 20:2a:48:15:4c:ee:8c:1c:fe:9b:46:f5:0f:e7:58: 65:05:31:9f:25:8d:1a:a8:23:48:11:6b:a8:50:aa: 31:ba:24:cf:f8:09:5a:3d:8c:8c:b3:8c:ba:fc:04: eb:50:b1:1c:d7:c3:b3:95:15:98:ad:2d:1c:65:86: 92:77:31:4c:d3:0c:95:14:eb:02:e4:a1:5a:df:9f: 72:17:fd:9a:62:4c:e3:75:c1:15:2e:fc:df:67:95: f4:d4:b9:3c:18:98:2e:e8:f0:01:a7:20:ce:1d:36: 6f:43:e4:7f:44:9b:75:3c:96:d4:1f:53:5d:7b:06: 3b:0f:32:f9:ca:92:43:a4:9b:d7:3e:0b:f8:c7:43: 4c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A0:80:F1:A3:D7:02:7F:9D:73:1F:5B:FF:74:C7:EC:40:52:9E:25 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141627.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.206.0/23 Signature Algorithm: sha256WithRSAEncryption 66:f3:60:fe:36:b3:48:d4:c0:da:e1:02:55:4a:aa:51:26:e0: 86:b3:ef:a1:d8:06:75:af:8f:f8:26:a3:d2:d8:69:2d:68:ed: 24:59:bb:6a:07:40:1e:f5:c6:dc:30:c7:8e:ba:96:f6:f0:16: 9f:52:6e:cc:43:dd:46:f1:05:63:82:2a:a3:74:07:3b:1d:91: e0:b1:46:cd:1b:b4:8b:bd:fc:5d:c8:7f:90:35:b6:b7:8f:05: b6:d7:4f:a0:ae:78:ee:5d:bb:64:da:6b:3e:86:8e:6a:cf:67: 4c:6d:76:89:a9:c2:05:4c:1e:78:67:c5:b0:85:90:56:fc:d3: bf:4e:54:7e:95:1b:83:2a:08:a9:63:d5:4a:30:16:25:2b:b1: b1:a6:a9:c7:71:4b:74:f6:98:88:a3:0f:88:f6:37:1b:46:30: 81:37:53:60:4e:f0:60:1c:0e:2e:03:ed:f6:12:13:a4:e0:7c: 79:26:b1:90:56:36:26:ec:f9:dc:21:74:b7:31:aa:72:a4:22: c7:51:03:1a:78:32:58:76:ee:6b:03:8d:03:d8:da:3e:c4:65: 54:15:bb:f6:02:81:44:82:a6:44:ff:8a:39:a9:35:ad:7d:39: 4d:37:bd:33:26:3c:e4:97:f1:f1:75:1c:3b:64:fc:ef:60:d6: 3c:94:ab:c2 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUDYFS86lIVX+bquk4/rCW3N14o1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwOVoX DTI1MTIwOTA1MDAwOVowMzExMC8GA1UEAxMoMURBMDgwRjFBM0Q3MDI3RjlENzMx RjVCRkY3NEM3RUM0MDUyOUUyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ48h+OwSlADJ1s8SWwYkBnQKiNUpIZMV2jmNY4bmv8+1OrKAdkTHcfEd/Lf gBASltqpfUv1tQWgLwtQCljiH3qn3SYJl24tJzvAepJrxNALS5qGJ5geU7GIIsbl qUSm8STFtRH3zKGftRbw8jLeF7Hbauq4j+C+ICpIFUzujBz+m0b1D+dYZQUxnyWN GqgjSBFrqFCqMbokz/gJWj2MjLOMuvwE61CxHNfDs5UVmK0tHGWGkncxTNMMlRTr AuShWt+fchf9mmJM43XBFS7832eV9NS5PBiYLujwAacgzh02b0Pkf0SbdTyW1B9T XXsGOw8y+cqSQ6Sb1z4L+MdDTMkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQdoIDx o9cCf51zH1v/dMfsQFKeJTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTYyNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWehzjANBgkqhkiG9w0BAQsFAAOCAQEAZvNg/jazSNTA2uECVUqq USbghrPvodgGda+P+Caj0thpLWjtJFm7agdAHvXG3DDHjrqW9vAWn1JuzEPdRvEF Y4Iqo3QHOx2R4LFGzRu0i738Xch/kDW2t48FttdPoK547l27ZNprPoaOas9nTG12 ianCBUweeGfFsIWQVvzTv05UfpUbgyoIqWPVSjAWJSuxsaapx3FLdPaYiKMPiPY3 G0YwgTdTYE7wYBwOLgPt9hITpOB8eSaxkFY2Juz53CF0tzGqcqQix1EDGngyWHbu awONA9jaPsRlVBW79gKBRIKmRP+KOak1rX05TTe9MyY85Jfx8XUcO2T872DWPJSr wg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:25 2025 by rpki-client