$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141639.roa File: AS141639.roa (raw, json) Hash identifier: CQf+tBkkwxd9shkl2C+bg90jqlWHlCx6OudBz96yixg= Subject key identifier: AD:C8:47:67:99:07:15:36:D4:57:7A:EE:44:33:63:F7:92:97:65:F5 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23C667116F574953A843996DDD1C7A6A20D0CA31 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141639.roa Signing time: Fri 20 Dec 2024 10:00:00 +0000 ROA not before: Fri 20 Dec 2024 09:55:00 +0000 ROA not after: Fri 19 Dec 2025 10:00:00 +0000 asID: 141639 IP address blocks: 2001:df3:2b40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c6:67:11:6f:57:49:53:a8:43:99:6d:dd:1c:7a:6a:20:d0:ca:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 20 09:55:00 2024 GMT Not After : Dec 19 10:00:00 2025 GMT Subject: CN=ADC8476799071536D4577AEE443363F7929765F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:34:41:79:09:23:3b:0a:53:43:a8:58:ec:c5: 50:4f:fc:51:b8:18:94:d0:77:46:bc:f0:07:0e:33: aa:59:34:00:28:a2:03:a5:fa:3a:9f:2a:6a:d5:0b: ed:82:57:fa:65:94:91:ba:d1:3a:16:8d:f6:4e:69: f6:ac:ad:77:84:62:61:1c:e2:1f:85:6c:9e:3e:5d: 62:23:ea:75:73:19:56:44:41:51:2b:f9:4d:d0:18: 7e:26:29:48:37:15:65:da:da:d7:ab:5a:ee:3a:5f: 9f:1f:4b:e4:32:78:af:27:35:73:a2:ae:2e:a8:de: cf:f9:27:ba:66:f0:b5:b5:12:53:d4:24:ec:a0:b1: 5e:5e:7e:23:82:1a:54:25:c2:47:ef:ab:f2:2c:2f: 55:ec:3b:4c:be:e4:89:f7:ae:bd:d9:24:18:7a:3f: 00:bb:88:56:25:a3:44:29:05:f8:b1:42:cb:2c:07: 1a:3c:c7:db:1e:ff:21:02:41:00:45:fd:19:d4:13: 21:45:ac:27:99:88:e2:f5:f3:92:63:b6:db:d8:ac: 3d:3e:82:85:13:7c:bc:fb:7b:13:7a:96:58:47:7d: cc:c0:26:1d:55:16:ae:6c:d2:53:40:93:4a:a8:33: d9:fc:ff:5a:bd:60:1f:cc:b7:b7:ce:3e:7c:38:fb: e0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C8:47:67:99:07:15:36:D4:57:7A:EE:44:33:63:F7:92:97:65:F5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:2b40::/48 Signature Algorithm: sha256WithRSAEncryption 40:bd:dd:36:d0:c0:f0:4b:5c:a6:4a:a3:96:f2:cc:32:8f:7e: 7f:4c:c8:dd:bd:a6:08:2e:9c:53:85:29:e5:70:75:4b:38:b2: 00:19:54:3e:93:64:31:23:e0:4d:bc:75:62:dc:6e:85:e8:65: e1:0c:0e:37:c7:cf:46:e0:b7:11:b9:d3:b6:1f:32:dd:0a:32: 9c:b3:f3:ad:06:43:75:4b:54:61:de:29:2f:48:cf:dc:ed:8f: 6f:fd:af:da:53:74:80:62:a4:cd:9d:81:48:24:be:7a:c2:30: 0c:84:46:14:07:28:f4:3f:04:52:79:e4:d0:57:45:72:02:ae: db:4d:9d:ee:42:a1:38:2a:3b:31:fc:78:27:35:13:a7:f6:e1: a1:75:d9:24:b9:f8:5b:0c:ed:4e:4f:5d:21:54:ad:fb:94:e5: db:d2:55:ad:b7:56:85:fd:3a:90:6c:4e:b9:eb:e3:7e:8c:67: 4a:82:fb:d5:e0:45:af:4e:ed:40:72:ed:db:3f:59:18:be:2c: 07:23:58:df:af:22:f9:bb:f9:76:c7:42:47:5f:56:76:4e:bb: 84:a4:de:e8:98:1d:87:61:28:6c:a9:3f:48:13:59:21:7f:3e: 82:65:af:ab:b0:de:e8:f8:11:03:c7:24:cb:c5:0f:fa:57:10: 0d:90:8e:63 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUI8ZnEW9XSVOoQ5lt3Rx6aiDQyjEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIyMDA5NTUwMFoX DTI1MTIxOTEwMDAwMFowMzExMC8GA1UEAxMoQURDODQ3Njc5OTA3MTUzNkQ0NTc3 QUVFNDQzMzYzRjc5Mjk3NjVGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJQ0QXkJIzsKU0OoWOzFUE/8UbgYlNB3RrzwBw4zqlk0ACiiA6X6Op8qatUL 7YJX+mWUkbrROhaN9k5p9qytd4RiYRziH4Vsnj5dYiPqdXMZVkRBUSv5TdAYfiYp SDcVZdra16ta7jpfnx9L5DJ4ryc1c6KuLqjez/knumbwtbUSU9Qk7KCxXl5+I4Ia VCXCR++r8iwvVew7TL7kifeuvdkkGHo/ALuIViWjRCkF+LFCyywHGjzH2x7/IQJB AEX9GdQTIUWsJ5mI4vXzkmO229isPT6ChRN8vPt7E3qWWEd9zMAmHVUWrmzSU0CT Sqgz2fz/Wr1gH8y3t84+fDj74GUCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBStyEdn mQcVNtRXeu5EM2P3kpdl9TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTYzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfMrQDANBgkqhkiG9w0BAQsFAAOCAQEAQL3dNtDA8Etcpkqj lvLMMo9+f0zI3b2mCC6cU4Up5XB1SziyABlUPpNkMSPgTbx1Ytxuhehl4QwON8fP RuC3EbnTth8y3QoynLPzrQZDdUtUYd4pL0jP3O2Pb/2v2lN0gGKkzZ2BSCS+esIw DIRGFAco9D8EUnnk0FdFcgKu202d7kKhOCo7Mfx4JzUTp/bhoXXZJLn4WwztTk9d IVSt+5Tl29JVrbdWhf06kGxOuevjfoxnSoL71eBFr07tQHLt2z9ZGL4sByNY368i +bv5dsdCR19Wdk67hKTe6Jgdh2EobKk/SBNZIX8+gmWvq7De6PgRA8cky8UP+lcQ DZCOYw== -----END CERTIFICATE-----Generated at Sat Apr 5 06:22:16 2025 by rpki-client