$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141664.roa File: AS141664.roa (raw, json) Hash identifier: hyFkJLaiiMGgI78r2M+HnjwHsQ/nyzTOLBxoc33nev8= Subject key identifier: EE:DB:E3:7C:A1:B5:70:3D:15:2E:C3:91:61:93:13:8B:27:62:05:2E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 347EFD06349A58ACDCA4245C964E60BA5A193C81 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141664.roa Signing time: Fri 24 May 2024 07:00:00 +0000 ROA not before: Fri 24 May 2024 06:55:00 +0000 ROA not after: Fri 23 May 2025 07:00:00 +0000 asID: 141664 IP address blocks: 103.162.205.0/24 maxlen: 24 103.215.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7e:fd:06:34:9a:58:ac:dc:a4:24:5c:96:4e:60:ba:5a:19:3c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 24 06:55:00 2024 GMT Not After : May 23 07:00:00 2025 GMT Subject: CN=EEDBE37CA1B5703D152EC3916193138B2762052E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:80:b5:61:db:c9:85:9a:de:f4:e1:9d:50:45: 7d:dc:8f:66:80:7d:e1:e9:4a:e4:ad:a5:ad:77:fe: 01:4d:56:42:7a:f9:67:ad:f7:5b:1c:4e:45:83:0e: b6:b7:df:33:48:31:25:11:63:7b:3f:dc:ef:d1:4a: 9a:a0:8f:37:21:b2:bf:f6:f0:23:82:d3:87:88:f6: 4b:88:46:29:94:0d:92:4a:d5:f0:39:7d:5a:bc:3f: 25:e5:d6:9a:d4:6f:01:65:ab:31:7a:29:b2:b5:32: c0:6d:19:b0:62:79:64:e0:c5:0d:41:4a:30:09:b5: 48:7f:ae:40:b8:78:de:5a:64:da:20:19:bf:b3:fb: 42:94:84:b1:8e:c3:49:b3:91:dc:2f:3e:b1:27:1f: 97:c3:a2:92:a9:bb:8b:d7:59:01:aa:07:da:e4:54: 6b:9c:1f:5e:22:10:82:47:65:90:0d:17:bf:c9:14: 8c:58:07:6e:f2:3c:25:b0:13:8c:82:84:19:cb:8a: 4e:5b:83:ea:69:de:a4:19:b7:04:62:71:ce:3a:89: 04:e7:8b:b8:fd:d7:67:7b:f6:cd:c2:fe:02:f5:35: 6b:7e:41:b5:fb:70:bb:c0:e6:d8:b9:d2:ca:21:b1: a2:f9:28:63:67:6d:be:4e:e7:f7:d8:4e:ea:ca:62: f3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DB:E3:7C:A1:B5:70:3D:15:2E:C3:91:61:93:13:8B:27:62:05:2E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141664.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.205.0/24 103.215.187.0/24 Signature Algorithm: sha256WithRSAEncryption 13:ed:c8:8f:8c:39:c9:d0:10:5a:f0:5a:ae:4b:b5:44:18:9e: 08:d4:08:b4:f6:d7:7d:44:bc:92:35:7d:71:e1:8f:90:05:5c: bc:b2:4c:ab:47:31:ed:87:80:83:b5:41:9b:b7:03:60:d3:6a: b0:15:22:fc:f0:ac:c1:98:71:e9:8d:70:e7:d7:f1:b6:68:27: ae:fc:b3:e6:17:73:2e:fb:35:45:9b:5d:c4:d2:83:87:57:2e: a8:af:6e:9c:7e:1f:d7:5f:92:c5:48:27:cf:58:9d:f4:55:13: f3:31:23:b0:79:49:58:80:ff:85:45:b6:52:eb:9d:4a:5a:7f: 7d:01:2f:44:47:b1:5d:de:85:5a:55:64:30:34:ba:9e:a8:68: e6:5c:00:19:b8:fd:b0:09:e2:0d:98:66:cf:60:b9:29:d2:6a: 9a:49:d6:1c:92:87:8c:82:7c:69:16:0b:9d:5f:b6:a4:a8:54: 43:bd:92:a9:60:98:9f:19:3a:fd:4f:f1:0a:50:a8:10:cf:f1: 65:4b:cc:36:f0:2e:7d:56:40:01:84:6d:8a:be:b6:e8:07:ad: eb:83:a7:82:ff:62:1c:16:cf:0f:f5:9e:7a:e7:1f:cf:aa:2e: 13:d8:2b:7c:0a:ce:79:1b:0e:46:4f:b8:37:19:3d:90:6b:4e: e3:05:d8:c4 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUNH79BjSaWKzcpCRclk5guloZPIEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyNDA2NTUwMFoX DTI1MDUyMzA3MDAwMFowMzExMC8GA1UEAxMoRUVEQkUzN0NBMUI1NzAzRDE1MkVD MzkxNjE5MzEzOEIyNzYyMDUyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANiAtWHbyYWa3vThnVBFfdyPZoB94elK5K2lrXf+AU1WQnr5Z633WxxORYMO trffM0gxJRFjez/c79FKmqCPNyGyv/bwI4LTh4j2S4hGKZQNkkrV8Dl9Wrw/JeXW mtRvAWWrMXopsrUywG0ZsGJ5ZODFDUFKMAm1SH+uQLh43lpk2iAZv7P7QpSEsY7D SbOR3C8+sScfl8Oikqm7i9dZAaoH2uRUa5wfXiIQgkdlkA0Xv8kUjFgHbvI8JbAT jIKEGcuKTluD6mnepBm3BGJxzjqJBOeLuP3XZ3v2zcL+AvU1a35Btftwu8Dm2LnS yiGxovkoY2dtvk7n99hO6spi8+MCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBTu2+N8 obVwPRUuw5FhkxOLJ2IFLjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTY2NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGeizQMEAGfXuzANBgkqhkiG9w0BAQsFAAOCAQEAE+3Ij4w5ydAQ WvBarku1RBieCNQItPbXfUS8kjV9ceGPkAVcvLJMq0cx7YeAg7VBm7cDYNNqsBUi /PCswZhx6Y1w59fxtmgnrvyz5hdzLvs1RZtdxNKDh1cuqK9unH4f11+SxUgnz1id 9FUT8zEjsHlJWID/hUW2UuudSlp/fQEvREexXd6FWlVkMDS6nqho5lwAGbj9sAni DZhmz2C5KdJqmknWHJKHjIJ8aRYLnV+2pKhUQ72SqWCYnxk6/U/xClCoEM/xZUvM NvAufVZAAYRtir626Aet64Ongv9iHBbPD/Weeucfz6ouE9grfArOeRsORk+4Nxk9 kGtO4wXYxA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:48 2024 by rpki-client on console-ams.rpki-client.org