$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141644.roa File: AS141644.roa (raw, json) Hash identifier: /5XZ6+MSLj9PxJGOQVgPyvsmuQEsVl0tGGrTA2N1Lio= Subject key identifier: 46:1E:C0:FE:E0:83:6F:CB:81:59:CF:D0:4F:FB:13:62:F6:3A:E4:CC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 35E6D3E6034F38E16FE6B588B2EE15F3BC3CCD8E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141644.roa Signing time: Tue 09 Jan 2024 04:00:27 +0000 ROA not before: Tue 09 Jan 2024 03:55:27 +0000 ROA not after: Tue 07 Jan 2025 04:00:27 +0000 asID: 141644 IP address blocks: 103.162.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e6:d3:e6:03:4f:38:e1:6f:e6:b5:88:b2:ee:15:f3:bc:3c:cd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:27 2024 GMT Not After : Jan 7 04:00:27 2025 GMT Subject: CN=461EC0FEE0836FCB8159CFD04FFB1362F63AE4CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a3:a5:3c:f2:82:6f:c6:46:00:02:83:ea:49: d0:b4:cc:43:bf:01:1f:b1:17:dc:9c:09:f2:86:7c: df:5f:1c:4f:d3:27:fc:af:ab:00:ca:ae:d7:c7:03: 93:c7:29:25:90:f7:7f:b5:ca:66:34:cf:1b:55:0a: dd:bb:f2:4f:8e:3d:03:57:56:6d:45:6e:6d:2d:06: d0:b5:35:1b:61:1e:69:1b:d2:5f:aa:63:11:fd:85: 10:3d:6f:c6:b8:99:bc:0e:3b:6f:b0:aa:e1:e6:70: 05:3e:1f:66:ae:88:40:b3:6f:0e:16:4e:f2:ec:01: 68:ef:7b:32:72:8e:80:67:4c:bd:f0:c0:d6:fb:7c: 49:6f:5a:c0:23:a8:dd:76:50:05:92:b6:29:75:27: e2:aa:75:f2:b6:d7:1f:3f:ae:bb:1e:83:e9:79:3b: cc:5f:d2:10:dd:87:71:ed:74:3d:2a:72:a4:48:28: 67:41:a8:57:74:09:5e:93:49:87:c7:49:c6:40:3a: df:70:ad:95:25:d5:3f:69:1c:42:e8:82:e5:63:35: d8:41:d6:d7:bb:93:1c:af:05:5d:11:7f:17:f6:f7: cc:72:47:9b:2d:70:4f:8f:22:75:ae:74:e6:1f:8d: b4:19:01:e7:a5:d4:22:64:79:1b:bf:53:c7:63:d7: 40:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1E:C0:FE:E0:83:6F:CB:81:59:CF:D0:4F:FB:13:62:F6:3A:E4:CC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141644.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.69.0/24 Signature Algorithm: sha256WithRSAEncryption 44:d5:75:56:ed:24:9f:f8:3f:33:1c:d0:24:ff:32:4d:2e:ed: 57:90:cf:14:f7:82:75:d5:37:f3:fa:9d:7d:c9:41:0b:d5:a4: 45:c0:74:6f:12:48:94:2c:b7:27:79:96:b8:e3:8d:cf:a4:12: 97:21:93:35:36:86:d5:c7:91:7b:50:62:31:14:56:e9:4e:7c: ec:8b:ec:9e:62:2e:0e:32:d0:a6:7a:96:43:03:2c:19:04:52: b3:5a:69:52:0e:7c:97:44:45:61:e3:fa:bc:74:e7:94:b2:7e: 6a:d2:83:d6:61:e1:af:99:85:95:f8:23:1d:5e:9b:b0:f7:9c: e0:6c:51:df:1d:8d:6a:4e:aa:d3:9b:6a:b6:20:2d:c3:50:d9: b6:05:95:40:e1:1b:4e:39:3a:98:62:44:23:0c:1d:46:df:cd: 42:ba:76:81:31:b6:17:82:e5:90:b5:68:ae:c5:10:34:e1:b1: b2:93:b1:7a:b6:c2:80:db:71:30:36:05:b0:ee:c9:18:05:ee: 78:bb:8a:d5:04:89:5d:57:c8:d4:85:9d:92:cf:aa:15:5c:fc: ce:d6:e4:80:99:1b:58:4c:cb:da:6e:4a:d6:c2:a7:86:50:eb: 27:15:8c:15:0b:eb:a9:1f:a0:f5:65:0e:22:1d:7b:3e:cf:a9: a2:93:f1:1a -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUNebT5gNPOOFv5rWIsu4V87w8zY4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyN1oX DTI1MDEwNzA0MDAyN1owMzExMC8GA1UEAxMoNDYxRUMwRkVFMDgzNkZDQjgxNTlD RkQwNEZGQjEzNjJGNjNBRTRDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+jpTzygm/GRgACg+pJ0LTMQ78BH7EX3JwJ8oZ8318cT9Mn/K+rAMqu18cD k8cpJZD3f7XKZjTPG1UK3bvyT449A1dWbUVubS0G0LU1G2EeaRvSX6pjEf2FED1v xriZvA47b7Cq4eZwBT4fZq6IQLNvDhZO8uwBaO97MnKOgGdMvfDA1vt8SW9awCOo 3XZQBZK2KXUn4qp18rbXHz+uux6D6Xk7zF/SEN2Hce10PSpypEgoZ0GoV3QJXpNJ h8dJxkA633CtlSXVP2kcQuiC5WM12EHW17uTHK8FXRF/F/b3zHJHmy1wT48ida50 5h+NtBkB56XUImR5G79Tx2PXQCECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRGHsD+ 4INvy4FZz9BP+xNi9jrkzDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTY0NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeiRTANBgkqhkiG9w0BAQsFAAOCAQEARNV1Vu0kn/g/MxzQJP8y TS7tV5DPFPeCddU38/qdfclBC9WkRcB0bxJIlCy3J3mWuOONz6QSlyGTNTaG1ceR e1BiMRRW6U587IvsnmIuDjLQpnqWQwMsGQRSs1ppUg58l0RFYeP6vHTnlLJ+atKD 1mHhr5mFlfgjHV6bsPec4GxR3x2Nak6q05tqtiAtw1DZtgWVQOEbTjk6mGJEIwwd Rt/NQrp2gTG2F4LlkLVorsUQNOGxspOxerbCgNtxMDYFsO7JGAXueLuK1QSJXVfI 1IWdks+qFVz8ztbkgJkbWEzL2m5K1sKnhlDrJxWMFQvrqR+g9WUOIh17Ps+popPx Gg== -----END CERTIFICATE-----Generated at Thu May 2 17:40:06 2024 by rpki-client on console-fra.rpki-client.org