$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141659.roa File: AS141659.roa (raw, json) Hash identifier: 8ojlqmx3VDHKL22335H8kMJ7vqdp65x6n7kXqhLH3hA= Subject key identifier: 0C:ED:B1:59:64:D2:7A:24:DE:46:B9:FD:B2:7F:EF:4D:B7:47:25:78 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1ABC702E356720F508CF08F0959F34D50C17A8FD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141659.roa Signing time: Tue 20 Aug 2024 03:28:16 +0000 ROA not before: Tue 20 Aug 2024 03:23:16 +0000 ROA not after: Tue 19 Aug 2025 03:28:16 +0000 asID: 141659 IP address blocks: 103.160.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:bc:70:2e:35:67:20:f5:08:cf:08:f0:95:9f:34:d5:0c:17:a8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 20 03:23:16 2024 GMT Not After : Aug 19 03:28:16 2025 GMT Subject: CN=0CEDB15964D27A24DE46B9FDB27FEF4DB7472578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0c:8d:c7:a3:f3:b1:70:91:1a:fb:fe:96:08: 66:26:6a:50:ac:b9:9d:10:f2:7f:9b:d4:96:d4:a1: a5:f5:2e:b8:19:3d:06:1e:18:07:e0:02:71:3d:b1: 25:09:b9:7f:59:5b:ce:f6:4a:36:ce:9c:4a:99:a1: 84:65:6d:98:13:21:bd:01:7c:4a:d4:95:4b:93:38: b5:0b:3c:be:9e:a6:8a:5d:64:fb:cd:94:1f:63:55: c4:0b:fe:e6:37:55:28:c0:cd:a2:2e:2f:82:44:09: e0:08:0c:f5:15:f7:56:00:4f:3f:54:26:0a:db:b4: 36:b5:cc:16:64:0e:9d:f4:74:b4:c0:95:1e:c8:85: b6:71:00:45:76:9b:76:34:db:01:f2:af:fa:3e:a2: 12:1a:96:48:e3:77:7d:03:78:1a:61:4c:fa:8b:c4: 1c:76:70:e9:22:e7:ae:62:70:f4:44:c3:bb:56:1f: 03:6b:df:70:0e:9f:bf:c7:00:cb:f7:2e:0e:04:a1: bd:a9:92:a2:65:79:4e:9b:3d:a9:eb:bd:f5:0c:08: 4f:87:93:ff:64:2a:a0:82:a6:2e:b9:43:d8:0e:be: 64:e8:46:46:52:e3:b5:bc:05:55:31:23:9c:02:6e: ed:ff:fa:af:0f:d0:87:b0:4c:1e:31:73:a4:bd:33: f5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:ED:B1:59:64:D2:7A:24:DE:46:B9:FD:B2:7F:EF:4D:B7:47:25:78 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141659.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.42.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:ba:55:5e:13:63:8f:39:57:56:54:0a:d2:85:e5:ef:50:31: f7:19:bd:ff:75:ea:da:7a:1d:7b:9a:02:41:36:4d:fb:60:f3: e8:9f:45:a9:c2:da:71:b3:a3:a2:ec:83:7c:f6:94:44:09:f1: f7:a2:a5:31:f9:86:1c:0a:b9:33:5a:5b:51:d6:f4:43:2e:77: de:55:e4:fc:23:af:a4:5e:bd:7a:ff:ec:33:c1:77:03:02:ba: cf:6a:95:6d:63:5e:48:05:45:c2:f0:77:a1:3c:9f:52:c3:72: 97:33:e6:d8:f2:67:f8:b5:ab:3b:9e:06:47:0d:4e:13:7f:c7: aa:b6:c9:09:ff:96:f4:82:18:bb:72:34:72:14:91:9f:df:08: 50:c3:eb:c2:8a:3f:5c:8a:24:b3:92:da:56:7e:f1:7e:23:7a: 0b:69:8d:be:a6:7a:d1:49:32:0b:a1:68:6e:88:55:09:58:3a: 33:4a:6c:97:0b:dc:ce:5f:e9:cf:82:4c:20:23:c5:a8:bb:14: 83:f2:99:62:d0:9f:a3:71:c3:13:24:95:e2:64:8f:f0:a9:97: 79:8d:23:bf:11:cb:2a:78:22:ad:1d:bc:1f:05:9d:c7:88:43: 7c:e8:05:fe:d6:44:79:6c:41:e7:15:cf:31:ad:f8:78:3f:2a: 9d:eb:7a:4d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGrxwLjVnIPUIzwjwlZ801QwXqP0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyMDAzMjMxNloX DTI1MDgxOTAzMjgxNlowMzExMC8GA1UEAxMoMENFREIxNTk2NEQyN0EyNERFNDZC OUZEQjI3RkVGNERCNzQ3MjU3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcMjcej87FwkRr7/pYIZiZqUKy5nRDyf5vUltShpfUuuBk9Bh4YB+ACcT2x JQm5f1lbzvZKNs6cSpmhhGVtmBMhvQF8StSVS5M4tQs8vp6mil1k+82UH2NVxAv+ 5jdVKMDNoi4vgkQJ4AgM9RX3VgBPP1QmCtu0NrXMFmQOnfR0tMCVHsiFtnEARXab djTbAfKv+j6iEhqWSON3fQN4GmFM+ovEHHZw6SLnrmJw9ETDu1YfA2vfcA6fv8cA y/cuDgShvamSomV5Tps9qeu99QwIT4eT/2QqoIKmLrlD2A6+ZOhGRlLjtbwFVTEj nAJu7f/6rw/Qh7BMHjFzpL0z9c0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQM7bFZ ZNJ6JN5Guf2yf+9Nt0cleDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTY1OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWegKjANBgkqhkiG9w0BAQsFAAOCAQEADrpVXhNjjzlXVlQK0oXl 71Ax9xm9/3Xq2node5oCQTZN+2Dz6J9FqcLacbOjouyDfPaURAnx96KlMfmGHAq5 M1pbUdb0Qy533lXk/COvpF69ev/sM8F3AwK6z2qVbWNeSAVFwvB3oTyfUsNylzPm 2PJn+LWrO54GRw1OE3/HqrbJCf+W9IIYu3I0chSRn98IUMPrwoo/XIoks5LaVn7x fiN6C2mNvqZ60UkyC6FobohVCVg6M0pslwvczl/pz4JMICPFqLsUg/KZYtCfo3HD EySV4mSP8KmXeY0jvxHLKngirR28HwWdx4hDfOgF/tZEeWxB5xXPMa34eD8qnet6 TQ== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:55 2024 by rpki-client on console-fra.rpki-client.org