$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141653.roa File: AS141653.roa (raw, json) Hash identifier: sVOGz+6VGiJn+q11xN0wRk/HDHA3x8JApvy4IR5PmJg= Subject key identifier: 0F:24:91:97:CB:73:5C:53:A5:9A:41:35:F7:33:0B:58:39:6C:68:99 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 242E816080AC20BA03CF0DE7FCB890CC6F9D17A0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141653.roa Signing time: Fri 17 May 2024 07:40:09 +0000 ROA not before: Fri 17 May 2024 07:35:09 +0000 ROA not after: Fri 16 May 2025 07:40:09 +0000 asID: 141653 IP address blocks: 2001:df3:2c40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:2e:81:60:80:ac:20:ba:03:cf:0d:e7:fc:b8:90:cc:6f:9d:17:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 17 07:35:09 2024 GMT Not After : May 16 07:40:09 2025 GMT Subject: CN=0F249197CB735C53A59A4135F7330B58396C6899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:b0:56:36:22:85:3e:74:4a:32:a5:58:73: 76:1a:56:0e:a4:17:44:d8:b5:1d:54:80:98:d4:cf: 0e:d9:fb:f9:e3:08:5a:95:bf:0e:23:76:23:b1:46: 39:39:b9:bf:7f:3d:bd:a0:8b:95:02:64:be:81:0c: eb:bf:ce:b4:b0:62:28:a9:15:e6:96:bf:3d:c8:27: 12:fc:bd:42:94:20:ca:74:d0:76:12:45:22:c0:69: c5:11:cc:f2:21:74:47:f4:3a:6b:62:42:8c:47:63: 28:65:ea:76:90:8b:d6:f8:22:27:45:a4:b9:ef:55: ca:fa:09:b5:ab:e1:4d:14:2f:be:64:fe:92:47:38: 66:f7:0d:50:2e:fc:34:89:3b:1c:e2:a5:a7:1f:38: 47:72:00:ea:66:1c:ef:d3:42:a3:69:62:b6:78:dd: 40:bd:63:c3:bf:fe:24:3e:72:73:58:54:9b:59:16: ee:80:65:e5:1f:b5:59:6f:a7:ea:12:93:b1:9e:44: 4a:02:37:89:a1:85:31:f8:92:59:41:62:e6:1b:c7: 58:b7:01:45:30:60:03:e6:b8:65:cd:d8:84:93:a2: 3c:e2:2f:3d:c3:d5:ba:36:b5:4e:b8:db:dd:58:a5: 02:95:44:f8:d0:b9:64:f8:bf:6a:fd:41:2c:62:8f: 1c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:24:91:97:CB:73:5C:53:A5:9A:41:35:F7:33:0B:58:39:6C:68:99 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141653.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:2c40::/48 Signature Algorithm: sha256WithRSAEncryption 33:d1:e6:a4:15:11:1c:1a:76:44:30:15:22:1a:d4:2a:4f:09: ba:b5:82:6b:10:d0:05:ce:cf:7b:75:f7:ca:60:ac:ee:1a:a7: c9:ff:c1:fd:d4:6e:55:56:b9:c7:b5:c9:e4:a3:a6:59:42:6a: c3:7e:ad:23:72:ee:61:b7:f4:d2:99:96:b9:57:9f:78:56:bc: 65:a1:62:25:ae:b3:a0:66:e3:b7:9d:2c:e6:6f:4c:59:7d:d4: 75:ea:a4:2b:fe:89:5e:8d:5c:4c:98:a3:54:1e:38:d0:27:43: e2:c2:18:0a:fe:b9:10:0f:9d:f2:7a:59:8d:79:4d:e6:ba:c2: 7c:ec:92:55:22:56:a3:ae:f8:1e:a7:7d:17:f5:6c:01:42:80: 10:01:d2:e2:ff:ba:36:b2:f3:9f:5e:d8:47:d8:a9:9c:87:2a: 3e:88:bd:61:52:9d:8c:9a:3b:fc:b7:89:b8:98:39:4c:bf:a2: f2:fe:86:ed:d4:e1:e4:a8:4a:87:44:80:e9:58:e7:6a:8f:ec: dc:f9:06:99:f1:78:dd:56:fa:2e:bc:3b:00:1f:ef:87:68:81: e6:b1:cd:a5:55:67:69:7a:35:75:37:4d:8d:44:d0:d8:b0:98: 64:f7:b0:7f:d0:0f:58:7b:d7:73:9f:b0:d1:25:5d:76:63:ed: 19:32:2a:4d -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUJC6BYICsILoDzw3n/LiQzG+dF6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUxNzA3MzUwOVoX DTI1MDUxNjA3NDAwOVowMzExMC8GA1UEAxMoMEYyNDkxOTdDQjczNUM1M0E1OUE0 MTM1RjczMzBCNTgzOTZDNjg5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuQsFY2IoU+dEoypVhzdhpWDqQXRNi1HVSAmNTPDtn7+eMIWpW/DiN2I7FG OTm5v389vaCLlQJkvoEM67/OtLBiKKkV5pa/PcgnEvy9QpQgynTQdhJFIsBpxRHM 8iF0R/Q6a2JCjEdjKGXqdpCL1vgiJ0Wkue9VyvoJtavhTRQvvmT+kkc4ZvcNUC78 NIk7HOKlpx84R3IA6mYc79NCo2litnjdQL1jw7/+JD5yc1hUm1kW7oBl5R+1WW+n 6hKTsZ5ESgI3iaGFMfiSWUFi5hvHWLcBRTBgA+a4Zc3YhJOiPOIvPcPVuja1Trjb 3VilApVE+NC5ZPi/av1BLGKPHK0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQPJJGX y3NcU6WaQTX3MwtYOWxomTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTY1My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfMsQDANBgkqhkiG9w0BAQsFAAOCAQEAM9HmpBURHBp2RDAV IhrUKk8JurWCaxDQBc7Pe3X3ymCs7hqnyf/B/dRuVVa5x7XJ5KOmWUJqw36tI3Lu Ybf00pmWuVefeFa8ZaFiJa6zoGbjt50s5m9MWX3UdeqkK/6JXo1cTJijVB440CdD 4sIYCv65EA+d8npZjXlN5rrCfOySVSJWo674Hqd9F/VsAUKAEAHS4v+6NrLzn17Y R9ipnIcqPoi9YVKdjJo7/LeJuJg5TL+i8v6G7dTh5KhKh0SA6Vjnao/s3PkGmfF4 3Vb6Lrw7AB/vh2iB5rHNpVVnaXo1dTdNjUTQ2LCYZPewf9APWHvXc5+w0SVddmPt GTIqTQ== -----END CERTIFICATE-----Generated at Sat Jun 22 23:54:02 2024 by rpki-client on console-fra.rpki-client.org