$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141639.roa File: AS141639.roa (raw, json) Hash identifier: KjiocqghK7zmONrujqaXG19Bf7zrGXaCMeDmclL8PF0= Subject key identifier: 14:19:93:4C:87:54:FE:65:1C:E2:7E:7B:55:AE:E9:42:77:34:EA:A4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 13D71B79D095E6167C8533A24BF69B061D95C07E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141639.roa Signing time: Fri 19 Jan 2024 09:32:43 +0000 ROA not before: Fri 19 Jan 2024 09:27:43 +0000 ROA not after: Fri 17 Jan 2025 09:32:43 +0000 asID: 141639 IP address blocks: 2001:df3:2b40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d7:1b:79:d0:95:e6:16:7c:85:33:a2:4b:f6:9b:06:1d:95:c0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 19 09:27:43 2024 GMT Not After : Jan 17 09:32:43 2025 GMT Subject: CN=1419934C8754FE651CE27E7B55AEE9427734EAA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:b3:cb:cf:07:67:ba:c1:ba:da:b8:03:c7: 86:f4:f2:4b:65:74:2e:3f:6b:9a:22:bb:eb:0f:d6: e4:16:d2:03:19:49:ab:94:17:54:af:1c:64:7f:a8: 7a:c6:dd:9a:42:87:6d:22:d3:1e:15:b3:d3:37:34: a4:ca:45:67:cf:d4:1f:ab:66:93:51:7f:c8:6b:eb: 68:fa:8a:05:ee:1c:8d:1a:d3:11:75:ad:1e:4e:b4: b5:29:bc:35:f3:86:7f:53:05:b6:7c:25:3f:b8:a9: d9:eb:e4:78:73:d0:35:3b:de:a6:8c:31:58:7e:3f: 17:df:50:cb:ee:91:56:ca:9a:71:b5:da:06:4d:a5: a6:0c:07:7c:31:9a:62:70:b0:0c:e2:1a:7a:5e:e1: 81:2f:79:b9:52:f0:a3:8b:e3:b1:29:26:73:f8:c6: 07:7c:64:6f:40:11:51:21:4c:02:c6:7e:bc:90:8c: 97:72:74:df:de:ad:87:ae:12:d6:07:11:e9:e4:05: 12:4f:e7:52:21:57:b7:5f:85:78:58:49:a4:3a:6b: 4f:56:dc:54:3e:85:b8:00:83:2a:1b:79:b1:b0:eb: 2a:70:de:33:a4:2b:1d:04:0f:75:6d:fc:92:15:c1: 27:e3:46:d9:e6:d1:b8:ff:a4:72:3e:9e:b2:c3:41: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:19:93:4C:87:54:FE:65:1C:E2:7E:7B:55:AE:E9:42:77:34:EA:A4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:2b40::/48 Signature Algorithm: sha256WithRSAEncryption 3a:f4:5d:16:67:c3:9c:84:4c:82:ca:e5:e2:5e:93:4c:d2:8b: 3a:18:f8:86:8d:37:05:97:05:70:59:53:8f:73:7c:85:20:61: d2:a7:6f:79:52:eb:a0:95:8f:0e:ac:cc:8b:88:ab:54:e6:31: 82:de:1b:65:3a:42:67:0a:25:ba:ea:74:9e:d6:82:6e:34:e7: 96:0b:02:e5:64:72:50:e3:4c:ad:dd:9b:8d:cc:fb:af:fc:e2: 7d:5f:06:25:f7:87:1c:ab:f3:59:52:8a:a6:25:ac:46:0a:b4: 91:93:09:ac:57:23:7e:d5:6b:8a:5e:bd:17:bb:5c:a5:ff:63: d7:1c:68:52:0f:e7:12:80:21:12:29:36:f1:89:5c:5f:fc:1d: 55:d3:54:af:9b:29:0a:23:05:03:98:ec:51:94:de:28:1b:ce: 59:5a:66:22:80:0e:c6:89:f2:05:ce:05:eb:28:ed:23:88:f6: 55:e4:12:57:9b:09:ed:fc:a6:37:db:1c:bf:92:bd:f5:19:a1: 67:3b:4b:a3:57:5a:03:ae:99:22:ab:6c:a3:11:4d:01:d3:ae: c5:61:9f:35:83:48:03:b3:57:92:a4:31:a1:c1:49:05:45:5f: cc:9a:2a:b5:aa:c2:58:1a:1f:d3:4b:d8:a9:f6:28:fd:2e:c1: 6f:34:68:7b -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUE9cbedCV5hZ8hTOiS/abBh2VwH4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExOTA5Mjc0M1oX DTI1MDExNzA5MzI0M1owMzExMC8GA1UEAxMoMTQxOTkzNEM4NzU0RkU2NTFDRTI3 RTdCNTVBRUU5NDI3NzM0RUFBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOIEs8vPB2e6wbrauAPHhvTyS2V0Lj9rmiK76w/W5BbSAxlJq5QXVK8cZH+o esbdmkKHbSLTHhWz0zc0pMpFZ8/UH6tmk1F/yGvraPqKBe4cjRrTEXWtHk60tSm8 NfOGf1MFtnwlP7ip2evkeHPQNTvepowxWH4/F99Qy+6RVsqacbXaBk2lpgwHfDGa YnCwDOIael7hgS95uVLwo4vjsSkmc/jGB3xkb0ARUSFMAsZ+vJCMl3J0396th64S 1gcR6eQFEk/nUiFXt1+FeFhJpDprT1bcVD6FuACDKht5sbDrKnDeM6QrHQQPdW38 khXBJ+NG2ebRuP+kcj6essNB8EcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQUGZNM h1T+ZRzifntVrulCdzTqpDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTYzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfMrQDANBgkqhkiG9w0BAQsFAAOCAQEAOvRdFmfDnIRMgsrl 4l6TTNKLOhj4ho03BZcFcFlTj3N8hSBh0qdveVLroJWPDqzMi4irVOYxgt4bZTpC Zwoluup0ntaCbjTnlgsC5WRyUONMrd2bjcz7r/zifV8GJfeHHKvzWVKKpiWsRgq0 kZMJrFcjftVril69F7tcpf9j1xxoUg/nEoAhEik28YlcX/wdVdNUr5spCiMFA5js UZTeKBvOWVpmIoAOxonyBc4F6yjtI4j2VeQSV5sJ7fymN9scv5K99RmhZztLo1da A66ZIqtsoxFNAdOuxWGfNYNIA7NXkqQxocFJBUVfzJoqtarCWBof00vYqfYo/S7B bzRoew== -----END CERTIFICATE-----Generated at Wed May 8 10:06:53 2024 by rpki-client on console-ams.rpki-client.org