$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141664.roa File: AS141664.roa (raw, json) Hash identifier: UA8oPs9h9+7JKDqNypc9VggC72aHcVq7O56IMJyFjpY= Subject key identifier: AB:5C:32:6D:51:41:7E:05:82:2E:6C:42:32:A9:19:2D:E2:04:BC:85 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1A7542FCC182E864AD5B4D89DCB82F5AC3929084 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141664.roa Signing time: Fri 23 Jun 2023 06:51:09 +0000 ROA not before: Fri 23 Jun 2023 06:46:09 +0000 ROA not after: Fri 21 Jun 2024 06:51:09 +0000 asID: 141664 IP address blocks: 103.162.205.0/24 maxlen: 24 103.215.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 09:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:75:42:fc:c1:82:e8:64:ad:5b:4d:89:dc:b8:2f:5a:c3:92:90:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 23 06:46:09 2023 GMT Not After : Jun 21 06:51:09 2024 GMT Subject: CN=AB5C326D51417E05822E6C4232A9192DE204BC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:f3:57:08:c1:ce:2e:72:71:c6:e1:fd:57: a4:45:14:13:ce:ee:ed:21:5a:c9:4a:49:46:64:0b: 4a:ae:fe:79:17:d2:07:4d:30:35:1f:69:36:6e:91: d3:39:60:6a:26:41:18:3c:bf:c7:f9:34:41:d5:6a: 9e:f0:be:f8:27:56:3d:fc:10:d0:4b:ee:51:98:1c: 47:a0:86:ed:f4:56:9c:75:d1:4a:ed:84:3e:9f:fa: c0:ea:94:06:c2:61:fd:08:63:18:7c:ef:7d:ef:18: c2:fb:c6:58:cc:1a:e4:ed:1e:8a:0f:5d:09:00:5e: 84:09:23:1a:83:5e:37:af:d1:02:3e:41:27:46:ab: c2:8d:1b:3d:ee:ed:b2:51:0f:1d:0c:77:b2:36:09: f5:23:93:f7:4e:3c:e2:b6:36:d3:e5:e2:50:91:12: cf:a7:3d:dc:0b:fb:53:2e:9e:04:83:fe:41:5d:73: 9e:93:83:62:18:15:49:0e:7f:42:6f:be:99:25:d8: 59:79:1c:5c:c5:58:32:cb:11:35:1f:7b:5c:c5:ee: e1:bd:da:a1:f7:ba:73:0f:df:15:90:f7:55:96:4c: 64:37:b0:01:06:34:f8:7b:5a:84:4d:21:b3:67:2c: 62:5a:2c:47:ec:b5:81:e5:f0:fa:b9:a2:10:aa:2f: 3e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5C:32:6D:51:41:7E:05:82:2E:6C:42:32:A9:19:2D:E2:04:BC:85 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141664.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.205.0/24 103.215.187.0/24 Signature Algorithm: sha256WithRSAEncryption 88:63:db:f8:d8:0a:48:7e:d3:88:cb:f5:af:46:1c:90:53:02: 17:f2:9f:4d:22:14:50:25:09:29:b6:42:3d:78:e1:cb:07:ad: 2e:3a:86:29:20:ad:95:6d:59:fb:d3:3e:8a:7b:16:c6:95:6f: 9e:6d:ac:d5:2d:fa:34:b2:c9:35:ea:5c:92:b8:d3:90:ca:dd: ba:cb:11:07:b8:eb:a1:10:50:89:70:cb:02:c8:8d:71:10:fe: 43:05:05:fe:cf:4a:40:d3:fd:9c:1d:65:de:1a:32:da:eb:ad: b6:19:0b:79:2d:56:92:f6:3c:fd:c8:47:32:fa:d0:88:30:ee: 19:eb:34:06:09:f9:d3:1d:09:2e:39:88:28:e1:fb:7f:b7:54: 2c:24:aa:5d:f6:54:7f:b2:e7:e8:1f:13:18:82:ec:69:14:fe: 66:a3:9a:5d:f1:c8:c7:6c:0c:5d:65:7d:05:ef:41:b4:31:e8: 2a:90:48:6e:de:cd:a0:5b:e4:b1:c8:75:a5:dd:c3:74:ff:0a: 02:6f:47:68:23:18:d3:57:7e:f7:79:bc:07:fd:47:53:45:7d: 1a:c0:c2:f2:38:28:8c:44:b6:01:2c:60:ab:10:87:b7:42:fa: 74:8d:47:d3:0c:9a:e5:50:5b:1d:93:27:a2:a0:68:2e:81:e7: 46:a3:67:e0 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUGnVC/MGC6GStW02J3LgvWsOSkIQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyMzA2NDYwOVoX DTI0MDYyMTA2NTEwOVowMzExMC8GA1UEAxMoQUI1QzMyNkQ1MTQxN0UwNTgyMkU2 QzQyMzJBOTE5MkRFMjA0QkM4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZp81cIwc4ucnHG4f1XpEUUE87u7SFayUpJRmQLSq7+eRfSB00wNR9pNm6R 0zlgaiZBGDy/x/k0QdVqnvC++CdWPfwQ0EvuUZgcR6CG7fRWnHXRSu2EPp/6wOqU BsJh/QhjGHzvfe8YwvvGWMwa5O0eig9dCQBehAkjGoNeN6/RAj5BJ0arwo0bPe7t slEPHQx3sjYJ9SOT90484rY20+XiUJESz6c93Av7Uy6eBIP+QV1znpODYhgVSQ5/ Qm++mSXYWXkcXMVYMssRNR97XMXu4b3aofe6cw/fFZD3VZZMZDewAQY0+HtahE0h s2csYlosR+y1geXw+rmiEKovPgcCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBSrXDJt UUF+BYIubEIyqRkt4gS8hTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTY2NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGeizQMEAGfXuzANBgkqhkiG9w0BAQsFAAOCAQEAiGPb+NgKSH7T iMv1r0YckFMCF/KfTSIUUCUJKbZCPXjhywetLjqGKSCtlW1Z+9M+insWxpVvnm2s 1S36NLLJNepckrjTkMrdussRB7jroRBQiXDLAsiNcRD+QwUF/s9KQNP9nB1l3hoy 2uutthkLeS1WkvY8/chHMvrQiDDuGes0Bgn50x0JLjmIKOH7f7dULCSqXfZUf7Ln 6B8TGILsaRT+ZqOaXfHIx2wMXWV9Be9BtDHoKpBIbt7NoFvksch1pd3DdP8KAm9H aCMY01d+93m8B/1HU0V9GsDC8jgojES2ASxgqxCHt0L6dI1H0wya5VBbHZMnoqBo LoHnRqNn4A== -----END CERTIFICATE-----Generated at Thu May 2 05:25:40 2024 by rpki-client on console-fra.rpki-client.org